📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—cyber:upi-fraud-complaint [2026/07/11 00:27] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(UPI fraud complaint, UPI chargeback, NPCI dispute, cybercrime 1930, unauthorised UPI transaction, RBI ombudsman UPI)
 +metatag-title=(UPI Fraud Complaint and Chargeback 2026)&metatag-description=(Step-by-step guide to filing a UPI fraud complaint in India: call 1930, raise a dispute with your PSP bank, and escalate to the RBI Ombudsman if unresolved.)
 +metatag-og:image=(https://righttoinformation.wiki/og/cyber-upi-fraud-complaint.webp)
 +metatag-twitter:image=(https://righttoinformation.wiki/og/cyber-upi-fraud-complaint.webp)}}
  
 +====== UPI Fraud Complaint & Chargeback 2026 ======
 +
 +{{https://righttoinformation.wiki/og/cyber-upi-fraud-complaint.webp?1200x675|UPI Fraud Complaint help desk scene}}
 +
 +**Reviewed on:** 2026-06-19.
 +
 +<WRAP info>**Direct answer.** Call 1930 within the golden hour to freeze the money trail. Then raise a dispute through your UPI app or PSP bank within 3 working days to claim zero liability under RBI rules. If the bank does not resolve it in 30 days, escalate to the RBI Integrated Ombudsman.</WRAP>
 +
 +===== Why Speed Is Everything in UPI Fraud =====
 +
 +A UPI payment is irreversible the moment the beneficiary bank credits the receiver. Unlike a cheque, there is no "stop payment" once the funds leave your account. The window that actually works is the first hour after the fraud happens, and the first three working days for your formal complaint.
 +
 +Law enforcement calls this the "golden hour." The [[https://cybercrime.gov.in|National Cyber Crime Reporting Portal]] routes financial fraud reports to a dedicated financial intelligence unit that can ask banks to put a "lien" on the fraudster's account before withdrawal. Once funds move to a mule account and are withdrawn, recovery becomes near-impossible.
 +
 +This article maps three distinct situations a UPI victim faces, each with a different legal pathway:
 +
 +  - **Unauthorised debit** (someone else initiated the transaction using your credentials or a compromised device)
 +  - **Authorised-but-deceived payment** (you sent money yourself after being tricked: a phishing call, a fake QR code, a job-offer scam)
 +  - **Failed or wrong UPI transaction** (you intended to pay, but money left your account and did not reach the right party, or the transaction failed and was not reversed)
 +
 +The route and the legal protection differ sharply across all three.
 +
 +===== Step 1: Call 1930 Immediately =====
 +
 +Helpline **1930** is the national cyber crime financial fraud helpline. It connects to the [[https://cybercrime.gov.in|National Cyber Crime Reporting Portal (NCRP)]], operated by the Ministry of Home Affairs.
 +
 +When you call:
 +
 +  - Report the fraud transaction amount, your UPI ID, the beneficiary UPI ID or mobile number, and the UTR (UPI Transaction Reference) number.
 +  - The operator logs a complaint and, where possible, flags the destination account to prevent further withdrawals.
 +  - You will receive a complaint acknowledgement number. Save it.
 +
 +You can also file online at [[https://cybercrime.gov.in|cybercrime.gov.in]] under the "Financial Fraud" category if you cannot reach the helpline by phone. After filing, you can [[check-status:cybercrime-complaint-status|track your cybercrime complaint status]] using your acknowledgement number.
 +
 +The 1930 helpline does not guarantee a refund. It initiates a hold request. The actual credit to your account comes only after the bank-level dispute process described below.
 +
 +For a detailed guide on the 1930 filing process, see [[cyber:report-cyber-fraud-1930|how to report cyber fraud on 1930]].
 +
 +===== Step 2: Report to Your PSP Bank Within 3 Working Days =====
 +
 +Your PSP (Payment Service Provider) bank is the bank whose UPI handle you used (for example, the bank linked to your @ybl, @okaxis, or @paytm UPI ID). This is the entity RBI holds responsible for your complaint.
 +
 +RBI circular **DBR.No.Leg.BC.78/09.07.005/2017-18** dated 6 July 2017 sets binding customer liability limits:
 +
 +^ Scenario ^ Reporting window ^ Your liability ^
 +| Bank's own negligence or fraud | Any time | Zero |
 +| Third-party breach, no fault of yours | Within 3 working days | Zero |
 +| Third-party breach, delayed reporting | 4 to 7 working days | ₹5,000 to ₹25,000 (varies by account type) |
 +| Beyond 7 working days | Determined by bank's board-approved policy | Higher |
 +
 +**What "zero liability" means in practice:** if you report a genuinely unauthorised transaction (one you did not initiate) within 3 working days, the bank must credit the disputed amount back to your account within 10 working days as a "shadow reversal," and resolve the complaint finally within 90 days.
 +
 +**How to report:**
 +
 +  - Call the 24x7 toll-free number on the back of your debit card or in your banking app.
 +  - Follow up in writing: send an email to the bank's grievance email address and keep a copy.
 +  - Raise a dispute inside your UPI app (PhonePe, Google Pay, BHIM, Paytm, etc.) using "Report a problem" or "Raise a dispute" against the specific transaction. The in-app route routes your complaint to NPCI's dispute management system; verify the exact steps on [[https://www.npci.org.in|NPCI's official portal (npci.org.in)]] or within your app, as the interface differs across apps.
 +
 +**For authorised-but-deceived payments:** If you sent the money yourself (even under false pretences), the bank's zero-liability rule under the 2017 circular does not automatically apply, because the transaction carried your authentication. Your strongest avenue here is the 1930 complaint and the bank's internal fraud team. Many banks will investigate and may recover funds if the fraudster's account is still loaded, but they are not legally bound to refund the amount the way they are for unauthorised transactions. See [[cyber:otp-bank-scam|OTP and bank scam refund process]] for that pathway.
 +
 +===== Step 3: Failed or Wrong Transactions: Automatic Refund Rule =====
 +
 +This situation is different from fraud. If a UPI payment failed (debited but not credited to the receiver), or you paid the wrong person accidentally, the applicable rule is RBI circular **RBI/2019-20/67** dated 20 September 2019 on "Harmonisation of Turn-Around Time and customer compensation for failed transactions."
 +
 +Key rules under this circular:
 +
 +  - If the beneficiary bank cannot credit the receiver, the beneficiary bank must auto-reverse the funds to your account **by T+1** (the next business day after the transaction date).
 +  - If the reversal is delayed beyond the prescribed timeline, your bank must pay you **₹100 per day** as compensation, automatically, without you filing a separate claim.
 +  - The circular covers UPI, IMPS, card-to-card transfers, NACH, and Aadhaar-enabled systems.
 +
 +If you do not receive the auto-reversal within T+1, raise a complaint with your bank citing this circular. If the bank still does not act within 30 days of your complaint, escalate to the RBI Integrated Ombudsman (see Step 4).
 +
 +For the broader money-refund process, see [[cyber:fraud-money-refund|how to get defrauded money refunded]].
 +
 +===== Step 4: Escalate to RBI Integrated Ombudsman =====
 +
 +If your PSP bank does not resolve the complaint within **30 days** of your written complaint, or gives you an unsatisfactory response, you can approach the [[complaints:banking-ombudsman|RBI Integrated Ombudsman]].
 +
 +**How to file:**
 +
 +  - Go to [[https://cms.rbi.org.in|cms.rbi.org.in]] (the RBI Complaint Management System). Note: the portal undergoes scheduled maintenance; if unavailable, write to the nearest RBI office.
 +  - You will need: your complaint reference number from the bank, the written bank response (or evidence that 30 days have passed without a response), and the transaction details.
 +
 +**Coverage:** The Integrated Ombudsman Scheme 2021 covers scheduled commercial banks, payments banks, small finance banks, and non-bank payment system operators regulated by RBI. It covers UPI fraud complaints where the PSP bank is the regulated entity.
 +
 +**No fee:** Filing is free.
 +
 +**Escalation beyond Ombudsman:** If the Ombudsman order is unsatisfactory, you may appeal to the Appellate Authority at RBI within 30 days.
 +
 +===== Understanding the UPI Chargeback =====
 +
 +"Chargeback" in UPI is not identical to a credit card chargeback (which is a bilateral reversal scheme between card networks). In UPI, the dispute mechanism works through NPCI's dispute management layer, and the process is initiated by your PSP bank on your behalf after you file a complaint with the bank.
 +
 +There is no direct "raise a chargeback" button for consumers at the NPCI level. You file with your bank, your bank logs it with NPCI, and NPCI arbitrates between the originating and beneficiary banks. For the current NPCI dispute flow and any updates to the in-app process, verify directly at [[https://www.npci.org.in|npci.org.in]], as NPCI periodically revises the dispute handling guidelines for member banks.
 +
 +**What chargeback can and cannot do:**
 +
 +  - It can reverse a failed, duplicate, or technically erroneous transaction.
 +  - It can sometimes freeze and recover funds from a fraudster's account if the complaint reaches the bank before withdrawal.
 +  - It cannot reverse an authorised payment made under fraud once the funds have been withdrawn from the mule account.
 +
 +===== Protecting Yourself: What Not to Do After a Fraud =====
 +
 +  - Do not call back any number the fraudster gave you. They often pose as "bank fraud department" staff to drain more.
 +  - Do not share OTPs, PINs, or UPI PINs with anyone, including callers claiming to be from NPCI or RBI. Neither organisation ever calls to ask for these.
 +  - Do not uninstall your banking app before filing the complaint. Transaction logs stored in the app are evidence.
 +  - Screenshot the fraudulent transaction entry in your UPI app before raising a dispute.
 +
 +===== FAQ =====
 +
 +==== Can I get my money back if I paid a fraudster myself by UPI? ====
 +
 +Not automatically. If you authorised the payment (even under deception), the bank's zero-liability rule under the 2017 circular does not cover it. File on 1930 immediately and with your bank's fraud team. Recovery depends on whether the funds are still in the mule account. Some banks recover partial amounts; a refund is not guaranteed.
 +
 +==== What is the time limit to report a UPI fraud to the bank? ====
 +
 +Report within 3 working days for zero liability. Between 4 and 7 working days, your liability is capped at ₹5,000 to ₹25,000 depending on your account type. Beyond 7 working days, the bank's board policy applies and your liability could be higher. Report as fast as possible.
 +
 +==== How long does a UPI dispute take to resolve? ====
 +
 +The bank must provide a shadow credit (provisional reversal) within 10 working days of your complaint and close the complaint finally within 90 days, per RBI rules. For failed transactions, auto-reversal should happen within T+1.
 +
 +==== What if my UPI transaction failed but money was deducted? ====
 +
 +This is a failed transaction, not fraud. The bank must auto-reverse by the next business day (T+1). If not done, the bank owes you ₹100 per day as compensation under RBI/2019-20/67. Raise a complaint with your bank citing that circular.
 +
 +==== Which authority do I approach if my bank ignores my UPI fraud complaint? ====
 +
 +If the bank does not respond within 30 days or the response is unsatisfactory, file with the [[https://cms.rbi.org.in|RBI Integrated Ombudsman]]. Filing is free.
 +
 +==== Does NPCI directly handle consumer complaints? ====
 +
 +NPCI does not have a direct consumer complaint counter. Your complaint flows to NPCI through your PSP bank. NPCI arbitrates the inter-bank dispute but you deal with your own bank at the consumer level. Visit [[https://www.npci.org.in|npci.org.in]] for the latest guidance on the UPI dispute flow for member banks.
 +
 +==== Can I file an RTI about my UPI fraud complaint? ====
 +
 +Yes, if a public authority (your PSP bank, RBI, or the cybercrime portal) has not acted, you can seek information about how your complaint was handled. PSP banks that are nationalised banks or public-sector banks are covered by the RTI Act. Private banks are not RTI-able, but RBI as regulator is. Filing RTI against RBI about its supervision of your complaint is permissible.
 +
 +===== File an RTI to Investigate Your Complaint =====
 +
 +**File an RTI to:** //your PSP bank (if a public-sector bank) or the Reserve Bank of India (Central Public Information Officer, Department of Payment and Settlement Systems). NPCI's RTI status is contested and not settled; route NPCI-related questions through RBI's CPIO instead//.
 +
 +Useful RTI questions:
 +
 +  * What is the status of my UPI fraud complaint reference number [X] filed on [date], and what action was taken?
 +  * What guidelines govern the time limit for a bank to credit shadow reversal in an unauthorised UPI transaction complaint?
 +  * What NPCI circular or directive applies to UPI chargeback timelines for member banks?
 +  * How many UPI fraud complaints were received and resolved by your institution in [financial year]?
 +  * What action has RBI taken against [bank name] for non-compliance with the 10-working-day shadow reversal rule?
 +
 +→ **[[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|Use our free AI RTI Drafter]]** to generate a complete Section 6(1) application.
 +
 +===== Sources =====
 +
 +  * RBI Circular DBR.No.Leg.BC.78/09.07.005/2017-18 (6 July 2017), Customer Protection: Limiting Liability of Customers in Unauthorised Electronic Banking Transactions: [[https://rbi.org.in/Scripts/NotificationUser.aspx?Id=11040&Mode=0|rbi.org.in]]
 +  * RBI Circular RBI/2019-20/67 (20 September 2019), Harmonisation of Turn-Around Time and Customer Compensation for Failed Transactions: [[https://rbi.org.in/Scripts/NotificationUser.aspx?Id=11693&Mode=0|rbi.org.in]]
 +  * National Cyber Crime Reporting Portal (Ministry of Home Affairs): [[https://cybercrime.gov.in|cybercrime.gov.in]]
 +  * NPCI, UPI Dispute and Grievance: [[https://www.npci.org.in|npci.org.in]]
 +  * RBI Complaint Management System (Integrated Ombudsman): [[https://cms.rbi.org.in|cms.rbi.org.in]]
 +  * RBI Complaints page: [[https://rbi.org.in/Scripts/Complaints.aspx|rbi.org.in/Scripts/Complaints.aspx]]
 +
 +//By Dr. Shrawan Kumar Pathak//
 +===== UPI fraud complaint India: Complete guide and RTI (2026) =====
 +
 +  - **Step 1: What is UPI fraud and common types?** (a) UPI fraud: unauthorized transactions via UPI (Unified Payments Interface), (b) common types: (i) phishing — fake UPI ID or QR code, (ii) SIM swap — fraudster gets duplicate SIM, receives OTP, (iii) remote access — scammer convinces victim to install screen-sharing app, (iv) UPI collect request — victim approves collect request thinking it's payment, (v) fake customer care — fraudster poses as bank/NPCI executive, (c) NPCI: nodal agency for UPI — npci.org.in, (d) report within 72 hours for transaction reversal.
 +  - **Step 2: Comparison table — UPI fraud complaint channels.** (a) National Cyber Crime: (i) portal: cybercrime.gov.in, (ii) helpline: 1930, (iii) timeline: 72 hours for reversal, (iv) best for: all UPI frauds, (v) action: transaction freeze + FIR, (b) Bank: (i) method: call bank helpline / email, (ii) timeline: report within 3 days, (iii) best for: account-level fraud, (iv) action: account freeze, dispute, (c) RBI Ombudsman: (i) method: bankingombudsman.rbi.org.in, (ii) timeline: 30 days after bank complaint, (iii) best for: bank inaction, (iv) action: bank ordered to reverse, (d) Police FIR: (i) method: local cyber crime PS, (ii) timeline: immediate, (iii) best for: criminal case, (iv) action: investigation, charge sheet.
 +  - **Step 3: How to report UPI fraud step-by-step.** (a) Step 1: Call 1930 immediately (within 72 hours), (b) Step 2: File complaint at cybercrime.gov.in — (i) select "Report Cyber Crime", (ii) category: UPI fraud, (iii) enter: transaction ID, UPI ID, amount, date, fraudster details, (c) Step 3: Call bank helpline — report unauthorized transaction, request freeze, (d) Step 4: File FIR at local cyber crime police station, (e) Step 5: Block UPI ID — report to NPCI via npci.org.in, (f) Step 6: Change UPI PIN and bank passwords, (g) Step 7: Monitor account for further unauthorized transactions.
 +  - **Step 4: How to file RTI for UPI fraud complaint follow-up.** (a) Police, banks (as regulated entities via RBI), and cyber crime cells are under RTI Act, (b) RTI application can ask: (i) "Provide the action taken on cyber crime complaint [number] filed by [name] regarding UPI fraud including: FIR registered, investigation status, amount recovered, accused identified, charge sheet filed", (ii) "Provide the UPI fraud statistics for [district/state] for [year] including: complaints received, FIRs registered, cases solved, amount recovered, average response time", (c) application fee Rs 10.
 +  - **Step 5: E-E-A-T signals.** (a) Sources: cybercrime.gov.in, npci.org.in, rbi.org.in, (b) Last reviewed: July 2026, (c) Author: RTI Wiki Editorial Team.
 +  - **Step 6: Practical tips.** (a) call 1930 within 72 hours — critical for reversal, (b) never share UPI PIN or OTP, (c) never approve UPI collect requests from unknown, (d) never install screen-sharing apps from unknown callers, (e) verify UPI ID before sending money, (f) Example: A victim lost Rs 25,000 via fake UPI collect request; called 1930 within 1 hour; transaction frozen; Rs 25,000 reversed in 3 days; FIR registered.
 +
 +See [[https://righttoinformation.wiki/cyber/upi-fraud-complaint|UPI Fraud Complaint]] and [[https://righttoinformation.wiki/fake-fund-recovery-agent-scam-india|Fund Recovery Scam]] and [[https://righttoinformation.wiki/fake-court-summons-whatsapp-scam-india|Fake Summons Scam]] and [[https://righttoinformation.wiki/how-to-file-rti-india|How to File RTI]].
 +
 +{{tag>upi fraud 2026 complaint india rti cyber crime npci 2026}}