FRAUD RESPONSE
Cyber fraud: pause before paying, act quickly if money is lost
General education for India · Reviewed
Fraud often succeeds by creating pressure rather than by breaking complex technology. An urgent KYC threat, a supposed police investigation or a message from a fake investment group can make an ordinary transfer feel unavoidable. Being deceived is not a reason to delay asking for help.
Recognise the pattern
- Account or KYC scare: an unexpected caller threatens to block an account unless you open a link, install an app or disclose a code.
- "Digital arrest" demand: someone posing as an official orders you to stay on a video call, keep the matter secret or transfer money for verification. Do not pay. End the contact and independently verify it through official channels.
- Investment or task bait: early rewards or an attractive on-screen balance lead to demands for larger deposits, withdrawal taxes or unlock fees. A dashboard is not proof that real, withdrawable assets exist.
- Refund or mistaken-transfer pressure: a stranger sends a screenshot and asks you to return money, scan a QR code or approve an action. Check your own account and contact your bank before responding.
CERT-In's Preventing Online Scams advisory describes these impersonation and payment-pressure patterns. The examples above are warning signs, not a claim that every unexpected message is fraudulent.
If you suspect financial cyber fraud, act now
- Contact your bank or payment provider immediately through its official fraud channel. Report the transaction, ask it to block affected payment access and prevent further loss, and retain the complaint reference and time. Use a different trusted device if you suspect yours is under remote control.
- Call 1930 and report at cybercrime.gov.in. Follow the official instructions to complete the complaint and keep its acknowledgement number. Do not wait for a bank investigation to finish before reporting cyber fraud.
- Preserve evidence. Keep transaction references, dates, amounts, recipient details, phone numbers, URLs and relevant messages or screenshots. Store them privately for the bank and authorities. Do not publish identity documents or account details in a social-media appeal.
- Secure affected accounts. Stop remote access, change compromised credentials from a trusted device and review unfamiliar sessions. Avoid wiping messages or resetting the device before asking the investigating authority how to preserve evidence.
The Ministry of Home Affairs confirms the I4C reporting system, National Cyber Crime Reporting Portal and 1930 helpline in its 11 February 2026 reporting update. Reporting promptly may help intervention; it does not guarantee recovery. If the portal is unavailable, use 1930, your bank's official channel and local police, and complete the online report when possible.
Do not assume that every loss will be reimbursed
RBI's commercial-bank rules for unauthorised electronic banking transactions distinguish bank fault, certain third-party breaches and customer negligence. Reporting time matters. The often-quoted three-working-day zero-liability protection applies to specified third-party breaches, not automatically to every scam or transfer a person was deceived into approving. Ask your bank which current rules and complaint process apply to your case, and keep its written response. Do not wait for any deadline before reporting. RBI Commercial Banks: Responsible Business Conduct Directions, updated 1 October 2026, explain these distinctions in Chapter IV, paragraphs 66–71. Other provider categories have their own applicable directions.
Avoid a second loss
Treat anyone promising guaranteed recovery for an advance fee, OTP or remote access as another warning sign. Use only independently verified official channels. For investment-related services, check the actual entity and registration details on SEBI's investment-adviser register. A copied registration number or logo does not establish that a caller represents the registered firm.
A useful next step: save the official reporting address and talk through this checklist with a family member. Build everyday digital safeguards before the next urgent message arrives. This is educational guidance, not a determination of liability or legal advice. Reviewed 11 November 2026.
General education, not personal investment, insurance, tax or legal advice. Examples are not quotes or promises. Check current rules and seek qualified help where needed.