Quick take: If money has been lost through a UPI, card, wallet, banking, investment-app or other online financial fraud, act immediately. Call 1930, the national cybercrime helpline, and report the incident through the National Cybercrime Reporting Portal (NCRP) at cybercrime.gov.in. The government’s Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) is designed to enable rapid coordination with banks and financial intermediaries and help prevent further movement of fraudulent funds. (Cyber Crime Portal)
This is not the consumer helpline 1915 and it is not an RTI process.
The Golden Hour: Don't Wait
If you've just discovered an unauthorised transaction, your first priority is speed, not a perfect explanation.
Do this first
1. Call 1930 immediately.
2. Contact your bank/payment provider through its official channel.
3. Preserve the transaction details and evidence.
4. File/complete the complaint on the NCRP.
The official cybercrime portal specifically directs victims of cyber financial fraud to call 1930 for immediate reporting. The helpline operates 24×7. (Cyber Crime Portal)
The reason for acting quickly is practical: CFCFRMS is intended to help prevent fraudulent funds from being siphoned onward and enables coordination between police, banks and financial intermediaries. (Ministry of Home Affairs)
Do not wait until tomorrow to see whether the transaction reverses.
Call 1930: What Information Should You Have Ready?Don't waste time writing a long story.
Keep these details in front of you:
- Your mobile number
- Your name
- Bank/wallet/payment provider
- Account or wallet details relevant to the transaction
- UPI ID, if applicable
- Transaction ID/UTR
- Date and time of transaction
- Amount lost
- Card details, where relevant
- Screenshots of the transaction
- Suspect phone number, UPI ID, website or app, if available
Government instructions for financial cyber-fraud reporting specifically identify transaction information, the bank/wallet/merchant, transaction date and supporting screenshots among the information that may be required. (Cyber Crime Portal)
Write down your acknowledgement number
If you receive a complaint/reference number, save it immediately.
Take a screenshot.
Send it to yourself by email or save it somewhere you can retrieve later.
File the Complaint on cybercrime.gov.inGo directly to:
National Cyber Crime Reporting Portal
The portal currently provides separate routes for:
- Financial Fraud
- Other Cyber Crime
- Crimes involving women/children
- Complaint tracking
- Reporting suspicious identifiers such as phone numbers, URLs, email IDs and social-media accounts. (Cyber Crime Portal)
For a UPI or banking scam, select the Financial Fraud route.
Be precise
Include:
What happened → when it happened → amount → transaction ID → account/UPI involved → how the fraudster contacted you → evidence.
Don't exaggerate.
Don't guess.
A clean factual timeline is more useful than a five-page emotional description.
What Does "Freeze the Money" Actually Mean?This phrase is often misunderstood.
When people say:
"Call 1930 and freeze your money."
it can sound as though the government can simply reverse the transaction.
That's not guaranteed.
CFCFRMS is designed to enable rapid reporting and coordination with banks and financial intermediaries to prevent the further movement of fraudulent funds. MHA describes the system as being designed to stop fraudsters from siphoning off funds as quickly as possible. (Ministry of Home Affairs)
Depending on what happened, investigators and financial institutions may be able to place a hold on funds or take other action.
But:
Reporting quickly ≠ guaranteed refund.
The final outcome depends on the transaction trail, whether the money remains traceable, the institutions involved and the investigation.
Your Evidence PackBefore deleting anything or resetting your phone, preserve the evidence.
Save:
- Bank SMS
- Bank statement
- UPI transaction screenshot
- UTR/transaction ID
- UPI ID
- Phone numbers
- WhatsApp chats
- Telegram conversations
- Emails
- Website URLs
- Investment-app details
- Screenshots of the scammer's profile
- Call logs
- Payment links
- QR codes
- Screenshots of advertisements
- Any documents sent by the fraudster
Don't edit screenshots
Keep the original files where possible.
If you need to highlight something for your own explanation, make a copy and retain the original.
The Bank Call Is Also ImportantCalling 1930 should not mean ignoring your bank.
After reporting the fraud:
Contact the bank/payment provider using its official app, website or phone number.
Tell them:
"This is an unauthorised/fraudulent transaction. I have reported it to 1930/NCRP. Please register the fraud complaint and provide the complaint/reference number."
If your card, net banking credentials or UPI credentials may have been compromised, ask the bank what immediate security action is required.
Don't use a phone number supplied by the scammer.
If You Installed AnyDesk, TeamViewer or a Suspicious APKThis needs a slightly different response.
If a supposed:
- bank employee
- customer-care executive
- courier agent
- police officer
- investment adviser
- telecom employee
asked you to install remote-access software or an APK, assume the device may be compromised until checked.
Immediately:
- Disconnect from the internet if appropriate.
- Don't continue communicating with the scammer.
- Contact your bank through an official channel.
- Change important passwords from a trusted device.
- Review banking/payment applications.
- Remove suspicious applications where safe to do so.
- Consider professional device/security assistance if the compromise is unclear.
- Report the financial loss to 1930/NCRP.
Don't let the scammer remain connected while you're trying to recover the money.
What If No Money Was Lost?You can still report cybercrime.
The NCRP isn't limited to financial fraud. The portal provides an Other Cyber Crime route for incidents that don't involve a financial loss. (Cyber Crime Portal)
Examples can include:
- Cyberstalking
- Account compromise
- Impersonation
- Morphing
- Certain online harassment
- Suspicious websites
- Other cyber offences
For an emergency or a crime outside the cybercrime portal's scope, the portal directs citizens to the appropriate local emergency/police channels. (Cyber Crime Portal)
You Can Also Report Suspicious Numbers and WebsitesEven if you haven't lost money, the NCRP currently provides a Report Suspect facility.
It can accept reports involving identifiers such as:
- Website URLs
- WhatsApp numbers
- Telegram handles
- Phone numbers
- Email IDs
- SMS headers/numbers
- Social-media URLs. (Cyber Crime Portal)
The portal also provides a Suspect Repository that allows citizens to search certain identifiers for possible links with reported cybercrime. (Cyber Crime Portal)
This is useful when you encounter a suspicious investment website, fake customer-care number or similar scam infrastructure.
Don't Get Scammed a Second TimeThis happens frequently after the original fraud.
Someone contacts you saying:
"We are from cybercrime."
Then:
"Your money has been recovered."
Then:
"Pay ₹5,000 processing fee."
Or:
"Send an OTP so we can release the frozen funds."
Stop.
A person contacting you after your complaint is not automatically an official recovery agent.
Never hand over:
- OTPs
- UPI PIN
- ATM PIN
- Net-banking password
- Card CVV
- Remote access
- Cryptocurrency
- "Release fees"
- "Verification deposits"
Verify everything independently through the official portal, bank or police channel.
The Scam Doesn't End When You File the ComplaintAfter reporting, keep your records organised.
Create one folder containing:
01 — Bank statement
02 — Transaction screenshots
03 — NCRP/1930 acknowledgement
04 — Chats and emails
05 — Suspect numbers/UPI IDs
06 — Bank complaint
07 — Police/case documents, if any
This makes subsequent communication much easier.
If the Complaint Isn't MovingThe NCRP provides State/UT nodal and grievance officer information. The portal says complainants who used its Report & Track facility can contact the relevant State/UT nodal or grievance officer if the response is not appropriate. (Cyber Crime Portal)
So keep your complaint/reference number.
Don't start a completely new explanation every time.
Refer back to:
Original complaint → acknowledgement → transaction ID → bank complaint → subsequent communication.
Your 30-Minute Cyber-Fraud PlanTimeAction0–5 minStop communicating with scammer; secure access if compromised5–10 minCall 193010–15 minCollect transaction IDs, UTR, screenshots and bank details15–20 minFile/complete NCRP complaint20–25 minContact bank/payment provider through official channel25–30 minSave acknowledgement numbers and evidence
The exact sequence can vary depending on the incident, but the principle is simple:
Report fast. Preserve evidence. Secure the account. Follow the official trail.
The One Screenshot Every Family Should SaveSave this somewhere accessible:
CYBER FINANCIAL FRAUD
Call 1930 immediately
Report: cybercrime.gov.in
Keep ready:
- Transaction ID/UTR
- Amount
- Date/time
- Bank/UPI/wallet
- Screenshots
- Suspect phone/UPI/URL
Never share OTP, PIN or passwords with a caller claiming to recover your money.
The official NCRP currently identifies 1930 as the national cybercrime helpline and specifically directs immediate reporting of cyber financial fraud. (Cyber Crime Portal)
How NetaSampark Helps
Cyber fraud is an individual emergency, but the reporting system involves banks, payment intermediaries, police and national cybercrime infrastructure.
The most useful citizen habit is knowing where to report and what information to preserve before the trail disappears.
For financial cyber fraud:
1930 → NCRP → Bank → Evidence → Follow-up
Use official channels first.
Be Informed. Be Heard.
Information checked against the National Cyber Crime Reporting Portal and Ministry of Home Affairs/I4C material. Recovery of fraudulent funds is not guaranteed; rapid reporting is intended to improve the ability of the system to trace or hold fraudulent proceeds.