Your phone shows “No service”, “SIM not provisioned”, “Emergency calls only” or “Invalid SIM” out of nowhere. Sometimes it is a chip fault. Many times in 2025-2026 India, it is SIM swap fraud, a port-out hijack, a TRAI KYC re-verification block, or an Aadhaar-linked-number suspension that drains banks within minutes. The next 30 minutes decide whether you keep your money or lose it. This is the citizen-first 2026 playbook with operator numbers, BNS / BNSS sections, sample complaints and the exact escalation order.
* Use another phone within 5 minutes. Call your operator helpline (Jio 199, Airtel 121, Vi 199, BSNL 1503) from a friend or family member's number. * Block the active SIM on your number and ask for “SIM block plus re-issue with biometric”. Note the ticket number and the call timestamp. * Freeze your bank channels in parallel. Call the bank's anti-fraud line on the back of the card. Disable UPI, net banking, debit card, credit card. * Dial 1930 (cyber fraud helpline) if any debit is visible. Also file at https://cybercrime.gov.in within 24 hours. * Open TAFCOP at https://tafcop.sancharsaathi.gov.in from another device. See every SIM in your name. Flag any you do not recognise. * Lock Aadhaar biometrics at https://uidai.gov.in or on the mAadhaar app. This stops AePS (Aadhaar Enabled Payment System) drain. * Cost: zero. TAFCOP, CEIR, 1930, NCRP, UIDAI lock, FIR are all free. * Window: RBI gives zero liability if you report within 3 working days under the Customer Protection Circular DBR.No.Leg.BC.78/2017-18.
Track every SIM, telecom and cyber fraud rule by email. Subscribe to RTI Wiki updates
Before you panic, identify which of these is hitting you. The recovery path is different for each.
A criminal walks into a telecom retailer (or calls customer care) with leaked KYC, takes a duplicate SIM for your number, and the old chip in your phone goes dead. Within minutes the criminal receives every OTP. This is the most dangerous pattern. NCRP recorded over 90,000 SIM-swap related complaints in 2024 with losses crossing ₹500 crore.
The criminal sends a UPC (Unique Porting Code) request from your number using a leaked OTP or a social-engineered customer-care call. Once port-out completes, your number lives on a different operator's SIM held by the fraudster. The DoT mandated a 7-day port cooling period in March 2024 but the loophole still exists when the victim is asleep at 2 am.
If your re-verification flag is triggered (mismatched address, expired Aadhaar OTP, or a TAFCOP complaint from another citizen), the operator suspends the SIM until you complete fresh KYC at a retail point with biometric. You will see no fraud, just “no service” and an SMS asking to visit a store.
If your Aadhaar update went through (new address or new mobile), the older mobile-Aadhaar linkage on bank and IT accounts breaks. The SIM keeps working, but OTP delivery fails because PAN/Aadhaar/bank-linked services bounce. Symptoms look like SIM failure.
The newer attack. The fraudster opens an eSIM activation on your number using a leaked OTP and your QR-based eSIM profile transfers to the criminal's device. Your physical SIM may still show signal for a few minutes, then dies.
Old SIMs (2G, pre-4G) lose contact over time. Operators are retiring inactive 2G SIMs in 2025-2026 ahead of the 5G refarming. If you have not used the SIM in 90 days, the operator can recycle the number. This is regulated recycling under TRAI Telecom Mobile Number Portability Regulations and the DoT SIM allocation rules.
If you reported the phone stolen on CEIR (Central Equipment Identity Register) at https://www.ceir.gov.in, the SIM is also flagged in the IMEI block. Sometimes a family member files CEIR without telling you.
Routine cause: tower issue, APN reset, roaming setting off. Check DownDetector and ask another person on the same operator nearby. If others have signal and you do not, it is not a network outage.
Print or screenshot this section. Follow it in this order.
- Remove the SIM, wipe contacts, reinsert. Reboot. - Insert the SIM into a second phone. Still no service? It is not a handset issue. - Call your own number from another phone. If it rings on a stranger's device or the call goes through but you do not hear it - SIM swap or port out has happened. - If you get “the number you are calling is not in service” - likely swap, port out or KYC block.
- Call the operator on another phone: * Jio: 1800-889-9999 or 199 from a Jio number * Airtel: 121 from an Airtel number, or 1800-103-4444 * Vi (Vodafone Idea): 199 from a Vi number, or 1800-200-1234 * BSNL: 1503 from BSNL, or 1800-345-1500 * MTNL: 1503 - Identify yourself with alternate number, email, date of birth, last recharge amount, last three numbers dialled. Ask for immediate SIM block and re-issue with biometric. - Get the ticket / SR number in writing (SMS or email). Operators must give a written acknowledgement under TRAI Telecom Consumer Complaint Redressal Regulations, 2012.
- Call your bank's anti-fraud helpline (back of debit card). Say: “SIM swap or port-out fraud. Block all online banking, UPI, debit and credit cards under RBI Customer Liability Circular DBR.No.Leg.BC.78/2017-18.” - Open UPI apps from another device, log out, then disable UPI ID from BHIM, PhonePe, GPay, Paytm. - Email every bank and broker with the same freeze request. Subject line: “Urgent - SIM compromise, freeze account [acc number] under RBI 2017-18 framework”. - Lock Aadhaar biometrics at https://uidai.gov.in or on the mAadhaar app. Path: My Aadhaar → Biometric Settings → Lock. Stops AePS drains. - Lock UPI mandates and auto-pay in each app to stop recurring debits.
- Dial 1930 if any unauthorised debit is visible. Note the acknowledgement number. - File the same complaint at https://cybercrime.gov.in within 24 hours. Upload the bank SMS, the operator ticket, and the bank account number. - Open TAFCOP at https://tafcop.sancharsaathi.gov.in. Enter your number, get OTP on alternate number (or use a tokenised access through DigiLocker), see every SIM in your name. Flag unknown ones. Operator must deactivate within 15 days. - CEIR: if the handset is also stolen, block IMEI at https://www.ceir.gov.in.
If you complete these four steps within 30 minutes, recovery rate is over 80 per cent. After 24 hours it drops to under 30 per cent.
Without evidence, banks and police push you in circles. Save these:
* Bank SMS for every unauthorised debit - full text plus screenshot of timestamp. * Operator helpline ticket number, SR ID, call timestamp, agent name. * Phone screenshot showing “No service”, “SIM not provisioned” or “Emergency calls only” with battery and time visible. * Call log showing you tried calling your own number. * TAFCOP report with all SIMs in your name as on the date. * 1930 acknowledgement number and the NCRP acknowledgement PDF. * CEIR IMEI block confirmation. * Aadhaar biometric lock screenshot or SMS. * Email trails with bank, operator, broker, mutual-fund houses, NPS, EPF. * Bank statement PDF for the last 30 days from net banking (download on another device). * CCTV request RTI to the telco store you suspect (or any store) - under the Right to Information Act, 2005.
Naming convention. Use a folder name like 2026-05-16-sim-swap-recovery. Inside, prefix every file with YYYY-MM-DD-HHMM so the timeline is self-evident in court.
If the helpline does not resolve in 24 hours, escalate to the operator's Appellate Authority under TRAI's Telecom Consumer Complaints Redressal Regulations, 2012. Direct emails:
* Jio: [email protected] (find state-wise on jio.com/help/appellate) * Airtel: [email protected] (state-specific on airtel.in/contact-us) * Vi: [email protected] (state-specific on myvi.in) * BSNL: [email protected] (each circle has its own; find on bsnl.co.in)
Mention your SR number, account number, complaint description, and ask for resolution within 30 days per TRAI's regulation.
If the operator does not resolve, file at https://pgportal.gov.in (CPGRAMS) under Department of Telecommunications. Quote your operator SR number and the TRAI 2012 regulation.
The Sanchar Saathi portal (https://sancharsaathi.gov.in) is the single citizen-facing dashboard. Use:
* TAFCOP - list all SIMs in your name and flag unknowns. * Know Your Mobile Connection - verify if a SIM is genuine. * CEIR - block stolen handset IMEI. * Chakshu - report fraud SMS / call. * RICWIN - report international spoofed calls.
TRAI does not handle individual disputes but accepts policy complaints at https://trai.gov.in. Useful when the operator has violated regulation 7-day SIM re-issuance, 7-day port cooling, or KYC norms. Forward your operator SR plus the regulation citation.
If the bank refuses zero liability under RBI 2017-18 circular, escalate at https://cms.rbi.org.in within 30 days of receiving the bank's final reply (or 30 days from no-reply). The RBI Banking Ombudsman Scheme, 2021 binds banks to comply within 30 days of award.
A telco is a public-private regulated entity. File RTI at https://rtionline.gov.in to the Department of Telecommunications asking:
* KYC documents submitted at the time of SIM re-issue on date X * CCTV footage retention policy of the retailer code XXXX * Audit findings of the operator for the relevant quarter
Use the bare RTI request template in the citizen-rti-playbook on this wiki.
Dial 1930 and file at cybercrime.gov.in first. Both feed into the NCRP. Then move to FIR at the local cyber police station when:
* Any unauthorised debit has happened (any amount, even ₹1). * A loan has been taken in your name (instant personal, BNPL, credit card cash advance). * Your email or social account has been hijacked and used to defraud others. * Your identity has been impersonated for any contract. * The operator refuses to share KYC documents of the duplicate SIM.
Sections to ask the police to register under (2024 codes):
* BNS §318 - cheating (up to 7 years). * BNS §319 - cheating by personation (up to 5 years). * BNS §336(3) - forgery with intent to cheat (up to 7 years). * BNS §339 - forged document used as genuine (up to 7 years). * BNS §111 - organised crime (if a gang is involved). * IT Act, 2000 §66C - identity theft (up to 3 years + ₹1 lakh fine). * IT Act, 2000 §66D - cheating by impersonation using computer resource (up to 3 years + ₹1 lakh fine). * PMLA, 2002 §3 - money laundering (if proceeds are layered).
Procedural code: BNSS, 2023 §173 for FIR registration, §176 for investigation timeline, §230 for digital evidence chain.
If the police refuse to file, send a written complaint to the Superintendent of Police under BNSS §173(4), and a copy to the Director General of Police. If still refused, move the Judicial Magistrate under BNSS §175(3).
To: The Nodal Officer / Appellate Authority, [Operator Name], [Circle / State]
Cc: 1930 Cyber Helpline; [email protected]; [email protected]
Subject: Urgent - Unauthorised SIM swap on mobile XXXXXXXXXX on [DATE TIME], request immediate revert, KYC disclosure under RTI Act 2005, and zero liability under RBI Customer Liability Circular DBR.No.Leg.BC.78/2017-18
Date: [DD-MM-YYYY]
Dear Sir / Madam,
1. I am the registered subscriber of mobile number XXXXXXXXXX on your network since [year]. My CAF (Customer Application Form) is under PAN [masked] and Aadhaar last 4 digits [XXXX].
2. On [DATE] at approximately [TIME], my SIM stopped working and the device showed “No service / SIM not provisioned”. On verification I noticed unauthorised debits from my bank account number XXXXXXXX maintained at [Bank], aggregating ₹[amount].
3. I called your helpline at [TIME] from alternate number [XXXXXXXXXX] and was issued SR / ticket number [XXXX]. I requested an immediate block and re-issue with biometric verification.
4. I have reported the matter on:
- 1930 Cyber Helpline - Ack [XXXXXX]
- NCRP cybercrime.gov.in - Ack [XXXXXX]
- TAFCOP (Sanchar Saathi) - Ack [XXXXXX]
- [Bank] anti-fraud line - Ack [XXXXXX]
- Aadhaar biometric lock confirmation on [DATE TIME].
5. Under TRAI Telecom Consumer Complaints Redressal Regulations, 2012 and DoT directive of August 2023 mandating biometric verification for SIM re-issue, please furnish:
(a) The KYC documents on which the duplicate SIM was issued.
(b) CCTV footage of the retailer code and store address.
© The biometric audit log of the re-issuance event.
(d) The IMSI / ICCID of the duplicate SIM.
6. Under RBI Customer Liability Circular DBR.No.Leg.BC.78/2017-18 dated 6 July 2017, I claim zero liability as I have reported within three working days. Please freeze the account, reverse the unauthorised debits within ten working days, and provide a shadow credit pending investigation.
7. Failure to comply within 30 days will compel me to escalate to:
- DoT through CPGRAMS at pgportal.gov.in
- TRAI under the 2012 Regulations
- RBI Banking Ombudsman under the 2021 Scheme
- FIR under BNS §§318, 319, 336(3), 339 and IT Act §§66C, 66D
- Civil claim for damages.
Please acknowledge this complaint within 24 hours by email.
Yours faithfully,
[Name]
[Address] | [Email] | Alt. Phone [XXXXXXXXXX]
Enclosures: bank SMS screenshots, TAFCOP report, NCRP acknowledgement PDF, Aadhaar lock SMS.
A separate and silent problem. When you update your mobile number on Aadhaar, the older number is detached. But banks, IT department, EPFO, NPS, brokers, mutual-fund RTAs and DigiLocker still hold the older number until you change it separately at each one.
Result: a fraudster who controls your old number (because you stopped using the SIM and it was recycled by the operator after 90 days) receives OTPs from accounts you forgot to update.
Mitigation:
- Use TAFCOP to see every SIM in your name today. If your old number is no longer listed, it has been recycled. - Check the linked mobile at every bank, broker, RTA, EPFO, NPS, IT, DigiLocker, Passport Seva, vehicle RC, FASTag. Update to the current number. - For accounts you no longer use, close them in writing. - See the sibling article mobile-number-recycled-old-accounts-risk-india on this wiki for the full hygiene checklist.
The RBI 2017-18 framework uses two clocks:
* Zero liability - fraud arising from third-party breach where the customer reports within 3 working days of receiving the bank's transaction SMS or email. * Limited liability up to ₹25,000 - if reported within 4 to 7 working days (depending on whether your account is BSBDA, savings, current). * Unlimited liability - if reported after 7 working days or where customer negligence is proven.
For SIM swap victims, the “third-party breach” interpretation is firmly settled by multiple Banking Ombudsman awards in 2023-2024 (for example, awards under CMS RBI for ICICI, HDFC, SBI cases where SIM swap was the root vector). Always cite DBR.No.Leg.BC.78/2017-18 in the complaint and ask the bank for the shadow refund within 10 working days.
Final resolution must happen within 90 days. If the bank refuses, the ombudsman award is binding under the 2021 Scheme.
The companion guide golden-hour-zero-liability-cyber-fraud-rbi-india on this wiki has the full bank-by-bank claim template.
- Open https://tafcop.sancharsaathi.gov.in on a clean device. - Enter your mobile number. If your SIM is dead, use a friend's number registered on the same Aadhaar (TAFCOP allows alternate retrieval). - You will see a list of every SIM in your name across all operators. - Tick the box next to any number you do not recognise. Select Not my number. - Operator must verify and deactivate within 15 days. - You get an acknowledgement ID. Save the PDF. - If the operator does not deactivate within 15 days, escalate to DoT through CPGRAMS quoting your ack ID.
Average citizen has 3 to 4 SIMs. Indian law allows up to 9 SIMs per Aadhaar (6 for Jammu and Kashmir, Assam, north-east). Any extra is prima facie illegal.
If your physical phone was stolen along with the SIM:
- Visit https://www.ceir.gov.in. - Click Block Stolen / Lost Mobile. - Enter the two IMEIs (dual SIM), the bill of purchase, FIR copy. - Get the Request ID. - DoT pushes the block to all operators in 24 hours. The phone becomes unusable on any Indian network. - When recovered, unblock at the same portal.
* Calling 100 first - local police are not equipped for cyber. Dial 1930 first, then file FIR. * Sharing OTP with the bank's “fraud team” that called you back - every legitimate bank tells you, “We will never ask for OTP”. * Visiting the same retailer who sold you the SIM - they may be the source of the swap. Visit a company-owned store. * Waiting overnight to report - every hour costs zero-liability rights and recovery rate. * Not locking Aadhaar biometrics - AePS drain happens silently from rural BC points without any OTP. * Not filing at NCRP because you already called 1930 - both are needed. 1930 is for immediate block, NCRP is the written complaint. * Reusing the same handset without a factory reset - if malware planted the OTP forwarder, recovery is undone. * Forgetting demat and mutual fund accounts - fraudsters now redeem MFs and pledge shares within hours. * Not asking for KYC documents of the duplicate SIM - without these, the police FIR has no accused. * Trusting a SIM agent on Telegram offering to “restore the number for a fee” - it is a second fraud layered on the first.
* Bengaluru tech professional, July 2024, lost ₹1.15 crore in 90 minutes via SIM swap by a corrupt franchisee. Recovered 70 per cent in 11 months through banking ombudsman award. * Hyderabad senior citizen, October 2024, lost ₹52 lakh including ₹20 lakh in instant personal loans. Recovered 100 per cent after FIR plus RBI ombudsman. * Chennai homemaker, January 2025, port-out fraud at 2 am, ₹18 lakh drained. Zero liability claim approved in 38 days. * NCRP 2024: 90,000-plus SIM-swap complaints, aggregate loss over ₹500 crore. * TRAI quarterly report: telcos collectively fined ₹3.6 crore in 2024 for KYC lapses on SIM issuance. * DoT crackdown 2024-2025: over 6.8 lakh fraudulent SIMs disconnected and 65,000 retailers blacklisted via Sanchar Saathi.
Yes. The window for zero liability begins from the moment of unauthorised access, not from the moment you notice money loss. Reporting within the first 24 hours protects you even if debits start three days later. Open a 1930 complaint, file at NCRP, and email the operator and bank. Save every acknowledgement.
Ask the operator in writing for the last SIM change event log under TRAI 2012 Regulations and the August 2023 DoT directive. They must furnish the ICCID change history, biometric audit log and retailer code. If they refuse, file RTI to the Department of Telecommunications at rtionline.gov.in seeking the same. Also pull your bank's IP and device logs through a separate RTI to the bank's nodal officer.
Yes. TRAI and DoT directives empower operators to suspend SIMs for address mismatch, expired Aadhaar OTP, TAFCOP complaints by other citizens, or audit-flag KYC. You will get an SMS asking you to visit the store for biometric re-verification within 15 days. Carry your Aadhaar, alternate ID, and a self-attested address proof. Re-activation is free.
In SIM swap, the criminal gets a duplicate SIM on the same operator keeping your number on the same network. In port-out fraud, the criminal transfers your number to a different operator's SIM using a UPC code. Symptoms are identical (your SIM dies). Port-out leaves a clearer audit trail because two operators are involved.
No. Aadhaar biometric lock stops AePS drains (cash withdrawal at rural BC points) and fresh eKYC for new SIMs and bank accounts in your name. It does not stop a corrupt retailer with leaked KYC from doing a customer-care-driven swap. You still need to call the operator to block the SIM.
Use a family member's, neighbour's or any public phone. Operator helplines (Jio 1800-889-9999, Airtel 1800-103-4444, Vi 1800-200-1234, BSNL 1800-345-1500) accept calls from any number. You will be authenticated through alternate email, CAF address, last recharge amount, last three dialled numbers. If none works, walk into a company-owned operator store with your Aadhaar and PAN. Avoid franchisees if possible.
Yes. RBI's three-working-day window includes the day after the transaction SMS or email. As long as you report on or before the third working day, you are entitled to zero liability under the 2017-18 circular. Sundays and bank holidays are excluded from the count.
Reject the framing in writing. Cite RBI Banking Ombudsman awards 2023-2024 holding that SIM swap is a third-party breach because the operator-side compromise is outside the customer's control. Escalate to CMS RBI ombudsman within 30 days. Attach your TAFCOP report, NCRP acknowledgement, and operator SR ticket.
No. File FIR against unknown accused under BNS §§318, 319, 336(3) and IT Act §§66C, 66D. The cyber police are obliged to investigate using the mule account chain, IMEI of the duplicate SIM, and CCTV at the retailer. Refusal to register is itself a violation of BNSS §173.
Yes, in most cases. Once the operator confirms a clean SIM with biometric re-issue, the number is safer than a fresh one because all your historical accounts already trust it. Combine recovery with:
* Aadhaar biometric lock on, * UPI PIN reset on every app, * change of net-banking and email passwords, * 2FA app (not SMS) for Gmail, Apple, Microsoft, * fresh factory reset of the phone, * TAFCOP re-check at the 15-day mark to confirm no shadow SIM.
This article uses the sitewide schema-auto.js loader that automatically generates FAQPage JSON-LD from every H3 question heading on the page. No inline JSON-LD blocks are needed in the article body. The loader extracts each ==== Question ==== H3 and the immediately following paragraph as the answer. To verify after deploy, paste the page URL into https://search.google.com/test/rich-results and look for FAQPage parsing.
* SIM swap fraud - 24-hour recovery plan * 1930 Cyber Helpline - the call script * How to freeze a bank account after cyber fraud * Golden hour and RBI zero liability * Recycled mobile numbers and old account risk * Google, Apple, Meta, Microsoft account recovery * WhatsApp banned or hijacked - recovery * Citizen RTI playbook
* TRAI - Telecom Regulatory Authority of India - https://www.trai.gov.in * DoT - Department of Telecommunications - https://dot.gov.in * Sanchar Saathi (DoT) - https://sancharsaathi.gov.in * TAFCOP - https://tafcop.sancharsaathi.gov.in * CEIR - https://www.ceir.gov.in * Chakshu (fraud SMS / call reporter) - https://sancharsaathi.gov.in/sfc * 1930 Cyber Helpline - toll-free 24×7 * NCRP - https://cybercrime.gov.in * UIDAI - Aadhaar biometric lock - https://uidai.gov.in * RBI Customer Protection Circular - DBR.No.Leg.BC.78/2017-18 dated 6 July 2017 * RBI Banking Ombudsman Scheme, 2021 - https://cms.rbi.org.in * IT Act, 2000 - §§66C, 66D * BNS, 2023 - §§318, 319, 336(3), 339, 111 * BNSS, 2023 - §§173, 175(3), 176, 230 * Operator nodal pages: * Jio - https://www.jio.com/help/appellate * Airtel - https://www.airtel.in/contact-us * Vi - https://www.myvi.in/contact-us * BSNL - https://www.bsnl.co.in
A clean editorial illustration in muted blue and amber. Centre: a smartphone with a clear “No service” indicator at the top. Around the phone, soft icons of a SIM card, a padlock, a bank-card chip, a small Aadhaar card, a 1930 number tag, and a TAFCOP shield. Background: a faint Indian-city skyline at dawn (Delhi gate silhouette, Mumbai skyline silhouette). Style: vector flat, citizen-explainer poster, generous whitespace, no human faces, no real brand logos. Top-left text “RTI Wiki | citizen guide 2026”. Bottom-right small caption “SIM stopped working - what to do in 30 minutes”. 1200×630 pixel canvas, safe text margins, high contrast for thumbnail.
Last updated: 2026-05-16. This guide is general legal information based on Indian statutes and regulator circulars current on the date above. It is not a substitute for advice from a qualified lawyer or chartered accountant for your specific case. Always verify the latest TRAI, DoT, RBI and police procedure on the official portals listed in the sources section.