First 30 Minutes: Do These Things Immediately
When money has been fraudulently transferred, speed matters because banks and payment systems can sometimes hold or freeze funds if informed quickly. Follow this order:
- Call 1930, the national cyber crime helpline for financial fraud, and give the details clearly.
- Inform your bank or payment provider through the official customer-care number or app; ask them to block the card, UPI ID or account and to raise a dispute.
- Register the complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in.
- Change passwords and enable multi-factor authentication on affected accounts using a clean device.
- Preserve evidence: do not delete chats, call logs or messages.
This article is general guidance. Procedures and helpline arrangements may be updated by the authorities, so confirm on official websites.
What You Can Report on the National Cyber Crime Reporting Portal
The portal is run by the Government of India for citizens to report cyber crimes. It has separate sections: reporting for crimes against women and children (with an option to report anonymously) and reporting for other cyber crimes, which includes financial frauds, hacking, social media account compromise, online harassment, ransomware, data theft, fake profiles and more. There is also a facility to track the status of your complaint using the acknowledgement number.
Information and Documents to Keep Ready
- Your identity proof and contact details.
- Bank account or card details involved, with statements showing the fraudulent transactions.
- Transaction IDs, UTR numbers, date, time and amount.
- Phone numbers, UPI IDs, email addresses, website links or social media profiles used by the fraudster.
- Screenshots of messages, call logs, emails, payment confirmations and app screens.
- For account hacking: the date you lost access and recovery attempts.
- For harassment: copies of abusive messages and profile links.
Step-by-Step: Filing Online
- Open the official portal (type cybercrime.gov.in yourself rather than clicking links from messages).
- Choose the category: report women/children related crime or report other cyber crime.
- Register or log in using your mobile number and OTP.
- Fill in incident details, including date, time, platform and description.
- Add suspect information if known and upload supporting evidence.
- Submit and note the acknowledgement/complaint number.
- Follow up using the status tracking option and cooperate with the investigating officer.
Types of Cyber Crime and What to Do
| Incident | Immediate action |
|---|---|
| UPI, card or net-banking fraud | Call 1930, inform bank, block credentials, file portal complaint |
| OTP or KYC phishing | Block card, change passwords, report; do not click further |
| Remote-access app scam | Uninstall the app, disconnect internet, call bank, reset passwords, report |
| Social media hacking | Use platform recovery, warn contacts, report to the platform and the portal |
| Sextortion or morphed images | Do not pay; save evidence, report on the portal, contact police, use platform takedown tools |
| Online job or investment fraud | Stop transfers, call 1930, report with chat and payment details |
| Fake website / e-commerce fraud | Report the URL, contact bank and payment provider, file complaint |
| Ransomware (individuals) | Disconnect device, preserve evidence, report; do not pay |
Reporting Lost or Misused Mobile Connections
The Department of Telecommunications operates the Sanchar Saathi portal, which offers services to report lost or stolen phones, check mobile connections registered in your name and report suspected fraud communications. If you receive suspicious calls or messages, you can use the reporting options on the portal; check its official website for the current features.
Visiting the Police or Cyber Cell
You can also approach your local police station or the cyber crime cell of your district or city, carry printed copies of evidence and ask for a written acknowledgement. Depending on the case, an FIR may be registered under relevant sections of the Information Technology Act and the criminal law. Keep copies of everything and be patient but persistent in following up. Do not pay anyone who claims they can “recover your money” for a fee; this is a common secondary scam.
How to Prevent Cyber Fraud
- Never share OTP, PIN, CVV or passwords.
- Do not install apps or remote tools suggested by callers.
- Verify calls from “bank officers” by dialling the number on your card.
- Use QR codes only to pay, never to receive money.
- Be sceptical about guaranteed returns and part-time jobs requiring deposits.
- Use strong unique passwords and MFA.
- Check URLs and avoid clicking links in unexpected messages.
- Teach elderly family members; they are frequent targets.
Learn how scams work in plain language in our beginner course, read what is phishing and what is social engineering, and share our small business program with shopkeepers you know.
Careers Helping Victims of Cyber Crime
Cyber crime investigators, forensic analysts, fraud analysts and awareness trainers help citizens and organisations recover and prevent incidents. If you want to build such skills, see our digital forensics course and the training for police and defence personnel.
Common Misconceptions About Cyber Crime Complaints
- “I should wait to see if the bank refunds me.” Delay reduces the chance of freezing funds; report immediately.
- “Small amounts are not worth reporting.” Reports help police identify mule accounts and networks.
- “I must visit the police station physically.” Online and helpline routes exist, although police follow-up may be needed.
- “Deleting the chat protects me.” It destroys evidence.
- “Recovery agents guarantee refunds.” They are frequently scammers.
Practical Exercise: Prepare an Evidence Folder
Create a folder on your phone or computer named “Cyber Fraud Evidence” in advance. Inside, keep a template note listing your bank helpline numbers, card and UPI app support numbers, the 1930 helpline and the portal address. When an incident occurs, add screenshots of messages, call logs and payment confirmations, name them with date and time, and note the UTR numbers. Also practise taking a screenshot that shows the full URL or phone number. Being prepared saves precious minutes during an emergency. Share the template with elderly relatives.
Self-Test
- Which number should you call for financial cyber fraud? (1930.)
- Where do you file an online complaint? (cybercrime.gov.in.)
- Name two pieces of evidence to keep. (Screenshots and transaction IDs.)
- Should you pay a recovery agent? (No.)
- Who should you inform immediately besides the helpline? (Your bank or payment provider.)
Illustrative Scenario: Acting Within the Golden Hour
A shopkeeper receives a call from a “bank officer” who convinces him to install a screen-sharing app. Within minutes, money leaves his account through UPI. Realising the fraud, he immediately calls 1930, informs his bank and files the portal complaint with transaction IDs. Because the report is made quickly, the system helps flag the receiving account for review. He may not recover everything, but quick action improves the chance. Had he waited a day, the funds would likely have been moved through several accounts.
Practical Tips After Reporting
- Keep the acknowledgement number safe and share it with the bank.
- Check the status periodically and respond to officers promptly.
- Do not post accusations publicly; let the investigation proceed.
- Change all passwords and review linked accounts.
- Educate family and neighbours about the scam to prevent more victims.
Where to Go Next: Practice and Resources
Awareness is a habit more than a body of knowledge. Share what you learn with family, colleagues and neighbours; the people who most need the information are often the least likely to read technical blogs. A short conversation can prevent a costly scam.
- The National Cyber Crime Reporting Portal for official guidance.
- Bank and payment-app security pages.
- Government awareness campaigns on safe digital practices.
- Your telecom provider’s guidance on fraud calls.
- Community WhatsApp groups where you can share verified warnings.
More Questions Learners Ask
Where can I learn more?
Our beginner course explains common scams in plain language.
How do I help elderly relatives stay safe?
Teach them never to share OTPs, to hang up on pressure calls and to call you before sending money.
What is the first thing to do after a scam?
Call 1930, inform your bank and preserve evidence.
Can I trust caller ID?
No. Caller ID can be spoofed; verify by calling official numbers.
How do I teach children about online safety?
Use simple rules about privacy, strangers and reporting, and keep communication open.
Are QR codes safe?
They are safe for paying but never needed to receive money; verify before scanning.
Interview Questions Related to This Topic
Employers often use fundamentals like these to check whether a candidate really understands a topic. Try answering in your own words before reading the model answer.
What is the difference between a threat, a vulnerability and a risk?
A threat is something that can cause harm (for example a phishing campaign), a vulnerability is a weakness that the threat can exploit (an untrained user or unpatched server) and risk is the likelihood and impact of that combination. Interviewers like answers that use a concrete example.
What is the difference between vulnerability assessment and penetration testing?
An assessment identifies and ranks weaknesses, often with automated scans; a penetration test attempts to exploit them to demonstrate impact. The deliverable of the latter is an attack narrative with proof.
What is hashing and why are salts used?
Hashing creates a fixed-length fingerprint of data and cannot be reversed easily. Salts are random values added before hashing passwords so identical passwords produce different hashes and precomputed attacks fail.
Terms to Remember
A shared vocabulary makes learning faster. These terms appear repeatedly in classes, labs and interviews:
- Vulnerability assessment: A systematic scan and review that lists weaknesses and ranks them by severity.
- Sandbox: An isolated environment in which suspicious files can be run safely to observe their behaviour.
- Data breach: An incident in which personal or confidential data is accessed, copied or exposed without authorisation.
- Honeypot: A decoy system that attracts attackers so that defenders can observe their methods safely.
- MFA: Multi-factor authentication adds a second proof, such as an app code or hardware key, so that a stolen password alone cannot open an account.
- Firewall: A control that allows or blocks network traffic according to rules about source, destination, port or application.
Learn This Hands-On: Recommended Courses
Reading builds understanding, but practice builds skill. If this topic interests you, the best next steps are Cyber Security Course for Beginners, Digital Forensics Course and Cyber Security Course. Every course includes live labs, and a new batch starts every week. You can try a free demo class first, compare fees or read about the cyber security course in your city.
Related reading: What Is Phishing in Cyber Security? Types, Examples and How to Stay Safe • What Is Social Engineering in Cyber Security? Techniques and Defence • What Is Digital Forensics? Process, Types, Tools and Career in India.
Frequently Asked Questions
What is the cyber crime helpline number in India?
1930 is the national cyber crime helpline for reporting financial fraud. Complaints can also be filed on cybercrime.gov.in.
How do I file a cyber crime complaint online?
Visit cybercrime.gov.in, choose the relevant category, register with your mobile number, fill in details with evidence and submit to get an acknowledgement number.
Can I recover money lost in UPI fraud?
Early reporting increases the chance of freezing funds, but recovery is not guaranteed.
Is it necessary to file an FIR?
Not always for the first step; the portal complaint is the main route, but police may register an FIR depending on the case.
Can I report anonymously?
The portal allows anonymous reporting for certain crimes against women and children.
Should I pay someone to recover my money?
No. Such offers are usually scams.
Want to learn this hands-on?
Join a live online batch with real labs. New batches start every week — try a free demo first.
Book Free DemoSee Cyber Security Course