Online financial fraud in India: reporting to 1930 and your bank
Author: LawSphereX
Category: Cyber & Technology Law
Published:
Updated:
If money has left your account in an online fraud, start with two separate reports: report the financial cybercrime through 1930 or cybercrime.gov.in, and notify your bank or payment provider through its official fraud-reporting channel. A police complaint and a bank dispute serve different purposes. Keep a reference number for each, rather than assuming one automatically completes the other.
First establish what happened
Write a short timeline while the details are fresh. Distinguish a transaction you never authorised from a transfer you approved after someone deceived you. Also distinguish either situation from an ordinary failed payment or an unresolved purchase. Those facts affect the applicable reporting route and the bank's assessment; the label “UPI problem” alone does not explain the incident.
For example, a person who transferred money to a fake investment account should record the representation made, the destination payment details and each transfer. Someone who finds an unfamiliar card debit should identify that debit and explain that they did not authorise it. These are illustrative situations, not findings about any particular complaint.
Report financial cyber fraud promptly
The official National Cyber Crime Reporting Portal identifies 1930 as the financial cyber-fraud reporting helpline. You can also use the portal at cybercrime.gov.in. Follow the instructions supplied with your acknowledgement and complete any additional information requested. A saved draft is not the same as a submitted complaint.
Keep the acknowledgement, registered mobile number and a copy of the narrative you submitted. Use the portal's complaint-status facility and the reference sent to you. The official FAQs explain the reporting and tracking options. A reference number helps follow-up; it is not proof that money has been recovered or that a particular person has been found liable.
Contact your bank through a verified channel
Open the bank's own app or type its official website address. You can also use a number printed on your card or supplied by the bank. Do not rely on a number sent by the person involved in the incident. State the transaction date, amount and reference, explain the concern, request the appropriate protective steps and obtain a written acknowledgement.
The RBI's digital-banking guidance emphasises protecting payment credentials and acting on compromised payment instruments. If a card or account access is at risk, ask the institution what should be blocked or secured. Never give an OTP, PIN or password to someone claiming they need it to process a refund.
Prepare an evidence packet
- Transaction identifiers, dates, amounts and the relevant statement entries.
- The recipient account or UPI details visible in your transaction record.
- Messages, emails, website addresses, advertisements and phone numbers involved.
- A chronological description of what was promised and what you actually did.
- Bank complaint and cybercrime acknowledgement numbers, kept separately.
Retain original messages and files where possible. Annotate a separate copy if you need to explain a screenshot; do not replace the original with an edited version. Give sensitive records through the institution's or investigating authority's official process rather than posting account details publicly.
Why a refund cannot be promised
The RBI's 2017 customer-protection directions distinguish bank fault, certain third-party breaches and customer negligence when assessing unauthorised electronic banking transactions. Reporting time matters, but the conditions also matter. The directions should not be reduced to a claim that every scam payment must be refunded within a fixed number of days.
Explain the facts accurately, retain the bank's response and ask which rules and policy it applied. If the response is inadequate, use the bank's published grievance-escalation process and seek advice about the appropriate further remedy. Do not treat a pending fraud report as a guarantee that a separate legal deadline has stopped running.
Following up without losing the record
Maintain a simple log: date, organisation contacted, reference number, document supplied and response received. When following up, refer to the existing complaint and add genuinely new information. The portal publishes State/UT nodal and grievance contacts for the reporting channels it specifies. Check the current instructions before escalating.
This guide explains reporting options, not your entitlement to compensation. If you need help understanding a legal remedy, read our guide to free legal aid. For a goods-or-services dispute, the consumer-complaint guide explains a different route.
Official sources and scope
Sources checked on 2026-11-02. This educational guide was prepared by LawSphereX; it does not claim individual legal advice or professional review.