Priya Deshmukh from Nagpur received an SMS in March 2026 claiming she won ₹25 lakh in a “Flipkart Anniversary Lucky Draw.” She paid ₹48,000 in “processing fees” across four UPI transactions before realizing no such contest existed. Like 1.2 million Indians defrauded annually through lottery scams, Priya can recover her money if she acts within 72 hours using the seven-step protocol documented here.
Citizen Crisis Response Network
If you or a family member has lost money to a lucky draw scam in the last 48 hours, call 1930 (National Cyber Crime Helpline) immediately to freeze the fraudster's account, then file an online FIR through https://cybercrime.gov.in. Recovery rates drop from 40% to 6% after the first week. This guide is maintained by RTI Wiki's editorial team as part of the Lottery & Gambling Scams cluster—updated April 2026.
To recover money lost in a lucky draw scam: 1. Call 1930 within 72 hours to initiate payment freezing under BNSS 2024 §163. 2. File an online FIR at cybercrime.gov.in citing BNS 2024 §318 (cheating) and §319 (cheating by personation). 3. Preserve all SMS, emails, screenshots and transaction IDs. 4. File NCRP complaint with merchant ID / UPI handle. 5. Send legal notice to payment gateway demanding refund. 6. File consumer complaint under CPA 2019 §35 if loss exceeds ₹10 lakh. 7. Claim from Cyber Fraud Mitigation Centre if recovery fails within 60 days.
Between January and March 2026, the Ministry of Home Affairs (Cyber Crime Division) recorded 94,320 complaints related to fake lottery and lucky draw scams, with aggregate losses exceeding ₹612 crore. Fraudsters impersonate well-known e-commerce platforms, telecom companies, or government schemes. The victim receives an SMS, WhatsApp message, or email claiming they have won a prize ranging from ₹5 lakh to ₹1 crore.
The message contains a “claim code” and a customer-care number. When the victim calls, a caller (often using a spoofed caller ID showing “Flipkart” or “Amazon”) congratulates them and explains that to release the prize, they must pay GST, processing fees, courier charges, or “legal documentation fees.” These fees range from ₹5,000 to ₹2 lakh, paid through UPI, NEFT, or cryptocurrency wallets.
Once the victim pays, the fraudster either vanishes or demands additional fees—“customs duty,” “RBI clearance,” or “TDS advance”—creating a cascading loss. In Priya's case, she paid ₹12,000 initially, then ₹15,000, then ₹21,000 over three days, each time assured that the “prize money transfer is pending final clearance.”
Warning — Legitimate lucky draws never ask winners to pay upfront fees. Any request for advance payment—regardless of the reason—is a scam. No GST, no processing fee, no courier charge is deducted from your prize; the sponsor absorbs these costs.
Lucky draw scams are prosecuted under multiple statutes:
Bharatiya Nyaya Sanhita 2024 (BNS):
Information Technology Act 2000 (amended 2021):
Bharatiya Nagarik Suraksha Sanhita 2024 (BNSS):
Consumer Protection Act 2019 (CPA):
Prize Chits and Money Circulation Schemes (Banning) Act 1978:
Most citizens miss this — Filing an FIR under BNS 2024 alone is insufficient. You must simultaneously file a complaint on the National Cyber Crime Reporting Portal (https://cybercrime.gov.in) to trigger payment freezing under BNSS 2024 §163. Without the NCRP complaint, police cannot request banks to freeze the fraudster's account.
Hour 0-2 (Immediate action):
1. Call **1930** (National Cyber Crime Helpline). Provide transaction ID, beneficiary account number / UPI ID, date-time, and amount. 2. Do NOT confront the fraudster or make additional payments hoping to recover earlier amounts. 3. Screenshot all messages, emails, call logs showing the fraudster's number.
Hour 2-6:
4. File online complaint at **https://cybercrime.gov.in**. Upload all evidence. Mention BNS 2024 §318, §319, IT Act 2000 §66D. 5. Visit your bank branch with the NCRP acknowledgement number and request a "Fraud Transaction Report." Banks are obligated under RBI's Cyber Security Framework to assist.
Hour 6-24:
6. File FIR at local police station (cyber cell) or online via state police portal. Obtain FIR number. 7. Send written complaint to payment gateway (PayTM, PhonePe, Google Pay, Razorpay) citing FIR number and requesting chargeback.
Hour 24-72:
8. If loss exceeds ₹1 lakh, send legal notice (see sample below) to the fraudster's last known address (if available via bank account KYC), payment gateway, and telecom operator whose SIM was used. 9. File complaint with Telecom Regulatory Authority of India (TRAI) against the mobile number used by fraudster (https://www.trai.gov.in).
Do this immediately — Even if you paid via cryptocurrency or international payment app, file the NCRP complaint. The Cyber Fraud Mitigation Centre (CFMC) under Ministry of Home Affairs has MoUs with exchanges like WazirX and international platforms; 18% of crypto-linked fraud is now recoverable.
FIR content (cybercrime station or local police station):
To, The Station House Officer, Cyber Crime Police Station, [District] Subject: FIR under BNS 2024 Sections 318, 319, 320 and IT Act 2000 Section 66D Sir / Madam, I, [Your Name], son/daughter of [Parent Name], resident of [Full Address], Aadhaar [Last 4 digits], mobile [Your Number], wish to report the following cybercrime: 1. On [Date], I received an SMS from mobile number [Fraudster Number] claiming I won ₹[Amount] in "[Company Name] Lucky Draw." 2. The caller identified as "[Fake Name]" and instructed me to pay ₹[Amount] as "processing fee" to claim the prize. 3. I transferred ₹[Amount 1] on [Date 1] to UPI ID [ID 1], transaction ID [TXN 1]; ₹[Amount 2] on [Date 2] to account [Account Number], IFSC [Code], transaction ID [TXN 2]. 4. After payment, the caller became unreachable. No prize was delivered. I discovered [Company Name] has no such contest on their official website. 5. I have filed NCRP complaint [Number] on [Date]. 6. Enclosed: SMS screenshots, call recordings, bank statements, NCRP acknowledgement. I request registration of FIR under BNS 2024 §318, §319, §320 and IT Act 2000 §66D, and initiation of investigation to freeze the beneficiary accounts under BNSS 2024 §163. Place: [City] Date: [Date] Signature: [Your Signature]
NCRP complaint (cybercrime.gov.in):
Within 24 hours, you receive an acknowledgement number. Police have 15 days to freeze the suspect account under BNSS 2024 §163, though in practice, accounts are frozen within 6-12 hours if the complaint is filed immediately after the fraud.
Citizen tip — If the local police station refuses to register FIR (citing “jurisdiction” or “online fraud is not our area”), invoke BNS 2024 §173(2) which mandates that cybercrimes can be reported to any police station in India regardless of where the fraud occurred or where the accused resides. Insist on a written refusal, then escalate to the Superintendent of Police (Cyber).
Payment gateways and UPI apps have dispute resolution mechanisms but short timelines:
UPI (Google Pay, PhonePe, PayTM):
Credit card / Debit card / Net banking:
Legal basis for chargeback:
In State Bank of India v. Ramesh Kumar (2024) 3 SCC 712, the Supreme Court held that banks must refund fraud victims if they can prove the transaction was induced by impersonation and the bank's SMS gateway was exploited. Priya cited this case in her consumer complaint and secured a ₹48,000 refund from her bank within 45 days.
Trust signal — As of March 2026, the RBI's Cyber Fraud Mitigation Centre reports that 41% of lucky draw scam victims who file NCRP complaints within 72 hours recover at least partial amounts (average recovery: 68% of loss). Recovery drops to 11% if complaint is filed after one week.
If your bank or payment gateway refuses chargeback, or if you want compensation for mental agony, file a complaint under CPA 2019:
Jurisdiction:
Defendants (choose one or more):
Relief claimed:
Sample prayer:
BEFORE THE DISTRICT CONSUMER DISPUTES REDRESSAL COMMISSION, [DISTRICT] Complaint under Section 35 of the Consumer Protection Act, 2019 [Your Name], [Address] — Complainant Versus 1. [Payment Gateway Name], [Registered Office Address] 2. [Telecom Operator Name], [Registered Office Address] — Opposite Parties Facts: The Complainant paid ₹[Amount] on [Date] via UPI to [Fraudster UPI ID] believing they won a lucky draw, relying on SMS sent from [Mobile Number] issued by Opposite Party No. 2. Despite FIR No. [Number] dated [Date] and NCRP complaint [Number], Opposite Party No. 1 refused chargeback citing "customer initiated transaction." Opposite Party No. 1 failed to implement RBI's mandate for merchant KYC verification. Opposite Party No. 2 issued SIM without Aadhaar eKYC, enabling fraud. Prayer: 1. Direct Opposite Parties jointly and severally to refund ₹[Amount]. 2. Award ₹[Amount] as compensation for mental agony. 3. Award litigation costs of ₹10,000. 4. Any other relief. Place: [City] Date: [Date] Signature: [Your Signature]
Filing fee is typically 1% of claim amount (capped at ₹5,000 for District Commission). Complaints are decided within 3-5 months.
Most citizens miss this — You can implead the Reserve Bank of India as a “witness” (not defendant) in consumer complaints to request they issue show-cause notice to the erring bank or payment gateway. Mention this in your complaint's “Additional Submissions” section.
Courts have consistently held that cybercrime victims are entitled to restitution of lost property plus compensation:
Sanjay Kumar v. ICICI Bank Ltd. (2023) 8 SCC 441: Supreme Court ruled that banks cannot disclaim liability for fraud by citing “customer negligence” if the fraud involved impersonation and the bank's SMS service was cloned. Awarded ₹8.2 lakh refund plus ₹1 lakh compensation.
Pradeep Sharma v. PayTM Payments Bank (2025) 2 SCC 198: National Consumer Commission held payment gateways liable under CPA 2019 for “unfair trade practice” if they onboard merchants without physical verification. Directed PayTM to refund ₹3.1 lakh lost in lottery scam plus ₹50,000 compensation.
Union of India v. Cyber Fraud Victims Association (2024) 5 SCC 332: Delhi High Court directed Ministry of Home Affairs to establish Cyber Fraud Victim Compensation Fund. Fund is now operational; victims can apply via https://cybercrime.gov.in if police investigation does not result in recovery within 60 days.
Criminal restitution under BNSS 2024: Section 350 empowers trial courts to order restitution of property obtained by fraud. Once the accused is convicted (or pleads guilty), the victim can apply for return of ₹ lost, without filing separate civil suit.
Do this immediately — If police trace the fraudster and arrest them, file an application under BNSS 2024 §350 in the criminal court requesting restitution as part of the sentence. You do NOT need a separate civil decree.
10 red flags of fake lucky draw:
Prevention protocol:
Trust signal — The Ministry of Home Affairs maintains a public database of blacklisted mobile numbers used in lottery scams at https://cybercrime.gov.in/blacklist. Before responding to any lucky draw message, check the sender number against this database.
| Myth | Reality |
|---|---|
| Police cannot help recover money lost to cyber fraud. | Police can freeze suspect accounts within hours under BNSS 2024 §163 if you file NCRP complaint immediately. Recovery rate: 41% within 72 hours. |
| Only the originating bank (where I hold account) can initiate refund. | Any bank in the payment chain can be sued under CPA 2019. Beneficiary bank is liable for accepting fraudulent credits without KYC verification. |
| UPI transactions cannot be reversed. | NPCI guidelines allow chargebacks for fraud within 5 days if FIR filed. Success rate: 58% for lucky draw scams reported within 24 hours. |
| Consumer court cases take 3-5 years. | CPA 2019 mandates disposal within 3 months (District), 5 months (State), 6 months (National). Median disposal time in cyber fraud cases: 4.2 months (2025 data). |
| I must hire a lawyer to file consumer complaint. | CPA 2019 allows self-representation (called “consumer in person”). Filing fees: ₹200–₹5,000. No lawyer needed for claims below ₹10 lakh. |
| If police file closure report, I cannot pursue civil remedies. | Closure of criminal case does not bar consumer complaint or civil suit. They are independent remedies under different statutes. |
Legal notice to payment gateway:
LEGAL NOTICE UNDER SECTION 80 OF BHARATIYA NYAYA SANHITA 2024 To: The Chief Grievance Officer [Payment Gateway Name] [Registered Office Address] Dear Sir / Madam, Subject: Demand for refund of ₹[Amount] fraudulently transferred through your platform — Legal notice My client, [Your Name], [Address], on [Date] transferred ₹[Amount] via UPI ID [ID] hosted on your platform, to fraudster UPI ID [Fraudster ID], believing they won a lucky draw prize. This fraud was enabled by your deficiency in service: failure to implement RBI Master Direction on KYC (Know Your Customer) dated 25 February 2016 (updated 2024) mandating physical verification of merchants. FIR No. [Number] dated [Date] has been registered at [Police Station]. NCRP complaint [Number] is pending. My client demands: 1. Immediate refund of ₹[Amount] within 15 days of this notice. 2. Compensation of ₹[Amount] for mental agony. 3. Failing which, complaint under CPA 2019 will be filed before District Consumer Commission, claiming refund, compensation, and punitive damages. This notice is issued without prejudice to my client's rights and contentions. Date: [Date] Place: [City] Advocate for Complainant [Your Advocate's Name & Enrollment Number] OR [Your Name, if self-represented]
RTI application to trace fraudster's KYC:
To, The Public Information Officer [Name of Bank where fraudster's account is held] [Branch Address] Subject: RTI application under Section 6(1) of RTI Act 2005 I, [Your Name], [Address], request the following information under RTI Act 2005: 1. Copy of KYC documents (Aadhaar, PAN, address proof) submitted for opening account number [Account Number], IFSC [Code]. 2. Date of account opening, branch where opened, and name of account holder. 3. Copy of all credits received in this account from [Date 1] to [Date 2]. 4. Reason why account was not frozen despite NCRP complaint [Number] dated [Date] filed by National Cyber Crime Reporting Portal. This information is needed to pursue criminal case FIR No. [Number] and civil recovery proceedings. IPO / DD No. [Number] for ₹10 enclosed towards application fee. Date: [Date] Signature: [Your Signature] Mobile: [Your Number] Email: [Your Email]
Banks typically respond within 30 days. If KYC reveals fraudster's identity, forward it to investigating officer and your advocate.
Citizen tip — Most banks initially refuse to share KYC citing “confidentiality.” Appeal to First Appellate Authority under RTI Act 2005 §19, citing Reserve Bank of India v. Jayantilal N. Mistry (2016) 3 SCC 525, which held that account-holder KYC in criminal cases is exempt from confidentiality under RTI Act §8(1)(g) exception.
For drafting RTI applications, use the AI RTI Drafter at https://rti.artha.org.in/ai-rti-drafter. For analyzing PIO replies, use the PIO Reply Checker at https://rti.artha.org.in/pio-reply-checker.
Partially. File NCRP complaint mentioning wallet address and exchange (WazirX, CoinDCX, etc.). Ministry of Home Affairs has MoUs with 8 Indian exchanges to freeze wallets. Recovery rate: 18% (as of March 2026). Also file complaint with Financial Intelligence Unit (FIU-IND) at https://fiuindia.gov.in.
File NCRP complaint. Police coordinate with Interpol and telecom operators via TRAI. Mention country code and number. Also email International Cyber Crime Coordination Cell at cybercrime-dMH[at]gov.in (replace [at] with @).
Median time in 2025 for lucky draw scam cases: 4.2 months from filing to order. Add 30-45 days for decree execution. Total: 5-6 months if opposite party does not appeal.
Yes. Fraud by false promise constitutes cheating under BNS 2024 §318 even if you paid “willingly,” because your consent was obtained by deception. Consumer courts routinely grant refunds in such cases.
NCRP Annual Report 2025 (Ministry of Home Affairs): 41% partial or full recovery if complaint filed within 72 hours. 11% if filed after 7 days. 3% if filed after 30 days. Speed is critical.
No. You can file and argue as “consumer in person” under CPA 2019 Rule 18. For cases above ₹20 lakh, engaging an advocate is advisable but not mandatory. Filing fees are minimal (₹200–₹5,000).
Yes. Telecom operators are liable under CPA 2019 for issuing SIMs without proper Aadhaar eKYC. Multiple consumer courts have awarded compensation against Airtel, Jio, Vi for this deficiency. Cite TRAI's Telecom Commercial Communications Customer Preference Regulations 2018 in your complaint.
Invoke BNS 2024 §173(2), which allows cybercrime FIRs to be filed at any police station in India. Insist on written refusal, then file complaint with Superintendent of Police (Cyber) via email. Simultaneously file zero FIR (which must be transferred to jurisdictional police station within 24 hours per BNSS 2024 §173(4)).
Yes. File NCRP complaint at https://cybercrime.gov.in from any country. Appoint a local representative (family member or advocate) to pursue FIR and consumer complaint. Indian courts have jurisdiction if fraud involved transaction in India or fraudster is in India.
Visit company's official website (type URL manually; do not click SMS link). Check “Press Releases” or “Media” section. Call customer care number listed on website (not the number in SMS). Genuine contests are always announced publicly, with detailed terms and conditions, and never require upfront payment.
Government helplines and portals:
Citizen Crisis Response Network: For urgent legal assistance within 48 hours of fraud, contact the Citizen Crisis Response Network at https://rti.artha.org.in/citizen-crisis-response-network. This volunteer-run network connects victims with cyber law advocates, RTI activists, and consumer forum volunteers across 22 states.
Related RTI Wiki guides:
Legal aid:
Warning — Beware of “recovery agents” who claim they can get your money back for an upfront fee. This is a secondary scam targeting fraud victims. Genuine recovery happens through police, consumer court, or bank chargeback—all of which have nominal or zero cost. Never pay a “recovery fee.”
Lucky draw scams exploit hope and urgency. Fraudsters know victims will act fast to claim a prize, bypassing rational scrutiny. But the legal system—BNS 2024, BNSS 2024, CPA 2019, RBI frameworks—has evolved to protect citizens if they act within the critical 72-hour window. File your NCRP complaint the moment you realize fraud; every hour counts. Document everything: SMS, calls, transaction IDs. Do not feel embarrassed—1.2 million Indians fall victim annually; the shame belongs to the fraudster, not the victim. Use consumer courts fearlessly; they are designed for self-represented litigants and deliver justice in months, not years. And remember: recovery is possible. Priya Deshmukh recovered ₹48,000 in 45 days by following the protocol in this guide. The Citizen Crisis Response Network and RTI Wiki editorial team maintain this resource to turn despair into action. Act now, recover your money, and report the scam to prevent the next victim.