Frauds
Where to report financial fraud in India, and in what order
Lost money to a scam? Call 1930, tell your bank, then file in writing. Who handles what, and the RBI deadlines that decide what you get back.
- Reviewed by
- Shravya Mishra
- Published
When money disappears from an account, people lose time working out who to call. Each of the places below handles a different part of the problem, and doing them in the right order matters: some of the protections depend on how quickly you act.
1. If money has already gone: call 1930
Call 1930, the national cyber crime helpline, or report the fraud online at cybercrime.gov.in. The Department of Telecommunications gives the same instruction on its Sanchar Saathi portal: if you have already lost money, report it at 1930 or cybercrime.gov.in.
Have these ready before you call, so the report is complete the first time:
- the date and time of each transaction, and the amount
- the transaction reference (UTR or transaction ID) from your bank SMS or app
- the account number, UPI ID or wallet the money went to
- screenshots of the messages, calls, links or app that were used
2. Tell your bank at once, and keep proof that you did
Report the unauthorised transaction to your bank through its official app, website or helpline, and keep the complaint number. The RBI requires banks to give customers a way to report unauthorised transactions, including a direct link for such complaints on the home page of the bank's website.
How quickly you report changes how much you may have to bear. For fraud that was neither your fault nor the bank's, the RBI's rules work like this, counted from when you receive the bank's message about the transaction:
| When you tell the bank | What you may have to bear |
|---|---|
| Within 3 working days | Nothing |
| In 4 to 7 working days | The transaction amount or a fixed cap, whichever is lower: ₹5,000 for a basic savings (BSBD) account; ₹10,000 for other savings accounts, prepaid instruments, and credit cards with a limit up to ₹5 lakh; ₹25,000 for credit cards above ₹5 lakh and some current accounts |
| After 7 working days | Whatever the bank's board-approved policy says |
If the bank itself was at fault, you bear nothing, whenever you report it. If the loss happened because you shared your credentials, such as an OTP or PIN, you bear the loss up to the moment you report it, and the bank bears anything after that. That is why the call to your bank should not wait until tomorrow.
Once you have told it, the bank must put the money back in your account within 10 working days, dated as of the day of the fraud, and resolve your complaint within 90 days.
3. Put the complaint in writing on cybercrime.gov.in
If you called 1930 first, also file a written complaint on the National Cyber Crime Reporting Portal, which has a separate option for financial fraud and lets you track the complaint afterwards. The portal also lets anyone:
- check a suspect: search the government's repository of phone numbers, UPI handles, websites and other identifiers already linked to cyber crime
- report a suspect: add website addresses, WhatsApp numbers, Telegram handles, phone numbers, email addresses, SMS headers or social media links used by a fraudster
4. If your bank does not resolve it: the RBI
If your complaint to the bank is not resolved, you can take it to the Reserve Bank's Integrated Ombudsman through its Complaint Management System at cms.rbi.org.in. The same page carries a warning worth remembering on its own: never respond to "Request money" options from unknown sources. Approving a payment request sends money out of your account; it does not bring any in.
5. Fake calls, messages and links: Chakshu
You do not need to have lost money to report a fraud attempt. On the Department of Telecommunications' Chakshu service (on the Sanchar Saathi portal) you can report suspected fraud calls, SMS and WhatsApp messages, as well as suspicious links received by SMS, email or social media. For links, the department asks that you report within 30 days of receiving them so that action can be taken.
6. A company took your deposit: RBI Sachet
If a company took money from you as a deposit or scheme and has not paid it back, or was never allowed to collect it, use the RBI's Sachet website at sachet.rbi.org.in. You can check whether an entity is registered with a regulator and permitted to accept deposits, and file and track a complaint. Before you hand over money to a scheme promising returns, checking there first takes a minute.
7. A broker, adviser, mutual fund or listed company: SEBI SCORES
Complaints about a SEBI-regulated entity, such as a stockbroker, an investment adviser, a mutual fund or a listed company, go to SEBI's complaint system, SCORES, at scores.sebi.gov.in. You register using your KYC details, then choose the entity and the nature of the complaint. SEBI says grievances sent by email to its addresses are not taken up, so use the portal.
The short version
- Money gone: call 1930 or file at cybercrime.gov.in.
- Tell your bank immediately and keep the complaint number. Within 3 working days is what counts.
- File the full complaint in writing on cybercrime.gov.in.
- Bank not helping: cms.rbi.org.in.
- Suspicious call, SMS or link: Chakshu, within 30 days for links.
- Deposit scheme: Sachet. Broker, adviser or fund: SCORES.
Where to report a fraud
If money has already left your account, call first and write later.
National Cybercrime Helpline
Call 1930For UPI, card, net-banking and other online fraud. If money has already gone, call first. Then tell your bank at once: under RBI rules, how much you may bear depends on how quickly you report it.
National Cybercrime Reporting Portal
cybercrime.gov.inTo file a written complaint online, with screenshots and transaction details.
RBI Sachet
sachet.rbi.org.inTo check whether a company is allowed to take deposits, and to report one collecting money without permission.
SEBI SCORES
scores.sebi.gov.inFor complaints about brokers, investment advisers, mutual funds and listed companies.
Common questions
Does calling 1930 replace telling my bank?
No. Tell your bank as well, straight away. Under the RBI's rules, how much of an unauthorised electronic transaction you may have to bear depends on how quickly you notify your bank.
I shared my OTP or PIN. Can I still get the money back?
The RBI's rules say that where a loss is caused by the customer's own negligence, such as sharing payment credentials, the customer bears the loss until the transaction is reported to the bank, and the bank bears any loss after that. Banks may also choose to waive a customer's liability even where the customer was negligent. Report it immediately either way.
How long does my bank have to act?
Once you notify it, the bank must credit the amount involved to your account within 10 working days, dated as of the day of the fraud, and must resolve the complaint within 90 days. If it cannot resolve it within 90 days, it must pay the compensation the RBI's rules set out.
Where do I complain about a broker or a mutual fund?
On SEBI's complaint system, SCORES, at scores.sebi.gov.in. SEBI says complaints sent by email to its addresses are not taken up.
Sources
- Department of Telecommunications: Sanchar Saathi: Chakshu, report suspected fraud communication
- Indian Cyber Crime Coordination Centre, Ministry of Home Affairs: National Cyber Crime Reporting Portal
- Reserve Bank of India: Customer Protection: Limiting Liability of Customers in Unauthorised Electronic Banking Transactions (RBI/2017-18/15, 6 July 2017)
- Reserve Bank of India: Complaint Management System, Reserve Bank Integrated Ombudsman Scheme
- Reserve Bank of India: RBI launches website 'Sachet' to curb illegal collection of deposits
- Securities and Exchange Board of India: SCORES: SEBI Complaint Redress System
This is general information for education, not investment, tax or legal advice. Rules and rates change; check the official source before acting. Read the full disclaimer.
Spotted a mistake? Tell us.