What Should a Victim Do After a Cyber Fraud? A Complete Legal Guide
Cyber fraud has become one of the most serious forms of financial crime in India. A person may lose money through a fake investment scheme, UPI fraud, phishing link, fake customer-care number, OTP scam, credit-card fraud, online shopping fraud, impersonation, “digital arrest” scam or unauthorised access to a bank account.
The most important thing after a cyber fraud is speed. A victim should not wait for the fraudster to contact them again or assume that the money is permanently lost. Immediate reporting can help law-enforcement agencies and financial institutions take steps to trace or prevent further movement of the money.
The Government's National Cyber Crime Reporting Portal specifically advises victims of financial cyber fraud to report immediately through 1930, the national cybercrime helpline, or through the official cybercrime portal. Cyber Crime Portal
1. Immediately Call 1930
If money has been fraudulently transferred from your bank account, UPI, wallet, card or another financial account, immediately call 1930.
The National Cyber Crime Reporting Portal provides the 1930 helpline 24×7 for reporting financial cyber fraud. Cyber Crime Portal
Do not wait until the next working day.
The purpose of immediate reporting is to enable the authorities and financial institutions to take timely action concerning the fraudulent transaction and, where possible, prevent further movement of the funds.
The victim should keep the following information ready:
- Name of the bank, wallet or merchant
- Account number or UPI ID, wherever relevant
- Transaction ID/UTR number
- Date and time of transaction
- Amount of money lost
- Mobile number of the complainant
- Screenshots of the transaction
- Relevant messages, emails or other communications
The official cybercrime portal itself provides a checklist of transaction details and supporting evidence that should be kept ready while filing a complaint. Cyber Crime Portal
2. Report the Fraud to Your Bank Immediately
Calling 1930 should not replace reporting the transaction to your bank.
Immediately contact the bank through its official helpline, mobile banking application, website or branch and report the unauthorised transaction.
Ask the bank to:
- Block or secure the affected account/card/payment instrument;
- Stop further unauthorised transactions;
- Register your complaint;
- Provide a complaint/reference number;
- Investigate the transaction; and
- Take appropriate steps for recovery or reversal, as applicable.
The Reserve Bank of India requires banks to provide mechanisms through which customers can report unauthorised electronic transactions and requires banks, upon receiving such reports, to take immediate steps to prevent further unauthorised transactions. Reserve Bank of India
Always obtain a written acknowledgement or complaint/reference number.
3. File a Complaint on the National Cyber Crime Reporting Portal
After making the immediate report, the victim should also file a detailed complaint through the official National Cyber Crime Reporting Portal.
National Cyber Crime Reporting Portal – cybercrime.gov.in
The portal permits complaints relating to online financial fraud and other cybercrimes. The authorities deal with complaints on the basis of the information and evidence provided by the complainant. The portal therefore advises complainants to provide correct and accurate information. Cyber Crime Portal
For financial fraud, the complaint should clearly mention:
- Date and time of the incident;
- Exact amount lost;
- Bank/account/wallet involved;
- UTR/transaction number;
- UPI ID or account details of the recipient, if available;
- Mobile numbers used by the fraudster;
- WhatsApp/Telegram numbers;
- Email IDs;
- Website or social-media profile;
- Screenshots;
- Call recordings, if legally available;
- Messages and emails;
- Bank statements; and
- Any other material identifying the fraudster.
The portal specifically asks complainants to keep transaction IDs/UTR numbers, transaction dates, fraud amounts and supporting evidence ready. Cyber Crime Portal
4. Preserve Every Piece of Evidence
Do not delete anything.
A common mistake made by victims is deleting messages, WhatsApp conversations, emails or other material because they are embarrassed or angry.
These materials may become important evidence.
Preserve:
- SMS alerts from the bank;
- WhatsApp chats;
- Telegram conversations;
- Emails;
- Phone numbers;
- Screenshots;
- UPI transaction details;
- Bank statements;
- Payment receipts;
- QR codes;
- Website URLs;
- Social-media profiles;
- Fake investment-platform details;
- Call recordings, where lawfully obtained;
- Documents sent by the fraudster;
- Advertisements;
- Cryptocurrency wallet addresses, if applicable; and
- Any identification information available about the accused.
The cybercrime portal allows supporting evidence to be uploaded with the complaint. Cyber Crime Portal
Do not edit the evidence
Keep the original files wherever possible.
For example, instead of merely taking a screenshot of a WhatsApp conversation, preserve the original conversation and the device containing it.
5. Secure Your Bank Account and Digital Accounts
If the fraudster obtained your:
- OTP,
- PIN,
- Password,
- UPI PIN,
- Debit/Credit Card details,
- Internet banking credentials,
- Email password, or
- Other authentication information,
immediately change the relevant credentials.
Where necessary:
- Block the debit/credit card;
- Change internet-banking passwords;
- Change UPI PIN;
- Log out of unknown devices;
- Secure your email account;
- Enable two-factor authentication;
- Contact your telecom provider if your SIM may have been compromised.
If you suspect that your mobile number has been taken over through SIM-related fraud, contact the telecom service provider immediately.
6. Understand Your Rights Against Unauthorised Bank Transactions
One of the most important legal issues following cyber fraud is customer liability.
The RBI framework provides protection in certain circumstances involving unauthorised electronic banking transactions.
For example, where the unauthorised transaction results from a third-party breach and the deficiency lies neither with the bank nor with the customer, reporting the transaction within three working days of receiving the bank's communication can result in zero customer liability under the applicable RBI framework. Reserve Bank of India
Where reporting is delayed to four to seven working days, customer liability may be limited in accordance with the applicable RBI rules. Beyond that period, the position may depend upon the bank's applicable policy. Reserve Bank of India
However, the position is different where the loss is attributable to the customer's own negligence—for example, sharing payment credentials. In such cases, the RBI framework provides that the customer bears the loss until the transaction is reported to the bank; losses occurring after reporting are treated differently. Reserve Bank of India
Therefore, do not assume that you have no remedy merely because you accidentally disclosed information to a fraudster. The facts of each transaction and the applicable banking framework have to be examined carefully.
7. Ask the Bank for a Written Response
If the bank refuses to take action, does not properly investigate the transaction or rejects your claim, ask the bank to provide its decision in writing.
Keep:
- Your original complaint;
- Complaint/reference number;
- Bank's response;
- Transaction statement;
- Correspondence with the bank;
- Cybercrime complaint acknowledgement; and
- Any subsequent communications.
These documents may become important if the matter has to be escalated.
8. Escalate the Banking Complaint if Necessary
If the bank does not satisfactorily resolve the grievance, the customer can consider the RBI's Integrated Ombudsman Scheme, subject to the applicable requirements and circumstances.
The important point is that the victim should maintain a complete documentary record of the complaint made to the bank and its response.
A cyber fraud involving a bank account can therefore involve two parallel tracks:
Criminal/Cybercrime Track
1930 → Cyber Crime Portal → Police/Cyber Cell → Investigation
Banking Grievance Track
Bank complaint → Internal grievance mechanism → RBI Ombudsman mechanism, where applicable
These processes serve different purposes and should not be confused with one another.
9. File an FIR or Approach the Police/Cyber Crime Cell Where Appropriate
A cybercrime complaint through the national portal is important, but the victim should also consider approaching the appropriate police authority where the circumstances require registration of an FIR or further investigation.
The cybercrime portal itself states that complaints are dealt with by law-enforcement agencies based on the information supplied in the complaint. It also advises people to contact the local police in emergencies or for crimes outside the portal's cybercrime scope. Cyber Crime Portal
If the matter involves substantial financial loss, identity theft, threats, impersonation, organised fraud or other serious circumstances, obtaining legal advice can also be useful.
10. What Criminal Laws May Apply?
The exact offences depend upon how the fraud was committed.
Under the Bharatiya Nyaya Sanhita, 2023 (BNS), Section 318 deals with cheating, while Section 319 deals with cheating by personation. The BNS has been in force since July 1, 2024. India Code
The Information Technology Act, 2000 may also apply to conduct involving computers, communication devices and electronic identification.
For example:
- Section 66C IT Act – identity theft;
- Section 66D IT Act – cheating by personation using a computer resource or communication device. India Code
Depending on the facts, other provisions of criminal law and special statutes may also become relevant.
Therefore, a cyber fraud complaint should describe what actually happened, rather than merely stating that the accused committed "cyber fraud."
11. Do Not Pay the Fraudster Again
This is particularly important in digital arrest, investment and recovery scams.
Fraudsters may tell victims:
“Pay this amount to unlock your account.”
or:
“Pay tax/processing charges/security deposit to recover your money.”
The victim may then lose even more money.
Once a person realises that he or she has been defrauded, do not make another payment merely because the fraudster promises recovery of the earlier amount.
Report the matter to the bank and law-enforcement authorities instead.
12. Do Not Confront or Threaten the Fraudster
The victim should preserve evidence rather than attempting to personally locate, threaten or confront the suspected fraudster.
If communication with the fraudster continues, preserve relevant messages and provide them to the investigating agency.
The objective should be to create a clear evidentiary trail for investigators.
13. Can the Money Be Recovered?
Recovery is possible in some cases, but it cannot be guaranteed.
The possibility of recovery depends on factors such as:
- How quickly the fraud was reported;
- Whether the money is still traceable;
- Whether it has moved through multiple accounts;
- Whether the receiving account can be identified;
- Whether funds can be frozen;
- Whether the payment intermediary can assist;
- The nature of the fraud; and
- The evidence available to investigators.
The Government's financial cyber-fraud reporting system is designed to facilitate quick action concerning fraudulent funds. The official guidance explains that, after a complaint, the designated police officer may coordinate with the concerned bank/financial intermediary/payment wallet for blocking the money involved, followed by further action according to law. Cyber Crime Portal
This is why the first few hours can be extremely important.
14. What If the Fraud Happened Several Days Ago?
Do not assume that it is too late.
Even if the fraud was discovered after several days:
- Report it to the bank;
- Call 1930;
- File the cybercrime complaint;
- Preserve all evidence;
- Obtain the transaction details;
- Approach the police/cybercrime unit where appropriate; and
- Seek legal advice if the matter is not being acted upon.
Delay can affect banking liability and recovery prospects, but it does not mean that the victim should simply abandon the matter.
15. A Practical Checklist for Cyber Fraud Victims
Immediately
☑ Call 1930
☑ Inform the bank
☑ Block the card/account/payment instrument if necessary
☑ Change passwords/PINs
☑ Preserve screenshots and messages
☑ Save transaction IDs/UTRs
Within the Same Day
☑ File complaint on cybercrime.gov.in
☑ Upload supporting evidence
☑ Obtain acknowledgement/reference number
☑ Submit a written complaint to the bank
☑ Preserve bank statements
Subsequently
☑ Follow up with the cybercrime/police authorities
☑ Follow up with the bank
☑ Escalate the banking grievance where necessary
☑ Consider legal assistance in serious or disputed cases
☑ Keep a complete record of every complaint and response
Conclusion
A cyber fraud victim should remember one basic principle:
Do not panic. Act immediately.
The first response should be to report the financial fraud through 1930, inform the bank, secure the affected accounts, preserve evidence and file a detailed complaint on the National Cyber Crime Reporting Portal.
The legal remedy may involve both criminal investigation and banking grievance mechanisms. Depending on the facts, provisions of the BNS and Information Technology Act may also become relevant.
Most importantly, victims should not feel embarrassed about reporting cyber fraud. Fraudsters increasingly use sophisticated impersonation, social engineering and psychological pressure. Prompt reporting gives the authorities and financial institutions the best opportunity to respond.
Important Official Resources
- National Cyber Crime Reporting Portal
- Cyber Crime Helpline: 1930
- Police Emergency Helpline: 112
- Reserve Bank of India
Disclaimer: This article is intended for general legal awareness and does not constitute legal advice. The applicable remedy, criminal provisions, banking liability and recovery process depend upon the facts and circumstances of each case.