If money has just left your account in a cyber fraud, the first call is 1930. The integrated system that sits behind it is the fastest route in India today for holding the disputed money in the recipient account before it dissipates through the layering chain. This page covers what 1930 is, how to report a cyber crime, what NCRP does after the complaint, how the bank freeze is triggered, and what to do if your money has already moved.
The companion piece, if your own account has been frozen because of someone else's complaint, is the freeze pillar guide and the Layer-N guide.
What 1930 is and what NCRP is
1930 is the national cyber-fraud helpline operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. It is the 24x7 telephone route for reporting financial cyber fraud. The integrated portal is the National Cybercrime Reporting Portal (NCRP) at cybercrime.gov.in, where the same complaint can be filed online with full transaction details.
Behind both runs the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), which connects to 85+ banks and major payment intermediaries. CFCFRMS does the tracing — it identifies the receiving account, follows onward transfers to Layer 2, Layer 3, Layer 4 and beyond, and pushes electronic notices to each bank in the chain to hold the disputed funds.
How to report a cyber crime — the step-by-step
- Call 1930 immediately. Speed is the single most important factor. The earlier the complaint enters CFCFRMS, the earlier the receiving bank gets the hold instruction. The first 24 to 48 hours are the window in which recovery is most likely.
- File the online complaint at cybercrime.gov.in. The 1930 call captures the headline; the NCRP filing captures the detail. Both should be done.
- Provide the transaction details. Date and time, amount, sender account (yours), recipient account or UPI ID, transaction reference number, name and contact of the fraudster if known, screenshots of any messages, calls, websites or apps involved.
- Note the acknowledgement number. NCRP issues an acknowledgement reference. Save it; every subsequent inquiry will use this number.
- Inform your own bank. Write to the branch and the bank's nodal officer with the NCRP reference. Ask the bank to assist in tracking the receiving account and to record the dispute on the customer's file.
- Follow up with the assigned cyber police station. The NCRP complaint is routed to the cyber police station with jurisdiction. Higher-value matters often convert into an FIR; lower-value matters proceed administratively under the MHA SOP 2026.
- Check status on NCRP regularly. The portal allows status tracking with the acknowledgement number. Update the cyber police station with any new information.
What happens after the complaint
CFCFRMS issues hold notices to the receiving bank. If the disputed sum is still in the Layer 1 account, the bank places a lien on the available amount. If the money has already moved, the system follows the chain — Layer 2, Layer 3 and onward. Each receiving account is flagged.
Where the disputed amount is below Rs. 50,000 and the transaction trail can be verified, the MHA SOP 2026 contemplates refund processing without a court order. Above that threshold, the case usually requires court intervention or a settlement between the complainant and the receiving account holder. The complainant's role is to maintain documentary support and follow up with the investigating officer; the 1930 system does most of the freezing work in the first 24-48 hours but is not a substitute for the substantive investigation.
What to do if your money has already moved through several accounts
Recovery becomes harder as the money moves down the chain, but is not impossible. The structured route is:
First, ensure the NCRP complaint has been filed with full detail. The chain-tracing depends on the system having the transaction reference numbers it needs to follow.
Second, push the investigating officer to identify the Layer accounts that still hold any portion of the money. Even partial recovery is possible where some of the funds are caught in a downstream account.
Third, where the disputed amount is significant, consider a court application — magistrate's court where the freeze instruction is under Section 106 BNSS, or High Court where a writ is more practical (especially if multiple states are involved). The cyber-fraud recovery guide sets out the full route.
What NOT to do
- Do not pay any "recovery agent" who calls promising to retrieve the money. Recovery scams target fraud victims; the official route is 1930 and NCRP, nothing else.
- Do not contact the fraudster directly. Anything you say can be used to construct a different narrative later.
- Do not delete messages, emails or transaction records. The forensic record is what the investigating officer will use.
- Do not wait to file the complaint. The 1930 call should be made as soon as the fraud is identified.
Frequently asked questions
How do I report a cyber crime in India?
Call 1930 immediately, then file the online complaint at cybercrime.gov.in. The 1930 call triggers the hold notice to the receiving bank; the NCRP filing captures the detailed record.
What is the 1930 cyber helpline?
The national cyber-fraud helpline operated by the I4C under the MHA, integrated with NCRP and CFCFRMS. It operates 24x7 and is the fastest route for triggering a freeze on the recipient account.
What happens after the complaint?
CFCFRMS traces the fund flow, issues hold notices to the banks in the chain, and routes the complaint to the cyber police station with jurisdiction. The customer can track status on NCRP.
What information do I need?
Date and time of the fraud, amount, recipient account or UPI ID, transaction reference number, your sender account, screenshots, ID details. More detail = faster tracing.
How fast can the freeze happen?
Often within hours. The speed advantage is meaningful only in the first 24-48 hours; beyond that the money moves through the layering chain.
Can I get my money back through 1930?
If the freeze caught the money before it moved, recovery is likely. Frauds below Rs. 50,000 may be refunded without a court order under the SOP. Higher-value matters often require court intervention.
What if my own account was frozen because of a 1930 complaint against someone else?
That is the downstream-beneficiary pattern. File a representation with the investigating officer citing the SOP and the underlying-transaction record. See the NCRP Layer freeze guide.
Money lost in a cyber fraud and the freeze did not catch it?
Share the NCRP acknowledgement, transaction details and amount for a structured next step covering the cyber police station, the bank route and, where appropriate, court intervention.