Cyber Fraud: What to Do in the First Hour (Call 1930, Report, Block, Preserve)

If you lose money to an online or UPI fraud, call the national cyber crime helpline 1930 immediately and also report on cybercrime.gov.in. Then call your bank to block the card, UPI or net banking, and give the bank a written complaint within 3 working days to protect your zero-liability right under RBI rules. Save every screenshot and transaction ID, and file an FIR.

The first-hour checklist

Speed matters because money moves through several accounts within minutes. A quick report on 1930 or the portal helps banks and payment platforms put holds on money still in transit.

1. Call 1930. Give your name, bank, the transaction details and the account or UPI ID the money went to. Note the acknowledgement or complaint number.
2. Report on cybercrime.gov.in. Choose the financial fraud option, fill in transaction details and upload screenshots. Save the acknowledgement number.
3. Call your bank’s official helpline (from the number on your card or the bank’s own website, never from a search result). Block the debit card, credit card, UPI and net banking.
4. Send a written complaint to the bank by email to its official grievance address or through the app, and keep a copy. A phone call alone is weak proof.
5. Change passwords and PINs: email first, then net banking, UPI PIN and any linked apps. Turn on two-factor authentication.
6. Uninstall any screen-sharing or remote-access app the fraudster asked you to install, and log out of all other devices.
7. Preserve evidence: screenshots of chats, call logs, SMS alerts, the fraudster’s numbers and UPI IDs, website links, and bank statements showing the debit.

The legal follow-up

FIR. Cheating and identity-theft frauds are cognizable offences. File an FIR at your local police station or the cyber cell under Section 173 BNSS. A zero FIR can be registered at any police station. Attach your 1930 and portal acknowledgement numbers. If the police refuse, see our guide on what to do when police refuse an FIR.

Bank liability. Under RBI’s current customer liability framework, if the fraud was due to a third-party breach (not your negligence and not the bank’s fault) and you report it within 3 working days of receiving the bank’s transaction alert, your liability is zero. Reporting in 4 to 7 working days attracts limited liability. The bank must credit (shadow-reverse) the disputed amount within 10 working days of your report and resolve the complaint within 90 days. Our guide on UPI and bank fraud refund rules has the full table.

Coming from 1 January 2027. RBI finalised new directions in June 2026 that will apply to electronic banking transactions on or after 1 January 2027. They extend protection to frauds where the customer was tricked into authorising the payment, give zero liability for third-party breaches reported within 5 calendar days, and provide a one-time compensation of 85% of the net loss or ₹25,000, whichever is lower, for losses up to ₹50,000, if you report to both the bank and 1930 or the cyber crime portal within 5 calendar days. These rules are not in force yet, so frauds before that date follow the current framework.

Common scams to recognise

• KYC update messages. “Your account will be blocked today, update KYC at this link.” Banks do not ask you to update KYC through random links or share OTPs.
• “Digital arrest” calls. A caller posing as police, CBI, customs or a judge says your parcel had drugs or your Aadhaar was misused, keeps you on a video call and demands money to “clear your name”. There is no such legal procedure as a digital arrest. Police do not arrest anyone over a video call, and no agency collects money to settle a case over the phone. Disconnect and report on 1930.
• Fake customer care numbers. Numbers posted on search results or social media for airlines, banks or delivery apps. Use only the number on the official website or app.
• Screen-share apps. “Install this app so I can help you get a refund.” Once installed, the fraudster sees your OTPs and PINs.
• Part-time job tasks. Paid for liking videos or reviewing hotels, then asked to “invest” for bigger tasks. Early small payouts build trust; the large deposit disappears.
• UPI collect requests. Remember: you enter your UPI PIN only to pay, never to receive money.

Real-life style example

Anita, a teacher in Jaipur, gets a call from “bank support” and installs a screen-sharing app. ₹48,000 leaves her account in three transactions. Within 20 minutes she calls 1930 and gets an acknowledgement number, files on cybercrime.gov.in, calls her bank to block UPI and emails the bank’s grievance cell with screenshots the same evening. Part of the money is put on hold in the receiving account. She files an FIR the next day and follows up with the bank in writing.

Frequently asked questions

What is 1930?

It is the national cyber crime helpline for reporting financial frauds quickly so that money in transit can be traced and held.

Is calling 1930 the same as filing an FIR?

No. 1930 and the portal start a complaint and freezing process. An FIR is a separate police record under Section 173 BNSS. Do both.

How fast must I tell my bank?

Under current RBI rules, report within 3 working days of receiving the bank’s alert for zero liability in a third-party breach. From 1 January 2027, the window becomes 5 calendar days.

Can police really arrest me over a video call?

No. A “digital arrest” is a scam, not a legal procedure. Arrest under the BNSS is physical, with an arrest memo and production before a Magistrate.

Will I definitely get my money back?

Not always. Fast reporting improves the chance of freezing funds. Bank refunds depend on the RBI liability rules and whether there was negligence on your part.

Quick quiz

To learn cyber fraud, bank liability and consumer remedies together, take the Everyday Law for Every Indian course (₹349).

Sources

• National Cyber Crime Reporting Portal (cybercrime.gov.in) and helpline 1930, Ministry of Home Affairs
• RBI framework on customer protection: limiting liability of customers in unauthorised electronic banking transactions (2017 circular, now in RBI Master Directions, 2025)
• RBI directions on fraudulent electronic banking transactions, finalised June 2026, applicable from 1 January 2027
• Bharatiya Nagarik Suraksha Sanhita, 2023: Section 173

This page is for education and general information, not legal advice for a specific case. Law as on 29 October 2026.