If you have lost money in a UPI fraud, call 1930 right now. 1930 is the national cyber fraud helpline. When you report fast, the police and banks can try to freeze the money in the fraudster's account before it is withdrawn or moved again. After the call, complete your complaint on cybercrime.gov.in and report the transaction to your bank through its official customer care.
First 60 minutes checklist: 1) Call 1930. 2) Call your bank's official helpline and report fraud. 3) Note the complaint/acknowledgement number. 4) Take screenshots of everything. 5) Complete the online complaint at cybercrime.gov.in.
Why the first hour matters (the "golden hour")
Fraudsters move stolen money quickly, usually through several "mule" accounts, to ATMs or into crypto. Once it is withdrawn in cash, it is very hard to trace. When you call 1930, your complaint goes into the Citizen Financial Cyber Fraud Reporting and Management System, which alerts the banks and payment apps involved so they can put a hold on the money that is still there. This window, roughly the first hour, is often called the golden hour.
The system does work when people report fast. In December 2025 the Minister of State for Home told the Rajya Sabha that more than ₹7,000 crore had been saved through it across more than 23 lakh complaints (All India Radio News, 17 December 2025).
Step 1: Call 1930
Keep this information ready (it is fine if you do not have all of it):
- Your name, mobile number and bank / UPI app name
- The UPI transaction ID (UTR / reference number), date, time and amount of each fraudulent payment
- The UPI ID, phone number or bank account the money went to
- The fraudster's phone number, WhatsApp number, website or app name
Write down the acknowledgement or complaint number you are given. You will need it for the bank and for the online complaint.
Step 2: Tell your bank (and why the 3-day rule matters)
Call the customer care number printed on your debit card or listed on your bank's official website, never one from a Google search result or a social media comment. Ask them to register a fraud complaint, block your UPI / card / net banking if needed, and give you a reference number. Also report it inside your UPI app (Help or Report a problem section).
The Reserve Bank of India's circular of 6 July 2017 on customer liability says:
| Situation | Your liability |
|---|---|
| Fraud caused by the bank's negligence or deficiency | Zero, whether or not you report |
| Third-party breach (fault is neither yours nor the bank's) reported within 3 working days | Zero |
| Third-party breach reported in 4 to 7 working days | Limited: the transaction amount or a cap of ₹5,000 / ₹10,000 / ₹25,000 depending on account type, whichever is lower |
| Reported after 7 working days | As per the bank's board-approved policy |
| Loss due to your negligence, such as sharing your PIN or OTP | You bear the loss until you report it; the bank bears losses after you report |
The same circular asks banks to credit the disputed amount (a "shadow reversal") within 10 working days of your report when the case falls under these rules, and to resolve complaints within 90 days. Be honest with yourself here: in most UPI scams the victim enters the PIN themselves after being tricked, which banks often treat as customer-authorised. Report anyway. Speed still helps the freeze, and the bank can waive liability at its discretion.
Step 3: File the complaint on cybercrime.gov.in
- Open cybercrime.gov.in (check the spelling, it ends in .gov.in).
- Under Register a Complaint, choose Financial Fraud. You will usually be asked to verify your mobile number with an OTP.
- Enter the date and time of the incident, your state, district and police station, and how it happened (call, WhatsApp, website, app).
- Add the bank and transaction details: bank name, UTR / transaction ID, amount, date.
- Add suspect details: phone numbers, UPI IDs, website links, social media profile.
- Describe what happened in simple words, in order. Upload screenshots.
- Submit and save the acknowledgement number. Use Track your Complaint on the same site to follow up.
Gujarat: e-Zero FIR through 1930
Gujarat Police launched an e-Zero FIR service for cyber financial fraud on 27 July 2026, with I4C. A complaint made on 1930 now automatically generates an e-Zero FIR, which is forwarded to the police station with jurisdiction. Officers then contact you, take the details and register the FIR. You do not have to visit a police station just to start the case (NewKerala, Gujarat Samachar).
What documents and screenshots to keep
- Bank SMS and email alerts for each debit
- Screenshots from your UPI app showing the UTR / transaction ID, amount, receiver name and UPI ID
- Bank statement for the dates involved
- Screenshots of the chat, SMS, call log, fake website or app (include the phone number and the full link)
- The 1930 acknowledgement number, bank complaint number and cybercrime.gov.in complaint number
- A photocopy of your ID proof, as police may ask for it
Do not delete the chats or uninstall a suspicious app before taking screenshots. Do not keep arguing with the fraudster.
How frozen money comes back (the honest answer)
Freezing is not the same as a refund. When you report, banks can put a hold (lien) on the amount still sitting in the fraudster's account. To release it to you, there is usually a police investigation, then an order from a magistrate court or a process agreed between police and the bank. This can take weeks or months, depends on the state and the case, and only the frozen amount can come back. If the money was withdrawn before the freeze, recovery depends on the investigation. No one can promise a full refund.
Refund scam alert: after a fraud, you may get calls from "cyber cell officers", "lawyers" or "recovery agents" asking for a fee to return your money. Real police do not charge a fee. Hang up and talk only to the officer handling your complaint.
Common UPI scams and how they trick you
| Scam | What happens | The truth |
|---|---|---|
| Collect request | A "buyer" or "refund team" sends a request in your UPI app. You approve it and enter your PIN. | Approving a collect request with your PIN sends money. |
| QR code "to receive money" | You sell something online and the buyer sends a QR code so you can "receive" payment. | You never scan a QR or enter a PIN to receive money (Bank of Maharashtra). |
| Screen-sharing app | "Customer care" asks you to install AnyDesk, TeamViewer or a similar app to "fix" a problem. | They can then see your screen, PIN and OTPs. Never install remote-access apps on request. |
| Fake customer care | You search for a helpline online and call a fake number. | Take helpline numbers only from the bank's official website or app. |
| Fake "wrong transfer" | Someone says they sent money to you by mistake and asks you to return it, often with a fake SMS. | Check your actual bank balance in the bank app, not the SMS. |
NPCI's own advice is simple: check the receiver's name before you pay, never share your UPI PIN or OTP, do not rush a payment because someone is pressuring you, and report fraud to 1930 at once (Business Standard, July 2025).
After the complaint: secure your phone and accounts
- Uninstall any app the fraudster asked you to install, after taking screenshots. Our guide on risky app permissions shows what to look for.
- Change your UPI PIN, net banking password and email password from a safe device.
- If you clicked a link, read what to do after clicking a fake link.
- Report the fraud number on Chakshu at sancharsaathi.gov.in so others are protected.
Frequently asked questions
UPI fraud ho gaya, paise wapas kaise milenge?
Turant 1930 par call karein aur cybercrime.gov.in par complaint karein. Agar paisa fraudster ke account mein ruka hua hai to bank use freeze kar sakta hai, aur baad mein police aur court ki process se wapas mil sakta hai. Jitni jaldi report, utna behtar chance, lekin guarantee nahi hai.
Is 1930 a free number and when can I call?
Yes. 1930 is the toll-free national cyber financial fraud helpline, run with the Indian Cyber Crime Coordination Centre and state police. Call it as soon as you notice the fraud; you can also complete the complaint online at cybercrime.gov.in.
Will the bank refund my money under RBI rules?
RBI rules from July 2017 give zero liability if the fraud was due to the bank, or a third-party breach that you report within three working days. If you shared your UPI PIN or OTP, or approved the payment yourself, you may have to bear the loss until you report it, so report immediately.
Do I need a PIN to receive money on UPI?
No. You enter your UPI PIN only to send money. If anyone asks you to scan a QR code or enter your PIN to "receive" a refund or payment, it is a scam.
How long does it take to get frozen money back?
There is no fixed timeline. Money frozen in the receiving account is usually released after the police investigation and an order from the court or the bank process, which can take weeks or months.
Do I have to go to the police station in Gujarat?
Since 27 July 2026, a cyber financial fraud complaint made on 1930 in Gujarat can automatically create an e-Zero FIR that is sent to the right police station. You do not need to visit a station to start the case, but police will contact you for details.
This guide is general information, not legal advice. If you have lost money to fraud, call 1930 immediately or report at cybercrime.gov.in.