Everything below is free and does not need a lawyer. The order matters: the first three steps are about freezing money before it is withdrawn, and they work best within the first hour or two. The later steps are about making the complaint stick.
Do this now
How to report a cyber crime in India
Everything official is free. You do not need a lawyer, an agent or a “cyber expert” to do any of the steps below. If money has moved, do step 1 before reading the rest.
- 1930
- National Cyber Crime Helpline
- National Cyber Crime Reporting Portal
- Chakshu (Sanchar Saathi)
- 1800-11-4949
- CERT-In incident reporting
- 14448
- RBI Integrated Ombudsman (CMS)
- 112
- Emergency Response Support System
- 181
- Women Helpline
- 1098
- Childline
Call 1930 if money has moved
The national cyber-fraud helpline, run by I4C under the Ministry of Home Affairs. The operator registers your complaint and pushes it to the banks and wallets in the transaction chain, who can put a lien (freeze) on the money while it is still there. Have ready: your bank, the amount, the time, the UPI ID or account the money went to, and your mobile number. You will receive an acknowledgement number by SMS.
File on cybercrime.gov.in
If you called 1930 the complaint is already there; log in with the number you gave and complete it with screenshots and details within 24 hours. If you did not call, file a fresh complaint under “Report other cyber crime” or, for financial fraud, “Report cyber crime” and the financial fraud category. Women and children can use the anonymous option. Keep the acknowledgement number; the bank, insurer and police will all ask for it.
Tell your bank, in writing, the same day
Call the fraud line to block the card, UPI or net-banking, then email or submit a written complaint quoting the 1930 acknowledgement number and asking for the transaction to be marked unauthorised. RBI’s limited-liability framework protects you fully only if you report within three working days, so the date on the written complaint matters. Ask for a complaint reference number.
Report the number or message on Sanchar Saathi
Use the Chakshu facility on sancharsaathi.gov.in to report the phone number, SMS or WhatsApp account used. This leads to disconnection of the number and helps the next person. Also check TAFCOP on the same site for SIMs issued in your name.
Preserve evidence
Screenshots of messages with timestamps and numbers, call logs, UPI transaction IDs, URLs, app names, the profile that contacted you. Do not delete chats, even embarrassing ones. For anything that may go to court, a plain statement of where each item came from and when you saved it is enough at this stage; a formal Section 63 BSA certificate can be prepared later.
Go to the police station if you need an FIR
The portal complaint is not an FIR. For larger amounts, for insurance, for a loan taken in your name, or when a case needs investigation, visit the nearest police station or cyber police station and ask for an FIR under the relevant sections (the portal acknowledgement helps). Under BNSS 2023 you may file a Zero FIR at any station, which must be transferred to the right jurisdiction. If the station refuses, write to the Superintendent of Police.
Escalate when a bank or platform stalls
Bank not resolving within 30 days: RBI Integrated Ombudsman at cms.rbi.org.in. Broker or “adviser”: SEBI SCORES. Illegal loan app: RBI Sachet. Content not removed by a platform: its grievance officer (listed under the IT Rules), then the Grievance Appellate Committee. Women: NCW. Children: NCPCR or 1098.
What happens after you report
Your complaint goes to the cyber cell of the district you selected. The bank-freeze part happens automatically through CFCFRMS within hours; the investigation part depends on the police. You can track the status on the portal with your acknowledgement number. If money was frozen, getting it back requires a court order; the police will tell you the procedure, which in most states involves an application before the magistrate under BNSS section 503. Expect weeks to months.
Be ready for the follow-up scam: a call or message from a “recovery agency” or “cyber lawyer” who already knows the details of your case. Those details leak from the same networks that ran the fraud. No legitimate agency contacts you unsolicited.
Evidence checklist
- Screenshots of every message and call, showing number, date and time
- UPI transaction IDs, reference numbers, receiving UPI IDs / account numbers / IFSC
- Bank SMS alerts and statements for the period
- URLs of websites, links in SMS, app names and the store they came from
- Profile URLs and usernames on social platforms
- Recordings, if any, of calls (lawful to record your own calls in India)
- Your 1930 / portal acknowledgement number and bank complaint reference
Frequently asked questions
What is the difference between a portal complaint and an FIR?
The portal complaint registers the incident and triggers bank action; it is not a criminal case. An FIR, registered at a police station under BNSS, starts an investigation. The portal complaint can be converted into an FIR by the police, or you can file one directly.
The police station refused to register my complaint. What now?
Ask for a Zero FIR (any station must register it regardless of jurisdiction). If refused, send a written complaint to the Superintendent of Police or Commissioner, and you may approach the magistrate under BNSS section 175(3).
How long before frozen money is returned?
Typically one to six months, after a magistrate's order. Some states have streamlined refund procedures; check our state pages.
Should I pay a “recovery agent”?
No. Recovery happens only through banks under police and court orders. Paying a private agent is paying a second scam.