Short answer. Cyber-fraud recovery in India is fastest when action begins in the first hour: call 1930, file the complaint on cybercrime.gov.in, notify your bank in writing with transaction IDs, and preserve screenshots, UTR numbers, chats, phone numbers and bank alerts. The goal is to freeze the money trail before it moves through layered accounts; legal follow-up comes immediately after the trail is documented.
Police stations are increasingly declining to deal directly with account holders on release. The practice now reported across several units is that a station will not issue an NOC or a release confirmation to an individual customer, and will point them to the bank instead. Requests routed through the investigating officer, which used to be the standard path, are being returned.
The sequence that works now:
- The bank first. A written request to your branch and to the bank's nodal grievance officer, asking the bank to run its own Enhanced Due Diligence on the disputed credit and to record a grievance reference. Ask for the freeze reference, the issuing authority, the disputed amount and whether the restriction is a lien, a debit freeze or a full freeze.
- CPGRAMS against the bank if the branch stonewalls or the grievance is closed without reasons — filed against the bank through the Department of Financial Services, not against the police. This is the step most people skip, and it is the one that produces a written answer.
- A legal notice where the bank has an answer but will not act on it, or where a lien exceeds the disputed sum.
- Court only after that record exists. A magistrate or writ court reads a documented refusal very differently from a first approach.
If the disputed credits relate to a gaming, betting or gambling platform, do not run this yourself. The exposure there is different in kind — the questions reach the source of funds and your own position, not just the freeze — and a written representation made without advice can be difficult to walk back. Take a consultation first.
Recovering money from cyber fraud in India is a race against movement of funds. The first hour matters more than a perfectly drafted complaint. If money has just left your account, call the national cyber fraud helpline 1930, file a complaint on the National Cyber Crime Reporting Portal, and inform your bank in writing with transaction IDs. Legal drafting comes next; freezing the trail comes first.
The golden hour: 1930 cyber fraud helpline
The 1930 helpline connects the complaint to the cyber financial fraud reporting mechanism. Provide the transaction amount, date, time, UTR / reference number, account or UPI details, phone number used by the fraudster, screenshots, and your bank name. Ask for the acknowledgement number and preserve it. Then file the online complaint at cybercrime.gov.in with the same details.
Bank-account freezes, NCRP liens, cyber-cell representation and recovery — how these matters are actually run, what the engagement involves, and what it costs.
Cyber law & digital disputes →What cyber fraud reporting should contain
A useful complaint is chronological and evidence-heavy. Attach bank statement extracts, SMS alerts, UPI screenshots, WhatsApp chats, URLs, app names, phone numbers, call recordings if lawful, and any screen-sharing or remote-access app details. Avoid broad allegations without transaction identifiers. Banks and police need traceable particulars.
Bank freezing, lien marking and beneficiary accounts
If the money is still in a beneficiary account, police can request a debit freeze or lien. If the money has moved through layers, each bank needs to preserve the trail. Victims should send written complaints to their own bank and ask for chargeback or dispute handling where card, wallet or UPI rules allow it. Where a receiving account is wrongly frozen because it received tainted money unknowingly, see the companion guide on unfreezing bank accounts in cyber fraud cases.
When money is not immediately recovered
Recovery may require a formal FIR, follow-up with the investigating officer, magistrate-court applications, bank correspondence, and in some cases civil proceedings. Insurance claims and chargebacks have strict timelines. If a bank delayed acting despite prompt notice, the complaint record becomes important for escalation before the bank's grievance channel or ombudsman route.
Practical checklist
- Call 1930 and note the acknowledgement number.
- File the NCRP complaint the same day.
- Email your bank's fraud desk with transaction proof.
- Preserve screenshots, URLs, caller numbers and app logs.
- Do not delete chats or reset the device before evidence is copied.
- Follow up for FIR / complaint diary details where the amount is significant.
For prevention and reporting basics, read how to report a cyber crime in India. If your own account has been frozen because of an incoming disputed transfer, read bank account frozen after cyber fraud.
Account frozen or lien-marked in a cyber-fraud matter and need to act now? The Bank Account Freeze Self-Help Pack gives you the ready-to-edit letters, replies and checklist for exactly this situation — drafted by Advocate Kushwaha and delivered instantly.
Get the Bank Account Freeze pack — ₹499Need help with a cyber fraud recovery record?
A 30-minute consultation with the advocate — send the freeze communication and documents in advance, get a clear read on the route and the next step by the end of the call. ₹1,500, paid online. A document review with a written note is available at ₹3,500.
Book a consultation — ₹1,500Where the trail leads to frozen beneficiary accounts and unresponsive banks, a cyber crime lawyer in Delhi can pursue release orders and recovery in parallel.