Lost money to a UPI scam or fake link? Call 1930 immediately. Here is the checklist of data you need to keep ready to increase your chances of getting a refund.
You are scrolling through Instagram when you see a "Work from Home" ad. You message the number, they ask you to "rate hotels" for money, and suddenly, you are in a Telegram group. They convince you to "invest" ₹10,000 to unlock your earnings. You send the money via UPI, and five minutes later, they block you. Your money is gone, and your stomach drops. You want to act, but you do not know where to start. This is exactly why the 1930 helpline exists. It is your first and fastest line of defence to freeze that money before the scammer can withdraw it at an ATM or move it to another account.
In India, financial cyber fraud is governed by a combination of the Information Technology (IT) Act, 2000, and the Bharatiya Nyaya Sanhita (BNS), 2023. If someone cheats you online, they are likely violating Section 66D of the IT Act (punishment for cheating by personation by using computer resource) and Section 318 of the BNS (which replaced Section 420 of the IPC for cheating). If they pretended to be a police officer or a bank official, Section 319 of the BNS (cheating by personation) also applies.
However, the law is only half the battle. The real engine behind your recovery is the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS). This is a digital platform developed by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs (MHA).
When you call 1930, you are not just "making a report"; you are triggering an automated system that connects the police with over 250 banks, payment wallets (like Paytm, PhonePe), and e-commerce merchants. As per the MHA's protocol, once a complaint is registered on 1930, the system sends an alert to the scammer's bank. If the money is still in their account or a subsequent account, the bank can put a "hold" or freeze on that specific amount.
This process relies on the concept of the "Golden Hour". While not a strictly defined legal term, it refers to the first 2 hours after a fraud occurs. If you report within this window, the chances of the money being successfully frozen are significantly higher. According to the "Crime in India 2024" report by the NCRB (published in late 2025), prompt reporting via 1930 has helped recover over ₹1,200 crore for victims nationwide since the helpline's inception.
Furthermore, the Reserve Bank of India (RBI) circular (DBR.No.Leg.BC.78/09.07.005/2017-18) on Limited Liability of Customers states that if you report an unauthorised electronic transaction within 3 working days, your liability can be zero. This makes calling 1930 and following up with your bank legally vital for your refund claim.
If you have just discovered that money has been illegally debited from your account, do not panic. Follow these steps immediately.
Do not wait to visit a police station or for your bank to open in the morning. The 1930 helpline (formerly 155260) is operational 24/7.
The operator cannot freeze "some money"; they need specific digital markers to track the flow. You must have these ready before you call:
Once the operator records your complaint, they will provide you with a 15-digit Acknowledgement Number.
Calling 1930 is just the first step. To make it a legal record, you must submit additional details online.
While 1930 alerts the bank's system, you must also manually inform your bank to protect your legal rights under RBI guidelines.
Cyber fraud is a violation of your personal space and security. It is normal to feel anxious, angry, or ashamed. Do not keep it bottled up. If the stress is overwhelming, reach out to Mental health helplines (iCall, Vandrevala, NIMHANS) for support.
If the police refuse to register your case after you have followed these steps, you may need to escalate. See our guide on How to file an FIR (and what to do if police refuse). For more ways to protect your digital life, you can Browse all civic-action playbooks.
Even with a 24/7 helpline, the system isn't perfect. Here is where you might hit a wall and how to climb over it:
The "Line Busy" Loop: You call 1930 and it keeps ringing or says the lines are busy. This happens during peak fraud hours (usually mid-day when people are most active on their phones).
The "Missing UTR" Problem: The operator asks for a 12-digit UTR (Unique Transaction Reference) number, but your bank SMS only shows a "Transaction ID" or nothing at all.
The "Go to your Bank" Brush-off: Sometimes, a local police officer might tell you to "just talk to the bank" and refuse to log the 1930 entry.
The "Mule Account" Relay: By the time you call, the scammer has already moved the money from their account to five other accounts (mule accounts).
Copy, fill in the [highlighted] bits, and send.
Keep this open when you dial. Don't ramble; be precise.
Send this within 24 hours of the fraud. This creates a paper trail for the RBI "Limited Liability" protection.
Subject: Urgent: Report of Unauthorised Electronic Transaction - [Your Name] - [Date]
Body: Dear Manager,
I am writing to formally report an unauthorised transaction of ₹[Amount] from my account [Account Number] on [Date] at [Time].
I have already registered a complaint on the National Cyber Crime Reporting Portal (1930) with Acknowledgement Number: [Your 15-digit Ack No].
As per RBI Circular DBR.No.Leg.BC.78/09.07.005/2017-18, I am notifying the bank within the 'Golden Hour' / 3-day window to ensure zero/limited liability. I request you to:
Attached: Screenshot of the transaction and the 1930 acknowledgement.
Regards, [Your Name] [Phone Number]
Yes, you must still report it. While "contributory negligence" (sharing your PIN) makes it harder to get a refund from the bank's insurance, the 1930 system can still freeze the money in the scammer's account. If the money is caught before the scammer withdraws it, you can get it back via a court order (under Section 503 of the BNSS) regardless of whether you shared the OTP.
No. The 1930 helpline and the [cybercrime.gov.in](https://cybercrime.gov.in) portal are free services provided by the Government of India. If anyone calls you claiming to be a "Cyber Cell Officer" and asks for a "processing fee" to recover your money, they are trying to scam you again.
You can still report it, but the chances of "freezing" the money are very low as scammers usually withdraw funds within hours. However, reporting is still necessary to block the scammer's bank account, IMEI, and SIM card to prevent them from hitting others.
Yes. When you call 1930 or use the portal, you can select the option to report as a "complainant" on behalf of a "victim." You will need their bank details, the mobile number linked to their account, and the transaction IDs.
Once the money is frozen, it stays in the scammer's bank account with a "lien" on it. To get it back, you usually need to provide the "frozen" proof to your local Magistrate. The police will guide you on filing an application under Section 503 of the Bharatiya Nagarik Suraksha Sanhita (BNSS) to release the funds back to your account.
RTI templates, FIR scripts, real escalation ladders — the same kind of thing you just read. Sundays only. No spam.
We don't share your email. Unsubscribe any time.
Getting bullied online by classmates is exhausting. Learn how to use BNS laws and school safety guidelines to stop harassment and hold your institution accountable.
Is your school skipping mandatory safety education? Learn how to use Section 43 of the POCSO Act to demand awareness programs and a safer environment.
If you or someone you know is an acid attack survivor, the law mandates a minimum ₹3 lakh compensation and free medical care. Here is how to navigate the DLSA and CMRF.
Lost money to a fake KYC call or a phishing link? Here is how to use the 'Golden Hour' to freeze the funds and escalate to the RBI Ombudsman if your bank refuses to help.