To report a cyber financial fraud in India, call the 1930 helpline immediately and file the complaint on the National Cybercrime Reporting Portal at cybercrime.gov.in. Speed is the whole point: 1930 can push a hold request to the recipient bank before the money is layered onward into further accounts. Keep the acknowledgement number safe — every later step, including any freeze placed on your own account, is tracked against that reference.
Police stations are increasingly declining to deal directly with account holders on release. The practice now reported across several units is that a station will not issue an NOC or a release confirmation to an individual customer, and will point them to the bank instead. Requests routed through the investigating officer, which used to be the standard path, are being returned.
The sequence that works now:
- The bank first. A written request to your branch and to the bank's nodal grievance officer, asking the bank to run its own Enhanced Due Diligence on the disputed credit and to record a grievance reference. Ask for the freeze reference, the issuing authority, the disputed amount and whether the restriction is a lien, a debit freeze or a full freeze.
- CPGRAMS against the bank if the branch stonewalls or the grievance is closed without reasons — filed against the bank through the Department of Financial Services, not against the police. This is the step most people skip, and it is the one that produces a written answer.
- A legal notice where the bank has an answer but will not act on it, or where a lien exceeds the disputed sum.
- Court only after that record exists. A magistrate or writ court reads a documented refusal very differently from a first approach.
If the disputed credits relate to a gaming, betting or gambling platform, do not run this yourself. The exposure there is different in kind — the questions reach the source of funds and your own position, not just the freeze — and a written representation made without advice can be difficult to walk back. Take a consultation first.
Not sure where your freeze stands? Get a free preliminary read
Before calling anyone, answer two quick questions about your freeze or lien and get a preliminary read on your legal position — whether it is a freeze or a lien, who ordered it, and the likely route. No payment, no sign-up.
If money has just left your account in a cyber fraud, the first call is 1930. The integrated system that sits behind it is the fastest route in India today for holding the disputed money in the recipient account before it dissipates through the layering chain. This page covers what 1930 is, how to report a cyber crime, what NCRP does after the complaint, how the bank freeze is triggered, and what to do if your money has already moved.
The companion piece, if your own account has been frozen because of someone else's complaint, is the freeze pillar guide and the Layer-N guide.
What 1930 is and what NCRP is
1930 is the national cyber-fraud helpline operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. It is the 24x7 telephone route for reporting financial cyber fraud. The integrated portal is the National Cybercrime Reporting Portal (NCRP) at cybercrime.gov.in, where the same complaint can be filed online with full transaction details.
Behind both runs the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), which connects to 85+ banks and major payment intermediaries. CFCFRMS does the tracing — it identifies the receiving account, follows onward transfers to Layer 2, Layer 3, Layer 4 and beyond, and pushes electronic notices to each bank in the chain to hold the disputed funds.
How to report a cyber crime — the step-by-step
- Call 1930 immediately. Speed is the single most important factor. The earlier the complaint enters CFCFRMS, the earlier the receiving bank gets the hold instruction. The first 24 to 48 hours are the window in which recovery is most likely.
- File the online complaint at cybercrime.gov.in. The 1930 call captures the headline; the NCRP filing captures the detail. Both should be done.
- Provide the transaction details. Date and time, amount, sender account (yours), recipient account or UPI ID, transaction reference number, name and contact of the fraudster if known, screenshots of any messages, calls, websites or apps involved.
- Note the acknowledgement number. NCRP issues an acknowledgement reference. Save it; every subsequent inquiry will use this number.
- Inform your own bank. Write to the branch and the bank's nodal officer with the NCRP reference. Ask the bank to assist in tracking the receiving account and to record the dispute on the customer's file.
- Follow up with the assigned cyber police station. The NCRP complaint is routed to the cyber police station with jurisdiction. Higher-value matters often convert into an FIR; lower-value matters proceed administratively under the MHA SOP 2026.
- Check status on NCRP regularly. The portal allows status tracking with the acknowledgement number. Update the cyber police station with any new information.
What happens after the complaint
CFCFRMS issues hold notices to the receiving bank. If the disputed sum is still in the Layer 1 account, the bank places a lien on the available amount. If the money has already moved, the system follows the chain — Layer 2, Layer 3 and onward. Each receiving account is flagged.
Where the disputed amount is below Rs. 50,000 and the transaction trail can be verified, the MHA SOP 2026 contemplates refund processing without a court order. Above that threshold, the case usually requires court intervention or a settlement between the complainant and the receiving account holder. The complainant's role is to maintain documentary support and follow up with the investigating officer; the 1930 system does most of the freezing work in the first 24-48 hours but is not a substitute for the substantive investigation.
The bank-side shortcut: an EDD grievance raised by your own branch
Before — or alongside — any representation of your own, ask the branch manager or operations head to raise an enhanced-due-diligence (EDD) / elaborative grievance on the NCRP portal on your behalf. Under the 2026 SOP, the bank can verify its own customer's KYC and profile and submit a positive report directly to the cyber cell through the portal.
- The filing generates a trackable grievance ID (GR-prefixed) — you are no longer chasing an unanswered email.
- The portal status moves nodal officer → investigating officer → resolved; the IO acts on the bank's verification rather than your word alone.
- On resolution, show it to the branch: the debit freeze is lifted, with a lien retained only on the disputed amount.
This route works best for a single clean account with an identifiable disputed sum and a responsive branch — typically 20–30 days, at no cost. A field report of it working end to end is here. If the branch declines to file, or the IO does not act within the SOP timelines, continue with the representation and grievance-ladder route in this guide — the record you build is what a court application stands on later.
What to do if your money has already moved through several accounts
Recovery becomes harder as the money moves down the chain, but is not impossible. The structured route is:
First, ensure the NCRP complaint has been filed with full detail. The chain-tracing depends on the system having the transaction reference numbers it needs to follow.
Second, push the investigating officer to identify the Layer accounts that still hold any portion of the money. Even partial recovery is possible where some of the funds are caught in a downstream account.
Third, where the disputed amount is significant, consider a court application — magistrate's court where the freeze instruction is under Section 106 BNSS, or High Court where a writ is more practical (especially if multiple states are involved). The cyber-fraud recovery guide sets out the full route.
What NOT to do
- Do not pay any "recovery agent" who calls promising to retrieve the money. Recovery scams target fraud victims; the official route is 1930 and NCRP, nothing else.
- Do not contact the fraudster directly. Anything you say can be used to construct a different narrative later.
- Do not delete messages, emails or transaction records. The forensic record is what the investigating officer will use.
- Do not wait to file the complaint. The 1930 call should be made as soon as the fraud is identified.
Frequently asked questions
How do I report a cyber crime in India?
Call 1930 immediately, then file the online complaint at cybercrime.gov.in. The 1930 call triggers the hold notice to the receiving bank; the NCRP filing captures the detailed record.
What happens after I file a complaint on NCRP or call 1930?
The complaint enters the CFCFRMS, which traces the transaction chain and issues electronic notices to the receiving bank to hold available funds. The complaint is then assigned to the cyber police station with jurisdiction, which may convert it into a formal FIR depending on the value and facts. The customer can track the status through the NCRP portal.
My money is gone — can I get it back through 1930?
Recovery depends on how quickly the freeze caught the money in the chain. If the recipient account still held the disputed sum, the chances are good. If the money has moved through several layers, recovery becomes harder but is not impossible — the MHA SOP 2026 contemplates refund processing without a court order for frauds below Rs. 50,000, subject to verification. Higher-value matters may require court intervention. The recovery guide on this site sets out the full route.
Don't want to draft this yourself? The ₹499 self-help pack has a ready-to-adapt version of this application/representation, plus a reply-to-notice format and checklist.
What is the 1930 cyber helpline?
The national cyber-fraud helpline operated by the I4C under the MHA, integrated with NCRP and CFCFRMS. It operates 24x7 and is the fastest route for triggering a freeze on the recipient account.
What happens after the complaint?
CFCFRMS traces the fund flow, issues hold notices to the banks in the chain, and routes the complaint to the cyber police station with jurisdiction. The customer can track status on NCRP.
What information do I need?
Date and time of the fraud, amount, recipient account or UPI ID, transaction reference number, your sender account, screenshots, ID details. More detail = faster tracing.
How fast can the freeze happen?
Often within hours. The speed advantage is meaningful only in the first 24-48 hours; beyond that the money moves through the layering chain.
Can I get my money back through 1930?
If the freeze caught the money before it moved, recovery is likely. Frauds below Rs. 50,000 may be refunded without a court order under the SOP. Higher-value matters often require court intervention.
What if my own account was frozen because of a 1930 complaint against someone else?
That is the downstream-beneficiary pattern. File a representation with the investigating officer citing the SOP and the underlying-transaction record. See the NCRP Layer freeze guide.
Money lost in a cyber fraud and the freeze did not catch it?
A 30-minute consultation with the advocate — send the freeze communication and documents in advance, get a clear read on the route and the next step by the end of the call. ₹1,500, paid online. A document review with a written note is available at ₹3,500.
Book a consultation — ₹1,500If money has already moved or your account is frozen as a beneficiary, see how a cyber crime lawyer in Delhi takes the matter beyond the 1930 complaint stage.
Account frozen or lien-marked in a cyber-fraud matter and need to act now? The Bank Account Freeze Self-Help Pack gives you the ready-to-edit letters, replies and checklist for exactly this situation — drafted by Advocate Kushwaha and delivered instantly.
Get the Bank Account Freeze pack — ₹499