UPI Fraud Complaint Closed Without a Refund? How to Reopen and Escalate

Who this guide is for

This guide is for anyone who lost money to a UPI fraud, complained to the bank, the app, or the police, and then received a closure with no refund. It covers situations where:

• The bank or app marked your complaint "resolved" or "closed" with a one-line reason such as "transaction successful" or "beneficiary credited", but you never got your money back.
• You were tricked into paying through a fake call, a phishing link, a fake customer-care number, a fraudulent QR code, or a "screen-share" or remote-access scam.
• Your account was debited by a UPI mandate, AutoPay, or collect request that you did not knowingly approve.
• You reported within a reasonable time but the bank says the report came too late.

It is especially useful if you still have the transaction ID, screenshots, or any complaint reference number, because those are the keys to reopening the case.

Who this guide is NOT for

This guide does not cover a simple wrong-number transfer where you paid the wrong but genuine person by mistake. For that, see our guide on a UPI payment to the wrong recipient who refuses to refund. It also does not cover a failed transaction where the money was debited but the payment did not go through, which usually auto-reverses. For that, see a failed card or POS transaction where the account was debited. If the police have placed a lien on your own account because it received fraud money, see the section on what RTI will not help with and our guide on a cybercrime lien and debit freeze removal.

What you can do this weekend

Friday evening

Gather your evidence in one place. Open your UPI app and find the failed-refund transaction. Note the UPI transaction ID (a 12-digit number), the RRN or UTR, the exact date and time, the amount, and the receiver's UPI ID or name if shown. Download your bank statement for the relevant dates so the debit is visible. Take clear screenshots of the transaction, the fraud message or call log, any QR code, and the bank or app reply that closed your complaint. Write down every complaint reference number you already have, from the bank, the app, and the cybercrime portal. Keep them in a single dated folder on your phone or computer.

Saturday

Act on the cyber-fraud channels first, because speed can still help. If you have not already, call 1930 and register a written complaint at cybercrime.gov.in, and save the acknowledgement number. Then reopen the bank complaint: reply in the same email or complaint thread, quote your original reference number, state plainly that you do not accept the closure, and ask the bank to reopen the case and share the closure reason and investigation findings in writing. File a fresh grievance in your UPI app as well. Use the reopening template further below so nothing is missed.

Sunday

Raise the NPCI dispute and prepare your escalation file. Visit the official BHIM/UPI dispute facility and raise a complaint on the disputed transaction, attaching the transaction ID and proof. Build a simple timeline document: date of fraud, date of first complaint, date of closure, and what each authority said. This timeline becomes the backbone of your RBI Ombudsman complaint if the bank does not resolve the matter. From the date you reopened your written complaint, you have a 30-day clock running, after which the Ombudsman route opens.

Documents and evidence checklist

Step-by-step action plan

Step 1 — Capture the transaction ID and build a timeline

Before contacting anyone, lock down the facts. Find the UPI transaction ID and the RRN/UTR for the fraudulent payment, the exact date and time, and the amount. Save your bank statement and screenshots. Note the receiver's UPI ID or name only as it appears in the app; do not try to contact the receiver yourself. Write a one-page timeline: when the fraud happened, when you first complained, and when and how it was closed. Every authority below will ask for the transaction ID, so keep it at the top of every message you send.

Step 2 — Report on the cyber-fraud channels at 1930 and cybercrime.gov.in

For fraud, the cyber channels matter as much as the bank. Call the national cyber-fraud helpline 1930 as early as possible, then register a written complaint at cybercrime.gov.in and save the acknowledgement number. The helpline and portal can alert the beneficiary bank to put a hold on the fraud amount, which is why reporting fast helps. If your complaint was earlier disposed of without action, our guide on a cybercrime complaint disposed without action explains how to follow up at the police station and cyber cell.

Step 3 — Reopen the bank complaint in writing

A closed complaint can be reopened. Reply in the same complaint thread, quote your original reference number, and state clearly that you do not accept the closure. Ask the bank, in writing, to reopen the case, share the exact closure reason, and provide the investigation findings. If your money went to fraud, ask the bank to raise a dispute with the beneficiary bank through the UPI network. Keep this in writing, by email or the bank's grievance portal, so you have a dated record. See the reopening template below.

Step 4 — Raise a fresh grievance in the UPI app and an NPCI dispute

Your UPI app, whether a bank app or a third-party app, has its own grievance system and a nodal or grievance officer. File a fresh complaint there with the transaction ID and proof. Then raise a transaction dispute on the official NPCI/BHIM dispute facility. NPCI runs the UPI network and handles transaction-level disputes between member banks and apps. For an outright scam, the NPCI dispute is a backstop; the bank's fraud investigation and the police route carry the most weight, but a logged NPCI dispute strengthens your record.

Step 5 — Ask your bank to trace the beneficiary bank

You generally cannot trace the receiver yourself, and you should not try. The transaction ID and RRN let your bank and the police identify the beneficiary bank and account. Ask your bank, in writing, to raise the dispute with the beneficiary bank through the UPI network and to request a hold on the disputed amount. The 1930 and cybercrime.gov.in report can also push the beneficiary bank to hold the money. Recovery depends on whether the money is still in the beneficiary account, so speed in Steps 2 to 5 is critical.

Step 6 — Escalate to the RBI Ombudsman at cms.rbi.org.in

If 30 days pass since your written complaint with no satisfactory resolution, or you get a reply that does not address the fraud, file free with the RBI Ombudsman at cms.rbi.org.in. The Reserve Bank-Integrated Ombudsman Scheme covers banks, NBFCs, and prepaid payment instrument issuers, which can include payment apps that issue wallets. Upload your transaction proof, the closure message, and all earlier complaints. File within the time limit set out in the scheme. The toll-free RBI helpline is 14448. The Ombudsman can direct a refund or compensation where it finds a deficiency in service.

Step 7 — Use RTI where a public authority holds the records

If your bank or the beneficiary bank is a public sector bank, or you want the police action-taken record, an RTI can help where disclosure is allowed. File with the Public Information Officer asking for the action taken on your complaint and the status of the dispute. Personal details of the receiver are usually exempt. Read how to file an RTI online for the process, and see how to file a first appeal if there is no reply in 30 days.

Escalation ladder

Copy-paste reopening template

Replace the text in square brackets with your own details before sending. Send this in the same email or complaint thread that was closed.

When RTI can help

The RTI Act, 2005 applies to public authorities. In a UPI fraud, RTI can reach records held by a public authority, where disclosure is allowed:

• PSU banks: If your own bank, or the beneficiary bank that received the money, is a public sector bank, you can file an RTI with its Public Information Officer asking for the action taken on your complaint, the status of the dispute raised through the UPI network, and whether a hold was placed.
• Police and cyber cell: The police are a public authority. You can file an RTI asking for the action-taken status on your cybercrime complaint, such as whether the beneficiary bank was contacted and whether the amount was held, subject to exemptions for ongoing investigations.
• RBI: The Reserve Bank of India is a public authority. You can file an RTI to confirm whether a complaint you filed at cms.rbi.org.in was received and registered, and to ask about its general handling.

An RTI to a public authority creates a formal paper trail that must be answered within the timeline under the Act, and the reply can support your Ombudsman complaint. Read our full guide on how to file an RTI online, and our first appeal and second appeal guide if you do not get a proper reply. The CPGRAMS and RTI guide explains how to combine grievance and information tools for government bodies and PSU banks. You can browse more help in our Cyber and Digital Payments guides.

When RTI will not help

Private apps and payment service providers: PhonePe, Google Pay, Paytm, and similar UPI apps and payment service providers are not public authorities. You cannot file an RTI against them. NPCI is a not-for-profit company and is generally not treated as an ordinary public authority for routine RTI. Use the in-app grievance system, the NPCI dispute facility, and the RBI Ombudsman instead.

Private banks: HDFC Bank, ICICI Bank, Axis Bank, and other private banks are not public authorities, so RTI does not apply to them directly. Use the RBI Ombudsman at cms.rbi.org.in. You can, however, file an RTI with the RBI about its handling of your complaint.

What RTI cannot do: RTI gives you information, not a refund. The receiver's personal account details are usually exempt as third-party personal information. Use RTI to learn what action a public authority took, and use the bank dispute, the police route, and the RBI Ombudsman to actually recover the money. See our guide on a credit card fraud where provisional credit was reversed for a related recovery path.

Common mistakes to avoid

• Treating "complaint closed" as final. A closed or "resolved" status is not the end. You have the right to reopen the same complaint and to escalate. Always reply in writing rejecting the closure and asking for the reason.
• Losing the transaction ID and RRN. Without these, banks, NPCI, and the police cannot trace the money. Save them, the date and time, and the amount before anything else.
• Delaying the 1930 and cybercrime.gov.in report. For fraud, the first hours decide whether the money can be frozen in the beneficiary account. Report there before, or alongside, the bank complaint.
• Trying to contact the receiver directly. Do not call or message the receiver, and do not transfer "verification" amounts on anyone's instructions. Route everything through your bank and the police.
• Filing an RTI against a private app or private bank. They are not public authorities, so the RTI has no legal basis. Use the app grievance system, NPCI dispute, and the RBI Ombudsman, and use RTI only for PSU banks, police, or RBI.
• Skipping the 30-day clock. The RBI Ombudsman route generally opens 30 days after your written complaint. A verbal call to customer care does not start that clock; a dated written complaint does.
• Not keeping the closure message. The exact closure communication you are disputing is core evidence for both the reopening and the Ombudsman. Screenshot and save it.