Lost Money to Cyber Fraud? What to Do in the First Hour

If money has just left your account because of a scam, it is normal to feel panic, embarrassment or anger. Try to set those aside for one hour. What you do in that first hour matters more than anything you do later.

Here is what to do, in order, and an honest picture of what to expect afterwards.

Step 1: Call 1930, or report at cybercrime.gov.in

Do this first and do it immediately. 1930 is the national cyber fraud helpline, and cybercrime.gov.in is the online reporting portal. When you report, you get an acknowledgement number. Write it down and keep it safe, because you will need it later.

Step 2: Tell your bank

Also inform your bank straight away. Use the number in your bank's official app, on your card or on the bank's own website. Tell them what happened, which transactions you did not authorise, and ask them to block the card or account if needed.

Step 3: Keep the evidence

Take screenshots before anything gets deleted:

• the messages, calls or links that led to the fraud
• the transaction IDs and amounts
• your 1930 or cybercrime.gov.in acknowledgement number
• any reference number your bank gives you

Step 4: Use the right channel

Chakshu, on the Sanchar Saathi portal, is for reporting suspected fraud calls and SMS. It is useful, but it is not the place to report money you have already lost. If you have lost money, use 1930 or cybercrime.gov.in.

Why speed matters: what the official numbers say

According to the Ministry of Home Affairs (PIB, 22 July 2026), by 30 June 2026 more than ₹11,158 crore had been saved across more than 32.80 lakh complaints through the 1930 helpline and its reporting system, CFCFRMS. Banks are connected to this system through APIs, so money can be blocked quickly once a complaint comes in.

It is important to understand what "saved" means here. It means the money was stopped before it reached the fraudsters. Getting that money back into the victim's account is a separate, slower process.

The same release shows the gap. Between FY24 and FY26:

• more than ₹56,087 crore was reported lost
• more than ₹9,079 crore was frozen (lien-marked)
• only a little more than ₹206 crore had been refunded so far

Since April 2026, modules for restoring money to victims and for handling complaints about frozen accounts have been running. But the honest picture is this: reporting quickly gives you the best chance of the money being stopped, and getting it back can still take time.

One example of what fast reporting can do

The Hindu reported on 3 September 2026 that a man in Chittoor, Andhra Pradesh, saw ₹2,22,054 charged to his credit card minutes after installing a fake app. He called his bank and 1930 immediately. The cyber cell stopped the transactions and the full amount was returned within two days.

That is one case, not a promise. Many cases take much longer, and some money is never recovered. But it shows why the first hour matters.

Your rights with your bank: the RBI rules

The RBI's 2017 circular on unauthorised electronic banking transactions (RBI/2017-18/15, dated 6 July 2017) sets out how much of the loss you may have to bear. How it applies depends on how the fraud happened, so ask your bank how your case is being classified.

• Zero liability: if the unauthorised transaction was a third-party breach and you inform the bank within 3 working days of receiving the bank's alert.
• Limited liability: if you report it within 4 to 7 working days, your liability is capped at ₹5,000 for basic savings accounts, ₹10,000 for other savings accounts, and ₹25,000 for premium accounts, credit cards and some other account types.
• Shadow reversal: the bank must credit the amount to your account within 10 working days of being notified.

The circular also sets a time limit for the bank to resolve your complaint. These timelines depend on when you inform your bank, which is one more reason to call your bank in the first hour and keep a record of when you did.

Changes coming in 2027

The RBI issued amendment directions on 24 June 2026. They apply to transactions from 1 January 2027, so they do not cover a fraud that happens today. Broadly, they widen what counts as fraud, require faster handling, and provide compensation for small frauds.

Do not become part of the chain

Fraudsters move stolen money through "mule" accounts that belong to other people. The Indian Cyber Crime Coordination Centre (I4C) has warned people not to sell or rent out their bank accounts, because funds that pass through such accounts can lead to arrest. If anyone offers you money to use your account, say no.

Your first-hour checklist

1. Call 1930 or report at cybercrime.gov.in. Note the acknowledgement number.
2. Call your bank using its official number. Ask for the card or account to be blocked if needed.
3. Screenshot the messages, links, transaction IDs and reference numbers.
4. Write down the time you informed the bank.
5. Do not engage further with the fraudster, and do not pay anyone who promises to "recover" your money.

The bottom line: report first, to 1930 and your bank, and keep every record. Fast reporting gives you the best chance of the money being stopped, even if getting it back takes longer. To spot the next attempt early, read our guide to common UPI and phone scams, or check a suspicious message with the free Scam Checker.