How to Block a Lost or Stolen SIM Card Immediately (CEIR + TAFCOP, 2026)

A lost or stolen SIM is a 30-minute emergency, not a paperwork problem. In the first hour an attacker can intercept OTPs, drain UPI accounts, take over WhatsApp, and reset banking logins. Block the SIM, lock the handset on CEIR, file a police FIR under the BNS / BNSS, 2023, and recover any money already lost.

To block a lost or stolen SIM immediately in India: (1) call your telecom operator (Jio 1800-889-9999, Airtel 121, Vi 199, BSNL 1503) and request a temporary block, (2) file an e-FIR or police complaint, (3) lock the handset on the CEIR portal (ceir.gov.in) using the IMEI, (4) check TAFCOP (tafcop.sancharsaathi.gov.in) for any other SIMs issued in your name, and (5) freeze UPI / net-banking. A duplicate SIM can be issued only with a fresh KYC and a copy of the FIR.

• What counts as an emergency
• First 7 minutes — block the line
• Next 30 minutes — CEIR + FIR + TAFCOP
• Next 24 hours — duplicate SIM + KYC reset
• If money was already stolen — chargeback path
• Operator-by-operator block numbers
• What not to do
• Sample FIR / written complaint
• Can compensation be claimed?
• FAQ

Any of these scenarios needs the 30-minute drill:

• Phone physically lost (cab, train, public place, shop)
• Phone snatched / stolen
• SIM card itself lost (e.g., during handset replacement)
• SIM-swap attack — your operator confirms a new SIM was issued in your name without your consent
• Sudden no-signal followed by OTP / banking alerts on your registered email
• You see a SIM in your name on the TAFCOP portal that you never bought

A lost handset where the SIM is still active is more dangerous than a lost SIM with the handset still in your hand — the attacker can use the live SIM to receive every OTP. Treat handset loss as an immediate SIM-block event.

Warning — If you bank on UPI, the attacker only needs the SIM + your UPI PIN. UPI PINs are 4–6 digits and most users reuse them with vehicle / birth-year patterns. Block first, complain later.

Tell the agent: “My handset is lost / stolen, please block this SIM with immediate effect. I will produce the FIR for duplicate SIM.” Note the service-request (SR) number they give you — you'll need it for the FIR and any insurance claim.

This number is your proof that the line was suspended at HH:MM on DD-MM-YYYY. If a fraudulent transaction happens after that timestamp, the bank cannot blame you for “negligent custody of the SIM.”

Use the operator's app on a borrowed device — log in with your registered number's primary email. Each operator allows in-app suspend. If app is unreachable, walk into a company-owned outlet (not a multi-brand shop). Do not use a roadside agent.

Citizen tip — Note the exact time of the call. In every UPI / banking dispute, “block-time vs transaction-time” is the single most important number.

The Central Equipment Identity Register (ceir.gov.in) is the Department of Telecommunications portal that blocks a stolen handset across every Indian operator using the IMEI. Once locked, no SIM works in that handset, anywhere in India.

You need:

• IMEI numbers of the lost handset (every box / invoice / Gmail Google-account device list / *#06# from any device that was synced)
• Date, time, and place of loss
• Police FIR / acknowledgement number (a complaint receipt is enough — full FIR can come within 24 h)
• One ID proof (Aadhaar / PAN / passport)
• Owner's contact details

Submit at: ceir.gov.in → “Block Stolen / Lost Mobile.” A request ID is generated. The handset is rendered useless within 24–48 hours.

Most states accept online FIR for lost mobile without a physical visit:

• Delhi — lostfound.delhipolice.gov.in
• Maharashtra — citizen.mahapolice.gov.in
• Karnataka — ksp.karnataka.gov.in → e-Lost Report
• Tamil Nadu — eservices.tnpolice.gov.in
• UP — UP Cop app
• National — cybercrime.gov.in for any cyber / financial loss component

Cite BNS, 2023 §319 (cheating by personation) if the SIM is suspected to have been used for impersonation, and BNSS, 2023 §173 as the general FIR-registration section. The system will email you a complaint number — keep this forever.

TAFCOP is the DoT portal that shows every SIM issued in your name across operators. Open it from a clean device, enter your alternate active number, complete the OTP, and review the list. If you see:

• A number you never bought → click “Not my number”
• An old number you don't use → click “Not required”
• Your stolen number → click “Required, block”

Each click is a formal block request to the issuing operator. Screenshot the request IDs.

What most people miss — TAFCOP also lets you spot identity theft SIMs (someone took a SIM in your Aadhaar / PoI). These are the SIMs used in scam-compound operations. Block them the moment you see them — even if your phone wasn't lost.

Walk into the operator's company-owned store with:

• Original ID proof (Aadhaar / passport)
• One photograph
• FIR / e-FIR copy
• Any earlier SIM-block SR number

KYC will be redone (eKYC / DKYC). The duplicate SIM is usually active in 4–24 hours. Until then, inform every OTP-dependent service through their app or web portal that you are without SMS access:

• UPI apps (PhonePe, GPay, Paytm, BHIM)
• Banks (use net-banking with Aadhaar OTP via email)
• WhatsApp (account → 2-step verification → backup email)
• Income Tax / GSTN (use email OTP path)
• DigiLocker, Aadhaar self-service

Make a list. Common ones:

1. WhatsApp (re-register on duplicate SIM with 6-digit PIN)
2. Banking — call card-block + change registered mobile
3. UPI — re-link with new SIM after duplicate is active; revoke device binding from old apps
4. Email — change recovery number; review login history
5. Aadhaar — UIDAI online update (registered mobile)
6. PAN — ITR portal mobile update (use Aadhaar OTP)
7. DigiLocker — change mobile after eKYC
8. Income Tax — change phone in profile
9. Insurance, mutual funds, broking accounts — use email path
10. Government schemes — PM-Kisan, MGNREGA, scholarship portals

Pull your bank account statement and email and look for:

• “SIM change request approved” SMS / email
• “Mobile number updated” alerts
• Unexpected debit card / UPI activity in the gap window

If any are present, this was an active SIM-swap, not a passive loss. Escalate to cybercrime.gov.in with the bank statement, complaint reference, and operator SR.

If you have lost money via UPI, debit card, net-banking, or wallet during the gap, run the parallel banking-recovery drill — see UPI recovery steps and money sent wrong account recovery. Headline rules:

• Within 3 working days: zero customer liability if you reported the loss promptly (RBI Master Direction on Limiting Liability of Customers in Unauthorised Electronic Payment Transactions, 2017).
• 4–7 working days: capped customer liability (₹5,000 – ₹25,000 depending on account type).
• Beyond 7 days: liability decided by bank's board-approved policy.

Send a written complaint to your bank within 24 hours quoting the SR number, the FIR, and the time of SIM block. Demand a temporary credit while the dispute is investigated (RBI requires resolution within 90 days).

Emergency step — Call 1930 (national cyber helpline) within the first hour. The “golden hour” lien on the receiving account requires a complaint number generated through 1930 / cybercrime.gov.in. Most chargebacks succeed only if 1930 was called inside 90 minutes.

Save these in a non-phone location — diary, family member's phone, work laptop. When the SIM is gone, you will not have your own contact list.

• Do not hand the SIM-block request to a roadside agent — they sometimes simply replace the SIM and keep the OTPs rolling for the attacker.
• Do not delay the FIR “to think about it.” Without an FIR, banks can refuse the chargeback and the operator will not lock CEIR.
• Do not factory-reset the lost handset remotely before noting the IMEI — many users wipe the IMEI from Google account history in panic.
• Do not post the lost-phone IMEI publicly. Scammers use it to claim ownership when the handset is recovered by police.
• Do not assume “I had no money in that account” — the attacker can take an instant pre-approved loan via the SIM (many banks now offer 60-second sanctions on UPI numbers).

To,
The Station House Officer
[Police Station Name], [City]

Subject: Loss / theft of mobile handset and SIM — request for FIR under
BNS §319 r/w BNSS §173

Sir / Madam,

I, [Full name], aged [age], resident of [address], hereby state that on
[date] at approximately [time], my mobile handset (Make: ___, Model: ___,
IMEI 1: ___, IMEI 2: ___) along with the SIM card bearing mobile number
+91-XXXXXXXXXX (operator: ___) was lost / stolen at [location].

I have already requested a temporary suspension of the SIM with the
operator vide service-request number [SR No.] dated [date] at [time].
A CEIR block request has also been filed on ceir.gov.in (Request ID:
______).

I request you to register an FIR so that I may obtain a duplicate SIM
and, if any financial fraud has been committed using the lost SIM, the
same may be investigated under the appropriate provisions of the Bharatiya
Nyaya Sanhita, 2023 and the Bharatiya Nagarik Suraksha Sanhita, 2023.

Yours faithfully,
[Signature]
[Full name]
[Aadhaar last 4 digits]
[Alternate contact: ______]
[Email: ______]
[Date: ______]

Yes — three independent recovery paths:

1. From the bank — under RBI's “Limiting Liability of Customers” framework, if you reported within 3 working days and the bank cannot prove your negligence, liability is zero and the disputed amount must be re-credited within 90 days.
2. From the telecom operator — if the operator issued a duplicate SIM without verifying KYC (the classic SIM-swap), the TRAI Quality of Service rules and the Telecom Consumer Protection Regulations let you file before the operator's Appellate Authority. Where an unverified SIM-swap caused the loss, consumer fora have held the operator liable.
3. From the merchant / e-commerce — if a fraudulent purchase was made on Amazon / Flipkart / Myntra using the OTP, the National Consumer Helpline (1915) and the e-commerce platform's own dispute window (typically 10–14 days) can reverse the order.

Add the CEIR Request ID, FIR number, operator SR, and 1930 complaint number to every claim. Without these four, every recovery path stalls.

1. 0–7 min — Call operator block number; note SR
2. 7–15 min — Open ceir.gov.in; submit IMEI block
3. 15–25 min — File e-FIR / online lost-report
4. 25–30 min — Open tafcop.sancharsaathi.gov.in; flag any extra SIMs in your name
5. +30 min onward — Call 1930 if money has moved; freeze UPI / net-banking; reset WhatsApp on alternate device
6. +24 h — Visit operator store with FIR; collect duplicate SIM
7. +48 h — Reset every OTP-bound account; enable 2-step verification with email backup

• UPI fraud recovery — first 90 minutes
• WhatsApp / social media hijack recovery
• PAN & Aadhaar fraud recovery
• Deepfake blackmail recovery
• ATM fraud recovery
• Fake Aadhaar update website fraud
• Money sent to wrong bank account
• ATM cash withdrawal dispute
• Banking Ombudsman complaint guide

• Department of Telecommunications — CEIR: ceir.gov.in
• Sanchar Saathi (DoT) — TAFCOP: tafcop.sancharsaathi.gov.in
• MHA — National Cyber Crime Reporting Portal: cybercrime.gov.in · Helpline 1930
• TRAI — Telecom Consumer Protection: trai.gov.in
• RBI — Limiting Liability of Customers in Unauthorised Electronic Transactions, 2017
• UIDAI — Aadhaar misuse complaint: 1947
• National Consumer Helpline: 1915 · consumerhelpline.gov.in
• BNS, 2023 — §318 cheating, §319 cheating by personation
• BNSS, 2023 — §173 (FIR registration in cognizable cases), §175 (power to investigate cognizable cases)

• Sanchar Saathi — DoT portal (CEIR block for lost/stolen phone, TAFCOP)
• Telecom Regulatory Authority of India (TRAI)
• National Cyber Crime Reporting Portal (helpline 1930)

Most operators block within 5–10 minutes of the call. CEIR handset block is effective within 24–48 hours.

A temporary block is granted on request alone. Permanent block, CEIR, and a duplicate SIM require an FIR / e-FIR.

TRAI is a regulator, not an operator — it does not block SIMs. Use the operator + CEIR + TAFCOP combination.

Open TAFCOP, click “Not my number,” and lodge a CEIR + cybercrime.gov.in complaint. Also report to UIDAI at 1947.

Yes — if you call 1930 within 90 minutes and write to your bank within 3 working days, RBI rules require a refund where bank fault is established.

Yes. The BNSS, 2023 prohibits any fee for FIR registration. If asked for money, complain to the Superintendent of Police or use the state e-FIR portal.

Yes. Zero FIR under BNSS, 2023 §173(1) lets you file an FIR at any police station, which is then transferred to the jurisdictional one. Useful when you discovered the loss after travelling.

(a) Google account → Find My Device → linked devices; (b) Apple ID → Devices; © any earlier shop invoice / e-commerce order page; (d) Sanchar Saathi → Know Your Mobile (lookup via your registered number).

CEIR locks the handset for cellular SIMs, but a stolen device can still connect to Wi-Fi until you sign out of the Google / Apple account. Always remote-sign-out from the account dashboard.

Yes — and this is the second-stage attack after a SIM-swap. After clearing TAFCOP, also pull a CIBIL / CRIF High Mark report to check for unknown loans / cards.

The operator block stops that one SIM from working. CEIR locks the handset / IMEI so no SIM works in it across India. You need both.

Typically 4–24 hours after KYC / DKYC at a company-owned store. During this window, every banking app should be disabled by you proactively from the bank's website.

Last reviewed: 17 July 2026. Verified against Sanchar Saathi (DoT), TRAI, RBI, and the Bharatiya Sanhita, 2023.

• Financial Fraud Risk Indicator and blocked payments
• How many SIM cards you can have: the 9-SIM limit

• Check a used phone IMEI before you buy it