Cyber fraud in India should be reported immediately by calling the National Cybercrime Helpline 1930 and filing a complaint on the National Cyber Crime Reporting Portal. Cyber fraud cases may involve offences under the Bharatiya Nyaya Sanhita, 2023, such as cheating under Section 318 and cheating by personation under Section 319, along with offences under the Information Technology Act, 2000, including identity theft under Section 66C and cheating by personation using a computer resource under Section 66D. In unauthorised electronic banking transactions, the victim should also immediately report the fraud to the bank because RBI’s customer-liability framework places the burden of proving customer liability on the bank.

Introduction

Cyber fraud has become one of the fastest-growing legal and financial threats in India. Victims lose money through UPI fraud, fake investment apps, WhatsApp impersonation, courier scams, digital arrest threats, fake customer-care numbers, KYC fraud, phishing links, OTP theft, loan-app traps, job fraud, crypto scams, fake trading platforms, matrimonial fraud and social-media impersonation.

The first few hours after cyber fraud are critical. A delayed complaint can reduce the chances of freezing funds, tracing accounts, recovering money and establishing that the victim acted diligently. The legal strategy must move on three fronts at the same time: cyber complaint, bank complaint, and criminal-law action.

This article explains the legal remedies for cyber fraud in India, how to file a complaint, what offences apply, how to seek bank refund, when FIR can be registered, what evidence should be preserved, and what victims should do immediately.

What is Cyber Fraud?

Q: What is the official cyber fraud helpline in India?

The official national helpline for financial cyber fraud in India is 1930.

Q: What if the bank refuses refund after cyber fraud?

Escalate to the bank nodal officer and then to the RBI Ombudsman mechanism, while also pursuing cyber complaint and FIR where criminal offences are involved.

Cyber fraud is a dishonest act committed through digital means to deceive a person and cause financial, identity, reputational, data or business loss.

It may involve:

Fraudulent UPI transaction.
OTP theft.
Phishing link.
Fake customer-care number.
SIM-swap fraud.
Fake investment or trading platform.
Fake loan app.
WhatsApp or Telegram scam.
Instagram/Facebook impersonation.
Digital arrest threat.
Fake courier or customs case.
Sextortion.
Malware/APK fraud.
Debit/credit card fraud.
Net banking fraud.
QR-code fraud.
Remote-access app fraud.
Job or work-from-home fraud.
Crypto fraud.
Business email compromise.

Cyber fraud is not merely a “banking issue”. It may involve criminal offences, IT Act violations, banking-law remedies, civil recovery, freezing of recipient accounts and, in serious cases, organised crime investigation.

Immediate Steps After Cyber Fraud

Step 1: Call 1930 Immediately

For financial cyber fraud, the first practical step is to call the National Cybercrime Helpline 1930. The Indian Cybercrime Coordination Centre states that the National Cybercrime Reporting Portal helps citizens report cyber financial frauds on helpline number 1930, and that the helpline is running in all States and Union Territories.

When calling 1930, keep ready:

Your name and mobile number.
Bank account details.
UPI ID / transaction ID.
Fraud amount.
Date and time of transaction.
Beneficiary account details, if visible.
Screenshots.
Brief facts of the fraud.

The objective is to trigger rapid reporting and possible fund-freezing in the transaction chain.

Step 2: File Complaint on cybercrime.gov.in

After calling 1930, file a written complaint on the official National Cyber Crime Reporting Portal. The portal is operated under the Indian Cybercrime Coordination Centre, Ministry of Home Affairs.

The complaint should include:

Complete facts.
Date and time of fraud.
Amount lost.
Transaction IDs.
UPI IDs.
Bank account numbers.
Mobile numbers used by fraudsters.
URLs, app names, Telegram/WhatsApp IDs.
Screenshots.
Bank complaint reference.
1930 complaint reference.
Prayer for registration of FIR and freezing of recipient accounts.

Step 3: Inform the Bank Immediately

The victim must immediately notify the bank. RBI’s customer-protection framework for unauthorised electronic banking transactions states that the burden of proving customer liability lies on the bank. RBI also states that banks must have customer-protection policies and mechanisms for compensation and grievance handling.

Send complaint to:

Branch manager.
Bank customer care.
Bank fraud reporting email.
Nodal officer.
Principal nodal officer, if unresolved.

Keep acknowledgement. RBI’s public awareness material also states that if money is fraudulently withdrawn, the customer should inform the bank immediately and take acknowledgement; the bank has to resolve the complaint within 90 days from receipt.

Step 4: File Police Complaint / FIR Request

If the amount is substantial, the fraud is organised, or bank accounts need freezing, file a written complaint before:

Cyber Crime Police Station.
Local Police Station.
District Cyber Cell.
State Cyber Cell.
Magistrate, if FIR is not registered despite cognizable offence.

The complaint should clearly request registration of FIR, preservation of digital evidence, freezing of beneficiary accounts, bank-nodal coordination, and investigation of mobile numbers, IP logs, device details, UPI handles and mule accounts.

Legal Provisions Applicable to Cyber Fraud

1. BNS Section 318: Cheating

Section 318 of the Bharatiya Nyaya Sanhita, 2023 deals with cheating. It covers dishonest or fraudulent deception inducing a person to deliver property or do/omit an act causing harm.

Cyber fraud cases commonly invoke cheating where a victim is induced to transfer money through deception.

Examples:

Fake investment scheme.
Fake loan approval.
Fake job offer.
Fake courier/customs threat.
Fake customer-care refund link.
Fake trading app.
Fake matrimonial promise used to extract money.

2. BNS Section 319: Cheating by Personation

Section 319 BNS deals with cheating by personation. The official BNS text describes cheating by personation as cheating by pretending to be some other person, knowingly substituting one person for another, or representing that a person is someone else.

This is relevant where fraudsters impersonate:

Bank officials.
Police officers.
CBI/ED officials.
Courier company staff.
Army officers.
Company HR managers.
Friends or relatives on WhatsApp.
Customer-care executives.
Government officials.
Trading/investment advisors.

3. IT Act Section 66C: Identity Theft

Section 66C of the Information Technology Act, 2000 punishes fraudulent or dishonest use of another person’s electronic signature, password or other unique identification feature, with imprisonment up to three years and fine up to ₹1 lakh.

This is relevant in cases involving:

Password misuse.
OTP misuse.
Digital signature misuse.
Login credential theft.
KYC identity misuse.
Aadhaar/PAN-based impersonation.
Social-media account takeover.

4. IT Act Section 66D: Cheating by Personation Using Computer Resource

Section 66D punishes cheating by personation using a communication device or computer resource, with imprisonment up to three years and fine up to ₹1 lakh.

This is one of the most important provisions for cyber fraud because many scams are committed using phones, computers, apps, websites, social-media accounts or messaging platforms.

5. Other Possible Offences

Depending on facts, cyber fraud may also involve:

Criminal breach of trust.
Forgery.
Use of forged electronic records.
Criminal conspiracy.
Extortion.
Threats.
Voyeurism or privacy offences.
Obscene or sexually explicit electronic material offences.
Organised crime provisions, where applicable.
Money-laundering investigation in larger cases.

The FIR should not be mechanically drafted. The correct provisions depend on the factual ingredients.

Types of Cyber Fraud in India

1. UPI Fraud

UPI fraud may occur through:

Collect request scams.
Fake QR code.
Screen-sharing app.
Fake refund link.
Payment reversal trap.
PIN sharing.
Fraudulent merchant.
Fake customer care.

Important point: A QR code is generally for receiving payment, not sending money. If someone asks you to scan a QR code and enter UPI PIN to receive money, it is likely fraud.

2. Phishing and Fake Links

Fraudsters send links appearing to be from banks, delivery companies, government portals, wallets, telecom companies or e-commerce platforms. The link may collect passwords, OTPs, card details or install malware.

Legal provisions may include IT Act Sections 66C and 66D where identity theft or personation through computer resource is involved.

3. Fake Customer-Care Fraud

Victims search online for customer-care numbers and call fake numbers planted by fraudsters. The fraudster then asks the victim to install an app, share OTP, enter UPI PIN or provide card details.

These cases typically involve cheating, personation and IT Act provisions.

4. Digital Arrest Scam

Fraudsters impersonate police, CBI, ED, customs, courier companies or court officials and tell the victim that their Aadhaar, parcel, bank account or phone number is linked to crime. The victim is threatened with arrest and forced to transfer money.

These cases may involve cheating by personation, extortion, criminal intimidation and IT Act offences, depending on facts.

5. Fake Investment or Trading App Fraud

Fraudsters lure victims through WhatsApp, Telegram, YouTube ads, fake celebrity videos, fake apps and manipulated dashboards showing artificial profits. The victim is asked to deposit more money to withdraw earlier profits.

Such cases often involve cheating, personation, forgery, fake platforms, mule accounts and money trail investigation.

6. Loan App Fraud

Fraudulent loan apps collect contact data, photos, documents and then use harassment, threats, morphed images or illegal recovery tactics. Victims may face extortion, privacy violation and data misuse.

Legal remedies may involve cyber complaint, police complaint, RBI/regulated-entity complaint where applicable, and removal/reporting of abusive content.

7. SIM Swap Fraud

Fraudsters obtain duplicate SIM or control over the victim’s mobile number and then access OTPs, banking apps or email accounts. RBI’s unauthorised electronic transaction framework becomes important where the customer promptly reports the fraud and disputes negligence.

8. Business Email Compromise

Companies are tricked into transferring money to fake vendor accounts after email compromise or spoofing. This requires immediate bank recall, FIR, cyber portal complaint, domain/email forensic preservation, and account-freezing request.

Bank Refunds in Cyber Fraud Cases

RBI Customer Liability Framework

RBI’s 2017 customer-protection circular on unauthorised electronic banking transactions requires banks to have transparent customer-protection policies and states that the burden of proving customer liability lies on the bank.

A victim should immediately:

Report the unauthorised transaction to the bank.
Take written acknowledgement.
Preserve complaint number.
Ask for chargeback/reversal investigation.
Escalate to nodal officer.
File RBI Ombudsman complaint if unresolved.

RBI’s public material specifically advises customers to inform the bank immediately if money has been fraudulently withdrawn and to take acknowledgement.

When Can Customer Have Zero Liability?

RBI’s Integrated Ombudsman FAQ states that under the 2017 circular, zero liability may arise in unauthorised electronic banking transactions in specified cases, including where the customer reports promptly under the circular’s framework.

The exact liability depends on:

Whether bank negligence occurred.
Whether third-party breach occurred.
Whether customer reported promptly.
Whether customer shared OTP/PIN/password.
Whether customer delayed complaint.
Whether transaction was authorised or unauthorised.
Whether bank can prove customer liability.

This is why the first written bank complaint is critical.

Police Investigation in Cyber Fraud

A proper cyber fraud investigation may involve:

Bank account trail.
UPI handle trace.
Mobile number KYC.
IP logs.
Device identifiers.
SIM ownership.
Beneficiary bank accounts.
Mule account holders.
Wallet details.
App/website/domain information.
CCTV at ATM withdrawal points.
IMEI and device data.
Platform data from WhatsApp/Telegram/social media.
Freezing of suspect accounts.
Arrest and recovery.

The victim’s complaint should help the investigation by giving exact transaction details.

Account Freezing in Cyber Fraud Cases

In cyber fraud cases, police often freeze recipient accounts and mule accounts. This usually happens under Section 106 BNSS, which permits seizure of property suspected to be stolen or connected with an offence and requires reporting to the Magistrate.

Victims should request the IO to:

Freeze recipient accounts.
Mark lien on disputed amount.
Trace onward transfers.
Seek bank nodal responses.
File report before Magistrate.
Support release of frozen victim funds through court process.

Where money is frozen in a beneficiary account, the victim may require a Magistrate order for release.

Documents Required for Cyber Fraud Complaint

Prepare the following:

Written complaint.
ID proof of victim.
Bank statement.
Transaction screenshot.
UPI transaction ID.
Reference number/UTR.
SMS alerts.
Email alerts.
Screenshots of chats.
Phone numbers used by fraudsters.
Links/URLs/apps downloaded.
Website/domain details.
Telegram/WhatsApp/Instagram handles.
Bank complaint acknowledgement.
1930 complaint acknowledgement.
Cyber portal acknowledgement.
Any call recordings, where lawfully available.
Timeline of events.

A clean, chronological complaint increases the chances of proper FIR registration and investigation.

Legal Notice to Bank in Cyber Fraud Cases

A legal notice may be appropriate where:

Bank refuses to register complaint.
Bank delays action.
Bank fails to provide complaint acknowledgement.
Bank alleges customer negligence without proof.
Bank does not share transaction trail.
Bank fails to act despite prompt reporting.
Bank rejects refund claim mechanically.
Bank violates RBI customer-protection norms.

The notice should rely on RBI’s customer-protection framework and demand investigation, provisional credit where applicable, written findings, and escalation to the nodal officer.

RBI Ombudsman Remedy

If the bank does not resolve the complaint, the victim may approach the RBI Integrated Ombudsman mechanism. RBI’s FAQ links unauthorised electronic banking transaction complaints with the 2017 limited-liability framework and emphasises prompt reporting by customers.

This remedy is useful where the core dispute is between customer and bank regarding unauthorised transaction, negligence, refund, chargeback or failure of grievance redressal.

Magistrate Remedy if FIR Is Not Registered

If police do not register FIR despite a cognizable cyber fraud, the complainant may consider legal remedies under the BNSS framework, including approaching the senior police authority and then the Magistrate for directions, depending on the facts and forum practice.

The complaint should clearly show:

Cognizable offence.
Financial loss.
Digital evidence.
Accused identifiers.
Bank trail.
Need for police investigation.
Need for freezing accounts.
Urgency.

A vague grievance may be treated as a bank dispute. A properly drafted complaint should show cheating, personation, identity theft, unauthorised access or other offence ingredients.

Civil Recovery Alongside Criminal Complaint

Cyber fraud victims may also consider civil recovery where the beneficiary is identifiable.

Civil remedies may include:

Suit for recovery.
Injunction against withdrawal of funds.
Attachment before judgment, where legally sustainable.
Claim against identifiable mule account holder.
Consumer/banking remedy.
Company/business recovery action.

Criminal complaint helps investigation, but recovery may require separate strategy.

Common Mistakes by Cyber Fraud Victims

Waiting for the bank to “reverse automatically”.
Not calling 1930 immediately.
Filing vague cyber portal complaint.
Not preserving transaction ID.
Deleting chats or call logs.
Not informing bank in writing.
Not taking complaint acknowledgement.
Not following up with cyber cell.
Not requesting account freeze.
Sharing more information with fraudster.
Paying more money for “refund release”.
Installing remote-access apps.
Not escalating to nodal officer/RBI Ombudsman.
Not pursuing FIR in serious cases.

The biggest mistake is delay. Cyber fraud money moves fast.

Do’s After Cyber Fraud

Call 1930 immediately.
File complaint on cybercrime.gov.in.
Inform bank immediately in writing.
Take acknowledgement from bank.
Freeze cards/net banking if needed.
Change passwords.
Preserve screenshots and messages.
Note transaction IDs.
File police complaint/FIR request.
Follow up with cyber cell.
Ask for freezing of beneficiary accounts.
Escalate bank complaint if refund is denied.

Don’ts After Cyber Fraud

Do not delete evidence.
Do not contact fraudster aggressively.
Do not pay “release fee” to recover money.
Do not install any app suggested by unknown caller.
Do not share OTP, PIN, password or screen.
Do not ignore small deductions.
Do not wait for days before reporting.
Do not file incomplete complaint.
Do not rely only on oral bank assurance.
Do not assume police cannot help

Also read Who is Advocate Govind Bali | Fastrack Legal Solutions LLP

Search-Optimised Quick Answers

What is cyber fraud?

Cyber fraud is deception committed through digital means such as UPI, banking apps, websites, social media, fake links, phone calls, messaging apps or computer resources to cause financial or identity loss.

What is the cyber fraud helpline in India?

The national helpline for financial cyber fraud is 1930. It is part of the National Cybercrime Reporting Portal ecosystem.

Where can I file cyber fraud complaint online?

A complaint can be filed on the National Cyber Crime Reporting Portal, operated under I4C, Ministry of Home Affairs.

Which law applies to cyber fraud?

Cyber fraud may attract the Bharatiya Nyaya Sanhita, 2023, including cheating and personation, and the Information Technology Act, 2000, including Sections 66C and 66D.

Can bank refund cyber fraud money?

In unauthorised electronic banking transactions, refund depends on RBI customer-liability rules, prompt reporting, negligence analysis, bank investigation and facts. The burden of proving customer liability lies on the bank.

Frequently Asked Questions

1. What should I do immediately after cyber fraud?

Call 1930, file a complaint on the National Cyber Crime Reporting Portal, inform your bank in writing, preserve transaction details and file a police complaint where a cognizable offence is involved.

2. What is the official cyber fraud helpline in India?

The official national helpline for financial cyber fraud is 1930. I4C states that complaints related to financial cyber fraud can be reported by calling 1930 and later completed on the portal.

3. Which portal is used for cyber crime complaint?

The National Cyber Crime Reporting Portal is the official portal for reporting cybercrime complaints in India.

4. Which sections apply to cyber fraud?

Cyber fraud may involve BNS Section 318 for cheating, BNS Section 319 for cheating by personation, IT Act Section 66C for identity theft, and IT Act Section 66D for cheating by personation using computer resource.

5. Can I get refund from bank after UPI fraud?

Refund depends on whether the transaction was unauthorised, how quickly you reported it, whether negligence is alleged, and whether the bank can prove customer liability. RBI states that the burden of proving customer liability lies on the bank in unauthorised electronic banking transactions.

6. Is FIR compulsory in cyber fraud?

FIR should be pursued where the facts disclose a cognizable offence such as cheating, personation, identity theft, extortion, unauthorised access, forgery or organised financial fraud.

7. Can cyber police freeze fraudster’s bank account?

Police can seek freezing of accounts connected with suspected offence or stolen property under the seizure framework. Under Section 106 BNSS, seizure must be reported to the Magistrate.

8. What evidence is needed for cyber fraud complaint?

Bank statement, transaction ID, UPI reference, screenshots, phone numbers, URLs, app details, emails, SMS alerts, cyber portal acknowledgement and bank complaint acknowledgement should be preserved.

9. What if the bank refuses refund?

Escalate to the bank’s nodal officer and then to the RBI Ombudsman mechanism, while also pursuing cyber complaint and FIR where criminal offences are involved. RBI’s Ombudsman FAQ refers to the limited-liability framework for unauthorised electronic banking transactions.

10. What is the biggest mistake after cyber fraud?

The biggest mistake is delay. Victims should immediately call 1930, notify the bank, preserve evidence and file a proper complaint because fund-freezing and recovery chances reduce with time.

Conclusion

Cyber fraud cases require speed, documentation and legal strategy. The victim should not treat cyber fraud as only a bank complaint or only a police complaint. Both tracks must move together.

The correct first response is: call 1930, file complaint on the National Cyber Crime Reporting Portal, notify the bank in writing, preserve evidence, and pursue FIR or court remedy where required. Legal provisions under the BNS and IT Act allow action against cheating, personation, identity theft and digital fraud. RBI’s customer-protection framework also becomes important where unauthorised electronic banking transactions are involved.

The law can help, but delay helps fraudsters. In cyber fraud, the first 24 hours are often decisive.

Disclaimer

This article is intended for general legal awareness and educational purposes only. It does not constitute legal advice, solicitation, advertisement or creation of an advocate-client relationship. Cyber fraud remedies depend on transaction type, reporting timeline, bank response, FIR status, evidence, customer conduct, police investigation, RBI guidelines, account-freezing status and facts of each case.

Fastrack Legal Solutions

Table of Contents