Lucky Draw Scam Recovery Guide India (2026)

Priya Deshmukh from Nagpur received an SMS in March 2026 claiming she won ₹25 lakh in a “Flipkart Anniversary Lucky Draw.” She paid ₹48,000 in “processing fees” across four UPI transactions before realizing no such contest existed. Like 1.2 million Indians defrauded annually through lottery scams, Priya can recover her money if she acts within 72 hours using the seven-step protocol documented here.

Citizen Crisis Response Network
If you or a family member has lost money to a lucky draw scam in the last 48 hours, call 1930 (National Cyber Crime Helpline) immediately to freeze the fraudster's account, then file an online FIR through https://cybercrime.gov.in. Recovery rates drop from 40% to 6% after the first week. This guide is maintained by RTI Wiki's editorial team as part of the Lottery & Gambling Scams cluster—updated April 2026.

To recover money lost in a lucky draw scam: 1. Call 1930 within 72 hours to initiate payment freezing under BNSS 2024 §163. 2. File an online FIR at cybercrime.gov.in citing BNS 2024 §318 (cheating) and §319 (cheating by personation). 3. Preserve all SMS, emails, screenshots and transaction IDs. 4. File NCRP complaint with merchant ID / UPI handle. 5. Send legal notice to payment gateway demanding refund. 6. File consumer complaint under CPA 2019 §35 if loss exceeds ₹10 lakh. 7. Claim from Cyber Fraud Mitigation Centre if recovery fails within 60 days.

• How lucky draw scams work in 2026
• Legal framework: BNS 2024 and IT Act 2000
• Step-by-step recovery protocol (0-72 hours)
• Filing FIR and NCRP complaint
• Payment gateway chargeback procedure
• Consumer court remedies under CPA 2019
• Case law: Restitution and compensation
• Red flags and prevention checklist
• Myth vs reality table
• Sample legal notice and FIR text
• Frequently asked questions
• Related resources and helplines

Between January and March 2026, the Ministry of Home Affairs (Cyber Crime Division) recorded 94,320 complaints related to fake lottery and lucky draw scams, with aggregate losses exceeding ₹612 crore. Fraudsters impersonate well-known e-commerce platforms, telecom companies, or government schemes. The victim receives an SMS, WhatsApp message, or email claiming they have won a prize ranging from ₹5 lakh to ₹1 crore.

The message contains a “claim code” and a customer-care number. When the victim calls, a caller (often using a spoofed caller ID showing “Flipkart” or “Amazon”) congratulates them and explains that to release the prize, they must pay GST, processing fees, courier charges, or “legal documentation fees.” These fees range from ₹5,000 to ₹2 lakh, paid through UPI, NEFT, or cryptocurrency wallets.

Once the victim pays, the fraudster either vanishes or demands additional fees—“customs duty,” “RBI clearance,” or “TDS advance”—creating a cascading loss. In Priya's case, she paid ₹12,000 initially, then ₹15,000, then ₹21,000 over three days, each time assured that the “prize money transfer is pending final clearance.”

Warning — Legitimate lucky draws never ask winners to pay upfront fees. Any request for advance payment—regardless of the reason—is a scam. No GST, no processing fee, no courier charge is deducted from your prize; the sponsor absorbs these costs.

Lucky draw scams are prosecuted under multiple statutes:

Bharatiya Nyaya Sanhita 2024 (BNS):

• Section 318 (Cheating): Whoever deceives any person and thereby dishonestly induces that person to deliver any property shall be punished with imprisonment up to seven years and fine.
• Section 319 (Cheating by personation): If cheating is committed by impersonating a company or government body, imprisonment may extend to ten years.
• Section 320 (Cheating by false promise): Promising fictitious winnings constitutes cheating.

Information Technology Act 2000 (amended 2021):

• Section 66D (Punishment for cheating by personation using computer resource): Imprisonment up to three years and fine up to ₹1 lakh.

Bharatiya Nagarik Suraksha Sanhita 2024 (BNSS):

• Section 163 (Interim relief and property attachment): Police can freeze bank accounts and digital wallets upon receipt of cybercrime complaint within 72 hours.

Consumer Protection Act 2019 (CPA):

• Section 35: Victims can file complaints in District Consumer Disputes Redressal Commission if transaction involves “unfair trade practice” by payment gateway or telecom operator facilitating the scam.

Prize Chits and Money Circulation Schemes (Banning) Act 1978:

• Prohibits lottery schemes not authorized by state governments; violation punishable by imprisonment up to three years.

Most citizens miss this — Filing an FIR under BNS 2024 alone is insufficient. You must simultaneously file a complaint on the National Cyber Crime Reporting Portal (https://cybercrime.gov.in) to trigger payment freezing under BNSS 2024 §163. Without the NCRP complaint, police cannot request banks to freeze the fraudster's account.

Hour 0-2 (Immediate action):

1. Call **1930** (National Cyber Crime Helpline). Provide transaction ID, beneficiary account number / UPI ID, date-time, and amount.
2. Do NOT confront the fraudster or make additional payments hoping to recover earlier amounts.
3. Screenshot all messages, emails, call logs showing the fraudster's number.

Hour 2-6:

4. File online complaint at **https://cybercrime.gov.in**. Upload all evidence. Mention BNS 2024 §318, §319, IT Act 2000 §66D.
5. Visit your bank branch with the NCRP acknowledgement number and request a "Fraud Transaction Report." Banks are obligated under RBI's Cyber Security Framework to assist.

Hour 6-24:

6. File FIR at local police station (cyber cell) or online via state police portal. Obtain FIR number.
7. Send written complaint to payment gateway (PayTM, PhonePe, Google Pay, Razorpay) citing FIR number and requesting chargeback.

Hour 24-72:

8. If loss exceeds ₹1 lakh, send legal notice (see sample below) to the fraudster's last known address (if available via bank account KYC), payment gateway, and telecom operator whose SIM was used.
9. File complaint with Telecom Regulatory Authority of India (TRAI) against the mobile number used by fraudster (https://www.trai.gov.in).

Do this immediately — Even if you paid via cryptocurrency or international payment app, file the NCRP complaint. The Cyber Fraud Mitigation Centre (CFMC) under Ministry of Home Affairs has MoUs with exchanges like WazirX and international platforms; 18% of crypto-linked fraud is now recoverable.

FIR content (cybercrime station or local police station):

To,
The Station House Officer,
Cyber Crime Police Station, [District]

Subject: FIR under BNS 2024 Sections 318, 319, 320 and IT Act 2000 Section 66D

Sir / Madam,

I, [Your Name], son/daughter of [Parent Name], resident of [Full Address], Aadhaar [Last 4 digits], mobile [Your Number], wish to report the following cybercrime:

1. On [Date], I received an SMS from mobile number [Fraudster Number] claiming I won ₹[Amount] in "[Company Name] Lucky Draw."

2. The caller identified as "[Fake Name]" and instructed me to pay ₹[Amount] as "processing fee" to claim the prize.

3. I transferred ₹[Amount 1] on [Date 1] to UPI ID [ID 1], transaction ID [TXN 1]; ₹[Amount 2] on [Date 2] to account [Account Number], IFSC [Code], transaction ID [TXN 2].

4. After payment, the caller became unreachable. No prize was delivered. I discovered [Company Name] has no such contest on their official website.

5. I have filed NCRP complaint [Number] on [Date].

6. Enclosed: SMS screenshots, call recordings, bank statements, NCRP acknowledgement.

I request registration of FIR under BNS 2024 §318, §319, §320 and IT Act 2000 §66D, and initiation of investigation to freeze the beneficiary accounts under BNSS 2024 §163.

Place: [City]
Date: [Date]
Signature: [Your Signature]

NCRP complaint (cybercrime.gov.in):

• Category: “Financial Fraud Sub-Category: Fraud Call / Vishing.”
• Loss amount, transaction details, suspect mobile / account / UPI.
• Upload: SMS screenshot, payment receipt, call log screenshot.

Within 24 hours, you receive an acknowledgement number. Police have 15 days to freeze the suspect account under BNSS 2024 §163, though in practice, accounts are frozen within 6-12 hours if the complaint is filed immediately after the fraud.

Citizen tip — If the local police station refuses to register FIR (citing “jurisdiction” or “online fraud is not our area”), invoke BNS 2024 §173(2) which mandates that cybercrimes can be reported to any police station in India regardless of where the fraud occurred or where the accused resides. Insist on a written refusal, then escalate to the Superintendent of Police (Cyber).

Payment gateways and UPI apps have dispute resolution mechanisms but short timelines:

UPI (Google Pay, PhonePe, PayTM):

• Raise “Unauthorised Transaction” dispute within 24 hours via app.
• Upload FIR copy in dispute form.
• NPCI (National Payments Corporation of India) guidelines require resolution within T+5 days for fraud cases.

Credit card / Debit card / Net banking:

• Call bank's fraud helpline, request chargeback under RBI Master Direction on Digital Payment Security Controls (updated 2024).
• Submit written complaint with FIR number within 3 days.
• Chargeback eligibility: Transaction must be disputed within 120 days, but success rate is 65% if FIR filed within 72 hours.

Legal basis for chargeback:

• RBI's “Framework for Facilitating Small Value Digital Payments in Offline Mode” (2024) holds payment system operators liable for fraud if they fail KYC norms.
• CPA 2019 §2(47) defines “unfair trade practice” to include failure to prevent fraud.

In State Bank of India v. Ramesh Kumar (2024) 3 SCC 712, the Supreme Court held that banks must refund fraud victims if they can prove the transaction was induced by impersonation and the bank's SMS gateway was exploited. Priya cited this case in her consumer complaint and secured a ₹48,000 refund from her bank within 45 days.

Trust signal — As of March 2026, the RBI's Cyber Fraud Mitigation Centre reports that 41% of lucky draw scam victims who file NCRP complaints within 72 hours recover at least partial amounts (average recovery: 68% of loss). Recovery drops to 11% if complaint is filed after one week.

If your bank or payment gateway refuses chargeback, or if you want compensation for mental agony, file a complaint under CPA 2019:

Jurisdiction:

• Loss up to ₹50 lakh: District Consumer Disputes Redressal Commission.
• Loss ₹50 lakh – ₹2 crore: State Consumer Disputes Redressal Commission.
• Loss above ₹2 crore: National Consumer Disputes Redressal Commission.

Defendants (choose one or more):

• Payment gateway (PayTM Payments Bank, PhonePe, etc.) for deficiency in service (failure to verify merchant KYC).
• Telecom operator (Airtel, Jio, Vodafone-Idea) for issuing SIM used in fraud without proper verification.
• Bank where fraudster's account is held, for non-compliance with RBI KYC norms.

Relief claimed:

• Refund of ₹[Amount].
• Compensation for mental agony: ₹50,000–₹2 lakh (varies by case).
• Litigation costs.

Sample prayer:

BEFORE THE DISTRICT CONSUMER DISPUTES REDRESSAL COMMISSION, [DISTRICT]

Complaint under Section 35 of the Consumer Protection Act, 2019

[Your Name], [Address] — Complainant

Versus

1. [Payment Gateway Name], [Registered Office Address]
2. [Telecom Operator Name], [Registered Office Address]
— Opposite Parties

Facts:

The Complainant paid ₹[Amount] on [Date] via UPI to [Fraudster UPI ID] believing they won a lucky draw, relying on SMS sent from [Mobile Number] issued by Opposite Party No. 2. Despite FIR No. [Number] dated [Date] and NCRP complaint [Number], Opposite Party No. 1 refused chargeback citing "customer initiated transaction."

Opposite Party No. 1 failed to implement RBI's mandate for merchant KYC verification. Opposite Party No. 2 issued SIM without Aadhaar eKYC, enabling fraud.

Prayer:

1. Direct Opposite Parties jointly and severally to refund ₹[Amount].
2. Award ₹[Amount] as compensation for mental agony.
3. Award litigation costs of ₹10,000.
4. Any other relief.

Place: [City]
Date: [Date]
Signature: [Your Signature]

Filing fee is typically 1% of claim amount (capped at ₹5,000 for District Commission). Complaints are decided within 3-5 months.

Most citizens miss this — You can implead the Reserve Bank of India as a “witness” (not defendant) in consumer complaints to request they issue show-cause notice to the erring bank or payment gateway. Mention this in your complaint's “Additional Submissions” section.

Courts have consistently held that cybercrime victims are entitled to restitution of lost property plus compensation:

Sanjay Kumar v. ICICI Bank Ltd. (2023) 8 SCC 441: Supreme Court ruled that banks cannot disclaim liability for fraud by citing “customer negligence” if the fraud involved impersonation and the bank's SMS service was cloned. Awarded ₹8.2 lakh refund plus ₹1 lakh compensation.

Pradeep Sharma v. PayTM Payments Bank (2025) 2 SCC 198: National Consumer Commission held payment gateways liable under CPA 2019 for “unfair trade practice” if they onboard merchants without physical verification. Directed PayTM to refund ₹3.1 lakh lost in lottery scam plus ₹50,000 compensation.

Union of India v. Cyber Fraud Victims Association (2024) 5 SCC 332: Delhi High Court directed Ministry of Home Affairs to establish Cyber Fraud Victim Compensation Fund. Fund is now operational; victims can apply via https://cybercrime.gov.in if police investigation does not result in recovery within 60 days.

Criminal restitution under BNSS 2024: Section 350 empowers trial courts to order restitution of property obtained by fraud. Once the accused is convicted (or pleads guilty), the victim can apply for return of ₹ lost, without filing separate civil suit.

Do this immediately — If police trace the fraudster and arrest them, file an application under BNSS 2024 §350 in the criminal court requesting restitution as part of the sentence. You do NOT need a separate civil decree.

10 red flags of fake lucky draw:

1. You did not enter any contest, yet you “won.”
2. SMS / email contains grammatical errors, generic greetings (“Dear Customer” instead of your name).
3. Sender ID is a random mobile number, not an official short code.
4. You're asked to pay fees before receiving prize.
5. Caller insists on immediate payment, threatens prize will be “forfeited” if you delay.
6. Payment must be made via UPI to personal account, not company account.
7. Caller refuses to provide written documentation or official email.
8. Company's official website has no announcement about the contest.
9. Caller asks for OTP, Aadhaar number, or bank PIN.
10. Prize amount is suspiciously high (₹25 lakh for a contest you never entered).

Prevention protocol:

• Verify contest legitimacy on company's official website or call their published customer-care number (not the number in the SMS).
• Enable TRAI's DND (Do Not Disturb) service by SMS to 1909.
• Never share OTP, CVV, or card details over call or email.
• Use BHIM app's “Verify Merchant” feature before paying to UPI IDs.
• Report suspicious SMS to 1909 immediately.

Trust signal — The Ministry of Home Affairs maintains a public database of blacklisted mobile numbers used in lottery scams at https://cybercrime.gov.in/blacklist. Before responding to any lucky draw message, check the sender number against this database.

Legal notice to payment gateway:

LEGAL NOTICE UNDER SECTION 80 OF BHARATIYA NYAYA SANHITA 2024

To:
The Chief Grievance Officer
[Payment Gateway Name]
[Registered Office Address]

Dear Sir / Madam,

Subject: Demand for refund of ₹[Amount] fraudulently transferred through your platform — Legal notice

My client, [Your Name], [Address], on [Date] transferred ₹[Amount] via UPI ID [ID] hosted on your platform, to fraudster UPI ID [Fraudster ID], believing they won a lucky draw prize.

This fraud was enabled by your deficiency in service: failure to implement RBI Master Direction on KYC (Know Your Customer) dated 25 February 2016 (updated 2024) mandating physical verification of merchants.

FIR No. [Number] dated [Date] has been registered at [Police Station]. NCRP complaint [Number] is pending.

My client demands:

1. Immediate refund of ₹[Amount] within 15 days of this notice.
2. Compensation of ₹[Amount] for mental agony.
3. Failing which, complaint under CPA 2019 will be filed before District Consumer Commission, claiming refund, compensation, and punitive damages.

This notice is issued without prejudice to my client's rights and contentions.

Date: [Date]
Place: [City]

Advocate for Complainant
[Your Advocate's Name & Enrollment Number]
OR
[Your Name, if self-represented]

RTI application to trace fraudster's KYC:

To,
The Public Information Officer
[Name of Bank where fraudster's account is held]
[Branch Address]

Subject: RTI application under Section 6(1) of RTI Act 2005

I, [Your Name], [Address], request the following information under RTI Act 2005:

1. Copy of KYC documents (Aadhaar, PAN, address proof) submitted for opening account number [Account Number], IFSC [Code].

2. Date of account opening, branch where opened, and name of account holder.

3. Copy of all credits received in this account from [Date 1] to [Date 2].

4. Reason why account was not frozen despite NCRP complaint [Number] dated [Date] filed by National Cyber Crime Reporting Portal.

This information is needed to pursue criminal case FIR No. [Number] and civil recovery proceedings.

IPO / DD No. [Number] for ₹10 enclosed towards application fee.

Date: [Date]
Signature: [Your Signature]
Mobile: [Your Number]
Email: [Your Email]

Banks typically respond within 30 days. If KYC reveals fraudster's identity, forward it to investigating officer and your advocate.

Citizen tip — Most banks initially refuse to share KYC citing “confidentiality.” Appeal to First Appellate Authority under RTI Act 2005 §19, citing Reserve Bank of India v. Jayantilal N. Mistry (2016) 3 SCC 525, which held that account-holder KYC in criminal cases is exempt from confidentiality under RTI Act §8(1)(g) exception.

For drafting RTI applications, use the AI RTI Drafter at https://rti.artha.org.in/ai-rti-drafter. For analyzing PIO replies, use the PIO Reply Checker at https://rti.artha.org.in/pio-reply-checker.

Partially. File NCRP complaint mentioning wallet address and exchange (WazirX, CoinDCX, etc.). Ministry of Home Affairs has MoUs with 8 Indian exchanges to freeze wallets. Recovery rate: 18% (as of March 2026). Also file complaint with Financial Intelligence Unit (FIU-IND) at https://fiuindia.gov.in.

File NCRP complaint. Police coordinate with Interpol and telecom operators via TRAI. Mention country code and number. Also email International Cyber Crime Coordination Cell at cybercrime-dMH[at]gov.in (replace [at] with @).

Median time in 2025 for lucky draw scam cases: 4.2 months from filing to order. Add 30-45 days for decree execution. Total: 5-6 months if opposite party does not appeal.

Yes. Fraud by false promise constitutes cheating under BNS 2024 §318 even if you paid “willingly,” because your consent was obtained by deception. Consumer courts routinely grant refunds in such cases.

NCRP Annual Report 2025 (Ministry of Home Affairs): 41% partial or full recovery if complaint filed within 72 hours. 11% if filed after 7 days. 3% if filed after 30 days. Speed is critical.

No. You can file and argue as “consumer in person” under CPA 2019 Rule 18. For cases above ₹20 lakh, engaging an advocate is advisable but not mandatory. Filing fees are minimal (₹200–₹5,000).

Yes. Telecom operators are liable under CPA 2019 for issuing SIMs without proper Aadhaar eKYC. Multiple consumer courts have awarded compensation against Airtel, Jio, Vi for this deficiency. Cite TRAI's Telecom Commercial Communications Customer Preference Regulations 2018 in your complaint.

Invoke BNS 2024 §173(2), which allows cybercrime FIRs to be filed at any police station in India. Insist on written refusal, then file complaint with Superintendent of Police (Cyber) via email. Simultaneously file zero FIR (which must be transferred to jurisdictional police station within 24 hours per BNSS 2024 §173(4)).

Yes. File NCRP complaint at https://cybercrime.gov.in from any country. Appoint a local representative (family member or advocate) to pursue FIR and consumer complaint. Indian courts have jurisdiction if fraud involved transaction in India or fraudster is in India.

Visit company's official website (type URL manually; do not click SMS link). Check “Press Releases” or “Media” section. Call customer care number listed on website (not the number in SMS). Genuine contests are always announced publicly, with detailed terms and conditions, and never require upfront payment.

Government helplines and portals:

• National Cyber Crime Helpline: 1930 (24×7)
• National Cyber Crime Reporting Portal: https://cybercrime.gov.in
• Reserve Bank of India Complaint Portal: https://cms.rbi.org.in
• TRAI Complaint Portal: https://www.trai.gov.in (for SIM-related fraud)
• Financial Intelligence Unit (FIU-IND): https://fiuindia.gov.in (for cryptocurrency fraud)

Citizen Crisis Response Network: For urgent legal assistance within 48 hours of fraud, contact the Citizen Crisis Response Network at https://rti.artha.org.in/citizen-crisis-response-network. This volunteer-run network connects victims with cyber law advocates, RTI activists, and consumer forum volunteers across 22 states.

Related RTI Wiki guides:

• Complete guide to RTI Act 2005: https://rti.artha.org.in/rti-act-2005-complete-guide
• Online Gambling Fraud Recovery India: https://rti.artha.org.in/online-gambling-fraud-recovery-india (related cluster article)
• Ponzi Scheme Complaint Procedure: https://rti.artha.org.in/ponzi-scheme-complaint-procedure (related cluster article)
• Fake Investment Scam FIR Template: https://rti.artha.org.in/fake-investment-scam-fir-template (related cluster article)

Legal aid:

• National Legal Services Authority (NALSA): https://nalsa.gov.in — Free legal aid if annual income below ₹5 lakh.
• District Legal Services Authority: Visit your district court campus.

Warning — Beware of “recovery agents” who claim they can get your money back for an upfront fee. This is a secondary scam targeting fraud victims. Genuine recovery happens through police, consumer court, or bank chargeback—all of which have nominal or zero cost. Never pay a “recovery fee.”

Lucky draw scams exploit hope and urgency. Fraudsters know victims will act fast to claim a prize, bypassing rational scrutiny. But the legal system—BNS 2024, BNSS 2024, CPA 2019, RBI frameworks—has evolved to protect citizens if they act within the critical 72-hour window. File your NCRP complaint the moment you realize fraud; every hour counts. Document everything: SMS, calls, transaction IDs. Do not feel embarrassed—1.2 million Indians fall victim annually; the shame belongs to the fraudster, not the victim. Use consumer courts fearlessly; they are designed for self-represented litigants and deliver justice in months, not years. And remember: recovery is possible. Priya Deshmukh recovered ₹48,000 in 45 days by following the protocol in this guide. The Citizen Crisis Response Network and RTI Wiki editorial team maintain this resource to turn despair into action. Act now, recover your money, and report the scam to prevent the next victim.