Losing money to a cyber fraud is frightening — whether it happened through a UPI payment, a fake investment platform, a phishing link, a fake customer-care call, a "digital arrest" scam, an online shopping fraud, or a remote-access app you were tricked into installing. The first few minutes matter far more than most victims realise.
The good news is that India now runs several coordinated systems built specifically to report fraud, trace stolen funds, freeze them, and — where possible — restore money to victims. As of August 2026, this system has also grown: the National Cyber Crime Reporting Portal (NCRP) now includes newer facilities such as the Suspect Repository, Report Suspect, and a dedicated Money Restoration Module, which the government says became functional in April 2026 alongside a new Grievance Redressal module.
This guide is based on the official reporting and recovery infrastructure run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs, the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), and coordinating bodies including RBI, NPCI and the Department of Telecommunications' Sanchar Saathi platform. Portals and eligibility criteria can change — always confirm the current process on the official sites before proceeding.
Visit the Official NCRP Portal →First Rule: Do Not Wait
If money has already been transferred to a fraudster, do not spend hours trying to contact them, negotiate, or recover it yourself. Do this immediately instead:
- Call 1930, the national cyber fraud helpline
- Inform your bank or payment provider
- Report the fraud on cybercrime.gov.in
- Preserve every screenshot, message and transaction record
- Do not delete anything, even if it seems irrelevant
I4C's CFCFRMS connects law enforcement with banks, payment intermediaries and wallets to help stop fraudulent funds from moving further. Government guidance keeps stressing the "golden hours" after a fraud — the sooner it's reported, the better the chance of tracing and freezing the money.
The Core Step-by-Step Process
Call 1930 Immediately
This toll-free national helpline for financial cyber fraud is available across states and UTs. Keep ready: your name and mobile number, the amount lost, date and time, the bank/UPI ID involved, the recipient's details if known, and any screenshots or messages. The goal isn't just registering a complaint — it lets CFCFRMS alert banks and intermediaries to try to trace and put a lien on the funds.
File a Complaint on the NCRP Portal
After calling 1930, complete your complaint under "Financial Fraud" on the National Cyber Crime Reporting Portal. Save the acknowledgement number the moment you get it — screenshot it and store it safely, since you'll need it for tracking and for the Money Restoration process later.
Notify Your Bank in Writing
Don't assume 1930 is enough. Contact your bank through its official customer-care number, app or branch, and clearly state you are a victim of cyber financial fraud and want it registered as an unauthorised/fraudulent transaction. Ask for a reference number, confirmation that a hold/lien request was initiated, and whether the beneficiary bank has been contacted. If credentials may be compromised, block the card, change passwords and reset your UPI PIN.
Raise a UPI Dispute Too
If the fraud happened via UPI, also raise a complaint through your UPI app's own dispute mechanism (usually under transaction history → report issue/dispute). Keep your UTR/RRN reference number safe — do not delete the transaction SMS or in-app record.
Preserve Every Piece of Evidence
Keep chats, SMS, emails, call records where lawfully available, bank statements, UTR/RRN numbers, the fraudulent website/app/APK, screenshots, QR codes, payment links and any social media profiles involved. Many victims delete this after the panic passes — don't; investigators use even small details to build the fraud trail.
Check the Money Restoration Module
If funds have been frozen in the fraudster's account, use the dedicated Money Restoration portal to raise a refund request. You'll need your 14-digit NCRP acknowledgement ID and OTP verification. You can also track your restoration request online once it's submitted.
Official Channels at a Glance
1930 Helpline
National cyber fraud helpline. Call first to request an urgent fund freeze.
NCRP Portal
cybercrime.gov.in — file your written complaint and get an acknowledgement number.
Suspect Repository
Check identifiers — numbers, UPI IDs, emails — already flagged in past complaints.
Chakshu (Sanchar Saathi)
Report suspicious calls, SMS or WhatsApp messages used to facilitate fraud.
Money Restoration Module
Raise and track a refund request once your complaint shows a held amount.
RBI Complaint Management System
Escalate an unresolved banking-service complaint to the RBI Ombudsman.
RBI SACHET
Report suspicious investment schemes or unauthorised financial entities.
CEIR (Sanchar Saathi)
Block or track a stolen phone by IMEI if the fraud involved device theft.
Each of these has a specific job — use them in the right situation rather than all at once. If money has already been lost, 1930 → your bank → NCRP always comes first; the rest support that core process.
Understanding "Lien" and "Freeze"
You may hear that an amount has been "lien marked," an account "frozen," or funds "put on hold." This does not automatically mean the money has been returned to you — it means it has been located and stopped from moving further while the process continues.
Victim → fraudster account → mule account → another account. The faster a complaint reaches the system, the earlier in that chain the money can be stopped.
CFCFRMS exists specifically to coordinate this tracing between law enforcement and financial institutions before funds move beyond reach.
If Your Situation Is a Bit Different
You Shared an OTP or PIN
Change your bank, email, UPI and social media passwords immediately — starting with any account that shared the same password. Ask your bank to watch for further suspicious transactions; scammers often make a small test transaction before a larger one.
You Installed a Remote-Access App
Common in "digital arrest" and fake tech-support scams. Disconnect the device from the internet, contact your bank from a different, clean device, remove the unauthorised app, and consider a professional device check if sensitive data may have been exposed.
Your Phone Was Stolen
Don't only file a cybercrime complaint — also use CEIR via Sanchar Saathi to block or track the device by IMEI, and inform your mobile operator and bank right away.
It Was an Investment or Loan Scam
Fake trading platforms, "guaranteed return" Telegram groups and processing-fee loan scams call for the same 1930/NCRP report. RBI's SACHET portal is the right place to separately flag the suspicious scheme or entity itself — not a replacement for reporting the fraud.
If Your Bank Doesn't Resolve Your Complaint
First, escalate through the bank's own internal grievance channel, and keep every complaint number, email and reply on file. If a bank, NBFC or other RBI-regulated entity hasn't resolved your complaint satisfactorily — or hasn't responded within about 30 days — you can escalate it through the RBI's Complaint Management System to the Banking Ombudsman.
The RBI Ombudsman route addresses deficiency in service by your bank — it is not a substitute for your cybercrime complaint against the fraudster. Run both in parallel: NCRP/1930 for the crime itself, and bank grievance → RBI CMS for how your bank handled it.
Watch Out for "Recovery Agent" Scams
After reporting a fraud, victims are often targeted again by people posing as cyber police, RBI officials, bank investigators or "recovery agents," offering to get the money back in exchange for a processing fee, GST, a security deposit, or a payment in cryptocurrency. Never pay anyone privately to "unlock" or "recover" funds — if this happens to you, report it to 1930 as a fresh complaint.
A Simple Recovery Checklist
- Called 1930 immediately
- Informed the bank/payment provider and blocked compromised instruments
- Reported the incident on cybercrime.gov.in and saved the acknowledgement number
- Preserved screenshots, messages and transaction records
- Noted the UTR/RRN and raised a UPI/payment dispute where applicable
- Checked the Suspect Repository and reported suspicious contacts via Chakshu
- Checked eligibility on the Money Restoration Module
- Tracked the NCRP complaint and followed up with the bank in writing
- Escalated an unresolved banking complaint via RBI CMS, if needed
- Never paid an unofficial "recovery agent"
The First 30 Minutes
Minutes 0–5: Call 1930
Don't deliberate — call the helpline the moment you realise you've been defrauded.
Minutes 5–10: Contact Your Bank
Get the fraudulent transaction flagged and any compromised instruments blocked.
Minutes 10–20: Collect Evidence
Screenshots, transaction IDs, phone numbers, UPI IDs, and any messages from the fraudster.
Minutes 20–30: File the NCRP Complaint
Complete the online complaint and save your acknowledgement number before you do anything else.
Does It Actually Work?
According to Government of India figures, as of 30 June 2026 more than ₹11,158 crore had been saved across over 32.80 lakh complaints through CFCFRMS, with more than ₹9,079 crore marked under lien and over ₹206 crore refunded to victims between FY 2023–24 and FY 2025–26. These numbers show the system can work — but they are not a promise that every reported loss will be recovered.
The Most Important Message
You can't always prevent being targeted by a scam. But how fast you report it is within your control — and speed is exactly what this system is built to reward.
Don't ask:
Ask instead:
Frequently Asked Questions
What is the very first thing I should do after losing money to cyber fraud?
Call the national cyber fraud helpline 1930 immediately, then inform your bank so it can flag the transaction and block any compromised card, UPI ID or login. Acting within the first hour gives the best chance of the funds being traced and frozen before they're withdrawn.
What is the Money Restoration Module?
It's a facility under the NCRP/CFCFRMS framework, functional since April 2026, that lets victims raise and track a refund request once money linked to their complaint has been frozen in a fraudster's account. It requires your 14-digit NCRP acknowledgement ID and OTP verification, and it's only accessible through the official government portal.
What are the Suspect Repository and Chakshu?
The Suspect Repository lets you check whether a phone number, UPI ID, email or similar identifier has already been flagged in past cybercrime complaints — useful, but not proof of guilt, since it's based on citizen reports and can change quickly. Chakshu, on Sanchar Saathi, is for reporting suspicious calls, SMS or WhatsApp messages used to facilitate fraud — it complements 1930/NCRP but doesn't replace them once money is actually lost.
Is getting my money back guaranteed?
No. Recovery depends on how quickly the fraud is reported and whether the funds can still be traced or frozen before being moved or withdrawn. It is never guaranteed — which is also why you should be very cautious of anyone who promises a guaranteed refund for a fee.
My bank hasn't resolved my complaint — what next?
Escalate through the bank's internal grievance mechanism first. If it's still unresolved, or there's no response within about 30 days, you can take it to the RBI Ombudsman through the RBI's Complaint Management System — separately from, and in addition to, your NCRP/1930 cybercrime complaint.
Our Message
Financial cyber fraud moves fast — your response has to move faster. Knowing the right numbers and portals before you need them is the best preparation there is.
Official Resources
This CyberDefender article has been prepared for cybersecurity awareness and educational purposes, based on the official reporting and recovery infrastructure operated by I4C, the Ministry of Home Affairs, RBI, NPCI and Sanchar Saathi:
- National Cyber Crime Reporting Portal
- Track Your Cybercrime Complaint Status
- I4C Suspect Repository
- NCRP Money Restoration Portal
- Track a Money Restoration Request
- Sanchar Saathi — Chakshu (Report Suspected Fraud)
- CEIR — Block/Track a Stolen Phone
- RBI Complaint Management System
- RBI SACHET Portal
- NPCI UPI Support
Disclaimer: This is an independent CyberDefender awareness article and general information guide, based on publicly available Government of India, I4C, RBI, NPCI and Sanchar Saathi information current as of August 2026. It is not legal advice and is not an official government publication. Processes, portals and eligibility criteria can change — always verify current steps directly on the official sites or with your bank before acting.
Comments
Join the CyberDefender conversation