Cyber Crime Complaint in India: Full Process from FIR to Recovery (2026)

Lost money to a UPI fraud, online job scam, sextortion, social media impersonation, or matrimonial fraud? India processed over 17 lakh cyber crime complaints in 2024. The recovery rate is highest in the first 24 hours. Here is exactly what to do — at every level.

• First action — within 1 hour: dial 1930 (cyber crime helpline, 24×7) for any financial fraud — bank can freeze the destination account.
• Next action — within 24 hours: file at https://cybercrime.gov.in (NCRP — National Cyber Crime Reporting Portal).
• Within 7 days: register a formal FIR at the cyber police station.
• All India helpline: 1930 (financial fraud) / 1098 (children) / 155260 (RBI bank fraud) / 112 (general emergency).
• Recovery rate: 25-40% within 24 hrs of fraud + 1930 reporting. Drops to 5-10% after 7 days.
• Documents needed: bank statement, transaction details, screenshots, ID proof, FIR copy.
• Cost: ₹0 (no fee anywhere in cyber complaint process).
• Beware: Scammers “claim to recover” on Telegram / WhatsApp — they are second-stage fraudsters.

• UPI fraud — fake collect requests, OTP theft, screen-share via AnyDesk.
• Phishing — fake bank emails / SMS leading to credential theft.
• Credit card fraud — unauthorised online transactions.
• Loan app fraud — fake apps that trap Aadhaar + extort money.
• Investment fraud — fake stock tip groups, crypto schemes, Ponzi.
• Job scam — fake job offers requiring “registration fees”.
• Matrimonial fraud — fake profiles + monetary asks.
• Refund / customer-care scam — fake “Amazon support” calls.

• Identity theft — Aadhaar / PAN misuse, fake bank accounts in your name.
• Profile impersonation — fake social media accounts using your photos.
• Stalking online — repeated unwanted contact.

• Sextortion — blackmail with morphed images / video calls.
• Cyber harassment — abusive messages, threats.
• Child online abuse — POCSO offences (helpline 1098).
• Revenge porn — non-consensual image sharing.

• Account takeover (email, social media, gaming).
• Ransomware — files locked, demand for payment.
• Data breach — your data in dark web.

• Deepfakes of public figures / acquaintances.
• Communal hate spread.
• Cyber terrorism.

• IT Act, 2000 (amended 2008) — primary cyber law.
  • Section 66C — identity theft (3 yrs jail + ₹1 lakh).
  • Section 66D — cheating by impersonation (3 yrs jail + ₹1 lakh).
  • Section 66E — privacy violation (3 yrs jail).
  • Section 67 — obscene online content (3 yrs first offence, 5 yrs subsequent).
  • Section 67A — sexually explicit content (5 yrs first, 7 yrs subsequent).
  • Section 67B — child sexual abuse material (5-7 yrs).
  • Section 70 — protected systems (10 yrs).
• BNS, 2023 — cheating (Section 318), forgery (Section 336), criminal intimidation (Section 351).
• NCRP — National Cyber Crime Reporting Portal under MHA.
• I4C — Indian Cyber Crime Coordination Centre, the central body.

1. Dial 1930 from any phone (toll-free, 24×7).
2. Answers in Hindi/English/regional language.
3. Tell them: amount, when, UPI/IMPS/RTGS reference, recipient bank/account/UPI ID.
4. They issue a Reporting Number.
5. Bank receives a freeze request for the destination account within hours.

1. Visit https://cybercrime.gov.in.
2. Click “Report Other Cybercrime” (or “Report Women / Child Related” if applicable).
3. Login with mobile + OTP. Then “Click Here for Other Cybercrime Reporting”.
4. Fill in:
   1. Personal details (name, DOB, mobile, address, ID).
   2. Suspect / accused details (if known).
   3. Where it happened (online — give state + district as best guess).
   4. When (date + time).
   5. What happened — narrative in your own words.
   6. Evidence — upload screenshots, emails, chat logs (max 10 MB each, JPG/PDF).
5. Submit. You receive Acknowledgement Number + email confirmation.
6. Save these — needed for follow-up.

1. Find your nearest cyber police station: search “[city] cyber police station” on Google or NCRP.
2. Carry:
   1. Acknowledgement number from NCRP.
   2. Aadhaar / PAN.
   3. Bank statement highlighting the fraud transaction.
   4. Transaction reference (UPI / IMPS).
   5. Screenshots of fraud chats / calls.
   6. Photo of any APK installed + records of remote-access apps.
3. Officer registers FIR with IT Act sections.
4. Get FIR copy (your right under BNSS Section 173(2)).

1. Within 3 working days of fraud — bank gives zero liability if reported.
2. 4-7 days — limited liability.
3. 7+ days — full liability.
4. Write to bank's branch + nodal officer + complaints@bankname.com.
5. Keep: email confirmation, branch acknowledgement letter.

1. Visit https://cybercrime.gov.in → “Track Your Complaint” → enter Acknowledgement Number.
2. Status updates: “Under Investigation” → “Action Taken” → “Closed/Resolved”.
3. No update for 30 days? Email complaint-mha@gov.in with your Ack number.

1. If money returned to your bank → wait 24-48 hrs for credit.
2. Hold balance >7 days needs separate court order (in major cases).
3. Forfeited assets: I4C may seize and return through magistrate.

• 1930 — financial fraud (national).
• 155260 — RBI bank fraud assist (alternative).
• 1098 — children in distress / POCSO.
• 181 — women in distress.
• 14422 — IRDAI insurance fraud.
• Sanchar Saathi: https://sancharsaathi.gov.in — block fraud SIM/number.
• Aadhaar lock: mAadhaar app → Lock Biometrics — prevents misuse.

For every cyber complaint, keep digital + printed:

• Aadhaar / PAN (front + back).
• Bank statement (with fraud transaction highlighted).
• Screenshots: all chats, emails, websites, social media DMs.
• Call recordings (legal in India for self-protection).
• Photos of any device, APK, or location involved.
• Copies of fraudulent documents (fake bank email, fake screenshot of “transaction success”).
• NCRP acknowledgement + FIR copy.
• Bank dispute confirmations (written).

• Calling 100 / 112 first instead of 1930 — they redirect anyway, time lost.
• Engaging with scammer “to gather evidence” — you become the proof. Cut all contact.
• Trusting Telegram “recovery agents” — they are second-stage scams.
• Not telling family — scammers depend on isolation. Tell now.
• Hiding because of shame — over 17 lakh others also defrauded in 2024 alone.
• Paying again to “release” stuck funds — multi-stage fraud. Stop.
• Filing only with police — without NCRP entry the case is missing the IT Act trace.
• No bank email follow-up — verbal complaint = no record.
• Not changing passwords — scammers reuse credentials elsewhere.

If you've been blackmailed with intimate images / video calls:

1. Don't pay — payment never ends the demand.
2. Don't engage — block all contact.
3. Tell a trusted family member.
4. NCRP “Report Women/Child Related” — fast-tracked.
5. Cyber police FIR — Section 67A IT Act + 354A/354C BNS.
6. NGO support: CyberPeace Foundation, MyChoices Foundation, iSafe (free).
7. Health checkup — many victims experience anxiety/depression. Mental health helpline: 9152987821 (iCall).

This is why the first hour matters most.

After you file a complaint, scammers often message: “We are CBI / NCRP / RBI recovery agents. Pay ₹X for fast-tracked reversal.”

This is fake. No agency demands money for recovery. If you receive such a call:

1. File another NCRP complaint.
2. Block the number.
3. Report on Sanchar Saathi.

For amounts under ₹10,000, investigation is slow but registration is mandatory under BNSS Section 173. Even unresolved cases create statistical pressure that helps the next victim.

Yes. NCRP is jurisdiction-free. Your home state cyber police can take the FIR even if fraud was online.

Aadhaar lock at mAadhaar app immediately. CIBIL alert ON. Monitor bank/loan applications via your PAN.

NCRP routes to Interpol through MHA — slow but possible. Higher value cases (₹50 lakh+) get prioritised.

No. All cyber complaint filing is free (NCRP, FIR, ombudsman). Anyone asking for “filing fee” is a fraudster.

NCRP requires real identity for action; anonymous tips rarely investigated. But your identity is not made public.

Escalate to:

1. State DGP cyber cell (formal complaint).
2. MHA email: complaint-mha@gov.in.
3. Magistrate complaint under BNSS Section 175(3) for forced FIR registration.

Not for filing (free, do it yourself). For court appearance after FIR — a criminal lawyer helps. Free legal aid: DLSA in your district.

• [ ] 1930 dialled within 1 hour
• [ ] NCRP complaint filed within 24 hours
• [ ] Bank dispute filed in writing
• [ ] FIR registered at cyber police station within 7 days
• [ ] All evidence saved (digital + printed)
• [ ] Family informed
• [ ] Aadhaar locked
• [ ] Passwords changed (banks, email, social)
• [ ] Track ID saved + checked weekly

• NCRP — National Cyber Crime Reporting Portal
• Indian Cyber Crime Coordination Centre (I4C)
• IT Act 2000 — full text
• Sanchar Saathi — DoT fraud reporting
• RBI Customer Liability Framework, 2017
• Helplines: 1930 | 155260 | 1098 | 181 | 112

• Digital arrest scam — full rescue plan
• UPI fraud recovery — 3-day RBI rule
• Credit card charges — what's legal
• Police powers — what they can/can't

{REVIEWED}