Banking & Financial · URGENCY: IMMEDIATE
UPI or Financial Cyber Fraud — Money Debited
Report financial cyber fraud immediately by calling 1930 and filing on the National Cyber Crime Reporting Portal. The sooner you report, the better the chance the money can be put on hold before it is withdrawn. Reporting does not guarantee recovery — outcomes depend on the facts, traceability of funds and the competent authorities.
The first hour matters most. A prompt report through 1930 and cybercrime.gov.in triggers the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), through which banks and payment operators can attempt to place a hold on the defrauded amount in the beneficiary account before the fraudster withdraws it.
What to do now
- Call 1930 (the national cyber-fraud helpline) right away and give the transaction details.
- File the complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) and save the acknowledgement ID.
- Inform your bank / payment provider immediately and ask them to flag the transaction; preserve all evidence.
What to do, in order
- 01
Call 1930 immediately
Report the fraud on the national helpline as fast as possible. Keep the transaction ID/UTR, amount, date/time and the beneficiary details ready.
Call 1930 - 02
File on the NCRP portal
Register the complaint online and note the acknowledgement number — you will need it for follow-up and for any money-restoration request.
National Cyber Crime Reporting Portal - 03
Notify your bank / payment app
Report the unauthorised transaction to your bank in writing; ask them to raise it in CFCFRMS. Under RBI’s limited-liability framework, prompt reporting protects you.
- 04
Preserve every piece of evidence
Keep SMS, emails, screenshots, call logs, the UTR/transaction reference and any chat with the fraudster. Do not delete anything.
- 05
Track and follow up
Follow the complaint status and, if an amount is held, pursue the Money Restoration process. Use the CFCFRMS grievance route if your own account gets restricted.
Money Restoration Portal (MRM-NCRP)
Have this ready when you call 1930
- Your mobile number and name as registered with the bank
- The transaction reference / UTR number and exact amount
- Date and time of the transaction
- The beneficiary UPI ID / account number, if known
- How the fraud happened (link, call, OTP, QR, investment app, etc.)
Documents to keep available
- Transaction reference / UTR number and amount
- Screenshots, SMS, emails and any chat with the fraudster
- Bank statement showing the debit
- NCRP acknowledgement ID after reporting
Requirements may vary by case and authority.
What not to do
- Do not share OTPs, PINs, CVV or passwords with anyone, including callers claiming to be “bank” or “police”.
- Do not install any screen-sharing or remote-access app on a stranger’s instruction.
- Do not pay anyone claiming guaranteed recovery of your money.
- Do not delete messages, call logs or transaction evidence.
Frequently asked questions
Why is calling 1930 quickly so important?
Early reporting lets banks attempt to place a hold on the money in the beneficiary account before it is withdrawn. Once withdrawn, tracing and recovery become far harder.
What is the difference between 1930 and cybercrime.gov.in?
1930 is the phone helpline for immediate action on financial fraud; cybercrime.gov.in is the portal where you formally register and track the complaint. Use both.
Official resources
When professional assistance may be appropriate
Where an issue significantly affects your legal position, banking access, livelihood or business, or involves a notice, investigation or multiple jurisdictions, consider advice from an appropriate qualified professional.
Relevant professional types: Cyber crime lawyer · Banking lawyer
Need help with this issue?Sources: Indian Cybercrime Coordination Centre (I4C), MHA · RBI customer-protection framework
Last reviewed: 30 August 2026. This independent guide is general information, not legal advice, and does not control official investigations or processes.