Act fast

Money was taken from my account in a UPI fraud. What do I do first?

Simple answer

Call 1930 right away — every minute counts. Fast reporting lets police and banks try to freeze the money before the fraudster withdraws it. Then block UPI and cards with your bank and complete the complaint on cybercrime.gov.in. Recovery is not guaranteed.

Real-life examples

Arjun got a UPI request saying 'Enter PIN to receive ₹5,000'. He entered his PIN and ₹5,000 left his account instead. He called 1930 within 20 minutes, so police could ask the bank to hold the money in the fraudster's account. Remember: a UPI PIN is only for sending money, never for receiving it.

Gurpreet noticed a ₹40,000 debit but waited two days to report it. By then the money had moved through several accounts and been withdrawn. Police can still investigate, but getting the money back is now much harder.

What should you do?

1Call 1930 immediately. Give the amount, time, transaction ID (UTR) and the fraudster's UPI ID or number. Note the acknowledgement number.
2Call your bank's official helpline (from its website or your card) to block UPI, cards and net banking.
3Complete the complaint on cybercrime.gov.in using the acknowledgement number. Upload screenshots and your bank statement.
4Report the fraud to your bank in writing too (app, email or branch). Keep the complaint number with the date and time.
5Keep all evidence — SMS, call logs, chats and UPI IDs. Don't delete anything.
6Ignore anyone who calls promising to 'recover' your money for a fee — that is another scam.

Exceptions & limits

If you sent money to a wrong UPI ID by mistake, it is not cyber fraud. Raise a dispute in your UPI app or with your bank.
Frozen money does not come back automatically. Its release usually needs a police process or a court order, and it can take months.
If you shared your OTP or PIN yourself, the bank may not refund you. See the topic on sharing an OTP.

Official legal reference

Bharatiya Nyaya Sanhita, 2023 — Section 318(4)
Cheating someone into handing over money or property: up to 7 years' jail and fine.
Earlier: IPC Section 420Read the official text
Information Technology Act, 2000 — Section 66D
Cheating by pretending to be someone else using a phone or computer: up to 3 years' jail and fine.
Read the official text
Information Technology Act, 2000 — Section 66C
Fraudulently using someone else's password, electronic signature or other unique ID feature: up to 3 years' jail and fine.
Read the official text

Where to get help

National Cyber Crime Helpline

Report online financial fraud immediately so the money trail can be frozen.

Call 1930 cybercrime.gov.in

RBI Ombudsman (CMS)

Complain about a bank, NBFC or payment app if they don't resolve your complaint.

Call 14448 cms.rbi.org.in

Source & status

Applies to: All of India
Law in force since: 1 Jul 2024
Legal review: Draft — awaiting lawyer review

Educational information, not legal advice for your case. Exact facts and the law that applies matter — speak to a lawyer before acting.