Lost money online? Call 1930 first: the exact order to report UPI and cyber fraud

Short answer: if money has just left your account in a scam, call 1930 before you do anything else. Then block the card or UPI through your bank, and complete the complaint on cybercrime.gov.in. If you're not sure which route fits your case, the who do I call? tool sorts it out in two taps.

Why 1930 comes first

1930 isn't just a complaint line. According to the home ministry's standard operating procedure, the police officer who takes your call logs the transaction as a ticket on the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS). That system connects to banks and payment companies, so they can be alerted to hold the money before it's moved on.

It works at scale. The home ministry says that as of 30 June 2026, more than ₹11,158 crore had been saved through CFCFRMS, across over 32.80 lakh complaints.

The first hour, step by step

1. Call 1930. Tell them the amount, the time, the transaction or UTR number, and the scammer's number or UPI ID if you have it.
2. Save the acknowledgement. You'll get a 14-digit acknowledgement number by SMS (sender “XXNCRP”), with instructions.
3. Block the channel through your bank. Use the number in your bank's official app, on its website or on the back of your card. Never use a number from a search ad or a social media comment.
4. Complete the complaint on cybercrime.gov.in with the acknowledgement number. Upload screenshots, the UTR and any chat or call records.
5. Raise the transaction in your UPI app too, if the payment went through UPI.

Fraud vs a failed payment: different doors

The UPI order comes from NPCI's dispute redressal mechanism: complain first in the app you used, then escalate to the PSP bank, then your own bank, then NPCI. After that, you can go to the RBI Ombudsman.

Will I get my money back? What RBI's rules say

RBI's 2017 directions on unauthorised electronic transactions set out who bears the loss:

• Zero liability if the bank was at fault, whether or not you reported it.
• Zero liability if the breach was neither your fault nor the bank's, and you report it within 3 working days of getting the bank's alert.
• Limited liability if you report it within 4 to 7 working days. Beyond 7 days, the bank's board-approved policy applies.
• If you shared your credentials (OTP, PIN, password), you bear the loss until you report it to the bank. Anything lost after you report is the bank's responsibility.

This is why reporting quickly matters twice over: once to get the money held, and again for your liability.

If the bank stalls: RBI Ombudsman

Under the RBI Integrated Ombudsman Scheme, 2026, complain to the bank first. If it doesn't reply within 30 days, or you're not satisfied with its answer, file for free at cms.rbi.org.in. RBI's contact centre on 14448 explains the process and gives complaint status. Its IVR runs 24x7, and agents are available 8 AM–10 PM, Monday to Saturday. It can't register complaints for you.

Three habits that prevent most of this

• Nobody genuine asks for your OTP or UPI PIN. You only need your PIN to send money, never to receive it.
• Check payments in your bank app, not on a screenshot. “Fake payment” screenshots are a common trick on sellers.
• Don't install apps a caller asks for. Screen-sharing apps let scammers watch you type your PIN.

KyunTrend isn't a law-enforcement agency. For legal advice on a specific case, speak to the police or a lawyer.