What to Do After a Cyber Fraud Incident in India: Legal Remedies Guide

Cyber fraud can happen to anyone — a fraudster impersonating a bank employee, a fake investment scheme, a phishing link that steals your UPI credentials, or an online marketplace scam. The most important thing to understand is that time is critical. Fraudulent transactions can be reversed if reported quickly enough, but once the money is withdrawn from the fraudster's account, recovery becomes significantly harder. Every hour of delay reduces your chances.

Key Takeaways

• Report the fraud to your bank immediately — most banks have a 24x7 helpline and can initiate a freeze on the recipient account if contacted within the first few hours
• File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in or call the national helpline number 1930 — this is the fastest official reporting mechanism
• Under RBI guidelines, if you report an unauthorised transaction to your bank within the prescribed time limit, you are entitled to a full refund provided you were not negligent [RBI guidelines subject to verification for current timelines]
• Cyber fraud is a criminal offence under the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita, 2023 [section numbers require verification before publication]
• Preserve all digital evidence — screenshots, transaction IDs, emails, chat records, and call logs — before reporting. This evidence is essential for both police investigation and bank reversal claims
• If the bank or payment platform refuses to refund despite timely reporting, you can escalate to the RBI Banking Ombudsman or file a consumer complaint

Overview

Cyber fraud in India is governed primarily by the Information Technology Act, 2000 and its amendments, along with the Bharatiya Nyaya Sanhita, 2023 which replaced the Indian Penal Code. Offences such as identity theft, cheating by impersonation using digital means, and unauthorised access to financial accounts are cognisable criminal offences, meaning police can investigate and arrest without requiring a court order.

The Reserve Bank of India has also issued guidelines protecting customers against unauthorised electronic transactions. If you report a fraud within the prescribed timeline and the transaction occurred without your negligence — for example, through a bank system breach or phishing — the bank is liable to reverse the transaction. This regulatory protection is one of the most powerful tools available to cyber fraud victims and is separate from the criminal complaint process.

The Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs operates the National Cyber Crime Reporting Portal and the helpline number 1930, which connects directly to a financial fraud response unit that works with banks to freeze fraudulent transactions in real time.

Types of Cyber Fraud Covered

The legal remedies described in this guide apply to a wide range of cyber fraud scenarios:

• UPI, NEFT, IMPS, or net banking fraud — money transferred without your authorisation
• Phishing — fake websites or messages that trick you into revealing banking credentials
• Vishing — fraudsters calling you while impersonating bank employees, RBI officials, or government authorities
• OTP fraud — fraudsters tricking you into sharing OTPs
• Investment and trading scams — fake stock tips, crypto platforms, or high-return schemes
• Online marketplace fraud — non-delivery of goods, fake sellers on e-commerce platforms
• Social media impersonation — fake profiles seeking money from your contacts
• Sextortion and digital blackmail
• Job fraud — fake job offers collecting fees or personal documents

Step-by-Step Process After Cyber Fraud

Step 1: Call Your Bank Immediately. Immediately block compromised cards, UPI IDs, and net banking access to prevent further unauthorized transactions. The moment you realise fraud has occurred, call your bank's 24x7 customer care helpline and report the unauthorised transaction. Ask them to immediately block your account or card, flag the recipient account for freezing, and register your complaint with a reference number. Note down the time of your call and the complaint reference number — this timestamp is critical for your RBI refund claim.

Step 2: Call the National Cyber Crime Helpline 1930 Call 1930 (the national cyber crime financial fraud helpline) and report the fraud. This helpline operates round the clock and is directly connected to a system that can flag and freeze the recipient bank account in real time, before the fraudster withdraws the money. Provide the transaction details — amount, date, time, transaction ID, and the UPI ID or account number to which the money was sent.

Step 3: File a Complaint on cybercrime.gov.in Visit the National Cyber Crime Reporting Portal at cybercrime.gov.in and file a detailed online complaint. For financial fraud specifically, use the Financial Fraud reporting section. Upload all supporting evidence — screenshots of the fraudulent transaction, conversation records, fake website URLs, or the fraudster's contact details. You will receive a complaint acknowledgment number — preserve this.

Step 4: Preserve All Digital Evidence Before taking any other action, take screenshots of all relevant communications — fraudulent messages, call logs, emails, fake websites, transaction records, and UPI payment screens. Do not delete any messages or emails even if they appear irrelevant. Digital evidence deteriorates or gets deleted — preserve everything immediately.

Step 5: File an FIR at the Local Police Station or Cyber Cell Visit your nearest police station or the dedicated Cyber Crime Cell in your city and file a First Information Report (FIR). Provide your complaint registration number from cybercrime.gov.in, all transaction details, and your evidence. If the local police are unwilling to register an FIR for cyber fraud, you can approach the Superintendent of Police or file a complaint before the Magistrate under Section 156(3) of the Code of Criminal Procedure [section subject to verification under the new Bharatiya Nagarik Suraksha Sanhita]. In major cities, dedicated cyber crime police stations handle these cases directly.

Step 6: Claim Refund from Your Bank Under RBI Guidelines Send a written complaint to your bank's nodal officer or grievance cell with full details of the fraudulent transaction, your initial report timestamp, and all evidence. Under RBI guidelines, if you reported the fraud within the prescribed time and the transaction occurred without your negligence, the bank must reverse the transaction within a specified number of working days [RBI refund timelines subject to verification for current rules]. Keep copies of all correspondence.

Step 7: Escalate to the RBI Banking Ombudsman if Required If your bank fails to respond within 30 days or rejects your refund claim without adequate justification, escalate the complaint to the RBI Banking Ombudsman through the Centralised Complaint Management System at cms.rbi.org.in. The Ombudsman has powers to direct the bank to refund the amount along with compensation.

Step 8: File a Consumer Complaint if Required If the fraud involved an e-commerce platform, payment wallet, or financial service provider that is being uncooperative, you can also file a complaint before the District Consumer Commission on the Edaakhil portal. Consumer Commissions have awarded compensation in several cyber fraud cases where platforms failed in their duty of care.

Common Mistakes to Avoid

• Delaying the report to the bank or helpline: Every hour of delay significantly reduces the chance of freezing the fraudster's account before the money is withdrawn. Many victims wait days before reporting, by which time the money is long gone
• Sharing your complaint with the fraudster: Some fraud victims are contacted again by the same or related fraudsters posing as recovery agents or police officials. Never share your complaint number, bank details, or pay any amount to anyone promising to recover your money
• Not preserving evidence before taking action: Victims sometimes delete messages or reset devices before backing up evidence. Always screenshot and back up first
• Accepting that the money is lost: Many victims assume cyber fraud amounts are unrecoverable and do not file formal complaints. In reality, the I4C and bank freeze mechanisms have successfully blocked and recovered crores of rupees for fraud victims who reported quickly
• Not following up on your complaint: Cyber crime investigations require active follow-up. Register your complaint, note the reference numbers, and follow up regularly with the bank, cyber crime portal, and investigating police officer

When to Hire a Lawyer

For most cyber fraud cases involving financial loss, you can initiate the reporting process yourself through the helpline and online portal without a lawyer. However, engage a cyber law or criminal lawyer when:

• Your complaint is not being acted upon by the police and you need to file a petition before the Magistrate or High Court
• The fraud involves a large amount and the bank is refusing the refund despite timely reporting
• You are facing harassment, blackmail, or sextortion and need urgent legal protection including an injunction
• You have been falsely accused of cyber fraud and need legal defence
• The fraud involves your business — customer data breach, business email compromise, or corporate identity theft

Disclaimer: Cyber crime law in India, RBI refund guidelines, and reporting procedures are subject to frequent updates. The Bharatiya Nyaya Sanhita, 2023 and its associated procedural laws have replaced several older provisions — all section references require verification against current law before taking action. This guide is for informational purposes only and does not constitute definitive legal advice. Act immediately upon discovering fraud and consult a qualified cyber law attorney for complex cases.

Need legal assistance? Browse verified lawyers on LegalSetu to discuss your situation with a qualified legal professional.