The first objective is containment, not arguing with the fraudster. Rapid reporting can help banks and law-enforcement systems trace or freeze funds, but no guide can guarantee recovery.
Quick View
Stop communication and remote-access sessions.
UTR, amount, timestamp and bank statement.
Entering another PIN to reverse the first transaction.
National Cyber Crime Reporting Portal
What the Issue Means
Distinguish an unauthorised transaction from a transaction the user personally approved after deception. RBI customer-liability rules are strongest for specified unauthorised electronic transactions; social-engineering facts can create a more complex dispute.
Report immediately to the bank through its official fraud channel and to the UPI app. Ask for the complaint number, beneficiary details available to the bank and immediate steps to block further transactions. Change UPI PIN, mobile-banking credentials and linked email access where compromise is suspected.
Call the national cybercrime helpline 1930 and complete the complaint on the National Cyber Crime Reporting Portal. Give the UTR, amount, time, beneficiary, phone numbers, links and sequence of events.
Action Steps
- Stop communication and remote-access sessions.
- Block UPI or mobile banking if credentials may be compromised.
- Call the bank’s official fraud helpline.
- Report through the UPI app.
- Call 1930 and file the online complaint.
- Preserve the phone, chats and transaction evidence.
Decision Table
| Situation | Meaning | Response |
|---|---|---|
| Bank report | Creates the financial-institution complaint and containment request. | Record the exact time. |
| App report | Links the transaction reference to the app workflow. | Do not rely only on chat support. |
| 1930 report | Starts the cyber-fraud reporting route. | Provide complete transaction details. |
| Portal complaint | Creates a fuller written record. | Upload evidence without editing originals. |
Practical Example
Evidence to Keep
- UTR, amount, timestamp and bank statement.
- Fraudster’s phone, UPI ID and beneficiary name.
- QR code, link, app name and screenshots.
- Call logs and chat export.
- Bank and app complaint numbers.
- 1930 and cybercrime portal acknowledgement.
Common Mistakes
- Entering another PIN to reverse the first transaction.
- Installing a remote-access app for support.
- Deleting chats out of embarrassment.
- Calling a number found in a sponsored search result.
- Waiting for the fraudster to promise a refund.
Escalation Route
If the bank’s response is unsatisfactory, follow its grievance hierarchy. Eligible service-deficiency complaints can later be taken to the RBI Ombudsman after first complaining to the regulated entity and satisfying the scheme conditions.
Police or cybercrime action and bank liability are separate questions. Preserve evidence for both; a bank complaint does not replace a cybercrime report.
Working Principle
The safest approach is to preserve the original record, use the official channel and explain the facts in chronological order. A portal acknowledgement, complaint number or filing receipt is part of the evidence and should be downloaded rather than assumed to remain available forever.
Rules and procedures can change, and the correct action depends on the exact transaction, policy, notice or account. Where money, limitation, criminal allegations, medical causation or a large tax position is involved, qualified professional advice should be obtained before taking an irreversible step.
Why Timing Matters
Fraud response has two parallel objectives: stop additional loss and preserve the evidence needed to trace the first loss. The immediate step is Stop communication and remote-access sessions. Record the exact time because bank liability, fund tracing, SIM or account containment and police follow-up can all depend on how quickly the incident was reported.
The evidence file should begin with UTR, amount, timestamp and bank statement. Add the transaction reference, beneficiary, phone number, link, app name, device state and every complaint acknowledgement. Keep original chats and files untouched; explanatory screenshots can be created as copies, but they should not replace the source material.
Do not continue following the fraudster’s instructions in the hope of recovering money. A frequent error is Entering another PIN to reverse the first transaction. Use only independently located official numbers and portals. A bank dispute, cybercrime complaint and securities or telecom grievance may all be necessary because each route addresses a different part of the incident.
Common Questions
Is a UPI PIN needed to receive money?
No. Entering the PIN normally authorises a debit.
Does reporting guarantee recovery?
No. Speed improves the chance of containment, but recovery depends on fund movement and investigation.
What is the RBI three-day rule?
It applies to specified third-party unauthorised transactions reported within three working days, subject to the facts.
Should the phone be reset immediately?
First preserve evidence and secure accounts; obtain technical or police guidance where malware is suspected.
Official Sources
Use the latest official page, circular, policy wording or portal instruction before acting. A general guide cannot override the document governing the specific case.