How to Block a Lost or Stolen SIM Card Immediately (CEIR + TAFCOP, 2026)

A lost or stolen SIM is a 30-minute emergency, not a paperwork problem. In the first hour an attacker can intercept OTPs, drain UPI accounts, take over WhatsApp, and reset banking logins. This page is the operational playbook — block the SIM, lock the handset on CEIR, file a police FIR under BNS / BNSS 2024, and recover any money already lost — in the order that actually works.

Citizen Crisis Response Network — 30-minute checklist
Block the SIM with your operator → freeze the handset on CEIR → log into TAFCOP → file an e-FIR → lock UPI / net-banking → claim compensation. Every minute of delay widens the window for fraud.

To block a lost or stolen SIM immediately in India: (1) call your telecom operator (Jio 1991, Airtel 121, Vi 199, BSNL 1503) and request a temporary block, (2) file an e-FIR or police complaint, (3) lock the handset on the CEIR portal (ceir.gov.in) using the IMEI, (4) check TAFCOP (tafcop.sancharsaathi.gov.in) for any other SIMs issued in your name, and (5) freeze UPI / net-banking. A duplicate SIM can be issued only with a fresh KYC and a copy of the FIR.

• What counts as an emergency
• First 7 minutes — block the line
• Next 30 minutes — CEIR + FIR + TAFCOP
• Next 24 hours — duplicate SIM + KYC reset
• If money was already stolen — chargeback path
• Operator-by-operator block numbers
• What not to do
• Sample FIR / written complaint
• Can compensation be claimed?
• FAQ

Any of these scenarios needs the 30-minute drill:

• Phone physically lost (cab, train, public place, shop)
• Phone snatched / stolen
• SIM card itself lost (e.g., during handset replacement)
• SIM-swap attack — your operator confirms a new SIM was issued in your name without your consent
• Sudden no-signal followed by OTP / banking alerts on your registered email
• You see a SIM in your name on the TAFCOP portal that you never bought

A lost handset where the SIM is still active is more dangerous than a lost SIM with the handset still in your hand — the attacker can use the live SIM to receive every OTP. Treat handset loss as an immediate SIM-block event.

Warning — If you bank on UPI, the attacker only needs the SIM + your UPI PIN guess. UPI PINs are 4–6 digits; brute-forcing isn't needed because most users reuse them with vehicle / birth-year patterns. Block first, complain later.

Tell the agent: “My handset is lost / stolen, please block this SIM with immediate effect. I will produce the FIR for duplicate SIM.” Note the service-request (SR) number they give you — you'll need it for the FIR and any insurance claim.

This number is your proof that the line was suspended at HH:MM on DD-MM-YYYY. If a fraudulent transaction happens after that timestamp, the bank cannot blame you for “negligent custody of the SIM.”

Use the operator's app on a borrowed device — log in with your registered number's primary email. Each operator allows in-app suspend. If app is unreachable, walk into a company-owned outlet (not a multi-brand shop). Do not use a roadside agent.

Citizen tip — Note the exact time of the call. In every UPI / banking dispute, “block-time vs transaction-time” is the single most important number.

The Central Equipment Identity Register (ceir.gov.in) is the Department of Telecommunications portal that blocks a stolen handset across every Indian operator using the IMEI. Once locked, no SIM works in that handset, anywhere in India.

You need:

• IMEI numbers of the lost handset (every box / invoice / Gmail Google-account device list / *#06# from any device that was synced)
• Date, time, and place of loss
• Police FIR / acknowledgement number (a complaint receipt is enough — full FIR can come within 24 h)
• One ID proof (Aadhaar / PAN / passport)
• Owner's contact details

Submit at: ceir.gov.in → “Block Stolen / Lost Mobile.” A request ID is generated. The handset is rendered useless within 24–48 hours.

Most states accept online FIR for lost mobile without a physical visit:

• Delhi — lostandfound.delhipolice.gov.in
• Maharashtra — citizen.mahapolice.gov.in
• Karnataka — ksp.karnataka.gov.in → e-Lost Report
• Tamil Nadu — eservices.tnpolice.gov.in
• UP — UP Cop app
• National — cybercrime.gov.in for any cyber / financial loss component

Cite BNS 2024 §316 (cheating by personation) if the SIM is suspected to have been used for impersonation, and BNSS 2024 §173 as the general FIR section. The system will email you a complaint number — keep this forever.

TAFCOP is the DoT portal that shows every SIM issued in your name across operators. Open it from a clean device, enter your alternate active number, complete the OTP, and review the list. If you see:

• A number you never bought → click “Not my number”
• An old number you don't use → click “Not required”
• Your stolen number → click “Required, block”

Each click is a formal block request to the issuing operator. Screenshot the request IDs.

What most people miss — TAFCOP also lets you spot identity theft SIMs (someone took a SIM in your Aadhaar / PoI). These are the SIMs used in scam-compound operations. Block them the moment you see them — even if your phone wasn't lost.

Walk into the operator's company-owned store with:

• Original ID proof (Aadhaar / passport)
• One photograph
• FIR / e-FIR copy
• Any earlier SIM-block SR number

KYC will be redone (eKYC / DKYC). The duplicate SIM is usually active in 4–24 hours. Until then, inform every OTP-dependent service through their app or web portal that you are without SMS access:

• UPI apps (PhonePe, GPay, Paytm, BHIM)
• Banks (use net-banking with Aadhaar OTP via email)
• WhatsApp (account → 2-step verification → backup email)
• Income Tax / GSTN (use email OTP path)
• DigiLocker, Aadhaar self-service

Make a list. Common ones:

1. WhatsApp (re-register on duplicate SIM with 6-digit PIN)
2. Banking — call card-block + change registered mobile
3. UPI — re-link with new SIM after duplicate is active; revoke device binding from old apps
4. Email — change recovery number; review login history
5. Aadhaar — UIDAI online update (registered mobile)
6. PAN — ITR portal mobile update (use Aadhaar OTP)
7. DigiLocker — change mobile after eKYC
8. Income Tax — change phone in profile
9. Insurance, mutual funds, broking accounts — use email path
10. Government schemes — PM-Kisan, MGNREGA, scholarship portals

Pull your bank account statement and email and look for:

• “SIM change request approved” SMS / email
• “Mobile number updated” alerts
• Unexpected debit card / UPI activity in the gap window

If any are present, this was an active SIM-swap, not a passive loss. Escalate to cybercrime.gov.in with the bank statement, complaint reference, and operator SR.

If you have lost money via UPI, debit card, net-banking, or wallet during the gap, run the parallel banking-recovery drill — see UPI recovery steps and money sent wrong account recovery. Headline rules:

• Within 3 working days: zero customer liability if you reported the loss promptly (RBI Master Direction on Limiting Liability of Customers, 2017 — para 6).
• 4–7 working days: capped customer liability (₹5,000 – ₹25,000 depending on account type).
• Beyond 7 days: liability decided by bank's board-approved policy.

Send a written complaint to your bank within 24 hours quoting the SR number, the FIR, and the time of SIM block. Demand a temporary credit while the dispute is investigated (RBI requires resolution within 90 days).

Emergency step — Call 1930 (national cyber helpline) within the first hour. The “golden hour” lien on the receiving account requires a complaint number generated through 1930 / cybercrime.gov.in. Most chargebacks succeed only if 1930 was called inside 90 minutes.

Save these in a non-phone location — diary, family member's phone, work laptop. When the SIM is gone, you will not have your own contact list.

• Do not hand the SIM-block request to a roadside agent — they sometimes simply replace the SIM and keep the OTPs rolling for the attacker.
• Do not delay the FIR “to think about it.” Without an FIR, banks can refuse the chargeback and the operator will not lock CEIR.
• Do not factory-reset the lost handset remotely before noting the IMEI — many users wipe the IMEI from Google account history in panic.
• Do not post the lost-phone IMEI publicly. Scammers use it to claim ownership when the handset is recovered by police.
• Do not assume “I had no money in that account” — the attacker can take an instant pre-approved loan via the SIM (many banks now offer 60-second sanctions on UPI numbers).

To,
The Station House Officer
[Police Station Name], [City]

Subject: Loss / theft of mobile handset and SIM — request for FIR under
BNS §316 r/w BNSS §173

Sir / Madam,

I, [Full name], aged [age], resident of [address], hereby state that on
[date] at approximately [time], my mobile handset (Make: ___, Model: ___,
IMEI 1: ___, IMEI 2: ___) along with the SIM card bearing mobile number
+91-XXXXXXXXXX (operator: ___) was lost / stolen at [location].

I have already requested a temporary suspension of the SIM with the
operator vide service-request number [SR No.] dated [date] at [time].
A CEIR block request has also been filed on ceir.gov.in (Request ID:
______).

I request you to register an FIR so that I may obtain a duplicate SIM
and, if any financial fraud has been committed using the lost SIM, the
same may be investigated under the appropriate provisions of the Bharatiya
Nyaya Sanhita, 2023 and the Bharatiya Nagarik Suraksha Sanhita, 2023.

Yours faithfully,
[Signature]
[Full name]
[Aadhaar last 4 digits]
[Alternate contact: ______]
[Email: ______]
[Date: ______]

Yes — three independent recovery paths:

1. From the bank — under RBI's “Limiting Liability of Customers” framework, if you reported within 3 working days and the bank cannot prove your negligence, liability is zero and the disputed amount must be re-credited within 90 days.
2. From the telecom operator — if the operator issued a duplicate SIM without verifying KYC (the classic SIM-swap), the TRAI Quality of Service rules and Telecom Consumer Protection Regulations allow an Appellate Authority complaint, and the operator is generally held liable for the resulting fraud (Vijay Kumar v. Vodafone, NCDRC, and follow-on rulings).
3. From the merchant / e-commerce — if a fraudulent purchase was made on Amazon / Flipkart / Myntra using the OTP, the National Consumer Helpline (1915) and the e-commerce platform's own dispute window (typically 10–14 days) can reverse the order.

Add the CEIR Request ID, FIR number, operator SR, and 1930 complaint number to every claim. Without these four, every recovery path stalls.

1. 0–7 min — Call operator block number; note SR
2. 7–15 min — Open ceir.gov.in; submit IMEI block
3. 15–25 min — File e-FIR / online lost-report
4. 25–30 min — Open tafcop.sancharsaathi.gov.in; flag any extra SIMs in your name
5. +30 min onward — Call 1930 if money has moved; freeze UPI / net-banking; reset WhatsApp on alternate device
6. +24 h — Visit operator store with FIR; collect duplicate SIM
7. +48 h — Reset every OTP-bound account; enable 2-step verification with email backup

how to block lost SIM card India, block stolen SIM card immediately, CEIR block IMEI online, TAFCOP check SIM in my name, lost mobile FIR online, SIM swap fraud recovery, duplicate SIM with FIR, e-FIR for lost phone Delhi, BSNL block stolen SIM, Jio SIM block 1991

• Q: How long does it take to block a lost SIM in India?
  Most operators block within 5–10 minutes of the call. CEIR handset block is effective within 24–48 hours.
• Q: Is FIR mandatory for SIM block?
  A temporary block is granted on request alone. Permanent block, CEIR, and a duplicate SIM require an FIR / e-FIR.
• Q: Can I block a SIM through TRAI directly?
  TRAI is a regulator, not an operator — it does not block SIMs. Use the operator + CEIR + TAFCOP combination.
• Q: What if my Aadhaar was used to take a SIM I never bought?
  Open TAFCOP, click “Not my number,” and lodge a CEIR + cybercrime.gov.in complaint. Also report to UIDAI at 1947.
• Q: Will I get my money back if my UPI was drained?
  Yes — if you call 1930 within 90 minutes and write to your bank within 3 working days, RBI rules require a refund where bank fault is established.

“Hey Google, how do I block my stolen SIM in India?” · “Alexa, what is the CEIR portal?” · “Ok Google, how to file lost mobile FIR online?” · “Hey Siri, what is TAFCOP?” · “Block Jio SIM lost phone.”

[Workflow card] "Lost SIM — 30 minutes"
0–7 min : operator-block (icon: phone with cross)
7–15 min: CEIR-IMEI-lock (icon: shield + IMEI)
15–25 min: e-FIR-online (icon: police badge)
25–30 min: TAFCOP-audit (icon: list with red flag)
30+ min : bank-1930 (icon: rupee + alert)

[Comparison table] "Customer liability vs reporting delay (RBI 2017)"
Day 0–3: ₹0 (zero liability)
Day 4–7: ₹5,000 / ₹10,000 / ₹25,000 (account-type tier)
Day 7+ : board-approved bank policy

[Authority ladder] Operator → CEIR → Police → 1930 → Bank Ombudsman → NCDRC → Consumer Court

• UPI fraud recovery — first 90 minutes
• WhatsApp / social media hijack recovery
• PAN & Aadhaar fraud recovery
• Deepfake blackmail recovery
• ATM fraud recovery
• Fake Aadhaar update website fraud
• Money sent to wrong bank account
• ATM cash withdrawal dispute
• Banking Ombudsman complaint guide

• Department of Telecommunications — CEIR: ceir.gov.in
• Sanchar Saathi (DoT) — TAFCOP: tafcop.sancharsaathi.gov.in
• MHA — National Cyber Crime Reporting Portal: cybercrime.gov.in · Helpline 1930
• TRAI — Telecom Consumer Protection: trai.gov.in
• RBI — Limiting Liability of Customers in Unauthorised Electronic Transactions, 2017
• UIDAI — Aadhaar misuse complaint: 1947
• National Consumer Helpline: 1915 · consumerhelpline.gov.in
• BNS 2024 — §316 cheating by personation, §319 cheating
• BNSS 2024 — §173 (FIR registration), §175 (officer's powers on cognisable offences)

++++ Is a phone-loss FIR free? | Yes. Indian Police Act and BNSS 2024 prohibit any fee for FIR registration. If asked for money, complain to the Superintendent of Police or use the state e-FIR portal. ++++

++++ Can I file FIR in a different city / state from where the phone was lost? | Yes. Zero FIR under BNSS 2024 §173(1) lets you file an FIR at any police station, which is then transferred to the jurisdictional one. Useful when you discovered the loss after travelling. ++++

++++ How do I find my IMEI if I no longer have the box? | (a) Google account → Find My Device → linked devices; (b) Apple ID → Devices; © any earlier shop invoice / e-commerce order page; (d) Sanchar Saathi → Know Your Mobile (lookup via your registered number). ++++

++++ Will CEIR block also disable my Wi-Fi calling? | CEIR locks the handset for cellular SIMs, but a stolen device can still connect to Wi-Fi until you sign out of the Google / Apple account. Always remote-sign-out from the account dashboard. ++++

++++ Can someone open a bank account with a SIM in my name? | Yes — and this is the second-stage attack after a SIM-swap. After clearing TAFCOP, also pull a CIBIL / CRIF Highmark report to check for unknown loans / cards. ++++

++++ What is the difference between CEIR block and operator block? | The operator block stops that one SIM from working. CEIR locks the handset / IMEI so no SIM works in it across India. You need both. ++++

++++ How long is the duplicate SIM activation window? | Typically 4–24 hours after KYC / DKYC at a company-owned store. During this window, every banking app should be disabled by you proactively from the bank's website. ++++

A lost SIM in 2026 is a financial-system loss, not a hardware loss. The 30-minute drill on this page — block the line, lock the handset on CEIR, e-FIR, TAFCOP audit, 1930 — closes the attack window before the second-stage damage (loans, identity SIMs, KYC takeover) starts. Bookmark this page, save the operator block numbers in a place that is not your phone, and share it with anyone over 60 in your family.

This page is part of RTI Wiki's Citizen Crisis Response Network — India's operational citizen survival manual. Updates tracked through Sanchar Saathi advisories, CERT-In bulletins, RBI Master Directions, and judgments of the NCDRC and High Courts.