📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—sim-swap-fraud-telecom-not-their-fault-india [2026/07/22 17:47] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-title=(SIM Swap Fraud: Make Telecom Pay 2026 Guide)&metatag-description=(SIM swap fraud in India 2026: how telecom companies dodge blame, Sanchar Saathi + TRAI + RBI escalation, FIR + bank chargeback steps, sample complaints.)}}
 +{{htmlmetatags>metatag-keywords=(SIM swap fraud India, telecom not responsible SIM swap, Sanchar Saathi SIM swap, TRAI complaint SIM swap, duplicate SIM issued without consent, Section 66C IT Act, RBI zero liability SIM swap, Chakshu portal, mobile number cloning fraud, IT Rules 2021 telecom grievance officer)}}
 +
 +====== SIM Swap Fraud in India: When Telecom Says "Not Our Fault" (2026) ======
 +
 +
 +{{ :social:auto:sim-swap-fraud-telecom-not-their-fault-india.png?direct&1200 |SIM Swap Fraud in India: When Telecom Says "Not Our Fault" (2026) — RTI Wiki}}
 +
 +On 4 March 2026, Anand Kulkarni, a 41-year-old chartered accountant in Pune, lost ₹6,42,300 in 38 minutes. His phone went "No Service" at 11:14 am while he was in a client meeting. He thought it was a network drop. By 11:52 am, his ICICI savings, his wife's HDFC account, and his Paytm wallet were all empty. The retailer in Hadapsar had issued a duplicate SIM to a stranger that morning, without any video verification, against the rules. The telecom company's reply, three weeks later, was one line: "Customer is responsible for safeguarding OTP."
 +
 +<WRAP center round info 95%>
 +**Quick answer (read this first):** A SIM swap is when a fraudster gets a duplicate SIM of your number from a telecom retailer, often with fake ID or a bribed retailer. Within 30 minutes to 2 hours, they reset your bank, UPI and email OTPs. The telecom company will say "you shared OTP" - but issuing the duplicate SIM without proper re-verification is **their compliance failure**. Block the SIM, file FIR + [[1930-helpline-cyber-fraud-script|1930]], lodge a written complaint with the operator's appellate authority + TRAI + DoT Sanchar Saathi, and tell your bank in writing within **3 working days** for RBI zero-liability protection.
 +</WRAP>
 +
 +This article is a [[citizen-intelligence|Citizen Intelligence]] guide. It tells you how the SIM-swap workflow actually plays out inside telecom call-centres, what they hide, and where to push when the standard customer-care script ("we have escalated, sir") starts looping. For the bank-side recovery angle, also read [[sim-swap-fraud-recovery|SIM swap fraud recovery]]. For lost / stolen SIM blocking, see [[block-lost-stolen-sim-card-india|how to block a lost SIM]].
 +
 +===== What SIM swap fraud really is =====
 +
 +SIM swap fraud is the unauthorised issuing of a duplicate SIM card for **your** mobile number to a fraudster. The fraudster walks into a telecom retailer with fake ID or social-engineers a bribe-friendly distributor. The retailer activates a new SIM tied to your number. Your SIM goes dead. Every OTP from that minute onwards goes to the fraudster's hand. Banks, UPI apps, email, cloud, even WhatsApp - all use the mobile OTP as the second factor. Once the SIM is theirs, your digital life is theirs.
 +
 +===== What is really happening (the part nobody explains) =====
 +
 +Telecom retailers in India earn commission per SIM activation. Distributors get volume bonuses. The Department of Telecommunications has issued instructions on **biometric / video re-verification** before any duplicate SIM is handed over. On paper, the retailer must:
 +
 +  - Check government-issued photo ID of the person asking for the duplicate SIM
 +  - Re-verify against the original KYC record (Aadhaar / passport / voter ID)
 +  - Call the registered number where possible (it is dead, so this step is skipped)
 +  - Get a fresh photograph + signature on the Customer Acquisition Form (CAF)
 +  - Submit the CAF to the operator's distributor within 24 hours
 +
 +In practice, smaller retailers and franchise outlets skip steps 2, 3 and 5. A photocopy of any "looks similar" ID is enough. The CAF is filled in later. The auditing is patchy. The fraudster walks out with an active SIM in 20 minutes.
 +
 +When you complain, the operator's first-level call-centre is **not authorised** to confirm a compliance failure. They are trained to repeat: "Customer must have shared OTP / PIN with someone." This is the script. It buys the company time. By the time you climb to the Appellate Authority, 30 days have passed and your bank's chargeback clock has expired.
 +
 +===== How the system actually works internally =====
 +
 +A duplicate-SIM request inside a telecom company moves through four layers:
 +
 +^ Layer ^ Who handles it ^ Typical response time ^ What they can actually do ^
 +| 1. Retailer / store | Franchise staff | 0-20 min | Activate or refuse the SIM |
 +| 2. Customer care (121 / 198) | Outsourced BPO | 24-72 hrs | Read script, raise "ticket" |
 +| 3. Nodal Officer | Internal employee | 7-15 days | Pull CAF, check audit trail |
 +| 4. Appellate Authority | Senior internal officer | 30-45 days | Issue written decision, refund if liable |
 +
 +The retailer level is where the fraud succeeds. The nodal level is where the truth sits (the CAF copy, the retailer ID, the activation timestamp). Most citizens never reach the nodal level because step 2 keeps them in a loop of "we will revert".
 +
 +<WRAP important>
 +**⚠️ Do not stop at customer care.** A "complaint number" given by 121 / 198 / app chat is **not** a TRAI-trackable docket. Until you have written to the Nodal Officer at the company's published address (every operator publishes one under TRAI rules) and you have a **written reply or 15-day silence**, you cannot escalate to the Appellate Authority. Skip this and TRAI will bounce you back.
 +</WRAP>
 +
 +===== Common tactics fraudsters use =====
 +
 +  - **Retail social-engineering.** Walk into a low-footfall retailer with a Photoshop-edited ID matching the victim's name.
 +  - **MNP port-out scam.** Send the victim a fake "you are eligible for a free upgrade" SMS. Trick them into sharing the **UPC (Unique Porting Code)**. Port the number to another operator's SIM in their possession.
 +  - **Distributor insider.** A bribed distributor pushes a duplicate SIM through the operator's system with a backdated CAF.
 +  - **Lost phone exploitation.** Phone snatched at a metro station - thief immediately walks to the nearest retailer with the victim's wallet (containing ID).
 +  - **International call mask.** Calls show an Indian number but originate over internet. The Sanchar Saathi "report incoming international call with Indian number" feature catches these.
 +  - **Multiple SIMs on one ID.** Fraud rings issue 9+ SIMs against a single Aadhaar (legal limit varies, currently capped). Sanchar Saathi's "Know Your Mobile Connections" lets you see all SIMs issued against your Aadhaar.
 +
 +===== What telecom companies never tell you =====
 +
 +  * They have a **Customer Acquisition Form (CAF)** on file for every SIM. You can ask for it. They will resist.
 +  * They have a **CCTV recording** at the retailer for at least 30 days, often 90. You can ask the police to seize it.
 +  * The retailer's **Point of Sale (PoS) ID** is logged against every activation. The operator knows exactly which retailer activated the fraud SIM.
 +  * The **Appellate Authority's decision is binding** on the operator under the TRAI Telecom Consumers Complaint Redressal Regulations 2012.
 +  * Under **IT Rules 2021**, every "intermediary" (and telecoms are intermediaries for messaging) must have a **Grievance Officer** with a published name + email, and reply within 15 days.
 +  * They settle silently when you cite Section **66C / 66D of the IT Act 2000** (identity theft + cheating by personation) + Sections **318 / 319 of the Bharatiya Nyaya Sanhita 2023** (cheating + cheating by personation, replacing IPC 420 / 419) in your legal notice.
 +
 +===== Why your public complaint gets diverted to DM =====
 +
 +Tweet your complaint with screenshots at @Airtel_Presence / @JioCare / @VodafoneIN. Within 30 minutes, an "Online Care" handle replies: *"Hi Anand, sorry to hear that. Please DM your number and we'll look into it."* This is not customer care. This is **reputation management**. The DM goes to a separate desk that handles social-media optics, not compliance. Read [[company-asks-dm-after-public-complaint-india|Why companies ask you to DM after a public complaint]] for the full playbook.
 +
 +**Do not move to DM.** Keep the thread public. Reply with: *"Please reply on this thread. As per IT Rules 2021, your Grievance Officer must respond in writing within 15 days. Kindly share the Grievance Officer's name and email here."*
 +
 +===== How citizens get exhausted (the wear-down workflow) =====
 +
 +Telecom complaint processes are designed to outlast the citizen's patience. The pattern:
 +
 +  - **Week 1:** "Ticket raised, sir. 48 hours." Nothing happens.
 +  - **Week 2:** "Escalated to backend team. Please give 7 more working days."
 +  - **Week 3:** "We need a copy of FIR + ID + last 6 months bank statement + affidavit on ₹100 stamp paper."
 +  - **Week 4:** "We are still investigating. The retailer is being questioned."
 +  - **Week 6:** "As per our investigation, the duplicate SIM was issued after due verification. Hence, no compensation can be paid."
 +
 +By Week 6, you have made 14 calls, written 5 emails, lost two working days, and your bank's chargeback window is closed. Most people give up here. The system relies on this.
 +
 +<WRAP center round tip 95%>
 +**📞 Do this now (if you are reading this within 2 hours of the SIM going dead):**
 +  - Call the **bank** (any branch number, any time) and ask them to **freeze net-banking + UPI + cards** immediately. Demand a written email confirmation of the freeze.
 +  - Call **[[1930-helpline-cyber-fraud-script|1930]]** (cyber-crime helpline) and report the financial fraud. Note the acknowledgement number.
 +  - Visit the **nearest telecom store** with photo ID and ask for a fresh SIM with **strict re-verification**. Get a paper receipt with the retailer's POS ID.
 +  - File a complaint on **[[https://cybercrime.gov.in|cybercrime.gov.in]]** within 24 hours. Print the acknowledgement.
 +  - Email the bank in writing within **3 working days**. This is the RBI zero-liability cut-off.
 +  - Lodge FIR at the nearest police station (cyber-cell preferably).
 +</WRAP>
 +
 +===== Evidence you must preserve =====
 +
 +  * **SMS log** - the last SMS from the operator before "No Service". Photo it from another device.
 +  * **Call log** - all incoming / outgoing calls that day. Screenshot before the phone is reset.
 +  * **Bank SMS / push notifications** with exact timestamps.
 +  * **UPI app transaction history** - download statement PDF from the app.
 +  * **Email login alerts** - Google / Microsoft both send "new device login" alerts.
 +  * **WhatsApp "you registered on a new device"** notification if it triggered.
 +  * **CCTV** of the retailer at the activation time - request seizure via police u/s 94 BNSS 2023 (formerly 91 CrPC).
 +  * **CAF copy** - ask the operator for the Customer Acquisition Form used for the duplicate SIM. RTI helps if it is BSNL / MTNL; for private operators use a TRAI complaint + IT Rules 2021 grievance officer route.
 +
 +===== Legal position in India =====
 +
 +^ Statute ^ Section ^ What it covers ^
 +| Information Technology Act 2000 | §66C | Identity theft (using someone else's mobile / digital identity), up to 3 years jail + ₹1 lakh fine |
 +| Information Technology Act 2000 | §66D | Cheating by personation using computer resource, up to 3 years + ₹1 lakh fine |
 +| Bharatiya Nyaya Sanhita 2023 | §318 (cheating) | Replaces old IPC §420 |
 +| Bharatiya Nyaya Sanhita 2023 | §319 (cheating by personation) | Replaces old IPC §419 |
 +| Bharatiya Nyaya Sanhita 2023 | §336 (forgery) | If fake ID was used at retailer |
 +| Bharatiya Sakshya Adhiniyam 2023 | §63 (electronic evidence) | Replaces old Evidence Act §65B; CCTV + electronic records admissibility |
 +| IT Rules 2021 | Rule 3(2) | Grievance Officer to acknowledge in 24 hours, resolve in 15 days |
 +| TRAI Telecom Consumers Complaint Redressal Regulations 2012 | Reg. 25 | Nodal Officer; Appellate Authority |
 +| RBI Master Circular DBR.No.Leg.BC.78/09.07.005/2017-18 (6 July 2017) | Para 7-9 | Zero customer liability if reported within 3 working days; limited up to ₹5,000-₹25,000 if 4-7 days |
 +
 +For RTI on a public-sector telecom (BSNL / MTNL), see [[rti-telecom-bill-dispute|RTI for telecom bill dispute]] which uses the same routing.
 +
 +===== Escalation sequence that actually works =====
 +
 +==== Step 1. Block the SIM (within 1 hour) ====
 +
 +Walk into the nearest operator's own store (not a franchise retailer). Show ID. Ask them to **deactivate the fraud SIM** and re-issue your SIM with **biometric re-verification on the spot**. Insist on a paper receipt with the POS ID printed.
 +
 +==== Step 2. File FIR + 1930 (within 24 hours) ====
 +
 +Dial **[[1930-helpline-cyber-fraud-script|1930]]**. Then file on **[[https://cybercrime.gov.in|cybercrime.gov.in]]**. Print the acknowledgement. Walk into the nearest police station (cyber cell if available) and demand an FIR under Sections 66C, 66D IT Act + 318, 319 BNS 2023. See [[cybercrime-portal-vs-police-station-india|cyber crime portal vs police station]] for which route is binding.
 +
 +==== Step 3. Tell the bank in writing (within 3 working days) ====
 +
 +Email the bank's **[email protected]** address plus the branch manager. Subject line: *"Unauthorised electronic transactions on (account no) - SIM swap fraud - claim of zero liability under RBI Master Circular dated 6 July 2017."* Attach the FIR acknowledgement, the 1930 reference, and the operator's deactivation receipt. This is the cut-off for [[freeze-account-after-fraud-bank-process|account freeze]] + zero-liability protection.
 +
 +==== Step 4. First-level operator complaint (within 7 days) ====
 +
 +Call 121 / 198 or use the operator app. Get a **complaint docket number**. Note that the **TRAI Telecom Consumers Complaint Redressal Regulations 2012** require resolution within 7 working days for service issues, 24 hours for service activation issues.
 +
 +==== Step 5. Nodal Officer (after 7 days of silence) ====
 +
 +Each operator publishes a state-wise Nodal Officer contact at /complaints or /contact-us. Send a written email + speed post. Use the sample below. Cite the unresolved docket number from Step 4.
 +
 +==== Step 6. Appellate Authority (after 30 days from first complaint or written Nodal reply) ====
 +
 +The Appellate Authority is internal but **independent of customer-care chain**. Decision is binding on operator. Filing fee: nil. Reply due in 90 days. Read [[file-trai-telecom-complaint-2026|how to file a TRAI telecom complaint]] for the full Appellate template.
 +
 +==== Step 7. DoT Sanchar Saathi + Chakshu ====
 +
 +  - Go to **[[https://sancharsaathi.gov.in|sancharsaathi.gov.in]]** > "Citizen Centric Services" > "Know Your Mobile Connections" - check every SIM issued against your Aadhaar. Flag the fraud one.
 +  - Report the suspicious communication on **[[https://chakshu.sancharsaathi.gov.in|chakshu.sancharsaathi.gov.in]]**. This is the DoT's direct fraud-reporting channel that feeds into operator action + LEA referrals.
 +
 +==== Step 8. Consumer Commission (after 30 days of Appellate silence) ====
 +
 +File at **[[https://e-jagriti.gov.in|e-Daakhil]]** under the Consumer Protection Act 2019. Claim: refund + compensation for mental agony + cost of litigation. Pecuniary jurisdiction: District (up to ₹50 lakh), State (₹50 lakh - ₹2 crore), National (above ₹2 crore).
 +
 +==== Step 9. RBI Banking Ombudsman (parallel track for the bank side) ====
 +
 +File at **[[https://cms.rbi.org.in|cms.rbi.org.in]]** if the bank refuses zero-liability. See [[banking-ombudsman-complaint-guide-india|Banking Ombudsman complaint guide]].
 +
 +==== Step 10. National Consumer Helpline (parallel) ====
 +
 +Call **1915** or file at **[[https://consumerhelpline.gov.in|consumerhelpline.gov.in]]**. NCH conciliates between you and the operator. Useful pressure even though decisions are not binding.
 +
 +===== When RTI helps (and when it does not) =====
 +
 +RTI Act 2005 applies to **public authorities**. BSNL and MTNL are covered. Airtel, Jio, Vi are **not**. But:
 +
 +  - You can RTI the **DoT (LSA - Licensed Service Area)** asking how many duplicate-SIM compliance audits were done on Operator X in your circle in the last 12 months, with audit findings.
 +  - You can RTI the **District Police Cyber Cell** asking the number of SIM-swap FIRs filed against Retailer ID (POS code) - this exposes repeat-offender retailers.
 +  - You can RTI the **State Consumer Disputes Redressal Commission** asking for the disposal time of SIM-swap cases against Operator X.
 +
 +Use the [[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|🪄 AI RTI Drafter]] to draft these in under 2 minutes. For appeal templates use the [[https://righttoinformation.wiki/tools/first-appeal-app.html|📝 First Appeal Builder]]. To verify a Public Information Officer's reply, use the [[https://righttoinformation.wiki/tools/pio-reply-checker|🔍 PIO Reply Checker]].
 +
 +===== Consumer Commission vs Banking Ombudsman vs TRAI =====
 +
 +^ Forum ^ When to use ^ Cost ^ Binding? ^ Typical timeline ^
 +| TRAI Appellate Authority | Operator failed to issue refund / fix service | Free | Yes, on operator | 90 days |
 +| RBI Banking Ombudsman | Bank refused zero-liability | Free | Yes, on bank | 30-90 days |
 +| Consumer Commission (District) | Refund + compensation > ₹5,000 | ₹100-₹500 | Yes, both | 6-18 months |
 +| Cyber-crime court (FIR-based) | Criminal prosecution of fraudster | Free (state prosecutes) | Yes, criminal | 1-3 years |
 +
 +Run **TRAI + RBI in parallel**. Then Consumer Commission. Criminal FIR runs alongside throughout. None of these block the others.
 +
 +===== What actually works fastest (field-tested in 2025-26) =====
 +
 +  - **Chakshu portal + Sanchar Saathi "Know Your Connections"** in the same hour. Operators respond fastest to DoT-routed complaints.
 +  - **A legal notice citing Section 66C / 66D + BNS 318 / 319 + IT Rules 2021 Rule 3(2)** sent by speed post + email to the Grievance Officer and CC the Appellate Authority. Most settlements happen at this stage.
 +  - **Public Twitter / X post tagging @DoT_India + @TRAI + the operator's official handle (not @Brand_Cares)**. Refuse DM. Keep it public.
 +  - **RBI written email under the 3-day window** with FIR + 1930 ack attached. Zero-liability becomes hard for the bank to refuse.
 +  - **Visiting the operator's Circle Office in person** with a printed file. Citizens who walk in get answers same day. Citizens who only call wait 6 weeks.
 +
 +===== Mistakes citizens commonly make =====
 +
 +  - **Sharing OTP "to verify"** with anyone calling as bank / telecom staff. No genuine staff ever asks. (See [[whatsapp-otp-fraud-explained-india|WhatsApp OTP fraud]].)
 +  - **Giving up after the first-level "we have escalated" reply.** That is not an answer.
 +  - **Moving to DM on social media.** Kills the public pressure.
 +  - **Missing the 3-working-day bank deadline.** Zero-liability lapses.
 +  - **Filing FIR without listing all sections** (66C, 66D + BNS 318, 319, 336). Police list whatever they want; you must insist on the right sections.
 +  - **Not asking for the CAF copy.** This is the single piece of paper that proves operator negligence.
 +  - **Not preserving CCTV deadline.** 30-90 days at most. Apply to police u/s 94 BNSS within 2 weeks.
 +  - **Accepting partial refund + NDA.** Companies offer "goodwill" amounts in exchange for silence. Read the fine print before signing.
 +
 +===== Real-life example =====
 +
 +<WRAP center round box>
 +**📵 Pune, March 2026:** Anand Kulkarni (41, CA) loses ₹6,42,300 in 38 minutes after a Hadapsar retailer issues a duplicate SIM without video verification. He files FIR same evening, emails ICICI + HDFC + Paytm in writing on day 2, and lodges a Chakshu complaint on day 3. DoT writes to the operator on day 11. The retailer's POS ID is traced. The Appellate Authority orders a refund of ₹2,40,000 (operator's share). RBI Banking Ombudsman orders ICICI to refund ₹4,02,300 (zero liability, reported on time). Total recovery: ₹6,42,300. Total time: 4 months. Total cost: ₹2,200 (FIR copies, speed-post, stamp paper for affidavit). Anand kept the case alive only because he wrote to the Nodal Officer in writing on day 8 and refused to move the Twitter thread to DM.
 +</WRAP>
 +
 +===== Sample complaint to telecom Nodal Officer =====
 +
 +<code>
 +To,
 +The Nodal Officer,
 +[Operator Name], [Circle - e.g. Maharashtra]
 +[Published address from operator website]
 +
 +Subject: Unauthorised issuance of duplicate SIM for my mobile number
 +[XXXXXXXXXX] on [date] - claim for compensation + investigation
 +of retailer POS ID
 +
 +Sir / Madam,
 +
 +1. I am the registered subscriber of mobile number [XXXXXXXXXX]
 +   (KYC: Aadhaar / Passport / Voter ID No. [XXXX]) on [Operator Name]
 +   since [date of original activation].
 +
 +2. On [date], at approximately [HH:MM], my SIM went "No Service"
 +   without notice from your end. On enquiry at your store at
 +   [address], I learnt that a duplicate SIM had been issued to an
 +   unknown person at [retailer name + POS ID] at [HH:MM] on the
 +   same day.
 +
 +3. Within [38] minutes of my SIM going dead, an unauthorised
 +   transaction of ₹[XX,XXX] was carried out on my [bank name]
 +   account. FIR No. [XXX] dated [date] has been filed at
 +   [police station] under Sections 66C, 66D of the IT Act 2000
 +   and Sections 318, 319, 336 of the Bharatiya Nyaya Sanhita 2023.
 +   1930 acknowledgement: [number]. NCRP reference: [number].
 +
 +4. The duplicate SIM was issued without the re-verification
 +   prescribed by DoT instructions. The retailer did not match my
 +   KYC photograph, did not call my registered number, and did
 +   not file a fresh Customer Acquisition Form within 24 hours.
 +   This is a direct compliance failure on the part of your
 +   distribution chain.
 +
 +5. Under the TRAI Telecom Consumers Complaint Redressal
 +   Regulations 2012 (Reg. 25) and IT Rules 2021 Rule 3(2),
 +   I request:
 +   (a) Immediate written confirmation of deactivation of the
 +       fraudulent SIM (POS ID, retailer name, activation time).
 +   (b) Copy of the Customer Acquisition Form (CAF) used for the
 +       duplicate SIM issuance.
 +   (c) Compensation of ₹[amount] being the direct loss caused
 +       by your compliance failure.
 +   (d) Confirmation that the said retailer's licence has been
 +       suspended pending audit.
 +
 +6. If a written response is not received within 15 days, I will
 +   approach (i) the Appellate Authority of [Operator Name],
 +   (ii) the DoT via the Chakshu / Sanchar Saathi portal,
 +   (iii) the District Consumer Disputes Redressal Commission
 +   under the Consumer Protection Act 2019, and
 +   (iv) the RBI Banking Ombudsman against my bank.
 +
 +Yours faithfully,
 +[Name]
 +[Address]
 +[Email] | [Alternate mobile]
 +Date: [DD MMM 2026]
 +Encl: 1. Copy of FIR + 1930 acknowledgement
 +      2. Copy of original SIM KYC
 +      3. Bank statement showing unauthorised debits
 +      4. Photograph / receipt of fraudulent SIM deactivation
 +</code>
 +
 +===== Checklist - first 72 hours =====
 +
 +^ Hour ^ Task ^ Output ^
 +| 0-1 | Block SIM at operator's own store | Paper receipt with POS ID |
 +| 0-1 | Freeze bank / UPI / cards in writing | Email confirmation from bank |
 +| 1-3 | Call 1930 + file on cybercrime.gov.in | NCRP acknowledgement |
 +| 3-6 | File FIR (66C, 66D + BNS 318, 319, 336) | FIR copy |
 +| 6-24 | Email bank claiming RBI zero liability | Bank's written reply |
 +| 24-48 | Chakshu + Sanchar Saathi "Know Your Connections" | Reference numbers |
 +| 48-72 | Letter to operator Nodal Officer (speed post + email) | Speed post receipt |
 +| 72 | Public X / Twitter post tagging @DoT_India + @TRAI | Public thread URL |
 +
 +Print this table. Stick it on your wall.
 +
 +===== FAQ =====
 +
 +==== Is the telecom company liable if my SIM was swapped without my consent? ====
 +
 +Yes, partially. Issuing a duplicate SIM without DoT-mandated re-verification is the operator's compliance failure. Liability is established once you show the retailer skipped video / photo / KYC re-verification. The Appellate Authority can order operator compensation.
 +
 +==== What is the RBI 3-working-day rule? ====
 +
 +If you report unauthorised electronic banking transactions to your bank in writing within **3 working days**, your liability is zero (RBI Master Circular dated 6 July 2017). Day 4-7: liability capped at ₹5,000-₹25,000 depending on account type. After 7 days: bank's board-approved policy governs.
 +
 +==== Can I file an RTI on Airtel / Jio / Vi for the CAF copy? ====
 +
 +No. RTI Act applies to public authorities only. But you can RTI the **DoT LSA office** asking for the operator's duplicate-SIM audit report in your circle, and you can RTI the **police** for the number of SIM-swap FIRs against a specific retailer POS ID.
 +
 +==== What is Sanchar Saathi's "Know Your Mobile Connections"? ====
 +
 +A DoT portal at sancharsaathi.gov.in that shows every mobile number issued against your Aadhaar across all operators. You can flag and request disconnection of any number you do not recognise.
 +
 +==== What is the Chakshu portal? ====
 +
 +Chakshu (chakshu.sancharsaathi.gov.in) is the DoT's reporting channel for suspected fraud calls / SMS / WhatsApp messages. It feeds into operator action, LEA referrals and number blacklisting. Faster than 1930 for non-financial-loss reporting.
 +
 +==== My phone went "No Service" but no money was stolen. Do I still file FIR? ====
 +
 +Yes. The attempted SIM swap itself is an offence under Section 66C + 66D IT Act. File FIR even without financial loss. It creates a record if money is stolen later, and it forces the operator's compliance audit on the retailer.
 +
 +==== Can I sue the retailer directly? ====
 +
 +Yes, in the District Consumer Commission. The retailer is the operator's agent; both are jointly liable. File against retailer + operator together at [[https://e-jagriti.gov.in|e-Daakhil]].
 +
 +==== What is the difference between SIM swap and SIM cloning? ====
 +
 +SIM swap = a fresh duplicate SIM issued by the operator to a fraudster. Original SIM goes dead. SIM cloning = a technical attack copying the IMSI / Ki from your SIM onto another. Both SIMs work in parallel. Cloning is rare in India today; SIM swap is the standard fraud.
 +
 +==== Section 66C vs Section 66D - which one applies? ====
 +
 +Both. §66C covers identity theft (using your mobile number / Aadhaar / electronic signature). §66D covers cheating by personation (using a computer resource to cheat). SIM-swap frauds use both. Insist police list both in the FIR.
 +
 +==== Does the operator have to give me the Customer Acquisition Form (CAF)? ====
 +
 +Yes, under IT Rules 2021 Rule 3(2) (data-fiduciary disclosure) and TRAI regulations. Most operators resist. The Appellate Authority + consumer commission can compel disclosure. Police u/s 94 BNSS can seize.
 +
 +==== Can I get my number back if it was port-out fraud? ====
 +
 +Yes. The MNP port-out can be reversed if you complain to your **original operator** within 24 hours and the new operator's Nodal Officer within 7 days. File with TRAI under Reg. 25 of the Complaint Redressal Regulations.
 +
 +==== What if my bank refuses zero-liability? ====
 +
 +Escalate to the **bank's Internal Ombudsman** (mandatory under RBI guidelines), then the **RBI Integrated Ombudsman** at cms.rbi.org.in. See [[banking-ombudsman-complaint-guide-india|Banking Ombudsman guide]]. Most banks settle once the Ombudsman issues a hearing notice.
 +
 +==== How long does the whole recovery take? ====
 +
 +Realistic: 3-6 months for full recovery. The bank side (RBI zero-liability) clears in 30-60 days if you reported on time. The telecom side (Appellate Authority + compensation for operator negligence) takes 90-180 days. Criminal FIR runs longer (1-3 years).
 +
 +==== Will my CIBIL / credit score be affected if loans are drawn on my number? ====
 +
 +Yes, temporarily. File a dispute with the credit bureau (CIBIL, Experian, Equifax) attaching the FIR. The lender must mark the loan as "disputed" under RBI guidelines. Once the FIR investigation concludes, the entry is removed.
 +
 +==== Do I need a lawyer? ====
 +
 +For the FIR, complaint to Nodal / Appellate Authority, Chakshu, Sanchar Saathi, RBI Ombudsman, and Consumer Commission - **no**. All can be done by the citizen directly. For criminal prosecution and recovery suit, a lawyer helps.
 +
 +==== Is there a one-stop window for SIM-swap fraud? ====
 +
 +No single window yet. The closest is **Sanchar Saathi + 1930 + cybercrime.gov.in** triad. Run all three simultaneously in the first 24 hours.
 +
 +==== What about international travel - can my SIM be swapped while I am abroad? ====
 +
 +Yes, this is a documented attack. Set your number to **roaming-restricted** or **call-divert to a trusted number** before travelling. Sanchar Saathi has a "Report incoming international call with Indian number" feature you should monitor.
 +
 +==== Are e-SIM swaps possible? ====
 +
 +Yes, and arguably riskier because the swap happens digitally without a physical store visit. Same DoT re-verification rules apply. Check Sanchar Saathi for every e-SIM activation against your KYC.
 +
 +==== Can I demand the CCTV footage of the retailer? ====
 +
 +Not directly. The police u/s 94 BNSS 2023 (formerly §91 CrPC) can seize it. Push the Investigating Officer in writing within 14 days of FIR. CCTV is usually retained 30-90 days only.
 +
 +==== Will the operator blacklist the retailer? ====
 +
 +Sometimes. Operators are reluctant to suspend franchise retailers because revenue depends on them. The Appellate Authority can order suspension. Repeat-offender retailers are the open secret of the industry.
 +
 +==== What about senior citizens and disabled users? ====
 +
 +You can ask the bank + operator to allow a **registered authorised representative** for all communications. The RBI Charter of Customer Rights protects disabled / senior account holders specifically.
 +
 +==== Does insurance cover SIM-swap fraud? ====
 +
 +Some cyber-insurance policies do, with sub-limits (₹50,000 to ₹5 lakh). Check the wording of "fraudulent electronic transactions" + "SIM swap" cover. Do not assume; ask the insurer in writing.
 +
 +==== What if the police refuse to register FIR? ====
 +
 +File the cybercrime.gov.in complaint first (NCRP acknowledgement is your shield). Approach the **Superintendent of Police** in writing u/s 173(3) BNSS 2023 (replaces §154(3) CrPC). If still refused, file a private complaint u/s 223 BNSS (replaces §200 CrPC) before the Magistrate. See [[cyber-crime-complaint-india|cyber-crime complaint India]].
 +
 +==== What is the difference between Banking Ombudsman and TRAI Appellate Authority? ====
 +
 +Banking Ombudsman orders the **bank** to refund. TRAI Appellate Authority orders the **operator** to compensate for negligence in issuing the duplicate SIM. Two different limbs of the same fraud - run both.
 +
 +===== Realistic scenarios =====
 +
 +  * **Scenario A:** Reported within 1 hour, FIR same day, bank email within 24 hours. Outcome: full recovery in 45 days under RBI zero-liability.
 +  * **Scenario B:** Reported on day 4. Bank says liability is yours (missed the 3-day window). Outcome: Banking Ombudsman intervention, partial recovery (50-80%) in 4-6 months.
 +  * **Scenario C:** Reported on day 12 with no FIR. Most banks reject. Outcome: Consumer Commission case, recovery in 12-18 months if you can prove operator compliance failure.
 +  * **Scenario D:** Port-out fraud caught within 6 hours; number recovered, no money stolen. Outcome: operator compensation ₹10,000-₹25,000 via Appellate Authority for service disruption.
 +
 +===== What citizens should do differently going forward =====
 +
 +  - **Move banking OTP to a "burner" number** that is not your public mobile.
 +  - **Enable Aadhaar lock** at uidai.gov.in - blocks misuse of your Aadhaar for new SIM activations.
 +  - **Check Sanchar Saathi every 90 days** for unknown SIMs against your Aadhaar.
 +  - **Use UPI PIN-only mode** (disable SMS-OTP-only fallback where possible).
 +  - **Keep two banks - one operational, one savings** with no UPI / netbanking. Move surplus to the second account every Friday.
 +  - **Photograph your CAF + Aadhaar receipt** at the time of every new SIM activation - this is your proof of original KYC.
 +  - **Avoid public Wi-Fi for banking.** Use mobile data only.
 +  - **Register every adult's mobile in Sanchar Saathi DND + Chakshu.**
 +
 +For UPI-specific recovery, read [[recover-money-upi-fraud-2026|recover money from UPI fraud]]. For debit-card fraud, see [[debit-card-fraud-recovery-india|debit card fraud recovery]]. For Aadhaar-enabled payment system (AePS) frauds, see [[aeps-aadhaar-fraud-recovery|AEPS Aadhaar fraud recovery]]. For broader cybercrime, see [[file-cybercrime-complaint-2026|file a cybercrime complaint 2026]].
 +
 +===== Sources (official portals only) =====
 +
 +  * DoT Sanchar Saathi - [[https://sancharsaathi.gov.in|sancharsaathi.gov.in]]
 +  * DoT Chakshu - [[https://chakshu.sancharsaathi.gov.in|chakshu.sancharsaathi.gov.in]]
 +  * National Cyber Crime Reporting Portal - [[https://cybercrime.gov.in|cybercrime.gov.in]] (helpline 1930)
 +  * TRAI - [[https://www.trai.gov.in|trai.gov.in]]
 +  * RBI Integrated Ombudsman - [[https://cms.rbi.org.in|cms.rbi.org.in]]
 +  * National Consumer Helpline - [[https://consumerhelpline.gov.in|consumerhelpline.gov.in]] (helpline 1915)
 +  * e-Daakhil Consumer Commission - [[https://e-jagriti.gov.in|e-jagriti.gov.in]]
 +
 +===== Related on RTI Wiki =====
 +
 +  * [[citizen-intelligence|Citizen Intelligence hub - how systems really work]]
 +  * [[sim-swap-fraud-recovery|SIM swap fraud recovery (bank-side workflow)]]
 +  * [[block-lost-stolen-sim-card-india|Block a lost / stolen SIM card]]
 +  * [[file-trai-telecom-complaint-2026|File a TRAI telecom complaint 2026]]
 +  * [[rti-telecom-bill-dispute|RTI for a telecom bill dispute]]
 +  * [[cyber-crime-complaint-india|Cyber-crime complaint in India]]
 +  * [[cybercrime-portal-vs-police-station-india|Cyber-crime portal vs police station]]
 +  * [[whatsapp-otp-fraud-explained-india|WhatsApp OTP fraud explained]]
 +  * [[banking-ombudsman-complaint-guide-india|Banking Ombudsman complaint guide]]
 +  * [[freeze-account-after-fraud-bank-process|Freeze account after fraud - bank process]]
 +  * [[company-asks-dm-after-public-complaint-india|Why companies ask you to DM after a public complaint]]
 +  * [[recover-money-upi-fraud-2026|Recover money from a UPI fraud]]
 +  * [[debit-card-fraud-recovery-india|Debit card fraud recovery]]
 +  * [[aeps-aadhaar-fraud-recovery|AEPS / Aadhaar fraud recovery]]
 +  * [[file-cybercrime-complaint-2026|File a cybercrime complaint 2026]]
 +
 +Use the [[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|🪄 AI RTI Drafter]] to draft any RTI in this article in 2 minutes, the [[https://righttoinformation.wiki/tools/first-appeal-app.html|📝 First Appeal Builder]] for appeals, and the [[https://righttoinformation.wiki/tools/pio-reply-checker|🔍 PIO Reply Checker]] to audit any reply you receive.
 +
 +**Reviewed on:** 13 May 2026.
 +
 +===== Related 2025-26 update =====
 +
 +  * [[https://righttoinformation.wiki/mobile-number-validation-platform-mnv-dot-2025-india|Mobile Number Validation MNV and SIM fraud]]
 +
 +{{tag>pan fir rbi sim swap fraud telecom says}}