Cyber Fraud in India: What to Do in the First 24 Hours

What counts as cyber fraud

Cyber fraud covers a wide range of situations: a fake UPI collect request that drains your account, a phishing link that steals your net-banking password, a fake investment app that disappears with your money, a SIM-swap that lets someone take over your phone number, or a fraudulent online purchase where the seller never delivers. If money or personal data left your hands because someone deceived you online, it counts.

Call 1930 before you do anything else

The National Cyber Crime Helpline, 1930, exists specifically for financial cyber fraud. When you call quickly, the helpline can flag the transaction with the receiving bank and sometimes freeze the funds before they're withdrawn. This window is often measured in hours, not days — the single biggest factor in whether money is recoverable is how fast you report it.

File your complaint at cybercrime.gov.in

Alongside the helpline call, file a written complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Choose 'Report Financial Fraud' for money-related scams or 'Report Other Cybercrime' for everything else (hacking, fake profiles, harassment). You'll need your own details, the suspect's UPI ID, phone number or account details if known, the amount involved, and a clear timeline of what happened. Always ask for — and save — your acknowledgement number or diary number.

Preserve your evidence properly

Take screenshots of the chat, the payment screen, the transaction ID, and the suspect's profile or number before you block them. Do not delete anything, even if it feels upsetting to look at. Do not forward these screenshots to strangers who contact you offering to 'help recover' your money — that is itself a common follow-up scam targeting fraud victims.

What the law actually says

Cyber fraud in India is typically prosecuted under the Information Technology Act, 2000 — Section 66 (computer-related offences), Section 66C (identity theft) and Section 66D (cheating by personation using a computer resource) — alongside the Bharatiya Nyaya Sanhita, 2023, Sections 318 and 319 (cheating, and cheating by personation). You don't need to know these sections to file a complaint; the portal and the investigating officer apply them. It helps to know they exist so you understand why the officer asks the questions they do.

Notify your bank in writing, within 3 working days

Separately from the police complaint, write to your bank (email is fine, keep the confirmation) reporting the fraudulent transaction. An RBI circular from July 2017 limits a customer's liability for unauthorised transactions when reported within three working days of the bank's notification — reporting later can increase what you're responsible for.

Mistakes that hurt your case

Don't pay any 'unlocking fee', 'processing charge' or 'reversal fee' anyone asks for after the fraud — this is always a second scam. Don't confront the scammer directly or try to 'get evidence' by continuing to engage. Don't wait a few days hoping it resolves itself; the recovery window closes fast.

Frequently asked questions