Someone Withdrew My PF? EPFO Fraud Recovery — citizen guide 2026

If money left your EPF account without your consent, act in the next few hours: change your UAN password, raise a grievance on the EPFiGMS portal at epfigms.gov.in, and call the cyber-fraud helpline 1930 so banks can freeze the money before it disappears.

Short on time? Jump to the “What to do in the next 30 minutes” list at the end. Speed decides whether the money comes back.

What counts as PF fraud

PF fraud means someone other than you pulls money out of your Employees Provident Fund account. They do it by hijacking your Universal Account Number (UAN), changing your linked bank or KYC details, and filing a claim that lands in an account you do not control. This is different from your own claim being stuck or rejected.

Why this happens to ordinary members

Most PF fraud starts with a phone call. Someone says they are from EPFO and offers to “speed up” your withdrawal. They ask for your UAN, password, or the OTP on your phone. The moment you read out the OTP, they own your account.

EPFO has said clearly that it never asks for these details. Its official advisory states: “Never share your UAN, Password, OTP, or Bank details, with anyone. EPFO does not ask for any confidential information.” (EPFO public advisory, @socialepfo).

Once inside, the fraudster changes your registered bank account or mobile number, then files an online claim. The settled amount goes to their account. You only notice when your passbook shows a withdrawal you did not make.

This is a cyber-financial crime. It is reportable to the police and to your bank, and the money can often be frozen if you move fast.

Step-by-step: recover fraudulently withdrawn PF

1. Lock down your account immediately

Open the EPFO member portal (epfindia.gov.in, Member e-Sewa) and change your UAN password at once. If the fraudster changed your registered mobile number and you are locked out, this is itself proof of takeover, note it and move to the grievance and police steps below. Do not click any link sent by the caller. Use only the official site or the UMANG app.

2. Call 1930 in the golden hour

Call the National Cyber Crime Helpline 1930. It runs 24×7. Report it as fast as you can, ideally within hours. When a complaint is filed quickly, the system pushes an alert to the beneficiary bank, which can put a hold on the funds before the fraudster withdraws them. Keep ready: the bank or wallet name, the transaction reference number, the date, and the amount.

3. File the complaint on cybercrime.gov.in

Register the full complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Choose the financial-fraud category. Upload your passbook screenshot showing the wrongful claim, and any fraud SMS or call records. You get a complaint reference number, save it, you will need it for follow-up. The portal is run by the Ministry of Home Affairs.

4. Raise an EPFiGMS grievance

Go to the EPF i Grievance Management System at epfigms.gov.in. This is EPFO's own portal “to redress grievances for the services provided by EPFO.” Lodge a grievance based on your UAN, with OTP verification. State plainly that a claim was settled without your authorisation, that your KYC or bank details were changed by a third party, and ask EPFO to freeze the UAN, stay any pending claim, and investigate. Attach the cybercrime complaint number.

5. File a police or cyber-cell complaint

Visit your local cyber police station or the cyber cell and file a written complaint. Carry the cybercrime portal acknowledgement. A formal First Information Report strengthens your case for reversal and is often needed if the bank or EPFO asks for proof of crime.

6. Follow up and escalate

Track the EPFiGMS grievance status online and send a reminder if there is no movement. Track your cybercrime complaint status too. If EPFO does not act, escalate to the Regional Provident Fund Commissioner of your zone in writing, quoting your grievance number and the police complaint.

Documents you will need

  • Your UAN and a recent EPF passbook screenshot showing the wrongful claim
  • The fraudulent transaction date, amount, and any reference number
  • Screenshots or records of the scam call, SMS, WhatsApp, or email
  • Your Aadhaar and PAN for identity verification on the portals
  • The cybercrime complaint reference number and police complaint copy

Common mistakes that cost you the money

  • Waiting to “see if it sorts itself out.” Recovery odds fall sharply after the first day. Banks can only hold money that is still there.
  • Sharing the OTP “just to verify.” No genuine EPFO officer ever asks for your OTP, password, or PIN. Per the EPFO advisory, EPFO does not ask for confidential information.
  • Only complaining to EPFO and skipping 1930. EPFiGMS handles your PF record. Only the 1930 or cybercrime route can trigger a bank-level freeze of the stolen funds.
  • Calling the number the fraudster gave you. Use only 1930, cybercrime.gov.in, and the official epfindia.gov.in helplines.

Is this really fraud, or just your own stuck claim?

Be honest with yourself before you file. If you applied for a withdrawal and it is delayed, rejected, or held for KYC, that is a different problem, not fraud. For your own claim that is stuck or rejected, read EPFO claim rejected or pending: UAN and KYC fixes, and to pry out reasons in writing, see using RTI to unstick a stuck PF withdrawal. This page is only for money taken by someone else.

Real-life example

Dr. Shrawan Kumar Pathak, a 41-year-old teacher in Patna, got a call promising to “release” his pending PF. The caller knew his UAN and asked him to confirm an OTP. Within an hour his passbook showed a Rs 1,90,000 claim settled to an unknown bank account.

He changed his UAN password, called 1930 the same evening, and filed on cybercrime.gov.in that night. He then raised an EPFiGMS grievance quoting the complaint number and asking EPFO to freeze his UAN. The fast 1930 call let the beneficiary bank place a hold on most of the funds, and his EPFO grievance kept any further claim from being processed while the police case ran.

RTI angle (optional)

If EPFO settles your fraud grievance slowly or vaguely, an RTI to the concerned EPFO office can ask: who approved the disputed claim, on what KYC, to which bank account, and on what date. This puts the decision trail on record. Our AI RTI drafting tool can help you frame it, and The RTI Playbook explains the full process. Use this only after the urgent freeze and grievance steps above.

Frequently asked questions

Can I get fraudulently withdrawn PF money back?

Often yes, if you move fast. Calling 1930 in the first few hours lets the system alert the beneficiary bank to hold the funds before the fraudster withdraws them. Recovery odds drop steeply with delay, so report the same day.

What is the EPFiGMS portal?

EPFiGMS is EPFO's own grievance portal at epfigms.gov.in, built “to redress grievances for the services provided by EPFO.” A PF member, pensioner, employer, or others can lodge a grievance based on UAN with OTP verification, track its status, and send reminders.

Does EPFO ever ask for my UAN, password, or OTP?

No. EPFO's public advisory says: “Never share your UAN, Password, OTP, or Bank details, with anyone. EPFO does not ask for any confidential information.” Anyone asking for these by call, SMS, WhatsApp, or email is a fraudster.

What is the 1930 helpline?

1930 is the National Cyber Crime Helpline, a 24×7 line for financial cyber fraud. Operators record your complaint and push it into the system so the beneficiary bank can hold suspect funds. It works alongside the portal at cybercrime.gov.in.

Should I report to the police as well?

Yes. After the online complaint, file a written complaint at your local cyber cell or police station and carry the cybercrime portal acknowledgement. A formal complaint or FIR supports any reversal and is often required by the bank or EPFO.

How do I stop this from happening again?

Never share your UAN, password, or OTP. Lock your Aadhaar biometrics free of charge through the UIDAI portal at resident.uidai.gov.in or the mAadhaar app, complete your EPFO e-nomination, and check your passbook regularly so any wrong claim is caught early.

How is this different from my own claim being stuck?

A stuck or rejected claim is your own application held for KYC, name mismatch, or bank details. Fraud is money pulled out by someone else to an account you do not control. The fixes are completely different, do not file a fraud complaint for a routine delay.

Where can I track my cybercrime complaint?

You can check the status of an NCRP complaint online using your acknowledgement number. See our guide on how to check a cybercrime complaint status for the exact steps.

What to do in the next 30 minutes

  • Change your UAN password on epfindia.gov.in right now, before anything else.
  • Call 1930 and report the fraud, keep the transaction amount and reference handy.
  • File the financial-fraud complaint on cybercrime.gov.in and save the reference number.
  • Raise an EPFiGMS grievance at epfigms.gov.in asking EPFO to freeze your UAN and stay any claim.
  • Lock your Aadhaar biometrics at resident.uidai.gov.in to stop repeat misuse.

Sources

  • EPFO public advisory on confidential information (@socialepfo): “Never share your UAN, Password, OTP, or Bank details, with anyone. EPFO does not ask for any confidential information.”
  • EPF i Grievance Management System (EPFiGMS), epfigms.gov.in, EPFO grievance redressal portal.
  • National Cyber Crime Reporting Portal, cybercrime.gov.in, and National Cyber Crime Helpline 1930, Ministry of Home Affairs.
  • Unique Identification Authority of India (UIDAI), Aadhaar Biometric Lock/Unlock, resident.uidai.gov.in, free of charge.

Reader signal

Was this article useful?

Tap once if it helped you. These counters show other citizens which pages are worth reading.

- views