Cheated by a Betting App? Where to Complain

Direct answer. File in this order: (1) call 1930 inside the first hour — the only window in which a transfer can still be held mid-chain; (2) file at cybercrime.gov.in the same day, under Financial Fraud — the portal sets no deadline, but the money moves in minutes; (3) give your bank written notice within three working days and take your screenshots to the branch; (4) write to the bank's nodal officer; (5) if the bank has not replied in 30 days, file with the RBI Ombudsman — you then have 90 days, and missing it ends the case; (6) file an RTI to the cyber cell at 30 days for case status; (7) consult a lawyer if the amount is large or the operator is part of a known network. One thing to be clear about from the start: a deposit you made yourself is an authorised transaction, so there is no chargeback and no automatic reversal. This guide gives you the exact portal, the exact phone number and the exact template letter for each step.

This is the bookmark page. Every other gambling-fraud guide on this site links here.

• The seven-step complaint ladder
• The law that backs your complaint
• Step 1 — Call 1930 (National Cybercrime Helpline)
• Step 2 — File at cybercrime.gov.in
• Step 3 — Visit your bank
• Step 4 — Bank's nodal officer
• Step 5 — RBI Ombudsman
• Step 6 — RTI to cyber cell
• Step 7 — Lawyer / PMLA / class action
• A composite illustration of the full ladder
• 🛠 Tools you can use right now
• Read more
• Related guides to open next
• Common mistakes
• FAQs
• 📲 One-page summary

Cite this in every complaint you file. The Promotion and Regulation of Online Gaming Act, 2025 (Act 32 of 2025) came into force on 1 May 2026, and the rules under it (G.S.R. 303(E), dated 22 April 2026) followed. It is the strongest thing you can put in front of a bank or a cyber cell.

• §5 — offering an online money game is prohibited irrespective of whether it is a game of skill or a game of chance. The old “but it is a skill game” defence no longer works.
• §6 — advertising an online money game is an offence.
• §7 — facilitating payment for an online money game is an offence. This is the section that matters to your bank and to the payment aggregator sitting behind the merchant VPA.
• Penalties — §9(1): up to 3 years and/or up to ₹1 crore. §9(2): up to 2 years and/or up to ₹50 lakh. §9(3): up to 3 years and/or up to ₹1 crore.
• §10 — offences under §5 and §7 only are cognizable and non-bailable, so the police can act without a magistrate's order first.

Background: what the Online Gaming Act 2025 changed.

• Number: 1930 (24×7, all states, multilingual).
• What it does: real-time freeze request to your bank if the deposit happened in the last few minutes/hours.
• What to have ready: transaction ID, amount, date/time, merchant UPI handle, your bank account number.
• What they will do: create an Acknowledgement Number (note it down), forward to your state cyber cell, and — if you call within minutes — instruct your bank to attempt a hold.

• URL: cybercrime.gov.in
• Path: Financial Fraud is its own top-level reporting category on the portal, alongside “Women / Children Related Crime” and “Other Cyber Crime”. Choose Financial Fraud, then the sub-category that matches your case. Do not file a money-loss case under “Other Cyber Crime” — Financial Fraud is the category wired to the bank-hold pipeline that can still stop a transfer.
• What to upload:
  1. Transaction screenshots from your UPI app.
  2. Bank statement showing the debit (highlighted).
  3. Screenshot of the betting app's signup page, deposit page, withdrawal-blocked message.
  4. PAN + Aadhaar (your KYC).
  5. Screenshot of any Telegram/WhatsApp message used to lure you (if any).
• What you get: a complaint reference number. To follow it, log in to cybercrime.gov.in and use “Check Status” — there is no direct status URL you can bookmark.
• When to file: the portal sets no reporting deadline, so an older fraud can still be reported. But file the same day anyway: the money moves in minutes, and speed changes what can be recovered, not whether you are allowed to complain.

Take with you:

• The 1930 acknowledgement number.
• The cybercrime.gov.in complaint number.
• Printed transaction screenshots.
• Your KYC.

Ask for:

• A dated acknowledgement of your written notice — hand in a short written complaint about the transaction and get it stamped, or send it by email and keep the delivery receipt. This is the three-working-day notice explained below; without a dated copy you cannot prove you gave it.
• Lien copy / freeze notice if your account has been frozen.
• Internal flag on the merchant UPI you transferred to — this prevents future deposits and aids freeze.
• Dispute form under the NPCI UDIR mechanism — file it even though it will almost certainly be rejected. Its value is the dated written record that you raised the dispute.

Every bank has a Customer Grievance Nodal Officer listed on its website (search “[bank name] nodal officer”). Send a written complaint:

• Subject: “Grievance to the Nodal Officer — illegal betting-app fraud, transaction dated [DD/MM/YYYY], cybercrime acknowledgement no. [XXXXX] — first-stage complaint before escalation under RB-IOS 2026”.
• Body: facts, transaction details, what you've already filed (1930 + cybercrime.gov.in), what you want (freeze, charge-back, merchant block, customer notice).
• Attach: all screenshots and acknowledgements from earlier steps.

Under the Reserve Bank - Integrated Ombudsman Scheme, 2026, you must give the bank 30 days to reply before you can escalate. If it does not reply in 30 days, or you reject the reply, the Ombudsman route opens — and your 90-day clock to file with the Ombudsman starts running from that point. Where a longer NPCI or card-network resolution window applies to your case, that longer window runs first.

If the bank fails to respond in 30 days, or the response is unsatisfactory:

• Portal: cms.rbi.org.in — RBI's Complaint Management System. Physical complaints by post or email are also accepted.
• Scheme: the Reserve Bank - Integrated Ombudsman Scheme, 2026, in force from 1 July 2026, which replaced the 2021 scheme. If an old page or a bank official still points you at the previous ombudsman scheme, RB-IOS 2026 is the one that now applies.
• Cost: free.
• Deadline — do not miss this one. File within 90 days, counted from whichever is later: the day the bank's 30 days ran out, or the date of the bank's last communication to you. File after that and the complaint is rejected without being examined at all. This is the deadline that quietly kills more complaints than any other.
• What you'll need: the bank's nodal-officer response, or proof that you complained and got none, plus every acknowledgement from the earlier steps.
• Compensation: up to ₹30 lakh for consequential loss, plus up to ₹3 lakh for the time you lost, your expenses and harassment.
• If you disagree with the Award: an appeal lies within 30 days of receiving it.

What the Ombudsman can and cannot do. It examines deficiency in banking service — a bank that ignored your written complaint, blew the 30 days, or failed to act on a fraud report you gave it. It is not a route to reverse a payment you authorised yourself. Aim your complaint at what the bank did wrong, not at the betting app.

At day 30 if no FIR has been registered or progress is opaque:

• Use the AI RTI Drafter — generates a state-specific RTI in 60 seconds.
• Address it to the PIO of the District/State Cyber Cell.
• Ask for: case status, FIR number (if registered), names of investigating officers, freeze details, action taken on the merchant UPI, list of co-victims (in aggregate, anonymised).
• Fee: state-dependent — use RTI Fee Calculator.
• Reply due in 30 days under §7 of the RTI Act.

If the PIO stalls — file a First Appeal at day 31 using the First Appeal Builder.

If the amount is significant (> ₹50,000) or the operator is part of a known network (Mahadev, Lotus365, Parimatch, 1xBet, Dafabet):

• Engage a lawyer — many Bar Council legal-aid clinics offer pro bono support for cybercrime victims; for higher amounts, a paid lawyer (₹15,000–₹50,000 retainer) is reasonable.
• PMLA tracing application — your lawyer can move an application before the Adjudicating Authority for tracing of the proceeds; useful if the operator's accounts are already under ED attachment.
• Class action — if multiple victims of the same app emerge (a Telegram group, a college, a workplace), consolidate the FIRs. State Cyber Coordinators prefer aggregated case files.
• Ask for attachment and distribution under §107 BNSS — §107 of the Bharatiya Nagarik Suraksha Sanhita, 2023 lets the court attach and forfeit proceeds of crime and direct the District Magistrate to distribute them among the persons affected by the crime. It is the one route in the code that puts seized money back into victims' hands. It does not happen by itself, so ask for it in writing, on the record, through the investigating officer and your lawyer.

A salaried complainant in his twenties loses a mid-five-figure sum on a lookalike betting app during the IPL season, and works the ladder in order:

• Day 0 — calls 1930 inside the first hour and writes down the acknowledgement number; files at cybercrime.gov.in the same day under Financial Fraud.
• Within 3 working days — gives his bank written notice of the transaction and keeps a stamped copy.
• Day 3 — takes every document to the branch; files a UDIR dispute, which is rejected, as expected for a payment he authorised.
• Day 12 — writes to the bank's nodal officer, cites §7 of the Online Gaming Act 2025, and asks for the merchant VPA to be blocked and the beneficiary details sent to the cyber cell.
• Day 30 — files an RTI to the state cyber cell for case status; the reply confirms an FIR and a transfer to the state where the merchant account sits.
• Day 43 — the bank's 30 days having run out without a substantive reply, escalates to the RBI Ombudsman, comfortably inside the 90-day window.
• Later — engages a lawyer through a Bar Council legal-aid clinic and joins other complainants against the same operator.

What this is honest about: most complainants in this position do not get their money back. What the ladder reliably produces is a merchant VPA blocked, an FIR on the record, a bank held to its 30-day duty, and a case file large enough for enforcement to act on. Where recovery happens at all it comes late and partial, and it comes through attachment of the operator's accounts under §107 BNSS or a PMLA action — not from your own bank reversing what you paid.

• 🪄 AI RTI Drafter — file an RTI to the cyber cell or RBI for case status.
• 🎤 AwaazRTI — voice drafting in Hindi/regional languages.
• 🧮 RTI Fee Calculator — exact RTI fee.
• 📅 Timeline Calculator — track every step's deadline.
• ⚖ First Appeal Builder — escalate slow PIO replies.
• 📬 PIO Reply Checker — grade the official reply.
• 📖 Explain Legal Reply — convert legal text to plain English.
• 🔮 Outcome Predictor — odds of recovery.
• 🔍 Exemption Analyzer — challenge §8 refusals.
• 📞 1930 Call Script — what to say in the golden hour, in order.

• Illegal casino app guide — spot, report, recover

• Treating cybercrime.gov.in as the only complaint. It is one of seven. Each step compounds.
• Not noting the merchant VPA. The merchant UPI handle is the most important data point — the system runs on it.
• Skipping the bank visit. Online complaints alone rarely produce action; the in-person bank record is what triggers internal investigation.
• Giving up at the chargeback rejection. Chargeback rejection is normal for authorised UPI. The other six steps still work.
• Filing in the wrong state. File where you are based — the file then routes to the merchant's state automatically. Do not try to “find the right state” yourself.
• Letting the 90 days lapse. Once the bank's 30 days expire, you have 90 days to reach the RBI Ombudsman. Miss it and the complaint is rejected without being examined — no extension, no hearing on the merits.
• Not filing because you think you broke the law by playing. The Online Gaming Act 2025 prescribes no penalty for a person who merely plays. You are the person defrauded. Silence only protects the operator.

Yes. Small complaints aggregate: they feed class actions, they inform freeze decisions, and they build the case file enforcement agencies need in order to act at all. The filing itself is roughly an hour of work, spread across the weeks the case runs.

Usually not, and you should plan on that. A deposit you made yourself is an authorised transaction. RBI's zero-liability protection covers unauthorised debits — money moved out of your account without your consent — so it does not apply to a payment you approved, and there is no chargeback route for it. What your bank can do is block the merchant VPA, give the beneficiary account details to the cyber cell, and answer you in writing. Give the bank written notice within three working days anyway: that is what preserves zero liability on any further debit you did not authorise, and it starts the paper trail every later step depends on.

No. The Promotion and Regulation of Online Gaming Act, 2025, in force from 1 May 2026, prescribes no penalty for a person who merely plays an online money game. It penalises those who offer the game (§5), advertise it (§6) and facilitate payment for it (§7). You are the person defrauded, not the offender — say so plainly in your complaint. Fear of self-incrimination is the single biggest reason victims never file, and it is misplaced.

No. Cybercrime.gov.in complaints are confidential. Your name appears in the FIR, which becomes accessible only to investigators and to the accused once a chargesheet is filed. Bank complaints are confidential. RTI replies do not name you.

File at cybercrime.gov.in regardless — it auto-routes. Then file an RTI to the State Cyber Coordinator at the state headquarters; state cells are usually faster than district cells.

Visit the branch with your KYC and ask for the lien copy and the cyber-cell notice behind it. Reply to the cyber cell by the date given on that notice, disclosing the source of the funds and stating that you were the victim, not the operator. How long the lien stays is decided by the investigating cell — there is no fixed period, so keep written follow-ups going and use an RTI for status if it stalls.

Not practically — most of these operators sit offshore, beyond the reach of an Indian civil suit. Work the system instead: cyber cell, ED, and the RBI Ombudsman where your own bank has been deficient. Where money is actually recovered it usually comes from attachment of the operator's accounts under §107 BNSS or a PMLA action, not from suing the app.

The complaint ladder works. Not perfectly, not fast — but it works. Each rung compounds: the call to 1930 helps the freeze; the cybercrime.gov.in filing builds the FIR; the bank visit blocks the merchant; the Ombudsman holds the bank to its duty; the RTI keeps the cell honest.

Save this page. Save the helpline numbers. The day someone in your family loses money on a betting app, you'll know exactly what to do in the first hour — which is the hour that decides how much of it can still be stopped.

This is the page that should sit in every cricket WhatsApp group during IPL season.

📄 Save this guide as a PDF