Asked by a reader in Bengaluru

I lost money to an online scam. What do I do in the first hour?

Answered by Advocate Sharan Jain··Cyber Crime & Online Fraud Law

Short answer

Report on the national cyber crime helpline 1930 and at cybercrime.gov.in immediately, and notify your bank in writing the same day. The first few hours are when funds can still be frozen in the receiving account.

With online financial fraud, speed matters more than anything a lawyer can do later. Money moves through mule accounts within hours.

The first hour

  1. Call 1930, the national cyber crime helpline. This is what triggers the request to freeze funds in the receiving account.
  2. File on cybercrime.gov.in and keep the acknowledgement number.
  3. Inform your bank in writing, not only by phone. Email the branch and the grievance officer, describing the transaction and asking for the beneficiary account to be flagged.
  4. Freeze what can be frozen. Block the card, change passwords, disable UPI.
Why the timing matters so much
The freeze request works only while the money is still sitting in the beneficiary account. Once it has been layered onward through several accounts and withdrawn, recovery becomes an investigation rather than a reversal.

What to preserve

  • Screenshots of the entire chat, call log and any web page, with visible timestamps
  • Transaction IDs, UTR numbers, the beneficiary account or UPI handle
  • The phone numbers and email addresses used by the fraudster
  • The original device, unwiped. Under the Bharatiya Sakshya Adhiniyam, 2023, electronic evidence needs a proper certificate, and that is far easier when the source device still exists

Your bank's liability

The RBI framework on limiting customer liability in unauthorised electronic transactions matters here. Where the fraud is due to a third-party breach and the customer notifies promptly, liability can be zero or limited depending on the days elapsed. This is precisely why the written notification on the same day is so important. If the bank does not resolve it, the RBI Ombudsman is the next step.

On the "digital arrest" scams

No police officer, no court, no enforcement agency in India conducts an arrest over a video call, demands that you stay on camera, or asks you to transfer money to a "verification account". There is no such procedure. If a call is running along those lines, it is a fraud, and disconnecting is the correct response.

Nothing there yet? Send the question in and it gets answered here.

Related legal service

Dealing with this yourself rather than reading about it? Our Bangalore advocates work in this area.

SJ

Answered by

Advocate Sharan Jain

Advocate based in Bangalore, practising before the Karnataka High Court and District, Sessions, Consumer and Family courts. Answers public legal questions to make Indian law more accessible.

This answer is general information on Indian law as at July 24, 2026, published for public education. It is not legal advice, it does not take account of your facts, and reading it does not create an advocate-client relationship. Law changes and every case turns on its own circumstances. Please consult a qualified advocate about your own matter.

People also asked

Consumer Protection

Money was taken from my account fraudulently and the bank says it is my fault. What now?

RBI's framework on unauthorised electronic transactions gives you zero liability where the fraud is due to a third-party breach and you notify the bank promptly, and limited liability if you delay. Escalate to the bank's nodal officer, then the RBI Ombudsman, which is free.

Cyber & Online Fraud

Someone is harassing and threatening me online. What can I actually do?

Preserve the evidence, report to the platform's grievance officer, and file on cybercrime.gov.in or at the police station. Stalking, including online stalking of a woman, is an offence under Section 78 of the Bharatiya Nyaya Sanhita, and criminal intimidation and obscene material carry their own provisions.

Criminal Law & Bail

The police will not register my FIR. What can I do?

Registration of an FIR is mandatory where the information discloses a cognizable offence, per Lalita Kumari. If the station refuses, send the complaint in writing to the Superintendent of Police, and if that fails, apply to the Magistrate under Section 175(3) BNSS for a direction to register and investigate.

Cyber & Online Fraud

Someone has created a fake social media profile in my name. What do I do?

Report it to the platform as impersonation, which most remove quickly with ID proof, and file on cybercrime.gov.in. Identity theft is an offence under Section 66C and cheating by personation under Section 66D of the IT Act, and cheating by personation is also Section 319 BNS.

Cyber & Online Fraud

Someone has posted private photographs of me online. How do I get them taken down fast?

The IT Rules require intermediaries to remove non-consensual intimate imagery within 24 hours of a complaint. Report to the platform and on cybercrime.gov.in, which has a dedicated women and children reporting channel that allows anonymous complaints. Voyeurism and publishing such material are serious offences.

Cyber & Online Fraud

A company keeps using my personal data. What rights do I have under the new data law?

The Digital Personal Data Protection Act, 2023 gives you rights to access, correction, erasure and grievance redressal. But it is being switched on in stages: the Rules were notified in November 2025 and the core obligations and enforceable rights only commence in May 2027, so today the practical remedies still lie elsewhere.

S Jain & Attorneys · Ask Me

Still not the question you had in mind?

Search the column, or send your question in. Questions of general interest are answered here, anonymously, so the next person does not have to ask.