UPI Fraud Complaint & Chargeback 2026

Reviewed on: 2026-06-19.

A UPI payment is irreversible the moment the beneficiary bank credits the receiver. Unlike a cheque, there is no “stop payment” once the funds leave your account. The window that actually works is the first hour after the fraud happens, and the first three working days for your formal complaint.

Law enforcement calls this the “golden hour.” The National Cyber Crime Reporting Portal routes financial fraud reports to a dedicated financial intelligence unit that can ask banks to put a “lien” on the fraudster's account before withdrawal. Once funds move to a mule account and are withdrawn, recovery becomes near-impossible.

This article maps three distinct situations a UPI victim faces, each with a different legal pathway:

1. Unauthorised debit (someone else initiated the transaction using your credentials or a compromised device)
2. Authorised-but-deceived payment (you sent money yourself after being tricked: a phishing call, a fake QR code, a job-offer scam)
3. Failed or wrong UPI transaction (you intended to pay, but money left your account and did not reach the right party, or the transaction failed and was not reversed)

The route and the legal protection differ sharply across all three.

Helpline 1930 is the national cyber crime financial fraud helpline. It connects to the National Cyber Crime Reporting Portal (NCRP), operated by the Ministry of Home Affairs.

When you call:

1. Report the fraud transaction amount, your UPI ID, the beneficiary UPI ID or mobile number, and the UTR (UPI Transaction Reference) number.
2. The operator logs a complaint and, where possible, flags the destination account to prevent further withdrawals.
3. You will receive a complaint acknowledgement number. Save it.

You can also file online at cybercrime.gov.in under the “Financial Fraud” category if you cannot reach the helpline by phone. After filing, you can track your cybercrime complaint status using your acknowledgement number.

The 1930 helpline does not guarantee a refund. It initiates a hold request. The actual credit to your account comes only after the bank-level dispute process described below.

For a detailed guide on the 1930 filing process, see how to report cyber fraud on 1930.

Your PSP (Payment Service Provider) bank is the bank whose UPI handle you used (for example, the bank linked to your @ybl, @okaxis, or @paytm UPI ID). This is the entity RBI holds responsible for your complaint.

RBI circular DBR.No.Leg.BC.78/09.07.005/2017-18 dated 6 July 2017 sets binding customer liability limits:

What “zero liability” means in practice: if you report a genuinely unauthorised transaction (one you did not initiate) within 3 working days, the bank must credit the disputed amount back to your account within 10 working days as a “shadow reversal,” and resolve the complaint finally within 90 days.

How to report:

1. Call the 24×7 toll-free number on the back of your debit card or in your banking app.
2. Follow up in writing: send an email to the bank's grievance email address and keep a copy.
3. Raise a dispute inside your UPI app (PhonePe, Google Pay, BHIM, Paytm, etc.) using “Report a problem” or “Raise a dispute” against the specific transaction. The in-app route routes your complaint to NPCI's dispute management system; verify the exact steps on NPCI's official portal (npci.org.in) or within your app, as the interface differs across apps.

For authorised-but-deceived payments: If you sent the money yourself (even under false pretences), the bank's zero-liability rule under the 2017 circular does not automatically apply, because the transaction carried your authentication. Your strongest avenue here is the 1930 complaint and the bank's internal fraud team. Many banks will investigate and may recover funds if the fraudster's account is still loaded, but they are not legally bound to refund the amount the way they are for unauthorised transactions. See OTP and bank scam refund process for that pathway.

This situation is different from fraud. If a UPI payment failed (debited but not credited to the receiver), or you paid the wrong person accidentally, the applicable rule is RBI circular RBI/2019-20/67 dated 20 September 2019 on “Harmonisation of Turn-Around Time and customer compensation for failed transactions.”

Key rules under this circular:

1. If the beneficiary bank cannot credit the receiver, the beneficiary bank must auto-reverse the funds to your account by T+1 (the next business day after the transaction date).
2. If the reversal is delayed beyond the prescribed timeline, your bank must pay you ₹100 per day as compensation, automatically, without you filing a separate claim.
3. The circular covers UPI, IMPS, card-to-card transfers, NACH, and Aadhaar-enabled systems.

If you do not receive the auto-reversal within T+1, raise a complaint with your bank citing this circular. If the bank still does not act within 30 days of your complaint, escalate to the RBI Integrated Ombudsman (see Step 4).

For the broader money-refund process, see how to get defrauded money refunded.

If your PSP bank does not resolve the complaint within 30 days of your written complaint, or gives you an unsatisfactory response, you can approach the RBI Integrated Ombudsman.

How to file:

1. Go to cms.rbi.org.in (the RBI Complaint Management System). Note: the portal undergoes scheduled maintenance; if unavailable, write to the nearest RBI office.
2. You will need: your complaint reference number from the bank, the written bank response (or evidence that 30 days have passed without a response), and the transaction details.

Coverage: The Integrated Ombudsman Scheme 2021 covers scheduled commercial banks, payments banks, small finance banks, and non-bank payment system operators regulated by RBI. It covers UPI fraud complaints where the PSP bank is the regulated entity.

No fee: Filing is free.

Escalation beyond Ombudsman: If the Ombudsman order is unsatisfactory, you may appeal to the Appellate Authority at RBI within 30 days.

“Chargeback” in UPI is not identical to a credit card chargeback (which is a bilateral reversal scheme between card networks). In UPI, the dispute mechanism works through NPCI's dispute management layer, and the process is initiated by your PSP bank on your behalf after you file a complaint with the bank.

There is no direct “raise a chargeback” button for consumers at the NPCI level. You file with your bank, your bank logs it with NPCI, and NPCI arbitrates between the originating and beneficiary banks. For the current NPCI dispute flow and any updates to the in-app process, verify directly at npci.org.in, as NPCI periodically revises the dispute handling guidelines for member banks.

What chargeback can and cannot do:

1. It can reverse a failed, duplicate, or technically erroneous transaction.
2. It can sometimes freeze and recover funds from a fraudster's account if the complaint reaches the bank before withdrawal.
3. It cannot reverse an authorised payment made under fraud once the funds have been withdrawn from the mule account.

1. Do not call back any number the fraudster gave you. They often pose as “bank fraud department” staff to drain more.
2. Do not share OTPs, PINs, or UPI PINs with anyone, including callers claiming to be from NPCI or RBI. Neither organisation ever calls to ask for these.
3. Do not uninstall your banking app before filing the complaint. Transaction logs stored in the app are evidence.
4. Screenshot the fraudulent transaction entry in your UPI app before raising a dispute.

Not automatically. If you authorised the payment (even under deception), the bank's zero-liability rule under the 2017 circular does not cover it. File on 1930 immediately and with your bank's fraud team. Recovery depends on whether the funds are still in the mule account. Some banks recover partial amounts; a refund is not guaranteed.

Report within 3 working days for zero liability. Between 4 and 7 working days, your liability is capped at ₹5,000 to ₹25,000 depending on your account type. Beyond 7 working days, the bank's board policy applies and your liability could be higher. Report as fast as possible.

The bank must provide a shadow credit (provisional reversal) within 10 working days of your complaint and close the complaint finally within 90 days, per RBI rules. For failed transactions, auto-reversal should happen within T+1.

This is a failed transaction, not fraud. The bank must auto-reverse by the next business day (T+1). If not done, the bank owes you ₹100 per day as compensation under RBI/2019-20/67. Raise a complaint with your bank citing that circular.

If the bank does not respond within 30 days or the response is unsatisfactory, file with the RBI Integrated Ombudsman. Filing is free.

NPCI does not have a direct consumer complaint counter. Your complaint flows to NPCI through your PSP bank. NPCI arbitrates the inter-bank dispute but you deal with your own bank at the consumer level. Visit npci.org.in for the latest guidance on the UPI dispute flow for member banks.

Yes, if a public authority (your PSP bank, RBI, or the cybercrime portal) has not acted, you can seek information about how your complaint was handled. PSP banks that are nationalised banks or public-sector banks are covered by the RTI Act. Private banks are not RTI-able, but RBI as regulator is. Filing RTI against RBI about its supervision of your complaint is permissible.

File an RTI to: your PSP bank (if a public-sector bank) or the Reserve Bank of India (Central Public Information Officer, Department of Payment and Settlement Systems). NPCI's RTI status is contested and not settled; route NPCI-related questions through RBI's CPIO instead.

Useful RTI questions:

• What is the status of my UPI fraud complaint reference number [X] filed on [date], and what action was taken?
• What guidelines govern the time limit for a bank to credit shadow reversal in an unauthorised UPI transaction complaint?
• What NPCI circular or directive applies to UPI chargeback timelines for member banks?
• How many UPI fraud complaints were received and resolved by your institution in [financial year]?
• What action has RBI taken against [bank name] for non-compliance with the 10-working-day shadow reversal rule?

→ Use our free AI RTI Drafter to generate a complete Section 6(1) application.

• RBI Circular DBR.No.Leg.BC.78/09.07.005/2017-18 (6 July 2017), Customer Protection: Limiting Liability of Customers in Unauthorised Electronic Banking Transactions: rbi.org.in
• RBI Circular RBI/2019-20/67 (20 September 2019), Harmonisation of Turn-Around Time and Customer Compensation for Failed Transactions: rbi.org.in
• National Cyber Crime Reporting Portal (Ministry of Home Affairs): cybercrime.gov.in
• NPCI, UPI Dispute and Grievance: npci.org.in
• RBI Complaint Management System (Integrated Ombudsman): cms.rbi.org.in
• RBI Complaints page: rbi.org.in/Scripts/Complaints.aspx

By Dr. Shrawan Kumar Pathak