What to Do If You Are a Victim of Online Financial Fraud in India

Online financial fraud is one of the fastest-growing crimes in India. Whether you have lost money to a phishing scam, a fake UPI request, an investment scheme promising experienced legal help returns, or an impersonated bank call, the shock of discovering the fraud is often followed by confusion about what to do next. This guide walks you through every practical step — from the first hour after the fraud to long-term legal remedies — so you can act quickly and protect whatever can still be protected.

Understanding Online Financial Fraud Under Indian Law

Indian law addresses online financial fraud through several overlapping statutes. The Information Technology Act, 2000 (IT Act) covers offences such as identity theft (Section 66C), cheating by personation using a computer resource (Section 66D), and data theft. The Bharatiya Nyaya Sanhita, 2023 (BNS), which replaced the Indian Penal Code from 1 July 2024, criminalises cheating (Section 318), cheating by personation (Section 319) and criminal breach of trust (Section 316). The Payment and Settlement Systems Act, 2007 and Reserve Bank of India (RBI) circulars govern unauthorised electronic transactions. The Consumer Protection Act, 2019 may apply where a fraudster posed as a seller or service provider. Understanding which law applies to your situation helps you file the right complaint in the right forum.

Step 1 — Act Within the First 60 Minutes

Time is critical. Most banks and payment platforms can freeze or reverse a fraudulent transaction if notified quickly enough. The moment you realise you have been defrauded, do all of the following immediately:

• Call your bank's 24-hour helpline and report the unauthorised transaction. Ask them to place a hold or raise a chargeback request. Note the complaint reference number.
• Dial the National Cyber Crime Helpline — 1930. This is a toll-free number operated by the Ministry of Home Affairs. Operators coordinate with banks and payment gateways in real time to freeze funds before they are transferred further.
• Change all passwords and PINs for your banking apps, UPI IDs, email and linked accounts immediately.
• Do not switch off your phone or delete any messages — screenshots, call logs and transaction IDs are potential evidence.

Tip: The 1930 helpline is most effective within the first few hours of a transaction. Even a short delay can allow fraudsters to move money across multiple accounts and out of reach.

Step 2 — Preserve All Evidence

Before you file any complaint, collect and preserve the following evidence in its original form:

• Screenshots of the fraudulent transaction, including the transaction ID, UTR number, date and time
• Bank statements or UPI app screenshots showing the debit
• All SMS messages, WhatsApp messages or emails from the fraudster
• The phone number, email address or website URL used by the fraudster
• Any fake documents, receipts or investment certificates you received
• A detailed timeline of events written down while memory is fresh

Store copies both digitally (cloud backup) and as printed hard copies. Evidence gaps are one of the most common reasons complaints stall.

Step 3 — File a Complaint on the National Cyber Crime Reporting Portal

Visit the National Cyber Crime Reporting Portal at cybercrime.gov.in. This is the official portal of the Ministry of Home Affairs and accepts online complaints 24 hours a day. Select 'Financial Fraud' under the category of cyber crimes. You will be asked to provide your personal details, a description of the incident, the fraudster's contact details and supporting documents. After submission, you receive an acknowledgement number that you can use to track your complaint.

For a detailed walkthrough of the portal, read the guide on how to report cyber crime in India.

Tip: If you are not comfortable using the portal, visit your nearest police station and ask for the cyber crime cell. They are required to register your complaint and forward it to the appropriate authority.

Step 4 — File an FIR at the Police Station

An FIR (First Information Report) is a formal criminal complaint. Under the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS), every police station must register a zero FIR for cognisable offences regardless of territorial jurisdiction — you do not have to go to the station in the fraudster's area. Offences under Section 318 and Section 66D are cognisable.

Carry printed copies of all your evidence. If the station refuses to register an FIR, you can send a written complaint by registered post to the Superintendent of Police (SP) of the district, or approach a Judicial Magistrate under Section 175 of the BNSS, who can direct the police to register the case.

An FIR number is essential for bank reimbursement claims, insurance claims, and for pursuing civil remedies later.

Step 5 — Escalate to Your Bank and the RBI Ombudsman

Under the RBI's Framework for Limited Liability of Customers in Unauthorised Electronic Payment Transactions (2017 circular), if an unauthorised transaction occurs due to negligence by the bank or a third party (and not due to your own fault), you may be entitled to full reimbursement. Even in cases of partial customer negligence, liability may be capped.

Lodge a formal written complaint with your bank. If the bank does not resolve it within 30 days, escalate to the RBI Integrated Ombudsman Scheme. You can file this complaint through the RBI's Complaint Management System (accessible via the RBI's official website). The Ombudsman can direct reimbursement of amounts up to ₹20 lakh in most cases at no cost to you.

Step 6 — Approach the Consumer Forum if a Service Provider Was Involved

If the fraud involved a registered e-commerce platform, a payment gateway, or a financial service provider who was negligent in preventing the fraud or refused to help after it occurred, you may have a remedy under the Consumer Protection Act, 2019. File a complaint with the District Consumer Disputes Redressal Commission (DCDRC) for claims up to ₹50 lakh, the State Commission for claims up to ₹2 crore, or the National Consumer Disputes Redressal Commission for claims above ₹2 crore.

You can file online at edaakhil.nic.in or call the National Consumer Helpline at 1915 for guidance. Filing fees vary by claim amount and state but are generally modest.

If you were defrauded while shopping online, the guide on online shopping fraud complaints explains the consumer forum process in detail.

Step 7 — Use the Centralised Public Grievance Redress Portal

If a government-regulated entity such as a bank, insurance company or regulated investment platform has not responded adequately, you can raise a grievance on the Centralised Public Grievance Redress portal. This portal routes complaints to the relevant ministry or department and tracks resolution timelines.

Emerging Fraud Types: Deepfakes and Voice Clones

Fraudsters increasingly use AI-generated deepfakes and voice clones to impersonate bank officials, family members or employers to extract money. These offences fall under Section 66D of the IT Act (cheating by personation using a computer resource) and Section 66C (identity theft). The evidentiary and investigative challenges are higher in such cases. Read more about deepfakes, voice clones and the new fraud to understand how these scams work and what legal tools exist.

Common Mistakes That Weaken Your Case

• Deleting messages or call records — these are primary evidence and must be preserved
• Waiting too long to call 1930 — the freeze window is narrow
• Not getting a written acknowledgement from the bank or police — always ask for a reference number in writing
• Paying 'recovery agents' who approach you after the fraud — many are secondary fraudsters
• Filing only on the cyber crime portal and not with the police — both are needed for a strong case
• Disclosing OTPs or PINs to anyone claiming to be from your bank — legitimate bank staff never ask for these

Realistic Timelines and Costs

Criminal investigation timelines vary significantly by state and the capacity of the local cyber crime cell. An FIR can be registered immediately; investigation may take months to years. RBI Ombudsman complaints are typically resolved within 30 to 90 days. Consumer forum cases at the district level average 3 to 6 months for straightforward matters, though complex cases take longer. Filing complaints on government portals is free. Consumer forum fees vary by claim amount but are generally low. Retaining an advocate for court proceedings involves professional fees that vary by city and complexity.

For data on the volume and types of cyber crimes reported across India, the National Crime Records Bureau publishes annual crime statistics that give useful context.

When to Consult a Qualified Advocate

You do not need a lawyer to file a complaint on the cyber crime portal or call 1930. However, you should consult a qualified advocate if: the amount involved is substantial; the police are not registering your FIR; you need to approach a court; the fraud involves cross-border elements; or you wish to pursue civil damages alongside the criminal complaint. A cyber law advocate can also advise you on evidence preservation, whether to invoke the IT Act or BNS (or both), and the strongest forum for your specific facts.

You can ask a legal question to get general guidance, browse advocates by city and practice area, or search answered questions on cyber law to see how similar situations have been addressed.

Also consider reading about digital identity, financial risk and legal exposure to understand the broader legal landscape of online financial life in India.

This guide is general legal information, not legal advice. Laws and procedures may vary by state and change over time. Consult a qualified advocate for advice specific to your situation.

Step-by-Step Process