NiyamamAI

Home › Legal guides › Money & fraud

Money gone from your UPI or bank account: the first hour decides it

3 November 2026 · 5 min read · By the Niyamam AI team

There is no polite way to put this: with online fraud, the money is recovered by freezing it before it is withdrawn — not by a case filed next week. Almost everything that decides the outcome happens in the first few hours, and most of it is yours to do.

Do these four things now, in this order

  1. Call 1930, the National Cyber Crime Helpline, and give the transaction details.
  2. Register the complaint at cybercrime.gov.in and keep the acknowledgement number.
  3. Tell the bank at once — by phone and in writing. Ask them to freeze the beneficiary account and to raise a chargeback where that applies. Keep the ticket or complaint number.
  4. File a complaint at your local police station or the district Cyber Police Station. In Kerala, cybercrime is handled by the Cyber Police Stations and the Cyber Division.

Why the clock matters so much

Under the RBI's limited liability rules for unauthorised electronic transactions, a customer who reports promptly and is not at fault generally bears no loss, and the bank must credit the disputed amount within the period the rules allow. Delay in reporting increases the customer's share of the loss. In other words, the date on your report is itself a legal fact — which is exactly why the written complaint to the bank, with a ticket number, is worth the five minutes it takes.

If the bank sits on it

If your complaint is not resolved within 30 days, escalate to the RBI Ombudsman at cms.rbi.org.in. It is free, and it is online.

The law being used

Cheating is punishable under BNS section 318, and cheating by personation — the fake customer-care caller, the fake officer — under BNS section 319. Computer-related offences, identity theft and the publishing of obscene material fall under the Information Technology Act, 2000, including sections 43, 66, 66C, 66D and 67.

Collect this while it still exists

  • Screenshots of the transaction
  • The UPI transaction ID or UTR number
  • Your bank statement
  • The phone number, app or link the fraudster used
  • SMS and call records
  • The 1930 or portal acknowledgement number

Two things worth repeating

Never share an OTP, PIN, CVV or screen-sharing access with anyone. A bank will never ask for them. And loan-app harassment belongs on the same portal: recovery agents who threaten or shame a borrower can be reported to the police and to the RBI.

This guide is legal information, not legal advice, and reading it creates no advocate–client relationship. Laws change and every case turns on its own facts. For anything serious, consult an advocate — and if you cannot afford one, the District Legal Services Authority will give you a lawyer free of cost.

Ask about your own situation

Niyamam AI answers questions like this in Hindi, Malayalam or English. Describe what happened in your own words and it explains the law, the steps and the deadlines that apply to you.

Get Niyamam AI on Google Play