Quick answer. Dial 1930 now. When the operator picks up, say: “Sir/Ma'am, I am a victim of online financial fraud. My name is [your full name]. My mobile is [10-digit number]. The fraud happened at [time] today from my [bank name] account. The amount is ₹[exact figure]. The beneficiary UTR or transaction ID is [12-digit string]. Please freeze the beneficiary account and register an NCRP complaint.” Do not hang up. Stay on the line for the full intake. You will get a complaint number ending in something like 20260515XXXXXXXX. Save it.
If you are short on time, jump to the minute-by-minute breakdown and read the script aloud while you dial.
1930 is the National Cyber Crime Helpline, run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. It is the only number in India that can ask a beneficiary bank to put a temporary lien on a fraudster's account within minutes of your call. It feeds your complaint directly into the NCRP portal at https://cybercrime.gov.in/. The helpline is staffed 24×7 in Hindi, English and the major regional languages. Calls from any Indian mobile network are free. There is no charge to register a complaint.
The number replaced the older 155260 helpline in 2022. If anyone tells you to call 155260, they are working from outdated information, 1930 is the live channel.
You are reading this because something has gone wrong with money in the last few hours. Whatever the trigger, the next 60 minutes matter more than the next 60 days. A lien placed on the beneficiary account inside the golden hour is the difference between getting your money back and chasing the bank for two years.
Most first-time callers freeze on the phone. They forget the bank name. They cannot find the UTR. They tell a long story instead of the four facts the operator needs. This script fixes that. Read it once now. Keep it open while you dial.
There are three official channels. Each has a job. Use them in the right order.
If you are reading this before the fraud has happened, you are forwarding it to a worried parent, say, bookmark the bank freeze process after cyber fraud page. It explains the lien mechanics in detail.
Before you press the green button on 1930, scroll through your SMS inbox and pull these out. Write them on a notepad. The operator will ask for each one and you will sound calmer if you can read them off.
If you are missing the UTR, open the bank app and screenshot the transaction page. The UTR is also called RRN on some apps. On Google Pay it sits under “UPI transaction ID”. On PhonePe it is the long string under the receipt.
This is the script. Read it as written. Do not add backstory. The operator hears 400 calls a day and needs facts in a specific order.
When the operator says “1930, namaste”, reply:
That is it. Four lines. Do not start with “I got a call from a man who said he was from the bank…” The operator does not need the story yet. They need to open your case in the system first.
The operator will ask: “When did the fraud happen?”
Reply with the bank-name + time + amount + UTR in one breath:
If the fraud happened on multiple transactions, give the total and say “across three transactions”. They will ask for each UTR after.
The operator will ask: “Please describe what happened.”
Do not narrate a 5-minute story. Two sentences only:
If it was a phishing link, say “I clicked a link in an SMS and entered my UPI PIN on a fake page.” If it was a delivery scam, say “A man claiming to be a courier asked me to confirm delivery with an OTP.” Keep it dry and factual.
The operator will read back the basics and ask for confirmation. Have your Aadhaar last 4 digits, PAN and email ready. They may also ask for the IFSC of your bank branch. The IFSC is on every cheque leaf and inside the app under “Account details”.
Many first-time callers forget this step. The operator will not always offer it. You ask. Use these words:
The operator will confirm “Yes, this will be raised.” If they say only “We have noted your complaint” without mentioning the lien, ask again: “Sir/Ma'am, will the beneficiary account be frozen on this call?” Push politely.
Before you hang up, ask:
Write the number on the same notepad. Read it back to confirm. The format is usually 14 digits beginning with the date, for a call placed today, it will start with 20260515. The acknowledgement SMS arrives within 15 minutes from sender ID CYBCRM or MHA-CYB.
End the call by saying “Thank you. I will file the detailed complaint on the portal within 24 hours.” Then hang up. Do not call back to add more details on the same number, that creates a duplicate case. Use the NCRP portal for additions.
The minutes after the call are the ones where the system actually moves money. Knowing the choreography helps you push the right people at the right time.
The legal armour for the citizen sits in the RBI Master Direction on Customer Protection for unauthorised electronic banking transactions (the operative circular is DBR.No.Leg.BC.78/09.07.005/2017-18 issued 6 July 2017, with subsequent updates). The framework sets three tiers of customer liability for third-party fraud where the deficiency is not on the customer's side.
Two important caveats. First, the clock starts when you receive the debit SMS or otherwise notice the transaction, not when the transaction actually happened. If the bank delayed your SMS, that is a bank deficiency and works in your favour. Second, what counts as “reporting” is contested in practice. The RBI circular language is broad: any of (a) bank email, (b) bank branch visit with written complaint, © 1930 helpline log, or (d) NCRP acknowledgement, with date-stamped proof, is reporting. Banks sometimes claim only a branch visit counts. They are wrong. Cite the circular by number when you push back. (Editor: please re-verify the exact circular number and any 2025-26 amendment before this article goes live; the 2017 master direction has been updated more than once and a corrigendum may apply.)
Useful sibling read: how the bank freeze process actually works after cyber fraud walks through the lien mechanics from the bank's side.
The single most common follow-up fraud is a “1930 callback” scam. After the real 1930 call, the citizen gets a second call from a spoofed number claiming to be from 1930 or the bank's fraud cell. The caller says “Sir, your case has been registered. To process your refund, please share the OTP you just received” or “Pay ₹10 verification fee on this link.”
Memorise the rule:
If the caller pushes, hang up and dial 1930 again. Tell the new operator there has been a callback fraud attempt and ask for it to be linked to your original case.
Go to https://cybercrime.gov.in/ from a desktop if possible (the form is friendlier). Choose “Report Other Cyber Crime” then “Financial Fraud”. Use the same registered mobile you used on the call. Attach:
Submit. You will see a complaint reference number on screen. Download the acknowledgement PDF. Save it on Drive and locally. This PDF is your most powerful single document for the next 6 months.
Walk into the branch where you hold the account. Carry the NCRP PDF, the debit SMS screenshots and a typed dispute letter. The letter should:
Get the acknowledgement stamped and signed. If the branch manager refuses, escalate to the Nodal Officer the same day. The nodal officer details are on every bank's website under “Grievance Redressal”. The freeze account after fraud, bank process explained page has the full template letter.
Find your district cyber cell or CyPS (Cyber Police Station), most districts now have one. Carry the NCRP PDF, bank dispute acknowledgement, ID proof and the original SIM if SIM-swap is involved. Ask for the complaint to be converted into a CCTNS entry at minimum, and an FIR if eligible.
If the cyber cell refuses to register a complaint, file an online complaint with the State DGP's office and CC the MHA cyber wing at https://cybercrime.gov.in/. Under the Lalita Kumari v State of UP (2014) judgment, registration of an FIR is mandatory for a cognisable offence, cyber fraud qualifies.
This step is where most citizens stop, and where the most leverage actually sits. File an RTI under §6(1) of the RTI Act to the bank PIO asking for:
The bank PIO must reply in 30 days. A non-reply or evasive reply is grounds for first appeal, which puts heavy pressure on the bank's grievance machinery. You can draft this RTI in 2 minutes using the AI RTI Drafter; select “Bank cyber-fraud refund” as the template.
Each of these shrinks the recovery window.
The helpline gets very high call volumes at peak fraud hours, especially 9 PM to 1 AM and weekends. If the line is busy:
When you do get through to 1930 on retry, mention you tried earlier and quote the time. The operator can timestamp your case from the first attempt, which protects your golden-hour math.
If the SMS shows a debit but no merchant name, the case may be a UPI Lite glitch or a mandate auto-debit, not a fraud. Read UPI deducted but not received, action plan first. Some resolve in 48 hours through the bank's normal dispute process.
AEPS frauds drain the account via biometric impersonation at a banking correspondent's micro-ATM. The script is similar but you must also lock your Aadhaar biometric at https://myaadhaar.uidai.gov.in/ within 30 minutes. See AEPS Aadhaar fraud recovery.
If your phone showed “No service” before the debit, this is SIM swap. Visit the telecom store before the bank visit; without a working SIM the bank's OTP dispute flow stalls. Full process in SIM swap fraud recovery guide.
After 10 working days, if the bank denies or delays the refund despite a within-3-day report, escalate to the Banking Ombudsman under the RBI Integrated Ombudsman Scheme 2021. File at https://cms.rbi.org.in/. The banking ombudsman complaint guide has the full template.
The statutes and circulars that work in the citizen's favour.
Case study (anonymised).
[Name], a 34-year-old schoolteacher in Lucknow, received a call at 10:42 PM from “Vikas, HDFC fraud cell”. The caller said her debit card had been used in Dubai and walked her through “blocking” it. She read out an OTP. By 10:51 PM, ₹84,200 had been debited in three transactions to a Paytm VPA.
She dialled 1930 at 10:54 PM. The first attempt failed (line busy). She got through on the third try at 10:58 PM. She gave the four facts, the UTRs and the beneficiary VPA. The operator raised the lien at 11:09 PM. By then ₹52,000 had moved on to a second mule, but ₹32,200 was still parked at the first beneficiary bank.
She filed the NCRP complaint at 11:34 PM the same night. The next morning she visited her HDFC branch with the NCRP PDF and lodged a written dispute citing the RBI Master Direction. The branch issued a provisional credit of ₹32,200 within 8 working days. The remaining ₹52,000 case is still under investigation 4 months later.
Citizen cost so far: ₹40 (printouts, autos). Time spent: roughly 6 hours across calls, portal filing, branch and cyber cell.
The single thing she got right: she dialled 1930 within 7 minutes of the last debit SMS.
A typed copy of this letter, on a plain sheet, given at the branch counter with stamped acknowledgement.
To,
The Branch Manager,
[Bank name], [Branch name and address]
Date: [DD MMM 2026]
Subject: Unauthorised electronic banking transaction, request for
zero-liability refund under RBI Master Direction DBR.No.Leg.BC.78/
09.07.005/2017-18 dated 6 July 2017, Account number [last 4 digits
of account]
Sir/Madam,
I am the holder of savings account number [last 4 digits] at your
branch. On [date] at [time], I noticed an unauthorised debit of
₹[amount] from my account via [UPI/IMPS/card/AEPS]. The transaction
reference numbers are:
1. UTR [number] for ₹[amount] at [time]
2. UTR [number] for ₹[amount] at [time]
I reported the fraud to:
1. The National Cyber Crime Helpline 1930 at [time] on [date].
Complaint reference: [14-digit number].
2. The NCRP portal at https://cybercrime.gov.in/ on [date].
Acknowledgement number: [number]. PDF enclosed.
As the report was made within 3 working days of noticing the
unauthorised transaction, my liability is ₹0 under the RBI Master
Direction cited above. I request:
(a) A provisional credit of ₹[total amount] to my account within
10 working days as per the circular;
(b) A written status update on the bank's lien request to the
beneficiary bank;
(c) Acknowledgement of this complaint under the Citizen Charter.
I enclose: NCRP acknowledgement PDF, debit SMS screenshots, my
ID proof.
Yours faithfully,
[Name]
[Signature]
[Mobile number]
[Email]
Yes. The helpline is toll-free from every Indian mobile and landline network. There is no charge to register a complaint. If anyone asks for a “registration fee” or a “case fee” after the call, it is a fraud, see the OTP-and-payment section above.
You can, but the recovery odds are much lower. The temporary lien works best within 60 minutes; after 7 working days the money is usually moved beyond reach. Still call, still file on NCRP, and still visit the cyber cell, the case may be merged with other complaints against the same fraudster ring and recovery sometimes happens months later. Your right to a refund under the RBI circular shrinks but does not disappear.
Push back politely. 1930 has no minimum threshold for registering a complaint. If the operator pushes you off, ask for their employee ID and ask to be transferred to a supervisor. As a fallback, file directly on https://cybercrime.gov.in/, the portal accepts complaints of any value.
Not directly, the short code does not route from international networks. Use https://cybercrime.gov.in/ instead. The portal works from any country and the workflow is identical. You will need an Indian mobile number on file with your bank to receive verification SMS during follow-up; have a family member in India keep the SIM active.
No. Your complaint is routed only to the beneficiary bank's fraud cell and the I4C back office. If a caller later claims to “have your file” and asks for an OTP, that is a separate fraud, not a leak from 1930.
Optional but useful. Most Android phones record calls natively. If a dispute arises later about whether you reported within 3 days, a timestamped recording is conclusive evidence. The 1930 control room also records every call, and you can request the recording via RTI to I4C, see the citizen RTI playbook for how.
100 is the police emergency line for any crime. 1930 is the specialised cyber-fraud helpline with direct hooks into the banking system for lien placement. For a financial cyber crime, dial 1930 first. If there is a parallel safety threat (a kidnapping, a physical extortion attempt) dial 100 as well.
The lien at the beneficiary bank is a separate action from the refund at your bank. The refund is your own bank's obligation under the RBI Master Direction. Banks sometimes argue the refund waits for the lien to “succeed”, but the circular does not say that. Reporting within 3 working days entitles you to provisional credit within 10 working days. If your bank refuses, escalate to the Banking Ombudsman.
You can still call 1930. If the relative was misled (their account used as a mule without their knowledge) the investigation will sort that out. If the relative was complicit, the lien will sit on their account regardless. Read the bank freeze process after cyber fraud guide before deciding.
For Indian-bank-routed payments, yes. For crypto wallet drains and offshore exchanges, the lien mechanism does not reach, there is no Indian bank in the chain. File on https://cybercrime.gov.in/ anyway, but expect the recovery odds to be slim. The case may still be useful for prosecution if the fraudster is in India.
Yes. The Indian Cyber Crime Coordination Centre is a public authority under the MHA and is subject to the RTI Act. File an RTI 30 days after your complaint, asking for the action taken, the date the lien was raised, and the beneficiary bank's response. Use the AI RTI Drafter with “I4C cyber fraud status” as the template. See also the case database pillar for prior orders against delaying banks.
Last reviewed: 15 May 2026. RTI Wiki editorial team.