Senior Citizen Cyber Fraud Response: First 60 Minutes Checklist
Reviewed by CA Nikhil Gupta · Last reviewed 17 June 2026
A minute-by-minute response for blocking accounts, calling the bank and 1930, preserving evidence, securing devices and supporting the victim.
For broader context, see the RBI Banking — Master Directions, Prudential Rules and Operations Hub.
The objective is to convert a sensitive family-finance issue into a process that another authorised person can execute under stress.
Immediately block affected cards, UPI, net banking, mobile banking and SIM access through official channels.
Call the bank and 1930 and complete the National Cyber Crime Reporting Portal complaint with accurate transaction references.
Preserve UTRs, beneficiary accounts, phone numbers, URLs, screenshots, call logs and remote-access-app details.
Change credentials from a clean device and review email forwarding, SIM changes and newly added beneficiaries.
What the family should understand
- Immediately block affected cards, UPI, net banking, mobile banking and SIM access through official channels.
- Call the bank and 1930 and complete the National Cyber Crime Reporting Portal complaint with accurate transaction references.
- Preserve UTRs, beneficiary accounts, phone numbers, URLs, screenshots, call logs and remote-access-app details.
- Change credentials from a clean device and review email forwarding, SIM changes and newly added beneficiaries.
- Family members should support the victim calmly because shame and blame delay reporting and destroy evidence.
Use the Debt-to-Income and FOIR Calculator to work through the related inputs before acting.
The five-point review
| Check | What to examine |
|---|---|
| Incident | Transaction, device, caller, URL and time. |
| Containment | Banking, card, UPI, SIM, email and remote access. |
| Reporting | Bank, 1930, cybercrime portal and police where required. |
| Evidence | UTR, beneficiary, messages, logs and screenshots. |
| Recovery | Fund tracing, credential reset and complaint follow-up. |
For the connected rule, example or next step, see UPI Fraud: What to Do in the First 30 Minutes.
Practical example
A retiree transfers ₹4 lakh to a fraudster's 'safe account' during a digital-arrest scam. The family spends two hours arguing before contacting the bank, reducing the chance of tracing funds.
For the connected rule, example or next step, see Senior Citizen Banking: Fraud, Nomination and Service Checklist.
How to apply the framework
Start from the live institutional record
Download the current statement, passbook, folio, issued policy schedule, account mandate, pension record or claim status. Family spreadsheets and old forms can support the review, but they do not prove what the bank, insurer, provident fund, depository, registrar, pension authority or court currently recognises. Compare names, dates, account references, ownership, nomination, balance and processing status.
Separate operational access from beneficial entitlement
Joint holding, nomination, survivor instructions, power of attorney, executor appointment and legal-heir rights solve different problems. One may let a person operate or receive an asset without deciding who ultimately owns it. The answer can differ across EPF, pension, deposits, insurance, demat, mutual funds and property. Preserve the product record and legal documents together.
Use current rules and actual contract terms
Rates, limits, pension procedures, withdrawal thresholds, court forms and transmission requirements can change. Use the latest official source and the actual institution process. For insurance, healthcare, annuity or loan-protection questions, the issued policy wording and schedule take priority over a brochure, social-media post or salesperson's summary.
Design for family execution
A trusted person should know that the account, policy or legal document exists, which institution holds it, where originals are stored and whom to contact. That person should not need to impersonate the owner, guess a password or search years of email during a crisis. Keep live credentials in a separate secure system and document lawful authority through the applicable mandate, nomination, POA, executor or claim route.
Implementation checkpoint
Before marking the task complete, verify the live outcome: updated nominee, accepted authority, credited transfer, registered claim, current policy, corrected pension record or issued court or institution acknowledgement. Record the reference number, date, next deadline and unresolved mismatch. A signed form stored at home is not proof that the institution processed it.
For the connected rule, example or next step, see Senior Citizen Savings Scheme: Income, Liquidity and Nominee Checklist.
Action checklist
- End contact with the fraudster.
- Block affected banking and device access.
- Call the bank and 1930 immediately.
- Complete the cybercrime complaint.
- Preserve original evidence.
- Review related accounts and credentials.
Evidence to keep
- Bank complaint and timestamps
- UTRs and beneficiary details
- Original messages and call logs
- Cybercrime acknowledgement
- Device and credential action record
Warning signs
- Urgency and secrecy
- Remote-access request
- Safe-account transfer
- OTP or PIN request
- Recovery fee demanded
Finin2min takeaway
Family continuity depends on accurate records, lawful authority, accessible evidence and a trusted person who knows the next step.
Frequently Asked Questions
Source and review trail
Use the current official instrument, portal or regulator publication before acting. This panel separates the category authority from page-specific references.
- Primary category
- Data Protection, Cyber & IT Law
- Official starting point
- www.meity.gov.in