There are three ways to report a cyber crime in India: the 1930 helpline for financial fraud, the National Cyber Crime Reporting Portal at cybercrime.gov.in for the formal online complaint, and an FIR at the cyber police station where the matter needs investigation. For money already lost, call 1930 first — the earlier the report, the better the chance of a hold being placed before the funds are layered onward. The portal complaint and the FIR follow; they are not alternatives to each other.
There are three ways to report a cyber crime in India: the 1930 helpline for financial fraud, the National Cyber Crime Reporting Portal (NCRP) at cybercrime.gov.in for the formal online complaint, and the FIR route through the cyber police station when the matter needs investigation. Which one comes first depends on whether money has moved. This guide sets out the reporting sequence step by step, and then covers how the common schemes work and what actually reduces the risk of being targeted again.
How to report a cyber crime in India: step by step
If money has moved out of your account, first call 1930, the national cyber fraud helpline. Keep the bank SMS, UPI reference number, account number, beneficiary name if visible, and the exact time of transfer ready. The purpose of the call is not a perfect legal narrative; it is to trigger fast reporting so banks can mark a lien or freeze the transaction trail while funds are still traceable.
Next, file the online complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Use the same facts: transaction IDs, screenshots, phone numbers, URLs, app names, emails and the 1930 acknowledgement number. Then send a written complaint to your bank's fraud desk and branch manager asking them to preserve logs, raise a chargeback or UPI dispute where applicable, and share the receiving bank details with the investigating agency.
For larger losses, identity theft, repeated harassment or account-freeze issues, also approach the local cyber police station or cyber cell with a signed complaint and annexures. A brief, chronological complaint is more useful than a long accusation. The follow-up article on recovering money from cyber fraud in India explains the recovery path after reporting.
The most common cyber fraud schemes
UPI and banking fraud remains the largest category by volume. This includes calls impersonating bank officials, fraudulent "KYC update" requests, and screen-sharing scams where the victim is talked into sharing their screen and then their OTPs. Investment fraud — fake trading apps, impersonation of SEBI or exchange officials, fraudulent cryptocurrency platforms — has grown dramatically and typically involves larger amounts.
Sextortion and digital arrest fraud are a more recent and particularly distressing category: the victim is either threatened with the release of intimate images, real or fabricated, or told by impersonators claiming to be police or customs officials that they are under "digital arrest" and must pay to clear themselves. These are entirely fabricated — Indian law recognises no such thing as "digital arrest."
Job offer scams targeting professionals and recent graduates, loan app fraud using illegally accessed contact lists to shame borrowers, and fake customer service numbers that intercept people looking for help from real companies complete the main picture.
Practical protection: what actually reduces risk
The most effective protection against most cyber fraud is a very simple principle: no legitimate institution will ever ask for your OTP, PIN, password, or CVV over the phone or through a link. Banks do not call to request this information. Police do not conduct arrests over video calls. SEBI does not call to warn you about a pending enforcement action. If someone claims to be from any of these institutions and is asking for money or credentials, it is fraud.
Beyond this, two-factor authentication on all financial accounts, keeping bank notifications active, using separate devices or profiles for financial transactions, and being extremely sceptical of investment opportunities that arrive unsolicited through social media or WhatsApp groups are all effective risk-reduction measures.
Police stations are increasingly declining to deal directly with account holders on release. The practice now reported across several units is that a station will not issue an NOC or a release confirmation to an individual customer, and will point them to the bank instead. Requests routed through the investigating officer, which used to be the standard path, are being returned.
The sequence that works now:
- The bank first. A written request to your branch and to the bank's nodal grievance officer, asking the bank to run its own Enhanced Due Diligence on the disputed credit and to record a grievance reference. Ask for the freeze reference, the issuing authority, the disputed amount and whether the restriction is a lien, a debit freeze or a full freeze.
- CPGRAMS against the bank if the branch stonewalls or the grievance is closed without reasons — filed against the bank through the Department of Financial Services, not against the police. This is the step most people skip, and it is the one that produces a written answer.
- A legal notice where the bank has an answer but will not act on it, or where a lien exceeds the disputed sum.
- Court only after that record exists. A magistrate or writ court reads a documented refusal very differently from a first approach.
If the disputed credits relate to a gaming, betting or gambling platform, do not run this yourself. The exposure there is different in kind — the questions reach the source of funds and your own position, not just the freeze — and a written representation made without advice can be difficult to walk back. Take a consultation first.
What to do immediately if you are defrauded
Speed matters. The 1930 helpline (or the NCRP portal at cybercrime.gov.in) allows immediate reporting of cyber fraud and, critically, can trigger a hold on the fraudulently obtained funds before they are moved further. The faster a complaint is filed, the higher the chance that some or all of the funds can be frozen and potentially recovered.
Contact your bank simultaneously to report the transaction and request a chargeback or recall where possible. Preserve all evidence — screenshots, transaction IDs, phone numbers, messages, and call logs. Do not delete anything, even if it is embarrassing. Evidence is essential for both the police complaint and any subsequent legal action.
Legal remedies: what the law provides
The Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023, and the Bharatiya Nagarik Suraksha Sanhita 2023 all contain provisions relevant to cyber fraud. Offences include identity theft, cheating by impersonation, criminal breach of trust, and the specific IT Act offences relating to computer fraud and unauthorised access. Complaints can be filed with the cyber crime police station, and in appropriate cases, the matter can be escalated through a private complaint before a Magistrate if the police do not register an FIR.
Civil remedies — including suits for recovery of the defrauded amount — are also available, though they are more useful where the fraudster can be identified and has reachable assets. In organised fraud cases, multiple victims sometimes find it effective to pool resources and proceed collectively.
In cyber-fraud matters, Vikram Singh Kushwaha has handled rapid-response situations involving compromised accounts, digital transactions, and urgent complaints to the appropriate authorities.
A strong response is both legal and practical: preserve proof, report quickly, keep correspondence consistent, and avoid steps that weaken later recovery or defreezing efforts.
Account frozen or lien-marked in a cyber-fraud matter and need to act now? The Bank Account Freeze Self-Help Pack gives you the ready-to-edit letters, replies and checklist for exactly this situation — drafted by Advocate Kushwaha and delivered instantly.
Get the Bank Account Freeze pack — ₹499Frequently asked questions
How do I report a cyber crime online in India?
File a complaint at cybercrime.gov.in, call 1930 for financial fraud, and preserve the acknowledgement number, screenshots and bank transaction IDs.
What is the cyber fraud helpline number?
The national helpline for financial cyber fraud reporting is 1930. It should be used immediately after a suspicious transfer or online fraud.
Should I also go to the cyber cell?
For significant loss, repeat fraud, identity misuse or bank-freeze issues, a written complaint to the local cyber police / cyber cell is usually sensible in addition to the NCRP complaint.
Can I recover money lost to cyber fraud in India?
Recovery is possible if reported quickly. Call 1930 immediately to freeze the trail of funds, file an NCRP complaint, and contact your bank. The faster the report, the higher the chance of freezing and recovering the defrauded amount.
You have been defrauded online, or want advice on protecting a business from cyber fraud risks?
A 30-minute consultation with the advocate — send the freeze communication and documents in advance, get a clear read on the route and the next step by the end of the call. ₹1,500, paid online. A document review with a written note is available at ₹3,500.
Book a consultation — ₹1,500If prevention has already failed and money is gone, see how a cyber fraud lawyer in Delhi handles recovery, NCRP follow-up and freeze-related fallout.