What To Do Immediately After Online Fraud in India: A Practical Citizen’s Guide

 By Adv. Amarjeet Singh | Founder, PRAN – Policy Research Action Network Foundation

A phone call comes claiming to be from your bank. A message says your KYC will expire. Someone sends a QR code and asks you to “receive money.” Within minutes, money disappears from your account.

Unfortunately, this is no longer rare in India. From students and salaried employees to shopkeepers and senior citizens, cyber frauds are affecting ordinary people every day. Many victims panic, delay reporting, or do not know where to seek help. In several cases, immediate action can help stop or recover fraudulent transactions.

This article explains, in simple language, what citizens should do immediately after online fraud, where to complain, and what legal protections and remedies are available.

Common Types of Online Frauds in India

Fraudsters often create panic, urgency, or fear to manipulate victims. Some of the most common scams include:

• OTP and banking frauds
• Fake KYC update calls
• UPI and QR code scams
• Screen-sharing app frauds
• WhatsApp impersonation & Telegram job scams
• Digital arrest & sextortion blackmail

The First 30 Minutes Are Extremely Important

If online fraud happens, do not panic — act quickly.

Step 1: Call Cyber Helpline 1930 Immediately

India’s national cyber fraud helpline is 1930. This is one of the most important steps. The faster you report, the higher the possibility of freezing the transaction, tracing the fraud route, or stopping further transfers.

 

Keep ready before you call: Mobile number, bank details, transaction details, time of fraud, and screenshots.

 

Step 2: Inform Your Bank (The "Golden Window")

Call your bank’s customer care to block suspicious transactions and freeze your compromised cards or UPI. Always send a written complaint through email, your banking app, or the branch complaint system to create a paper trail.

Step 3: File a Complaint on the National Cyber Crime Portal

Citizens can file a detailed complaint at Upload screenshots, payment details, transaction IDs, phone numbers of the scammers, and chat records. Do NOT delete any digital footprint of the scam.

The RBI "3-Day Zero Liability" Rule

Most citizens are unaware that the Reserve Bank of India (RBI) provides strict protections for victims under its July 2017 circular. Your liability depends on how fast you report the fraud:

• Report within 3 Working Days: If you report a third-party fraud (where neither you nor the bank is at fault) to your bank within 3 working days, your liability is ZERO. The bank must credit the disputed amount back to your account (a "shadow reversal") within 10 working days.
• Report within 4 to 7 Working Days: Your liability is capped (usually between ₹5,000 to ₹25,000 depending on your account type).
• Report after 7 Days: Liability is determined by the bank’s board-approved policy.

Important exception for negligence: If the fraud occurred because you shared your OTP, PIN, or password, you will bear the loss until the moment you report it to the bank. However, the bank is liable for any unauthorized transactions that occur after you have reported the fraud.

How to Actually Get Frozen Money Back from the Court

If the cyber police successfully freeze the scammer's bank account (a "mule account") with your money inside, the money does not automatically bounce back to you. You must claim it through the court system.

Under the new Bharatiya Nagarik Suraksha Sanhita (BNSS), here is the procedure:

1. The Freeze: The police freeze the funds under Section 106 of the BNSS and report the seizure to the local Magistrate.
2. The Application: You (or your advocate) must file an application before the Jurisdictional Magistrate under Section 497 or 503 of the BNSS (formerly Sections 451/457 of the CrPC) for the interim release of the frozen funds.
3. The Evidence: The court will review your FIR, bank statements, and the police report to confirm you are the rightful owner. You may be asked to sign an indemnity bond (a promise to return the money if another legal claim arises later).
4. The Release Order: The Magistrate will then issue a release order directing the bank to transfer the frozen amount back into your account.

 

Where Else Can Citizens Seek Help?

Authority/Platform	Best Used For
RBI Ombudsman (cms.rbi.org.in)	Unauthorized transactions, banking negligence, and complaint non-resolution (if the bank fails to resolve your complaint within 90 days).
Consumer Commission	Cases involving service deficiency, institutional negligence, or unfair trade practices.

 

Important Safety Tips for Citizens

❌ NEVER	✅ ALWAYS
Share OTPs, PINs, or screen-sharing access.	Verify numbers independently.
Click suspicious links via SMS/Email.	Use official apps and websites.
Scan a QR code to "receive" money.	Enable bank transaction alerts.

 

Digital Rights Are Citizen Rights

As India rapidly becomes digital, citizens need awareness, accessible grievance systems, accountability, and practical legal guidance. Cyber safety is not only a technology issue — it is a public rights issue affecting dignity, privacy, finances, and trust. Greater public awareness can prevent countless citizens from becoming victims.

Where Citizens Can Get More Information

Official Government & Regulatory Resources

• National Cyber Crime Reporting Portal Official Government of India portal for reporting cyber crimes and online financial frauds.
• Website: [suspicious link removed]
• National Cyber Crime Helpline For immediate reporting of online financial frauds.
• Helpline Number: 1930
• Note: Citizens should report fraud as quickly as possible, especially during the “golden hour,” when chances of freezing transactions are higher.
• Reserve Bank of India (RBI) Complaint System For complaints relating to banks, digital payments, unauthorized transactions, and banking service deficiencies.
• RBI CMS Portal: https://cms.rbi.org.in
• RBI Sachet Portal: https://sachet.rbi.org.in
• Indian Cyber Crime Coordination Centre (I4C) Nodal initiative under the Ministry of Home Affairs relating to cybercrime coordination and awareness.
• Website: https://www.i4c.mha.gov.in
• NPCI UPI Dispute Redressal Useful for certain UPI/payment-related grievances.
• Website: [suspicious link removed]

Important Laws & Regulatory Frameworks

Citizens may refer to:

• Information Technology Act, 2000
• Bharatiya Nyaya Sanhita (BNS), 2023
• Digital Personal Data Protection Act, 2023
• RBI Guidelines on Unauthorized Electronic Banking Transactions
• RBI Digital Payment Security Directions

 

 

Navigating Cyber Police Stations (Cyber Thanas)

While dialing 1930 is the immediate first step, severe frauds often require a physical First Information Report (FIR) and detailed investigation.

What is a Cyber Police Station?

To handle the technical complexities of digital fraud, state governments have established specialized Cyber Police Stations equipped with cyber forensics labs and trained IT personnel.

• State Infrastructure: As an example, in Haryana, dedicated "Cyber Thanas" operate in every district headquarters (including Rohtak, Hisar, and Gurugram). Similarly, Delhi Police operates dedicated District Cyber Police Stations across all its districts. Citizens in any state can find their local unit through their respective State Police website.

When should you visit a Cyber Police Station?

You should approach a specialized cyber unit rather than a regular police station if the fraud involves:

• Large financial losses (thresholds vary by state, but generally above ₹1–2 Lakhs).
• Complex hacking, corporate data theft, or ransomware.
• Severe cases of identity theft, sextortion, or organized job scams.

(Note: For smaller financial frauds or immediate halting of transactions, the Cyber Help Desk at your regular neighborhood police station is fully equipped to assist).

What to Carry When Visiting the Station:

When visiting a Cyber Thana, do not go empty-handed. Print and carry the following in a physical file to ensure your complaint is registered without delay:

1. A Written Complaint: Addressed to the Station House Officer (SHO), Cyber Police Station, detailing the chronological sequence of events.
2. The 1930 Acknowledgement: The reference number received from the National Cyber Crime Portal or the 1930 helpline.
3. Bank Statements: Officially stamped by your bank (if possible), highlighting the specific fraudulent debit entries.
4. Digital Evidence (Printed): Screenshots of WhatsApp chats, SMS logs, fake websites, or UPI IDs used by the scammer.
5. ID Proof: A self-attested copy of your Aadhaar or PAN card.

About PRAN Foundation

PRAN – Policy Research Action Network Foundation works on public-interest awareness, governance, accountability, legal literacy, and citizen rights issues. The Foundation aims to promote practical legal and digital awareness for ordinary citizens through research, outreach, and public-interest initiatives.

• Website: https://www.publicrightaction.org

Disclaimer: This article is intended for public awareness and informational purposes only and does not constitute formal legal advice. Citizens should seek appropriate professional or legal assistance depending upon the specific facts of their case.