Lost Money to a UPI Scam? Freeze Your Account and File a Complaint in the First Hour
UPI fraud money can sometimes be recovered if you act within the first hour. Call your bank's fraud helpline immediately to block the account, then dial 1930, the cyber crime helpline, which can request the receiving account be frozen before the money is withdrawn. File on cybercrime.gov.in the same day, and consider an FIR for larger amounts.
The First Hour Decides a Lot
The moment you realise money has left your account through UPI and you did not authorise it, the clock starts working against you. Fraudsters move stolen funds through multiple accounts within minutes, sometimes seconds, precisely because they know most victims spend the first hour in shock, calling family, refreshing the bank app, or arguing with the person who tricked them. That hour is the one you actually have leverage in. Use it on freezing the account and filing complaints, not on trying to reason with the scammer.
Call Your Bank Before Anything Else
Every bank has a dedicated fraud or dispute helpline, and it is usually printed on the back of your debit card or listed on the bank's app under "report unauthorised transaction." Call it immediately and ask them to block the account or card and flag the specific transaction as fraudulent. Do not wait to see if the money "comes back" on its own. Ask for a complaint reference number and note down the time you called, this becomes important later if the bank drags its feet.
If you used a UPI app like Google Pay, PhonePe, or Paytm, report the transaction inside the app too. Most of these apps have a "report fraud" option attached to the transaction itself, and that report gets routed to your bank, and escalated through NPCI's dispute redressal mechanism if the bank can't resolve it.
Dial 1930, the Cyber Crime Helpline
This number exists specifically for financial fraud and connects to a system that can request banks to freeze the receiving account before the money gets layered across multiple wallets. Speed matters here more than paperwork. When you call 1930, keep your transaction ID, the amount, the time of the transaction, and the UPI ID or phone number of the person you paid ready. The operator will guide you through freezing the funds if they have not already been withdrawn.
File on cybercrime.gov.in the Same Day
Right after or even while you are on the call with 1930, log a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. This is separate from the FIR and separate from your bank complaint, and it creates an official record that investigators and your bank's fraud team can both reference. Upload screenshots of the transaction, the UPI reference number, and any chat or call record with the scammer if you have one. Keep the acknowledgement number the portal gives you, you will need it for every follow-up.
When You Also Need an FIR
For larger amounts, or if the bank or 1930 team tells you the case needs formal police action, go to your local police station or cyber crime cell and file an FIR under the relevant provisions dealing with cheating and computer-related offences. Carry your bank statement, the cybercrime.gov.in acknowledgement, and any evidence of the fraudulent request or fake link that led to the transaction. An FIR is often what makes a bank take a reimbursement claim seriously, and it is usually required if you plan to pursue the matter legally or through insurance.
What RBI's Rules Actually Protect
The RBI has laid out rules that limit how much liability falls on a customer when a transaction is unauthorised and reported promptly, with the level of protection tied to how quickly you notify your bank after noticing the fraud. The exact timelines and liability caps get updated from time to time, so rather than quote a number here that might be outdated by the time you read this, the practical advice is simple: report the moment you notice something wrong, in writing to your bank, and ask them directly what liability window applies to your case. Delay is the one thing that consistently works against you regardless of what the current rule says.
If the Bank Goes Quiet
If your bank hasn't responded within thirty days, or you're unhappy with the response, you can escalate to the Reserve Bank - Integrated Ombudsman Scheme, 2021 (RB-IOS). The process is free, does not need a lawyer, and can be filed online through the RBI's complaint management portal using your original complaint reference number as proof that you gave the bank a fair chance first.
A Word on Staying Calm Enough to Act
Scam victims often lose more time to panic and embarrassment than to the scam itself. Nobody at the bank or the cyber cell is going to judge you, they see this daily. Write down the timeline while it is fresh: when the payment happened, when you noticed, when you called whom. That timeline is often the single most useful document in the entire recovery process.
If you are unsure which step applies to your situation, whether it needs an FIR, how to word your Ombudsman complaint, or how to deal with a bank that is stalling, Vaksy can connect you with a verified advocate who will walk through your specific case with you, in your own language. Sometimes an hour with the right person saves weeks of chasing the wrong department.
Any Online Money Fraud, Not Just UPI? Here's the General Complaint Process
Everything above works the same way if the fraud happened through net banking, a card transaction, a digital wallet, or any other online payment method, not just UPI. The steps don't change: call your bank or card issuer's fraud helpline immediately and ask them to block the account or flag the transaction, dial 1930 so the cyber crime helpline can request a freeze on the receiving account before the money gets layered further, and file a complaint on cybercrime.gov.in the same day so there's an official record. For larger amounts, or if you're told the case needs formal police action, an FIR follows the same route described above.
If your bank doesn't resolve things within thirty days, the RBI's Integrated Ombudsman Scheme applies regardless of which payment method the fraud used. What changes across different types of online fraud is how the money moved, not what you need to do about it.
Get this reviewed for your case. General guides don't know your state, your facts, or your deadline. Vaksy matches you with a verified advocate on the platform who can review your situation and draft what you need, in your own language.