Quick answer: To recover money after a digital payment fraud in India, act fast. Call 1930 or file a complaint at cybercrime.gov.in. Then report to your bank in writing. Under RBI rules, reporting within three working days can limit your loss to zero in many cases. Recovery is not guaranteed.
Key Facts
- 1930 is India’s National Cyber Crime Helpline. You can also report at cybercrime.gov.in.
- RBI’s 2017 rules give zero liability if the fault is not yours and you report within three working days.
- In a zero-liability case, the bank must credit the amount within 10 working days. It must finish its inquiry within 90 days.
- From 1 January 2027, new RBI directions add up to ₹25,000 compensation. It covers small frauds reported within five calendar days.
Losing money to a payment scam feels terrible. Many people freeze and do nothing for days. That delay can cost you the money.
Banks and the police can often act in the first few hours. But they can only act if you tell them quickly. This guide shows what to do, step by step.
You will also see what RBI rules say about your liability. Then you will see a simple rupee example. Keep this page handy, and share it with your parents too.
How to Recover Money After a Digital Payment Fraud: 6 Steps
Step 1: Stop more money from leaving
Act in the first few minutes. Call your bank’s 24×7 helpline. Ask them to block your card, UPI and net banking.
Then change your net banking password and UPI PIN. Check whether other accounts use the same phone number.
Step 2: Call 1930 or report at cybercrime.gov.in
1930 is the National Cyber Crime Helpline. You can file the same complaint on the National Cyber Crime Reporting Portal, cybercrime.gov.in.
Keep these ready: the transaction ID, date, time, amount, and the scammer’s phone number or UPI ID. Note down your complaint acknowledgement number.
Early reporting gives the system a better chance to alert the receiving bank. That bank may then freeze the money.
Step 3: Report to your bank in writing
Call first. Then send an email or a branch letter the same day. Say clearly that you did not authorise the transaction.
Attach screenshots of the SMS alert, the transaction details and your 1930 complaint number. Ask the bank for an acknowledgement.
RBI’s 2017 rules ask you to report within three working days of the bank’s alert. So do not wait.
Step 4: Raise a complaint inside the payment app
Did you pay through the Unified Payments Interface (UPI)? It is the system behind apps like GPay and PhonePe. If yes, also open the transaction in the app and use the report or dispute option.
NPCI says a UPI complaint should first go to the app you used. If it stays unresolved, it moves on to the bank and then to NPCI.
Step 5: Follow up on your refund
In a zero-liability case, the bank must credit the disputed amount back within 10 working days. This is called a shadow reversal. It means the bank puts the money back while it investigates.
The bank must then finish its inquiry within 90 days. The RBI circular also says the bank must prove that you were at fault, not you.
Step 6: Escalate to the RBI Ombudsman if needed
If the bank does not reply within 30 days, you can complain to the RBI Ombudsman at cms.rbi.org.in. You must complain to your bank first.
File it within one year of the bank’s reply. Keep every email and receipt.
What Do RBI Rules Say About Your Liability?
RBI’s July 2017 circular on unauthorised electronic banking transactions sets your liability. It depends on who made the mistake and how fast you report.
| Situation | Your liability (2017 rules, in force today) |
|---|---|
| Fault is with the bank | Zero, however late you report |
| Fault is with a third party, and you report within 3 working days | Zero |
| You report in 4 to 7 working days | Capped: ₹5,000 (basic savings account); ₹10,000 (standard savings account, prepaid card, individual current account up to ₹25 lakh, credit card up to ₹5 lakh); ₹25,000 (other accounts and cards) |
| You report after 7 working days | As per the bank’s board-approved policy |
What Changes From 1 January 2027?
In June 2026, RBI published new directions on limiting customer liability. They start on 1 January 2027. They are not in force yet.
| Point | Today (2017 rules) | From 1 Jan 2027 |
|---|---|---|
| Reporting window | 3 working days from the bank’s alert, for zero liability | 5 calendar days, to your bank and to 1930 or the portal |
| Extra compensation | None fixed. Liability limits apply | 85% of net loss, up to ₹25,000, for frauds up to ₹50,000 |
| How often | Not applicable | One-time benefit per customer, for frauds in the first year |
| Payout speed | Shadow reversal in 10 working days | Within 5 calendar days of a complete application |
The 2027 details come from news reports on RBI’s June 2026 directions. Please verify this information from the latest official source.
A Simple Example: Report on Day 2 vs Day 5
Say ₹20,000 leaves your standard savings account after a data breach at a third party. It was not your mistake.
If you report on working day 2, your liability is zero. The bank should credit ₹20,000 back within 10 working days.
If you report on working day 5, your loss is capped at ₹10,000. That is the lower of the loss and the cap.
Under the 2027 rules, if you are eligible, 85% of ₹20,000 is ₹17,000. That is below the ₹25,000 cap. So one day or two can change how much you recover.
When Is Recovery Harder?
Recovery is harder if you shared your OTP, PIN or password yourself. The bank may call this customer negligence. Scams that trick you into approving a payment fall in the same group.
RBI’s new directions also list sharing credentials, ignoring bank warnings and installing harmful apps as reasons for no compensation. Even so, report at once. 1930 may still freeze money that is sitting in the fraudster’s account.
How Big Is the Problem in India?
In 2025, the National Cyber Crime Reporting Portal received over 24 lakh complaints. Reported losses were ₹22,495 crore. About ₹8,189 crore was saved through the Citizen Financial Cyber Fraud Reporting and Management System. This is per a government statement reported in February 2026.
Please verify this information from the latest official source.
How Can You Avoid the Next Fraud?
- Never share your OTP, UPI PIN, CVV or password. Your bank will never ask for them.
- Remember: you never enter a PIN to receive money. If a request asks for your PIN, it is a payment request.
- Do not install screen-sharing apps because a stranger asks you to.
- Switch on SMS alerts. Set a daily limit on your UPI and card.
- Check the sender’s number or link before you click.
Who Wrote This Guide?
Deepak Gokul holds the CWM® certification, is NISM-Series-XVII: Retirement Adviser Certified, and is an IRDAI Licensed Insurance Advisor. He has 19+ years of experience helping families in Chennai and across India protect their savings.
His firm, Deepak Wealth Framework Pvt Ltd, is AMFI Registered as a Mutual Fund Distributor. This guide is for general awareness. It is not legal advice. For an actual fraud, contact your bank and 1930 first.
Frequently Asked Questions
Can I get my money back after a UPI or card fraud in India?
Often yes, but it is not guaranteed. Report fast to your bank and to 1930. If the fault was not yours and you report within three working days, RBI’s 2017 rules give you zero liability. If you shared your OTP or PIN yourself, the bank may treat it as your negligence, so recovery gets harder.
What is the 1930 helpline?
1930 is India’s National Cyber Crime Helpline for financial fraud. You can also file the same complaint at cybercrime.gov.in. Early reporting helps the system alert the receiving bank, which may then freeze the money. Keep your transaction ID, amount, time and the scammer’s number or UPI ID ready when you call.
How long do I have to report a digital payment fraud?
Today, RBI’s 2017 rules give zero liability if you report within three working days of the bank’s alert. After that, your loss may be capped. From 1 January 2027, RBI’s new directions ask for a report within five calendar days. Report to both your bank and 1930. Please verify this information from the latest official source.
What if I shared my OTP or PIN with the fraudster?
Report anyway, and do it quickly. The bank may call it customer negligence and refuse a refund. But 1930 can still help freeze money that is sitting in the fraudster’s account. RBI’s new directions also list sharing credentials as a reason for no compensation. So never share an OTP or PIN with anyone.
Will my bank refund the money automatically?
No. You must report the fraud and ask in writing. In a zero-liability case, RBI’s 2017 rules say the bank must credit the disputed amount within 10 working days. This is called a shadow reversal. The bank must then finish its inquiry within 90 days. Keep your complaint copy and acknowledgement.
Where can I complain if my bank does not help?
First, complain to your bank in writing. If the bank does not reply within 30 days, or you are unhappy, complain to the RBI Ombudsman at cms.rbi.org.in. You must do this within one year of the bank’s reply. For UPI issues, you can also use the NPCI dispute process.
Read More From Deepak Wealth Framework
- Visit our Deepak Wealth Framework home page for more money guides.
- Planning your family’s finances? Use our financial planning consultation form.
Want a safer money plan for your family?
Book a financial planning consultation with our Chennai team. Fill in the consultation form.
Deepak Gokul specialises in goal-based financial planning, child education planning, SIP investments, mutual fund advisory, and retirement planning for families across the globe. With his Chartered Wealth Manager (CWM®) certification and specialised training in retirement advisory, Deepak helps clients build long-term wealth through structured, disciplined financial planning.
📍 Pallikaranai, Chennai
Mutual Fund investments are subject to market risks, read all scheme related documents carefully. This content is for illustrative and educational purposes only. We deal in Regular Plans.