Home→📚 Civic Action→Article
📚Civic Action

How to report UPI fraud and freeze transactions via 1930 helpline

Read in
Englishहिन्दी
Jump to templates ↓

Lost money to a UPI or bank scam? Use the "golden hour" to freeze the transfer using the 1930 helpline and the National Cyber Crime Reporting Portal before the scammer withdraws it.

HowToHelp Editorial
•
•
11 min read
#1930 helpline#UPI fraud recovery#cybercrime.gov.in report#BNS 318 cheating#freeze bank transaction#golden hour fraud#RBI zero liability#cyber cell complaint india

Your money is moving faster than you think

You just clicked a "refund" link from a fake Zomato support handle on X (formerly Twitter), or maybe you scanned a QR code to "receive" payment for an OLX listing. Within seconds, your bank sends a notification: ₹25,000 debited. Your stomach drops. You might think that once the money leaves your account, it is gone forever. That is not true. In the world of cyber-financial fraud, there is a "Golden Hour"—the first 60 to 120 minutes after the fraud—where the banking system can actually "freeze" the funds before the scammer moves them through a chain of mule accounts or withdraws them at an ATM. If you act now, you can stop the transfer in its tracks.

What the law actually says

The primary mechanism for recovering stolen digital money in India is the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), operated by the Ministry of Home Affairs (MHA). This system links all major public and private banks, payment wallets (like Paytm, PhonePe, and GPay), and the police onto a single dashboard.

The Legal Framework

Under the Bharatiya Nyaya Sanhita (BNS), 2023, financial fraud is treated with increased severity. Relevant sections include:

  • Section 318(4) of the BNS: Deals with cheating and dishonestly inducing delivery of property (replacing the old Section 420 of the IPC).
  • Section 319 of the BNS: Covers cheating by personation, often used when scammers pretend to be bank officials or customer service agents.
  • Section 111 of the BNS: If the fraud is part of an organized syndicate, it can be classified as organized crime, carrying much harsher penalties.

From a procedural standpoint, Section 173 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2024 (formerly Section 154 CrPC) mandates the registration of an FIR for cognizable offences. Furthermore, the Supreme Court in Lalita Kumari vs. Govt. of U.P. (2014) held that police are legally bound to register an FIR if the information discloses a cognizable offence. In the context of cybercrime, this often starts with an entry on the Cyber Crime reporting portal.

RBI Guidelines on Liability

The Reserve Bank of India (RBI) circular (RBI/2017-18/15 DBR.No.Leg.BC.78/09.07.005/2017-18) establishes the "Limited Liability of Customers." If you report an unauthorized transaction within 3 working days, your liability is zero. If you report within 4 to 7 working days, your liability is capped (typically at ₹5,000 to ₹25,000 depending on the account type). Beyond 7 days, your liability depends on the bank's board-approved policy. This is why the 1930 helpline is your most powerful legal tool.

Step-by-step playbook: The [1930](tel:1930) workflow

  1. The Immediate Call (Minutes 1–15)

    Do not call your bank first. Call the national cybercrime helpline 1930 (formerly 155260). This helpline is manned 24/7 by police officers and technical experts who have direct access to the banking dashboard.

    • What to say: State clearly that you have been a victim of "Financial Cyber Fraud."
    • Information to have ready: Your name, mobile number, the account number from which money was debited, and the transaction date/time.
    • The Outcome: The operator will take your details and immediately flag the transaction on the CFCFRMS dashboard. This alerts the recipient bank or wallet to "put a hold" on that specific amount.

  2. Formalize on the Portal (Minutes 15–60)

    Calling 1930 generates a temporary ticket, but you must formalize this by filing a complaint on the Cyber Crime reporting portal within 24 hours to ensure the freeze stays in place.

    1. Go to cybercrime.gov.in and click on "Report Financial Fraud."
    2. Log in using your mobile number and OTP.
    3. The Evidence Kit: You will need to upload:
      • A screenshot of the transaction SMS or the debit notification from your banking app.
      • The UTR (Unique Transaction Reference) number or Transaction ID. This is a 12-digit number for UPI or a longer alphanumeric string for IMPS/NEFT.
      • Screenshots of the scammer's profile, the fake website, or the WhatsApp chat where the link was shared.
    4. Submit the complaint. You will receive an Acknowledgment Number. Save this; it is your legal receipt.

  3. Notify your Bank (Hours 1–3)

    While the 1930 call alerts the system, you must officially notify your own bank to trigger the RBI "Zero Liability" protection.

    • Action: Send an email to your bank's official customer care ID and CC the Nodal Officer (find this on the bank's website under "Grievance Redressal").
    • Content: Include the Acknowledgment Number from the Cyber Crime portal and the UTR number. Explicitly state: "I am reporting this unauthorized transaction within the 3-day window as per RBI circular DBR.No.Leg.BC.78/09.07.005/2017-18 to claim zero liability."
    • Timeline: If you do this within the Golden Hour, the bank is much more likely to successfully reverse the funds if they haven't left the banking ecosystem yet.

  4. Follow up for the FIR (Days 1–3)

    In many states, a portal complaint is automatically converted into an FIR if the amount exceeds a certain threshold (usually ₹10,000 to ₹50,000 depending on the state's Cyber Cell policy). If it is not converted, you need to visit your local Cyber Cell or Police Station.

    • What to bring: A printout of the portal complaint, your bank statement highlighting the fraud, and a written application addressed to the SHO (Station House Officer).
    • The Ask: Request the registration of an FIR under Section 318 of the BNS and Section 66D of the Information Technology Act. If the police refuse, refer to How to file an FIR (and what to do if police refuse).

  5. Track the Freeze

    Use your Acknowledgment Number on the cybercrime portal to check the status. The portal will show which bank currently holds the "disputed" funds. If the funds are frozen in a scammer's account, you will eventually need a court order (under Section 503 of the BNSS, formerly 457 CrPC) to get the bank to release those funds back into your account. This process can take 3–6 months, but your money is safe as long as it remains frozen.

    If the bank or police are not providing updates on the status of the frozen funds, you can File an RTI online to the concerned Police Commissionerate asking for the status of the investigation and the current location of the frozen amount.

    Browse all civic-action playbooks

Where it usually breaks

The system is designed to be fast, but human and technical friction can slow you down. Here is how to navigate the most common roadblocks:

  1. The "Line Busy" Loop: In high-traffic states like Uttar Pradesh or Maharashtra, the 1930 helpline might be perpetually busy.

    • The Workaround: Don't waste 30 minutes on hold. If you can't get through within two tries, go straight to cybercrime.gov.in and file the complaint online. The portal feeds into the same CFCFRMS dashboard that the 1930 operators use.

  2. The "Not Our Problem" Bank Manager: You might visit your bank branch to follow up, only for a manager to tell you, "We need a physical FIR from the police station to stop the payment."

    • The Workaround: This is often incorrect. Show them the Acknowledgement Number generated by the 1930 call or the portal. Remind them that under the MHA’s CFCFRMS guidelines, the "Hold" command on the dashboard is a direct instruction to the bank's Nodal Officer. If they refuse, ask for the contact details of their Internal Ombudsman or the Nodal Officer for Cybercrime as per RBI requirements.

  3. The Multi-Layer Mule Account: Professional scammers don't keep money in the first account they receive it in. They "layer" it—transferring ₹50,000 to five different accounts (₹10,000 each) within minutes.

    • The Workaround: This is why the "Golden Hour" is vital. However, even if the money has moved to a second or third bank, the CFCFRMS system is designed to "follow the money." When the first bank flags the transaction, the dashboard notifies the next bank in the chain. Your job is to report the initial transaction details accurately; the system handles the trail.

  4. Portal Technical Glitches: Sometimes the portal won't accept your bank's name or the transaction ID format.

    • The Workaround: Clear your browser cache or use an Incognito/Private window. If the English portal is buggy, try switching the language to Hindi on the top right; sometimes the regional server instances perform differently.

Templates & scripts

Copy, fill in the [highlighted] bits, and send.

1. The 1930 Call Script

When you call 1930, the operator will be in a hurry to get data points. Don't tell a long story; give them the "data set" first.

Script: "I am reporting a fresh financial fraud that happened [X] minutes ago.

  • My Bank: [Name of your bank]
  • My Account/Card Number: [Last 4 digits]
  • Transaction Amount: ₹[Amount]
  • Transaction ID/UTR Number: [From your SMS]
  • Suspect Details: [UPI ID or Account Number the money went to] Please flag this on the CFCFRMS dashboard immediately to freeze the funds."

2. Email to Bank Manager (Invoking RBI Liability)

Send this to your bank’s customer care and branch manager within 24 hours of the fraud.

Subject: Urgent: Reporting Unauthorized Transaction - [Your Name] - [Date]

"Dear Manager, I am writing to formally report an unauthorized transaction of ₹[Amount] from my account [Account Number] on [Date] at [Time].

  1. I have already reported this on the National Cybercrime Portal (Acknowledgement No: [Number]).
  2. I am invoking the RBI Circular RBI/2017-18/15 DBR.No.Leg.BC.78/09.07.005/2017-18 regarding 'Limited Liability of Customers'.
  3. As I have reported this within the 'Golden Hour' / 3-day window, my liability is zero/limited as per the circular. Please ensure the amount is blocked and provide me with a 'Disputed Transaction' reference number. Attached: Screenshot of the transaction and the Cybercrime Portal acknowledgement."

3. RTI for Status Update

If it has been 30 days and you don't know if the money was frozen or where it is, file an RTI with the State Police (Cyber Cell).

Text for Section 6(1) of the RTI Act, 2005: "Regarding my cybercrime complaint (Ack No: [Number]) filed on [Date]:

  1. Please provide the current status of the investigation.
  2. Please state if the fraudulent amount was successfully 'frozen' in the recipient's account via the CFCFRMS.
  3. If the amount was frozen, please provide the name of the bank and branch where the funds are currently held.
  4. Provide a copy of the 'Action Taken Report' (ATR) submitted by the investigating officer."

Frequently Asked Questions

Q: I shared my OTP voluntarily because I was tricked. Does the "Zero Liability" rule still apply?

**A:** This is a grey area. The RBI circular distinguishes between "contributory fraud" (your fault) and "third-party breach." If you shared an OTP, the bank might argue you were negligent. However, you should still report it via 1930 immediately. The *freezing* of the money depends on speed, not who is at fault. Recovery is much easier if the money is caught before it's withdrawn.

Q: Is there any fee for filing a complaint on 1930 or the portal?

**A:** No. The National Cyber Crime Reporting Portal and the 1930 helpline are free government services. If anyone calls you claiming to be a "recovery agent" and asks for a "processing fee" to get your money back, they are scammers.

Q: The money is "frozen" in the scammer's account, but the bank won't give it back to me. Why?

**A:** Once money is frozen, it becomes "case property." Banks usually require a court order under **Section 503 of the BNSS, 2024** (formerly Section 457 CrPC) to release the money back to the victim. You may need to file a simple application in the local Magistrate's court to "release the property."

Q: Can I report a fraud that happened 6 months ago?

**A:** You can report it, and the police must register it under **Section 173 of the BNSS, 2024**. However, the chances of recovering the money are near zero because the scammer would have withdrawn it long ago. The 1930 system is built for "live" or very recent frauds.

Q: What if the fraud happened via a credit card and not UPI?

**A:** The process is the same. Call 1930 and then call your bank to "hotlist" (block) the card. For credit cards, you have an additional layer of protection called a "Chargeback," which you should formally request from your bank in writing.

Q: Does the police need to seize my phone for the investigation?

**A:** In 90% of simple UPI/banking frauds, they do not need your physical phone. Screenshots of the transaction, the scammer's number, and the links they sent are usually sufficient evidence. If they insist on taking your phone, ask for a formal "Seizure Memo" under the BNSS.

📮

One civic-action playbook a week

RTI templates, FIR scripts, real escalation ladders — the same kind of thing you just read. Sundays only. No spam.

We don't share your email. Unsubscribe any time.

Related Articles

📚 Civic Action

How to challenge a parking ticket using consumer rights laws

Got an illegal 'fine' at a mall or overcharged by a parking contractor? Use the Consumer Protection Act 2019 to fight back against unfair parking tickets and scams.

📚 Civic Action

Can police forcibly hospitalize you during a protest? Know your rights

Peaceful assembly is a constitutional right. Detention has legal limits. Forced medical treatment is a separate question again. Here's how all three actually work.

📚 Civic Action

Will AI Make Working Optional? A Clear-Eyed Look

AI could make work optional — but not for the reason most assume. Whether it does is less about technology than about how we choose to share what technology produces.

📚 Civic Action

How to check passport application status and find the real reason for delays

Passport stuck on 'Under Review' or 'Pending Police Verification'? Here's how to track it properly and the RTI route that consistently unclogs stuck files.

How to report UPI fraud and freeze transactions via 1930 · HowToHelp