If you are wondering how to recover money from online fraud, the single most important thing to know is that speed decides the outcome. The moment you realise money has left your account, call the national cyber-crime helpline 1930 and file a complaint at the National Cyber Crime Reporting Portal. If you act within the first hour — often called the golden hour — your bank and the receiving bank can place a hold on the funds before the fraudster withdraws them.
This guide explains the practical steps, the legal framework under the Information Technology Act, 2000 and the Reserve Bank of India (RBI) customer-protection rules, and what realistically happens to your money after you report. It is general information, not legal advice; verify any current limit, timeline or section number before you rely on it.
What "online financial fraud" covers
Online financial fraud is any deception carried out using a computer, phone or the internet that causes you to lose money. Common forms include:
- UPI and wallet frauds (fake collect requests, QR-code scams, "wrong transfer" refund tricks)
- Phishing and vishing (fake bank calls, KYC-update links, OTP theft)
- Fraudulent investment, trading, "task" and loan-app schemes
- Card-not-present (CNP) fraud and SIM-swap attacks
- Fake customer-care numbers and remote-access app scams
The recovery mechanism is broadly the same across all of them: stop the money, report it, and let the banking and law-enforcement systems trace and freeze it.
How to recover money from online fraud: the step-by-step process
The recovery system in India works as a chain — you → your bank → the cyber-crime system → the receiving bank. The faster each link reacts, the more likely the money is frozen before it is cashed out.
Step 1 — Report within the golden hour
The golden hour is the short window — practically the first 60 minutes to a few hours — between the debit and the point where the fraudster moves the money out of the receiving account. The earlier the alert reaches the receiving bank, the better the chance of a hold.
Do two things immediately and in parallel:
- Call 1930 (the national cyber-crime helpline) and register the transaction details, or file online at cybercrime.gov.in.
- Inform your bank through its fraud-reporting channel and ask them to flag the transaction.
When you report, the portal generates an acknowledgement number. Keep it — your bank, the police and any court will ask for it.
Step 2 — Alert your bank and freeze the channel
Your bank is a central player. Under the RBI framework on limiting customer liability in unauthorised electronic banking transactions, prompt reporting directly affects how much of the loss you must bear (more on this below). When you contact the bank:
- Report the unauthorised transaction in writing (email or the in-app complaint, not just a phone call) so you have a dated record.
- Ask them to block the card, UPI ID or net-banking access used.
- Request that they raise the dispute with the receiving (beneficiary) bank so a hold can be placed.
Step 3 — How the lien / hold on the money works
Once a complaint is logged, the system tries to place a lien — a legal hold — on the disputed amount in the fraudster's account so it cannot be withdrawn. The receiving bank marks the funds, the money stays put while the matter is examined, and on the strength of a complaint and, where needed, a court or police direction, it can be reversed to you.
A lien is not the same as getting your money back instantly. It is a freeze. The actual refund usually follows either the bank's own dispute resolution, a direction from the cyber-cell, or an order from a court or adjudicating authority. The lien simply ensures there is still money left to return.
Step 4 — File the formal cyber-crime complaint / FIR
Filing on the portal or calling the helpline is your first report. For a full investigation you may also need a written complaint or FIR at the local cyber police station. The relevant offences typically draw on:
- Information Technology Act, 2000 — e.g., Section 43 (damage to a computer system), Section 66 (computer-related offences), Section 66C (identity theft), and Section 66D (cheating by personation using a computer resource).
- The general penal law on cheating and fraud — historically the Indian Penal Code (IPC), now substantially re-enacted as the Bharatiya Nyaya Sanhita (BNS), 2023; the corresponding procedure shifts from the CrPC to the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023. Section numbers changed in the new codes — confirm the exact provision before citing it.
Step 5 — Track, follow up and escalate
- Track your portal complaint and respond to any request for documents.
- If the bank does not resolve the dispute, escalate to its internal ombudsman and then to the RBI Ombudsman under the Reserve Bank's Integrated Ombudsman Scheme.
- Where the amount is large or the bank is unresponsive, a lawyer can help with a legal notice, a complaint to the adjudicating officer under the IT Act, or a civil/criminal action.
A simple action checklist (first 24 hours)
| Time after you notice | What to do | Why it matters |
|---|---|---|
| 0–15 minutes | Call 1930; note the acknowledgement number | Triggers the freeze chain at the receiving bank |
| 0–60 min (golden hour) | Report in writing to your bank; block card/UPI | Maximises chance of a lien before cash-out |
| Within 3 days | File full complaint on cybercrime.gov.in with evidence | Protects you under RBI limited-liability rules |
| 3–7 days | FIR / written complaint at cyber police station if needed | Enables formal investigation |
| Ongoing | Track complaint; escalate to bank ombudsman / RBI | Keeps pressure on for the refund |
How much can you actually recover? (RBI customer-liability rules)
Under RBI's directions on limiting the liability of customers in unauthorised electronic banking transactions, your liability depends largely on how fast you report and whose fault caused the loss.
| Situation | Typical customer liability |
|---|---|
| Loss due to the bank's negligence or a system fault | Zero — even if you have not reported |
| Third-party breach (no fault of bank or customer), reported promptly | Zero, if reported within the prescribed days |
| Reporting delayed beyond the window | Liability rises with the delay; may be partial or full |
| Loss due to your own negligence (e.g., you shared OTP/PIN) | You may bear the loss until you report it |
These are simplified illustrations. The exact zero-liability window, per-transaction caps and the treatment of negligence are set by the RBI circular and the bank's board-approved policy — verify the current numbers, as they are revised from time to time.
Evidence to preserve
Recovery and prosecution are only as strong as your records. Keep:
- SMS/email debit alerts and the exact transaction time and amount
- The UPI reference / transaction ID and the beneficiary VPA or account details
- Screenshots of the fraudulent message, link, app or call log
- Any payment receipts and your written complaint to the bank
- The cyber-crime portal acknowledgement number and FIR copy
When to involve a lawyer
You can do the first steps yourself — speed matters more than legal help in the golden hour. Consider professional advice when: the amount is significant; the bank denies a clearly unauthorised transaction; the fraud crosses states or borders; or you need to pursue the adjudicating officer under the IT Act or the RBI Ombudsman. Our team explains how these remedies fit together on the cyber-crime law practice page.
For related reading, see our guide on how to report cyber crime in India. You can also report directly through the Government of India portal at cybercrime.gov.in.
Frequently Asked Questions
How quickly should I report online fraud to recover my money?
Immediately — ideally within the golden hour (the first hour). Call 1930 or report at cybercrime.gov.in and tell your bank in writing at once, because a hold can only work if money is still in the fraudster's account.
What is the 1930 helpline?
1930 is the national cyber-crime helpline number. Calling it registers your complaint in the system that alerts banks to freeze the disputed funds. It works alongside the portal at cybercrime.gov.in.
What is a lien on the fraud money?
A lien is a legal hold placed on the disputed amount in the receiving account so the fraudster cannot withdraw it. It freezes the money while your complaint is examined; the refund follows through the bank, cyber-cell or a court order.
Will my bank refund the money automatically?
Not always. If the loss is due to the bank's fault you generally bear zero liability. For third-party fraud, your liability depends on how promptly you reported, under RBI's limited-liability rules. Report in writing and keep the acknowledgement.
Which laws apply to online financial fraud?
Mainly the Information Technology Act, 2000 (Sections 43, 66, 66C, 66D) and the general cheating provisions now under the Bharatiya Nyaya Sanhita, 2023 (formerly the IPC), with procedure under the BNSS, 2023 (formerly the CrPC). Verify exact sections before relying on them.
What if my bank ignores my complaint?
Escalate in writing to the bank's grievance/ombudsman cell, then to the RBI Ombudsman under the Integrated Ombudsman Scheme. You may also approach the adjudicating officer under the IT Act or take legal action.
Can I recover money sent through UPI by mistake or to a scammer?
You can try. Report the transaction to your bank and on 1930/cybercrime.gov.in immediately so a hold can be sought on the beneficiary account. Recovery is far more likely if you act before the money is withdrawn.
This article is for general informational purposes only and does not constitute legal advice. Laws change and every situation is different; please consult a qualified advocate about your specific matter.
