SIM Swap Fraud Recovery 2026 — 24-Hour Plan

Last reviewed: 1 September 2026.

Your phone suddenly shows “No service” or “SIM not provisioned”. Within hours, you receive bank SMS for transactions you didn't make — UPI debits, credit-card charges, even loans taken in your name. This is SIM swap fraud (also SIM port-out fraud, SIM jacking) — the criminal switches your number to a SIM in their possession, intercepts OTPs, drains your accounts. SIM-swap and OTP-interception cases reported on India's National Cyber Crime Reporting Portal run into crores of rupees every year. The first 24-hour window decides whether you recover 100% or 0%. Here is the working playbook — by the clock.

• First 60 minutes: call your telco from another phone — block the swapped SIM. Vodafone Idea / Airtel / Jio / BSNL all have 24×7 lines. Lock UPI + freeze bank online channels.
• Within 24 hours: dial 1930 (Cyber Crime Helpline) for any unauthorised debit. File at https://cybercrime.gov.in.
• Within 48 hours: register FIR at cyber police station — IT Act §66C/§66D + BNS §318/§319/§336.
• Bank claim: invoke RBI Customer Liability Framework, 2017 §6(a) — zero liability if reported in 3 working days.
• TAFCOP — open https://tafcop.sancharsaathi.gov.in and check all SIMs in your name. Deactivate any you don't recognise.
• Sanchar Saathi → CEIR — block your stolen / swapped phone IMEI at https://www.ceir.gov.in.
• Recovery window: the first 24 hours give the best odds — money still sitting in beneficiary accounts can be frozen; recovery is rare after a week.
• Cost: ₹0 — TAFCOP, Sanchar Saathi, NCRP, FIR, RBI Ombudsman are all free.

1. Use someone else's phone — call your telco helpline (Airtel 121, Jio 199, Vi 199, BSNL 1503) → request immediate SIM block + RE-issue for your number. Note ticket number.
2. Call your bank's helpline (number on your debit/credit card or passbook). Tell: “SIM swap fraud — block all online banking, UPI, cards. Report under RBI Customer Liability Framework, 2017.”
3. Lock Aadhaar biometrics at https://uidai.gov.in or m-Aadhaar app — prevents AePS misuse.
4. Lock UPI in BHIM/PhonePe/GPay → Profile → Block UPI ID or freeze. Also disable e-mandate auto-pay.
5. Email all financial accounts (banks, mutual funds, Demat, NPS, credit cards) requesting freeze pending re-verification.
6. Take screenshots of all unauthorised SMS, transaction alerts, missed calls.
7. Dial 1930 → Cyber Crime Helpline (24×7). Get complaint number.
8. TAFCOP at https://tafcop.sancharsaathi.gov.in → enter your number → see all SIMs in your name → deactivate unknown ones (free, instant).
9. Sanchar Saathi → CEIR — if your physical phone was stolen, block the IMEI.
10. NCRP file at cybercrime.gov.in → Financial fraud → SIM swap fraud.

SIM swap = a criminal convinces your telecom operator to issue a new SIM for your mobile number, then they receive all your calls, OTPs and SMS. It's social engineering at the point of sale (PoS) of a telco store, not a hack.

How it happens:

• Customer-care impersonation: criminal phones telco saying “I lost my SIM, need a new one” — bypasses verification with leaked KYC + Aadhaar last 4 digits.
• Insider fraud: corrupt telco employee or franchisee at a PoS retailer issues a SIM to the criminal in exchange for ₹5,000-₹50,000.
• e-KYC (Aadhaar-based) abuse: criminal uses leaked biometric (sub-registrar leak / e-KYC scanner trap) to authorise SIM issuance.
• Port-out fraud (MNP): criminal initiates port to a different telco using leaked OTP — Mobile Number Portability hijack.

Once active:

• Criminal receives OTPs from banks, UPI, Demat, IT department, Aadhaar updates.
• Drains accounts via UPI / IMPS / NEFT / RTGS.
• Takes personal loans / credit-card cash advances in your name.
• Updates email passwords by reset OTP → drains crypto wallets, Paytm, MFs.

You discover when:

• Phone shows “No service” suddenly (your SIM is the deactivated one).
• Bank SMS for unauthorised debits arrive on your email but not phone.
• Friends say “You missed my call” when you didn't.

• Reported cases include business owners and senior citizens losing amounts from tens of lakhs to over a crore in a single SIM-swap episode — several traced to insiders at telco points of sale.
• Cyber-crime units and NCRP data repeatedly flag OTP-interception frauds, SIM swap among them, as a high-value, recurring category.
• Top fraud cluster: Jamtara (Jharkhand), Mewat (Haryana), Bharatpur (Rajasthan) — most call-centres trace here.
• TRAI audits have repeatedly flagged telecom operators for subscriber-verification lapses around SIM issuance, with financial penalties imposed in past orders.

• DoT instructions on replacement SIMs: duplicate or re-issued SIMs require stricter verification and a waiting period before activation — tightened precisely to break SIM-swap fraud.
• DoT/TRAI port-out safeguards: porting needs a valid port-out code and telco-side verification; report a hijacked port to both operators and DoT immediately.
• DoT's TAFCOP portal (https://tafcop.sancharsaathi.gov.in) — every citizen can see all SIMs issued in their name. Free.
• CEIR (Central Equipment Identity Register) at https://www.ceir.gov.in — block stolen phones by IMEI.

• Zero liability if reported within 3 working days.
• Limited liability up to ₹25,000 if reported within 4-7 working days.
• Bank must credit shadow refund within 10 working days.
• Final resolution: 90 days.

• IT Act §66C — identity theft (3 years).
• IT Act §66D — cheating by impersonation (3 years).
• BNS §318 — cheating (7 years).
• BNS §319(2) — cheating by personation (up to 5 years).
• BNS §336 — forgery for cheating (7 years).
• PMLA §3 — money laundering.
• Indian Telegraph Act, 1885 §25 — intentionally damaging or tampering with telegraphs.

• MNP under TRAI Telecommunication Mobile Number Portability Regulations, 2009 (amended 2019).
• Port-out code (UPC) validity is days, not weeks — TRAI tightened MNP verification after the 2019 fraud reports.
• Telcos liable for negligent port-out under TRAI's quality of service rules.

• Telcos are data fiduciaries under DPDP §2(i).
• Penalty up to ₹250 crore for negligent handling of personal data leading to harm.
• Right to grievance under DPDP §13 — DPO must respond.

Order matters. Do these IN PARALLEL using two devices if possible:

1. Device 1: call telco → block + re-issue (note ticket number).
2. Device 2: call bank's helpline → freeze ALL online channels + UPI + cards.
3. Browser: lock Aadhaar biometrics at uidai.gov.in.
4. Browser: change passwords on email, banking, mutual funds, Demat — use a password manager.

1. Go to https://tafcop.sancharsaathi.gov.in.
2. For a complete citizen walkthrough, use the guide to checking every SIM registered in your name.
3. Enter your number → OTP → see all SIMs in your name (max 9 per Aadhaar).
4. Mark unknown SIMs as Not my number → deactivate. Telco must act within 7 days.

1. Open https://www.ceir.gov.in.
2. If physical phone was stolen: Block stolen phone → enter IMEI + FIR copy → IMEI blocked across India within 24 hours.

1. NCRP file at https://cybercrime.gov.in → Financial fraud → SIM swap fraud. Save Acknowledgement Number.
2. FIR at cyber police station — sections: IT Act §66C/§66D, BNS §318/§319/§336.
3. eFIR available in 10+ states.

1. Visit branch with: ID, bank statement, NCRP acknowledgement, FIR copy.
2. Submit written letter:

> To, Branch Manager, [Bank], [Branch].

  > //Sub: SIM swap fraud — RBI Customer Liability Framework Claim §6(a).//
  > //Account no: ... I noticed unauthorised debits totalling ₹... on dates... My SIM was swapped without my consent at [time]. I have filed FIR No. ..., NCRP Acknowledgement No. .... As per RBI/2017-18/15 dated 06 Jul 2017 §6(a), I am reporting within 3 working days; my zero-liability claim attaches. Kindly: (a) issue a shadow credit within 10 working days, (b) raise NPCI/IMPS dispute with the beneficiary bank, (c) provide telco-bank API logs for my account. — [Signature, Date].//

1. For UPI: NPCI dispute via your bank.
2. For card: chargeback (TAT 60-90 days).
3. For NEFT/IMPS: bank-to-bank reversal via RBI Centralised Payments.

1. File at https://cms.rbi.org.in.
2. Free. Order in 60-90 days.
3. Compensation up to ₹1 lakh for mental harassment, in addition to refund.

File RTIs to track + push:

• To telco, routed via TRAI (private telcos are generally not public authorities under the RTI Act, so ask TRAI, which regulates them, to call for the telco's KYC and audit records):

Did your KYC procedure verify the identity of the person re-issuing SIM for my number on date [X]; copy of the KYC form, biometric / OTP log, store ID, employee ID who processed it; reason for issuing without 7-day waiting period.

• To TRAI: Status of audit / penalty action against [Telco] for the SIM swap incident reported under complaint [X]; date of next compliance review.
• To DoT (via Sanchar Saathi): Outcome of TAFCOP request to deactivate SIMs [list]; date the SIMs were deactivated; reason if not yet deactivated.
• To bank: Status of complaint number [W]; date NPCI dispute raised; reply received from beneficiary bank.
• To local police: FIR [No] status; investigating officer; date of next investigation step; status of beneficiary account holder identification.

Use the RTI Drafter for these — drafts all 5 RTIs from your case description.

1. Waiting “to see if SIM auto-restores” — delay costs the zero-liability ceiling.
2. Calling telco from your own (stolen) SIM — it's deactivated. Use a friend's phone.
3. Visiting a random telco store to “fix it” — go to your nearest company-owned store, not a franchisee. Franchisees often colluded in the original swap.
4. Skipping TAFCOP — multiple SIMs in your name = multiple attack surfaces.
5. Skipping CEIR — IMEI block prevents the criminal from re-using your stolen handset.
6. Sharing OTP with a “bank verification officer” — banks never ask for OTP.
7. Trusting Telegram “recovery agents” — second-stage scammers.
8. Not filing FIR — without FIR, banks can refuse zero-liability + telco refuses logs.
9. Re-using the same swapped number for new accounts — open a new bank-linked SIM.

Because KYC at re-issuance is weaker than KYC at fresh issuance. Many fraud cases trace to insider abuse at telco franchisees: a corrupt employee bypasses identity verification for a bribe.

Yes:

• Audit TAFCOP monthly — see all SIMs in your name. Deactivate any you don't recognise.
• Use an authenticator app (Google Authenticator / Authy) for banks that support it, instead of SMS-OTP.
• Different phone numbers for different services — separate bank/UPI from social media.
• Lock Aadhaar biometrics by default.
• Set up SMS-only alerts — many banks email + SMS; if SMS stops while email continues, that's your alarm.

No — you must claim it. Banks don't volunteer the zero-liability refund. You must invoke §6(a) RBI Customer Liability Framework explicitly in writing, within 3 working days. Use the sample letter above.

• Dispute with the lender invoking RBI Customer Liability Framework + KYC failure.
• CIBIL dispute at https://www.cibil.com → Online Dispute → cite the SIM-swap FIR.
• Lender's banking ombudsman if it's a regulated lender.
• Civil suit if lender refuses (rare).

File RTI to TRAI asking for the audit outcome — private telcos are generally not public authorities under the RTI Act, so TRAI and DoT are your route to their compliance records. Also: TDSAT (Telecom Disputes Settlement and Appellate Tribunal) for refusal to share.

Yes — under Consumer Protection Act §2(11) for deficiency in service. Also DPDP Act §13 as a grievance against the data fiduciary. Claim your actual loss plus compensation for deficiency — there is no fixed statutory cap.

Some banks offer cyber-crime / social-engineering fraud insurance as a premium-card add-on. Ask your issuer in writing what fraud cover your card carries and its claim limit.

Free help:

• NALSA 15100 — free legal aid + filing.
• Senior Citizens Helpline 14567.
• District Legal Services Authority (DLSA) — physical centres.
• Your Banking Correspondent (BC) can help file at NCRP.

Not inherently — but TAFCOP audit monthly. Max 9 SIMs per Aadhaar. Each SIM is a potential entry point.

Mostly. But change all passwords + revoke session cookies on banking apps + enable app-level biometric login. Ask your bank for a new debit card with a new number.

• Lock Aadhaar biometrics.
• Block PAN temporarily via incometax.gov.in if you suspect IT misuse.
• Monitor CIBIL monthly for unauthorised credit applications.
• Set up account-monitoring alerts at every bank.

No — the telco re-issues YOUR number to YOU after verification (Aadhaar biometric + visit to a company-owned store). Process: 24-48 hours. Some telcos charge ₹0-₹250 for re-issue.

Yes — at https://www.ceir.gov.in → Unblock found mobile. Requires the FIR copy + retrieved phone in your possession.

• Cyber Crime Complaint in India — full process
• UPI Fraud Recovery — Dial 1930 + RBI 3-day rule
• AePS / Aadhaar Biometric Fraud Recovery
• Digital Arrest Scam — 7-minute rescue plan
• Loan App Harassment Recovery
• RTI Drafter — file an RTI to telco / TRAI / police
• Aadhaar Status — biometric lock + mobile update
• Credit Card Charges — every fee, RBI rules
• The RTI Playbook

• TAFCOP (DoT — view all SIMs in your name) — https://tafcop.sancharsaathi.gov.in
• Sanchar Saathi → CEIR (block stolen phone) — https://www.ceir.gov.in
• National Cyber Crime Reporting Portal — https://cybercrime.gov.in
• RBI Customer Liability Framework, 2017 — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11040
• RBI Banking Ombudsman (CMS) — https://cms.rbi.org.in
• TRAI Mobile Number Portability — https://www.trai.gov.in/notifications/regulation
• NALSA (free legal aid) — 15100 / https://nalsa.gov.in
• Telco helplines: Airtel 121, Jio 199, Vi 199, BSNL 1503.

SIM swap is the original Indian identity vacuum cleaner — one swap empties your phone, your bank, your loans, your credit. The defence: TAFCOP audit + Aadhaar biometric lock + authenticator app + monthly bank statement review. If hit: 24-hour recovery window, RBI 3-day rule, NPCI dispute, FIR + RTI — in that order.

The RTI Drafter auto-generates the 5 RTIs needed (telco, TRAI, DoT, bank, police) — saves hours.

• Department of Telecommunications — replacement-SIM verification and port-out safeguard instructions (Sanchar Saathi).
• TRAI Telecommunication Mobile Number Portability Regulations, 2009 (amended 2019).
• RBI Customer Liability Framework, 2017 (RBI/2017-18/15).
• Bharatiya Nyaya Sanhita, 2023 — §318, §319, §336.
• Information Technology Act, 2000 — §66C, §66D.
• Indian Telegraph Act, 1885 — §25.
• Digital Personal Data Protection Act, 2023.
• NCRB Cyber Crime Report 2024.