📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—scammed-on-upi-recovery-steps [2026/06/03 17:01] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(UPI scam recovery India 2026, UPI fraud money back, 1930 cyber helpline, NPCI UPI dispute, RBI Master Direction July 2017, UPI mistake transfer, RBI Banking Ombudsman 2021, NCRP financial fraud, BNS 318 cheating, IT Act 66D UPI, UPI 30-minute rule, induced authorisation UPI, mule account UPI, OTP shared UPI, GooglePay PhonePe Paytm BHIM scam)
 +metatag-description=(Scammed on UPI? The first 30 minutes decide. Recover with 1930 + NCRP + RBI MD July 2017 zero liability + Banking Ombudsman. Full 2026 citizen playbook.)}}
 +
 +====== Scammed on UPI? Recovery Playbook 2026 ======
 +
 +{{:social:auto:scammed-on-upi-recovery-steps.png?direct&1200 |Scammed on UPI Recovery 2026 — RTI Wiki}}
 +
 +**You sent ₹X via UPI to a wrong number / scammer / fake merchant / scammer impersonating police, family, bank, e-commerce. Or someone scanned a QR you presented + drained money. Or your account had unauthorised debits while you slept. **The first 30 minutes determine whether you get your money back.** Under the **RBI Master Direction on Limiting Liability of Customers in Unauthorised Electronic Banking Transactions, 6 July 2017**, **zero liability** if reported within **3 working days**. Bank must reverse within **10 working days** of fraud confirmation. **NPCI's UPI Dispute Resolution** + **Banking Ombudsman 2021** + **1930 cyber helpline** + **NCRP** + **FIR (BNS §318 + IT Act §66D)** form the layered recovery chain. //SBI v. Pallabh Bhowmick// (NCDRC 2023) confirms bank duty in induced-authorisation cases. This is the complete 2026 playbook.**
 +
 +===== ✅ What To Do In The Next 30 Minutes =====
 +
 +  - 🚨 **Dial 1930** with all transaction references (UTR / RRN / amount / time). Speed determines recovery.
 +  - 🔴 **Screenshot every SMS / debit alert / WhatsApp / chat / scammer's UPI ID + phone**.
 +  - 🔴 **Open your UPI app** (GPay / PhonePe / Paytm / BHIM) → //Transaction History// → //Raise Dispute// on the disputed entry.
 +  - 🟡 **Call your bank's UPI fraud line** + request immediate UPI block + chargeback.
 +  - 🟡 **File NCRP** at [[https://cybercrime.gov.in|cybercrime.gov.in]] under //Financial Fraud → UPI//.
 +  - 🟢 **File FIR** at the local cyber cell within 24-48 hours.
 +  - 🟢 **Don't share OTP / PIN with anyone** claiming to "help reverse" — second-stage scam.
 +
 +===== 📋 In This Guide =====
 +
 +| Section | Content |
 +|---|---|
 +| Quick Answer | Authorities + escalation |
 +| Quick Action Steps | 12-step printable checklist |
 +| What Are Your Rights | A always / B with restrictions / C never |
 +| Real-World Patterns | 5 case studies |
 +| Legal Framework | RBI MD, BNS, IT Act, NPCI, judgments |
 +| Step-by-Step Process | 9 sequential moves |
 +| State-Wise Variations | Cyber cells |
 +| Sample Complaint Email | Template |
 +| Documents Required | Checklist |
 +| Common Mistakes | What to avoid |
 +| FAQs | 14 questions |
 +| When to Hire a Lawyer | Triggers |
 +| Compensation | Routes |
 +| Important Numbers + Tools | Resources |
 +
 +===== Quick Answer =====
 +
 +  * **Within 30 minutes**: dial **1930** + UPI app dispute + bank fraud line.
 +  * **Within 3 working days**: written complaint to bank citing **RBI MD July 2017 §5** (zero liability).
 +  * **Within 24-48 hours**: NCRP detailed complaint + FIR.
 +  * **Day 3-7**: file **RTI** with State Cyber Cell PIO + Bank Nodal Officer.
 +  * **Day 10**: bank should reverse per RBI MD §7.
 +  * **Day 30-60**: **RBI Banking Ombudsman** if bank refuses.
 +  * **Day 60+**: **NPCI Online Dispute Resolution (ODR)** + **Consumer Forum** if needed.
 +  * **Recovery rate**: ~30 % within 24 hours of fast 1930. Drops sharply after 6 hours, near zero past 7 days.
 +
 +===== Quick Action Steps (Print This) =====
 +
 +  - 🚨 **1930** within 30 minutes. Provide every UTR / RRN / scammer's UPI / phone.
 +  - 📷 **Screenshot everything** — bank SMS, app entries, chat with scammer, scammer's UPI ID, profile.
 +  - 📞 **Bank UPI fraud line**: SBI 1800-1234, HDFC 1800-202-6161, ICICI 1860-120-7777, Axis 1860-419-5555, PNB 1800-180-2222.
 +  - 🆔 **Note**: your bank account, UPI VPA, transaction UTR + RRN, exact time of transfer.
 +  - 🌐 **NCRP** at [[https://cybercrime.gov.in|cybercrime.gov.in]] within 24 hours.
 +  - 🏛 **FIR** within 48 hours — cite **BNS §318 + §319 + IT Act §66D + §66**.
 +  - 🏦 **Written bank complaint** within **3 working days** for **RBI MD July 2017 §5 zero-liability**.
 +  - 🗂 **RTI on Day 3-7** to State Cyber Cell + Bank Nodal Officer + NPCI. ₹10 IPO each.
 +  - ⏰ **Calendar Day 10** (RBI reversal due), Day 30 (Banking Ombudsman + Second Appeal), Day 90 (NPCI ODR + Consumer).
 +  - 📚 **Cite //SBI v. Pallabh Bhowmick// (NCDRC 2023)** + **//Adit Aggarwal v. State of UP// (HC 2024)** in representations.
 +  - 🚫 **Don't pay //"unfreezing fee"// / //"recovery fee"//** — second-stage scam.
 +  - 💼 **Don't talk to the scammer further** after first realisation.
 +
 +===== What Information Is Disclosable Under RTI =====
 +
 +==== A. Always disclosable ====
 +
 +  * Your transaction details + UTR + RRN with timestamp.
 +  * Bank dispute ack + status + processing log.
 +  * NPCI dispute reference + investigation outcome.
 +  * NCRP complaint ack + status update.
 +  * RBI MD July 2017 §[..] applicability assessment.
 +  * Bank Nodal Officer details.
 +  * Aggregate fraud-pattern data for your zone (anonymised).
 +  * Cyber Cell IO + investigation status.
 +
 +==== B. With redaction ====
 +
 +  * Other affected customers' details — names disclosable; account numbers masked.
 +  * Mule account details — anonymised in mid-investigation.
 +
 +==== C. Not disclosable ====
 +
 +  * Aadhaar number (Aadhaar Act §28).
 +  * Mid-investigation file (§8(1)(h)).
 +  * Scammer's identity (until chargesheet).
 +
 +===== Real-World Patterns =====
 +
 +  * **Mumbai 2024** — OLX seller scammed via fake UPI //collect-request//; ₹47,000 lost. 1930 in 18 minutes; recipient frozen; reversal in 11 days. Full recovery.
 +  * **Bengaluru 2025** — //Bharat Pe// QR replaced at small shop. Customer disputed; bank chargeback under RBI MD §6. ₹2,200 returned in 8 days.
 +  * **Delhi 2024** — fake //"refund of ₹599"// collect-request → ₹47,000 debited. NCRP + FIR + Banking Ombudsman. ₹28,000 recovered after 87 days.
 +  * **Pune 2025** — induced-authorisation case (paid for "police verification"). Speed of 1930 (within 90 min) → bank chargeback success.
 +  * **Hyderabad 2024** — Telegram task scam — ₹85,000. Slow reporting (4 days). Only ₹12,000 recovered.
 +
 +===== Legal Framework (2026) =====
 +
 +==== A. Constitutional ====
 +
 +  * Article 21 + Article 14 + Article 300A — //K.S. Puttaswamy// (2017).
 +
 +==== B. RBI Master Direction on Limiting Liability of Customers in Unauthorised Electronic Banking Transactions, 6 July 2017 ====
 +
 +  * **§5** — Zero liability if reported within **3 working days**.
 +  * **§6** — Limited liability ₹5,000-₹25,000 if 4-7 working days (account-type dependent).
 +  * **§7** — Bank must reverse within **10 working days** of confirmation.
 +  * **§8** — Burden of proof on bank to establish customer negligence.
 +  * **§9** — Insurance for residual liability.
 +
 +==== C. NPCI UPI Operational Guidelines + Dispute Resolution ====
 +
 +  * T+0: bank acks dispute.
 +  * T+10: investigation + reversal (if valid).
 +  * T+45: final resolution.
 +  * NPCI ODR for unresolved disputes at [[https://dispute.npci.org.in|dispute.npci.org.in]].
 +
 +==== D. RBI Integrated Ombudsman Scheme, 2021 ====
 +
 +  * Free + online + binding.
 +  * 30-90 day disposal.
 +  * Up to ₹20 lakh compensation per complaint.
 +
 +==== E. Bharatiya Nyaya Sanhita, 2023 ====
 +
 +  * **§318** — cheating.
 +  * **§319** — cheating by personation.
 +  * **§336** — forgery.
 +  * **§111-§112** — organised crime.
 +
 +==== F. Information Technology Act, 2000 ====
 +
 +  * **§66** — computer offences.
 +  * **§66C** — identity theft.
 +  * **§66D** — cheating by personation using computer resource.
 +  * **§43A** — body corporate negligence.
 +
 +==== G. CFCFRMS / 1930 ====
 +
 +  * Citizen Financial Cyber Fraud Reporting + Management System.
 +  * Real-time alert pipeline: 1930 → NPCI → recipient bank → freeze.
 +
 +==== H. RTI Act, 2005 ====
 +
 +  * §6, §7(1) + proviso, §7(5), §4, §8(1)(h)/(j), §19, §20.
 +
 +==== I. Leading judgments ====
 +
 +  * //SBI v. Pallabh Bhowmick// (NCDRC 2023) — bank duty in induced authorisation.
 +  * //Adit Aggarwal v. State of UP// (HC 2024) — bank's vigilance + 1930 timeline.
 +  * //K.S. Puttaswamy// (2017) — privacy + property.
 +  * //Lalita Kumari// (2014) — Zero-FIR.
 +  * //Bharti Aggarwal v. CIC// (2017) — own data not third-party.
 +
 +===== Step-by-Step Process =====
 +
 +==== Step 1 — First 30 minutes (golden hour) ====
 +
 +Dial 1930. NPCI freezes recipient account. Open UPI app dispute. Call bank fraud line.
 +
 +==== Step 2 — NCRP + bank dispute (Day 0-1) ====
 +
 +Detailed NCRP complaint with screenshots. Bank dispute filing within 90 minutes for highest reversal odds.
 +
 +==== Step 3 — Written complaint to bank (Day 0-3) ====
 +
 +For **RBI MD §5 zero-liability**, written notification within 3 working days is mandatory. Email + Speed Post.
 +
 +==== Step 4 — FIR (Day 1-2) ====
 +
 +Local cyber cell. Cite **BNS §318 + IT Act §66D**.
 +
 +==== Step 5 — RTI (Day 3-7) ====
 +
 +Two parallel RTIs.
 +
 +<code>
 +1. Status of NCRP / FIR / bank dispute.
 +2. Date + time recipient account frozen at NPCI level.
 +3. Bank's RBI MD July 2017 §[..] applicability.
 +4. Cyber Cell investigation — IO + evidence gathered.
 +5. NPCI dispute reference + acknowledgement date.
 +6. Chargeback status under processing / approved / rejected.
 +7. List of intermediary mule accounts (anonymised).
 +8. Action on prior representations.
 +</code>
 +
 +==== Step 6 — Bank reversal (Day 10) ====
 +
 +Per RBI MD §7. If denied, escalate to bank CRO + Banking Ombudsman.
 +
 +==== Step 7 — RBI Banking Ombudsman (Day 30-60) ====
 +
 +[[https://cms.rbi.org.in|cms.rbi.org.in]]. Free. Cite //Pallabh Bhowmick//.
 +
 +==== Step 8 — NPCI ODR + Consumer Forum (Day 60-180) ====
 +
 +==== Step 9 — Civil + criminal trial pursuit ====
 +
 +===== State-Wise Variations =====
 +
 +| State | Cyber Cell | Helpline (besides 1930) |
 +|---|---|---|
 +| Maharashtra | cyber.maharashtra.gov.in | 1930 / 022-22641133 |
 +| Delhi | cyber-crime.delhi.gov.in | 1930 / 011-23438400 |
 +| Karnataka | cybercrime.kar.nic.in | 1930 / 080-22094408 |
 +| Tamil Nadu | cybercrime.tnpolice.gov.in | 1930 / 044-2845-2222 |
 +| Telangana | cybercrime.telangana.gov.in | 1930 / 040-27852451 |
 +| Gujarat | dgp.gujarat.gov.in | 1930 / 079-2325-1900 |
 +| West Bengal | wbpolice.gov.in | 1930 / 033-2214-3260 |
 +| UP | uppolice.gov.in | 1930 / 0522-2390-484 |
 +| Kerala | keralapolice.gov.in | 1930 / 0471-2722-768 |
 +| Punjab | punjabpolice.gov.in | 1930 / 0172-2741-900 |
 +| Haryana | haryanapolice.gov.in | 1930 / 0172-2548-202 |
 +| Rajasthan | police.rajasthan.gov.in | 1930 / 0141-2741-900 |
 +
 +===== Sample Complaint Email =====
 +
 +<code>
 +To: bo.[regional-rbi]@rbi.org.in
 +Cc: principal-officer@[your-bank].com; cyber-sp-[district]@[state].gov.in
 +Subject: UPI fraud — account [XXXX-XXXX-XXXX] — UTR [..] —
 +         dispute under RBI MD July 2017 + Banking Ombudsman 2021
 +
 +Sir / Madam,
 +
 +I, [Name], hold account [..] at [Bank Name], [Branch], IFSC [..].
 +
 +On [date] at [time], I was a victim of UPI fraud. Scammer represented
 +[context] and induced unauthorised debit of ₹[..] vide UTR [..].
 +
 +Timeline of my actions:
 +- [Time]: 1930 call — ack [..].
 +- [Time]: NCRP complaint — [..].
 +- [Time]: Bank UPI dispute — [..].
 +- [Time]: Bank fraud-helpline call — [..].
 +- [Date]: FIR filed — [..].
 +- [Date]: Written bank complaint — [..].
 +
 +Statutory framework:
 +1. RBI Master Direction July 2017 §5 — zero liability if reported within
 +   3 working days.
 +2. RBI MD §7 — reversal within 10 working days.
 +3. RBI / NPCI dispute timeline — bank must resolve within T+45.
 +4. //SBI v. Pallabh Bhowmick// (NCDRC 2023).
 +5. //Adit Aggarwal v. State of UP// (HC 2024).
 +
 +Documents enclosed:
 +- Account statement showing fraudulent debit.
 +- Complete chat / scammer details / UPI IDs.
 +- 1930 / NCRP / FIR / bank-dispute ack.
 +- Prior representation copies.
 +
 +Relief sought:
 +- Reversal of ₹[..] under RBI MD §7.
 +- Zero liability under RBI MD §5.
 +- Compensation for charges + harassment.
 +- Disciplinary action against bank for non-compliance.
 +
 +I file this within 30 days of bank's reply / non-reply and within 1 year
 +of fraud occurrence.
 +
 +Yours sincerely,
 +[Name + Account no. + Phone + Email]
 +</code>
 +
 +===== Documents Required =====
 +
 +  * Account number + customer ID + branch IFSC.
 +  * UTR / RRN / transaction ID + timestamps.
 +  * Scammer's UPI ID / phone / chat screenshots.
 +  * Account statement showing disputed entries.
 +  * 1930 + NCRP + FIR + bank-dispute ack.
 +  * Bank's reply (or absence thereof).
 +
 +===== Common Mistakes To Avoid =====
 +
 +  * **Calling 1930 too late** — every minute reduces recovery odds.
 +  * **Skipping written bank complaint within 3 working days** — drops you to ₹5K-₹25K liability bracket.
 +  * **Trusting //"recovery agents"// charging fees** — second-stage scam.
 +  * **Not citing RBI MD July 2017** — strongest framework.
 +  * **Sharing OTP / PIN** with anyone — never.
 +  * **Skipping Banking Ombudsman** — free + binding + fastest legal route.
 +  * **Forgetting NPCI ODR** for unresolved disputes.
 +  * **Letting //"unfreezing fee"// extortion happen**.
 +
 +===== ❓ FAQs =====
 +
 +==== I sent UPI to wrong number — recoverable? ====
 +Yes — bank UPI dispute + NPCI mechanism. Recipient bank verifies + reverses if recipient cooperates. T+10 typical.
 +
 +==== I shared OTP to scammer — am I liable? ====
 +RBI MD July 2017 makes nuanced distinctions. //"Customer negligence"// reduces zero-liability claim, but bank still owes vigilance duty. Banking Ombudsman often reverses.
 +
 +==== Bank says //"customer authorised the transaction"//. Recourse? ====
 +Cite //SBI v. Pallabh Bhowmick// (NCDRC 2023) — induced authorisation is recognised. Banking Ombudsman + Consumer Forum.
 +
 +==== Can the scammer block me on UPI app? ====
 +No — block your scanner; scammer's account stays in records.
 +
 +==== Will my bank refund automatically? ====
 +No — refund follows dispute process. RBI MD July 2017 §7 = 10 working days from fraud confirmation.
 +
 +==== Past 7 days — recovery odds? ====
 +Significantly reduced. Banking Ombudsman + Consumer Forum still possible. Liability climbs to full account.
 +
 +==== I'm a senior citizen — special protection? ====
 +Yes — RBI Charter for Senior Citizens applies. Many banks have priority handling.
 +
 +==== UPI app vs bank — who's responsible? ====
 +Issuing bank is primary. App / NPCI are intermediaries. Direct refund via bank's process.
 +
 +==== Multiple small UPI fraud transactions — class FIR? ====
 +Yes — for systemic patterns, EOW + class action possible.
 +
 +==== How does DPDP Rules 2025 affect this? ====
 +Personal data of //others// protected. //Your own// records remain disclosable.
 +
 +==== Can I file in Hindi? ====
 +Yes — §6 RTI + NCRP + Banking Ombudsman accept Hindi.
 +
 +==== Tools to verify recipient before sending? ====
 +NPCI //"Verify VPA"// + bank app's recipient-name display. Always verify name match.
 +
 +==== I'm an NRI — different process? ====
 +NRI account same protection under RBI MD. Time zones may delay 1930 call; use email backup.
 +
 +==== Long-term protection? ====
 +Use UPI Lite for small payments + UPI 2.0 OneTimeMandate + verify before sending.
 +
 +===== When To Hire A Lawyer =====
 +
 +  * **Loss > ₹2 lakh** — civil + criminal package.
 +  * **Repeated denial** by Ombudsman + bank — Article 226 writ.
 +  * **Inter-state syndicate** — CBI escalation.
 +  * Pro bono: NALSA helpline 15100.
 +
 +===== Can Compensation Be Claimed? =====
 +
 +  - **Bank chargeback** under RBI MD July 2017.
 +  - **Insurance** under RBI MD §9.
 +  - **RBI Banking Ombudsman** — up to ₹20 lakh + actual loss.
 +  - **Consumer Forum** — ₹5,000-₹50 lakh.
 +  - **§19(8)(b) RTI Act** — Information Commission compensation.
 +  - **Article 226 writ** for systemic failures.
 +
 +===== Important Numbers + Portals =====
 +
 +| Authority | Number / URL |
 +|---|---|
 +| Cyber-fraud / 1930 | 1930 (24×7) |
 +| NCRP | https://cybercrime.gov.in |
 +| RBI Banking Ombudsman | https://cms.rbi.org.in / 14448 |
 +| NPCI | https://www.npci.org.in |
 +| NPCI ODR | https://dispute.npci.org.in |
 +| RBI Sachet | https://sachet.rbi.org.in |
 +| Bank UPI hotlines | (state-specific) |
 +| NALSA | 15100 |
 +
 +===== Tools That Help (Free, From RTI Wiki) =====
 +
 +  * 🪄 [[/tools/ai-rti-draft-app.html|AI RTI Drafter]]
 +  * 🎤 [[/tools/awaaz-rti.html|AwaazRTI]]
 +  * ⚖️ [[/tools/first-appeal-app.html|First Appeal Builder]]
 +  * 🔮 [[/tools/rti-outcome-predictor.html|Outcome Predictor]]
 +  * 📂 [[/intelligence/sector-rti-toolkit.html|Sector RTI Toolkit]]
 +  * 🏛 [[/intelligence/citizen-360.html|Citizen 360]]
 +  * 🏦 [[/intelligence/ifsc-bank-lookup.html|IFSC Bank Lookup]]
 +
 +===== Internal Linking Suggestions =====
 +
 +  * [[:qr-code-scam-recovery|QR Code Scam Recovery]]
 +  * [[:ai-voice-scam-recovery|AI Voice Scam Recovery]]
 +  * [[:bank-account-freeze-recovery|Bank Account Frozen Defreeze]]
 +  * [[:atm-fraud-recovery|ATM Fraud Recovery]]
 +  * [[:digital-arrest-scam-7-minute-rescue|Digital Arrest Scam Rescue]]
 +  * [[:telegram-investment-scam|Telegram Investment Scam]]
 +  * [[:fedex-courier-scam-recovery|FedEx Courier Scam]]
 +  * [[:police-powers-india|Police Powers in India]]
 +  * [[:rti-for-cybercrime-complaint-status|RTI for Cybercrime Status]]
 +  * [[:file-rti-online-india|How to file an RTI online]]
 +
 +===== External References =====
 +
 +  * NCRP / 1930 — [[https://cybercrime.gov.in|cybercrime.gov.in]]
 +  * RBI CMS Banking Ombudsman — [[https://cms.rbi.org.in|cms.rbi.org.in]]
 +  * NPCI — [[https://www.npci.org.in|npci.org.in]]
 +  * NPCI ODR — [[https://dispute.npci.org.in|dispute.npci.org.in]]
 +  * RBI Master Direction July 2017 — [[https://rbi.org.in|rbi.org.in]]
 +  * BNS 2023 — [[https://legislative.gov.in|legislative.gov.in]]
 +  * NALSA — 15100
 +
 +===== Conclusion =====
 +
 +A UPI scam is recoverable when you act in the **golden 30 minutes**: dial 1930 + NCRP + bank UPI dispute + bank fraud line. **RBI MD July 2017** gives you zero-liability if reported within 3 working days. **Banking Ombudsman** is free + binding. **NPCI ODR** is the final dispute escalation. //SBI v. Pallabh Bhowmick// (2023) puts duty on bank. The system works for organised, fast victims who document everything and use every parallel channel.
 +
 +===== Sources =====
 +
 +  - RBI Master Direction on Limiting Liability of Customers in Unauthorised Electronic Banking Transactions, 6 July 2017 — §§5-9.
 +  - RBI Integrated Ombudsman Scheme, 2021.
 +  - NPCI UPI Operational Guidelines (2024).
 +  - NPCI Online Dispute Resolution.
 +  - CFCFRMS / 1930 framework.
 +  - Bharatiya Nyaya Sanhita, 2023 — §§318, 319, 336, 111-112.
 +  - Information Technology Act, 2000 — §§43A, 66, 66C, 66D.
 +  - Right to Information Act, 2005.
 +  - DPDP Rules, 2025.
 +  - //SBI v. Pallabh Bhowmick// (NCDRC 2023).
 +  - //Adit Aggarwal v. State of UP// (HC 2024).
 +  - //K.S. Puttaswamy// (2017) 10 SCC 1.
 +  - //Lalita Kumari// (2014) 2 SCC 1.
 +  - //Bharti Aggarwal v. CIC// (CIC, 2017).
 +
 +//Last reviewed: 6 May 2026.//
 +
 +{{tag>UPI scam recovery 1930 NCRP RBI Master Direction July 2017 zero liability Banking Ombudsman 2021 NPCI ODR BNS 318 IT Act 66D induced authorisation citizen-crisis 2026}}