How to Report Cyber-Financial Fraud in India

Establish what happened before choosing the route

Record whether you authorised the payment, whether credentials or remote access were shared, when you discovered the loss and when the bank alerted you. Include the payment method, amount, transaction reference and recipient details. Describe uncertainty honestly; do not alter the account to fit a refund rule.

• Unknown debit: report the transaction you did not authorise.
• Payment induced by deception: explain what you were told and what you approved.
• Merchant refund dispute: keep the order, refund promise and seller response; check the related consumer guide.

Report through the bank, 1930 and the portal

I4C identifies 1930 and the National Cyber Crime Reporting Portal as reporting channels. Contact the bank separately; a cybercrime report should not be assumed to notify it for every purpose. Retain the complaint reference and follow the official instructions for completing the report.

If one route is unavailable, continue through the other official channels and record your attempts. There is no guaranteed first-hour recovery window in this guide. A late discovery is still a reason to report, not to abandon the complaint.

Unauthorised transactions: what the RBI circular does and does not establish

The linked RBI circular addresses unauthorised electronic banking transactions for the bank categories it names. Its liability treatment depends on bank fault, customer negligence, third-party breach and reporting time. It is not a blanket refund promise for every scam, authorised transfer, wallet or institution.

For the circular's third-party-breach category, reporting within three working days of receiving the bank's communication can establish zero liability. This is not a waiting period: notify immediately. Ask the bank which current rules and policy apply, preserve its written decision and seek advice if liability is disputed.

Acknowledgement, investigation and recovery are different

Save the portal acknowledgement and ask the relevant police or cyber cell about the status and any further statement or documents required. Do not describe an acknowledgement as an FIR number. Ask whether an FIR has been registered and obtain its details where applicable.

Reporting starts a process; the facts, available funds, bank assessment and applicable legal procedure affect the outcome. This guide does not predict investigation duration, bank liability or recovery.

Preserve evidence without leaving your accounts exposed

Use a trusted device to contact the bank if the affected device may be compromised. Ask it to block affected payment access and prevent further unauthorised transactions. Preserve original messages and records without delaying urgent protective action.

• Keep transaction IDs, UTR/UPI references, statements and bank alerts.
• Record URLs, phone numbers, handles, app names and dates; retain originals where possible.
• Keep a chronology of discovery, every report and each acknowledgement.
• Do not share OTPs, PINs, passwords or full card details with an AI tool or anyone claiming to recover the money.

Step-by-step

1. 1

   Notify and secure payment access immediately

   Use the bank's official app, website or published fraud channel. Ask it to prevent further loss; keep the complaint reference and timestamp, and follow up in writing.

2. 2

   Call 1930 and complete the official report

   Provide accurate transaction details and follow the instructions for cybercrime.gov.in. Keep the acknowledgement. Do not assume that a report guarantees a freeze or refund.

3. 3

   Prepare a dated evidence bundle

   Keep the transaction records, bank alerts, messages, suspect identifiers and reporting chronology. Use copies for follow-up and retain originals securely.

4. 4

   Follow up with police and the bank separately

   Track the portal complaint, ask the relevant police or cyber cell about action taken, and request the bank's written position. Check applicable grievance escalation and eligibility before approaching another forum.

Documents you need

• Transaction reference, amount, time and payment method
• Bank or payment statement and original alerts
• Messages, website addresses, caller details and relevant screenshots
• Report acknowledgements and a dated chronology
• Bank correspondence and any written liability decision
• Identification only as required by the official reporting channel

Common mistakes to avoid

• Waiting for an AI-generated draft before reporting.
• Assuming a bank complaint, portal acknowledgement and FIR are the same document.
• Treating the RBI third-party-breach rule as an automatic refund for an authorised scam payment.
• Waiting three working days because a liability rule mentions that period.
• Paying an unofficial recovery agent or sharing credentials.
• Leaving payment access exposed while collecting screenshots.

When you should see an advocate

• Liability is disputed or the loss has serious financial consequences.
• There is extortion, identity misuse, a frozen account or a court notice.
• You need advice about police escalation, a bank rejection or the appropriate legal remedy.

Frequently asked questions

Can I report after the first hour?

Yes. Report promptly when you discover the fraud and explain the delay accurately. This guide does not set a cutoff after which reporting becomes pointless.

Will a 1930 complaint recover my money?

It does not guarantee recovery. Keep the reference, complete the official reporting steps and follow up with the bank and police.

Is a portal acknowledgement an FIR?

Do not treat it as one. Ask the relevant police authority whether an FIR has been registered and obtain its details where applicable.

Does every scam qualify for zero bank liability?

No. The applicable framework, authorisation, fault and reporting facts matter. Read the specific RBI circular and the bank's current policy, and seek advice on a disputed decision.