Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
Your money left your account through a UPI transaction you genuinely made — but only because a scammer tricked you into it. A fake QR code, a fake customer care call, a screen-sharing app installed “to help fix an issue” — UPI fraud comes in a few very specific, very common shapes. Recognizing which one happened to you is the first step to actually getting your money back.
The common thread: your UPI PIN should never be needed to receive money, and no genuine bank or company will ever ask for your PIN or OTP over a call.
Most UPI apps (GPay, PhonePe, Paytm) have a “Report Fraud” or “Dispute Transaction” option directly on the transaction. Use it immediately — it flags the transaction and the recipient’s account on the app’s own system.
India’s cyber fraud helpline can request an urgent freeze on the funds sitting in the fraudster’s account before they’re withdrawn or moved further. Have the UTR number, amount, and time of the transaction ready.
Go to cybercrime.gov.in and file a formal complaint under “Report Financial Fraud.” This creates an official record and acknowledgment number, and routes to the relevant cybercrime cell.
Separately from the cybercrime portal, email your bank’s fraud/dispute department. Reporting within 3 working days matters — it can determine how much of your liability, if any, the bank is required to cover under RBI’s rules.
Save your acknowledgment number and bank complaint reference. Check status periodically — a written follow-up after a few weeks of silence often helps move things along.
One thing worth being extremely cautious about: scammers sometimes follow up a fraud with a second scam, calling victims while posing as bank officials, cybercrime police, or “refund processing” agents, asking for more OTPs or personal details “to help recover your money.” No genuine investigator or bank representative will ever ask for this over a call — treat any such request as an immediate red flag.
While you wait for a resolution, it also helps to gather everything in one place: screenshots of the fraudulent messages or calls, the transaction’s UTR number, and a simple written timeline of exactly what happened and when. Organized evidence tends to move investigations along faster than a scattered set of screenshots handed over piecemeal.
With all of that in hand, here’s a quick comparison of exactly where each complaint channel helps most:
| Channel | Best For |
|---|---|
| 1930 Helpline | Immediate action to try and freeze the funds right after the fraud |
| cybercrime.gov.in Portal | A formal, trackable complaint record needed for investigation and any bank dispute |
| Your Bank (in writing) | Limiting your liability under RBI's unauthorised-transaction rules |
File the cybercrime complaint online — it automatically routes to the cybercrime cell with jurisdiction based on your bank details, so you don’t need to figure out which police station to approach. Your bank complaint goes to their dedicated fraud/dispute department, usually reachable through the same customer care number as any other banking issue.
No. Calling 1930, filing on cybercrime.gov.in, and writing to your bank are all free. Costs only arise later if you need a lawyer — for example, if the bank denies liability despite you reporting on time, or the investigation stalls and needs a formal push.
Yes, for the reporting and initial recovery attempt — the helpline, portal, and bank complaint are all built for self-service. Consider involving a lawyer if:
Need professional legal help with this?
Find a Lawyer on VidyodayIf your transaction actually just shows “Failed” with the money not yet reversed — rather than genuinely sent to a scammer — that’s a different, non-fraud issue; see our guide on UPI payment failed but money debited instead.
No, scanning alone can’t — but completing the payment flow it opens (which often defaults to a “pay” screen disguised as a receive confirmation) and entering your PIN can. Always check the amount and direction before entering your PIN.
Not guaranteed — it depends heavily on how fast you report and whether the funds are still traceable. Reporting within the first hour meaningfully improves the odds.
Uninstall it immediately, and separately change your UPI PIN, net banking password, and any other passwords you may have entered while it was active, then follow the reporting steps above.
There’s no fixed limitation period for filing itself, but act within hours — the ability to freeze funds drops sharply the longer money sits untouched in the fraudster’s account.
You can still file — the investigation uses the transaction trail (UTR, IFSC, account details) on the backend to identify the actual account and account holder, even if the display name was fake.
It depends on the specifics and how quickly you reported — RBI’s rules on liability distinguish between different circumstances, so this is exactly the kind of case worth reporting immediately rather than assuming you won’t be covered.
Yes — you should do both. They serve different purposes: 1930 for speed/freezing funds, the portal for a formal trackable record.
That’s very likely a secondary scam — genuine investigators will never ask for OTPs, PINs, or passwords over a call. Don’t share anything and verify independently through the official portal.
This article is for general information only and does not constitute legal advice. Fraud patterns and reporting procedures can change — verify current guidance on cybercrime.gov.in or with your bank before relying on this for a real case.
