Asked by a reader in Bengaluru

I lost money to an online scam. What do I do in the first hour?

Answered by Advocate Sharan Jain··Cyber Crime & Online Fraud

Legal Shorts · 72 words

Call 1930 and notify your bank immediately, then complete the complaint on cybercrime.gov.in. Give the transaction number, amount, time and receiving account or UPI ID. Prompt reporting can help the authorities try to stop further movement of the money, but it does not guarantee recovery. Save the messages and payment records, and secure any account the scammer accessed. Ask the bank for a complaint number and written response about your disputed transaction.

Short sources checked:

WhatsApp

With online financial fraud, speed matters more than anything a lawyer can do later. Money moves through mule accounts within hours.

The first hour

  1. Call 1930, the national cyber crime helpline. This is what triggers the request to freeze funds in the receiving account.
  2. File on cybercrime.gov.in and keep the acknowledgement number.
  3. Inform your bank in writing, not only by phone. Email the branch and the grievance officer, describing the transaction and asking for the beneficiary account to be flagged.
  4. Freeze what can be frozen. Block the card, change passwords, disable UPI.
Why the timing matters so much
The freeze request works only while the money is still sitting in the beneficiary account. Once it has been layered onward through several accounts and withdrawn, recovery becomes an investigation rather than a reversal.
The golden hour is real. Money moved by a scammer is layered through mule accounts within hours. Reporting on the national cybercrime helpline 1930 or at cybercrime.gov.in immediately can trigger a hold on the receiving account before the funds move on. Reporting the same fraud three days later usually finds an empty account. Report first, gather documents second. The order matters more than the completeness.

What to preserve

  • Screenshots of the entire chat, call log and any web page, with visible timestamps
  • Transaction IDs, UTR numbers, the beneficiary account or UPI handle
  • The phone numbers and email addresses used by the fraudster
  • The original device, unwiped. Under the Bharatiya Sakshya Adhiniyam, 2023, electronic evidence needs a proper certificate, and that is far easier when the source device still exists

What happens after you report

The helpline call and the portal complaint feed the same system, so do both. The complaint generates an acknowledgement number and a ticket that reaches the bank or wallet holding the beneficiary account, asking it to hold the credited amount. Guard that number: it is dated proof of when you first complained, and every later step is built on that date. Our note on how to report a cyber crime in India sets out the portal fields and what to upload.

Follow it with a written complaint at the police station. In Bengaluru, cyber offences go to the CEN police stations, the Cyber, Economic Offences and Narcotics stations attached to the city's police divisions. If a station says the offence happened elsewhere, ask for a zero FIR: information disclosing a cognizable offence can be recorded irrespective of where it was committed, and the papers are transferred on. If registration is refused, escalate to the Deputy Commissioner of Police and then apply to the Magistrate under Section 175(3) of the Bharatiya Nagarik Suraksha Sanhita, 2023 for a direction to register and investigate.

Your bank's liability

The RBI framework on limiting customer liability in unauthorised electronic transactions matters here. Where the fraud is due to a third-party breach and the customer notifies promptly, liability can be zero or limited depending on the days elapsed. This is precisely why the written notification on the same day is so important. If the bank does not resolve it, the RBI Ombudsman is the next step.

The graded structure is worth stating precisely, because banks state it selectively. Liability is zero where the loss flows from a contributory fraud, negligence or deficiency on the bank's part, and in a genuine third party breach where neither side was at fault, provided you notify within three working days. Notification on the fourth to seventh working day puts you in a limited liability band capped in rupee terms by account type. Beyond that the bank's board approved policy governs. Even where your credentials were shared, you bear the loss only up to the point of reporting. Take the caps and day counts from the directions in force, not from the bank's letter. Our guide on recovering money lost to UPI and bank fraud under the RBI rules works through each limb.

The burden lies on the bank, not on you
The directions say in terms that the burden of proving customer liability in an unauthorised electronic banking transaction lies on the bank. You do not have to prove you were not careless. Put that in the first written complaint, ask the bank to state what material it relies on, and ask by name for the transaction log with timestamps, the device and IP details recorded against each debit, and the alert dispatch log.

If the bank does not resolve it

  1. Escalate in writing to the bank's nodal or principal nodal officer, insisting on a reasoned written reply rather than a call.
  2. After thirty days without a satisfactory response, complain to the RBI Ombudsman under the Reserve Bank Integrated Ombudsman Scheme, 2021. It is free and needs no lawyer.
  3. In parallel, a consumer complaint for deficiency in service, which can carry compensation and costs alongside the refund.

On the "digital arrest" scams

No police officer, no court, no enforcement agency in India conducts an arrest over a video call, demands that you stay on camera, or asks you to transfer money to a "verification account". There is no such procedure. If a call is running along those lines, it is a fraud, and disconnecting is the correct response.

The script is recognisable before it works. A parcel in your name is said to contain contraband, or your Aadhaar to have surfaced in a money laundering case. The call moves to video, a uniform and an official looking notice appear, and you are told to stay on camera, speak to nobody, and move your funds to a "verification" account. Nothing in the criminal procedure statute resembles any of it: an arrest is made in person by an officer who must identify himself, and no agency takes custody of money for verification. Disconnect, call 1930, and warn whoever in the family is likely to be next. Our note on online impersonation and digital arrest frauds sets out the pattern and what to do once money has gone. If you have already paid, do not delete the chat or the app you were made to install, and do not reset the phone; that material is the case.

Sources

The law this answer relies on, so you can read it yourself.

  1. 1.MHA: cybercrime reporting and financial-fraud response, 5 August 2025 Read the source
  2. 2.RBI: liability for unauthorised electronic banking transactions, 6 July 2017 Read the source
  3. 3.National Cyber Crime Reporting Portal: FAQs Read the source
  4. 4.Bharatiya Sakshya Adhiniyam, 2023. Official consolidated text on India Code, the Government of India repository of Central Acts. Read the source
  5. 5.Section 175, Bharatiya Nagarik Suraksha Sanhita, 2023. Bare text of the provision. Read the source
  6. 6.Section 63, Bharatiya Sakshya Adhiniyam, 2023. Admissibility of electronic records, and the certificate. Read the source

The short answer's sources were checked on 12 September 2026. Statutes and judgments can change, so check the current position before you act on anything here.

Nothing there yet? Send the question in and it gets answered here.

Related legal service

Dealing with this yourself rather than reading about it? Our Bangalore advocates work in this area.

Go deeper on this

This answer is the short version. These guides cover the same ground in full, with the procedure, the timelines and the leading cases.

SJ

Answered by

Advocate Sharan Jain

Advocate based in Bangalore, practising before the Karnataka High Court and District, Sessions, Consumer and Family courts. Answers public legal questions to make Indian law more accessible.

This answer is general information on Indian law as at July 24, 2026, published for public education. It is not legal advice, it does not take account of your facts, and reading it does not create an advocate-client relationship. Law changes and every case turns on its own circumstances. Please consult a qualified advocate about your own matter.

People also asked

Consumer Protection

Money was taken from my account fraudulently and the bank says it is my fault. What now?

Report the transaction to the bank immediately and keep the complaint number. RBI's framework distinguishes bank fault, customer negligence and third-party breaches. Zero liability for a third-party breach depends on reporting within the specified period, while sharing credentials can change who bears the loss. Ask for the bank's written investigation and calculation. If unresolved, check the current RBI Ombudsman process and deadlines. Do not assume that reporting cybercrime by itself also counts as notifying your bank.

Cyber & Online Fraud

Someone is harassing and threatening me online. What can I actually do?

Save the full messages, account details and dates, then report the account to the platform and the conduct to the cybercrime portal or police. Threats intended to cause alarm can amount to criminal intimidation under Section 351 BNS. Not every rude message meets that test. Explain the pattern and quote the threats accurately. If you face immediate danger, seek urgent police help. Blocking the account can protect you, but keep an evidence copy first if safe.

Criminal Law & Bail

The police will not register my FIR. What can I do?

A police station cannot turn you away just because the offence happened elsewhere. Section 173 BNSS allows information about a cognizable offence at any station. If the officer refuses to record it, send your complaint in writing to the Superintendent of Police and keep proof of delivery. If that fails, approach the Magistrate with an affidavit-supported application. A limited preliminary inquiry is permitted for specified offences, so first ask whether your complaint was refused or formally taken up for inquiry.

Cyber & Online Fraud

Someone has created a fake social media profile in my name. What do I do?

Capture the fake profile's URL, username and posts, and report it as impersonation. Rule 3(2)(b) of the IT Rules now requires reasonable and practicable removal measures within two hours of a qualifying complaint about electronic impersonation of an individual. State clearly that the account is pretending to be you. If it is asking people for money or threatening them, also report that conduct to the police. Tell your contacts which account is genuine without circulating unnecessary personal documents.

Cyber & Online Fraud

People claiming to be police kept me on a video call and I paid them. What do I do now?

End the call and contact your bank immediately. A demand to stay on video and transfer money for a supposed police verification is a fraud warning, not a reason to keep paying. Call 1930, report on cybercrime.gov.in, and save the transaction IDs, messages, phone numbers and notices they sent. Tell a trusted person what happened. Recovery is not guaranteed, but prompt reporting gives the authorities a chance to act before more money is moved.

Cyber & Online Fraud

Someone has posted private photographs of me online. How do I get them taken down fast?

Use the platform's intimate-content reporting route and write to its grievance officer with the URLs. Rule 3(2)(b), updated in February 2026, requires reasonable and practicable removal measures within two hours of a qualifying complaint. It covers specified intimate imagery and electronic impersonation, including morphed images of an individual. Preserve the links and report the crime separately to police or cybercrime.gov.in. You do not need to wait for a police case before making the platform complaint.

S Jain & Attorneys · Ask Me

Still not the question you had in mind?

Search the column, or send your question in. Questions of general interest are answered here, anonymously, so the next person does not have to ask.