Imagine the sinking feeling: an SMS pings, and money has left your bank account — money you never authorised. A fake "bank official" tricked you into an OTP, a "customer care" number turned out to be a scammer's, or a "police officer" on a video call frightened you into transferring your savings. It happens to lakhs of ordinary, intelligent Indians every year, and the amounts lost run into tens of thousands of crores. In that moment of panic, most people freeze, feel ashamed, and waste precious hours — which is exactly what the fraudster is counting on.

Here is the one thing that matters most, so remember it before anything else: if you act fast, you can often get your money back — and the window is measured in minutes, not days. India now has a genuinely effective emergency system for financial cyber fraud, built around a single number — 1930 — and a golden rule: report immediately, before the fraudster can move the money out. This guide explains your rights against cyber crime, the exact steps to report it, the RBI rule that can make your loss zero, and how to spot the scams — including the dangerous new "digital arrest" trap.

1930
The national cyber-fraud helpline — call it the instant money is stolen
I4C, Ministry of Home Affairs
Golden Hour
Report fast and the stolen money can be frozen before it's withdrawn
cybercrime.gov.in
3 Days
Report an unauthorised transaction to your bank within 3 days for zero liability
RBI guidelines
No Such Thing
"Digital arrest" is not real — no agency arrests you over a video call
Indian Cyber Crime Coordination Centre

The Golden Hour — The Single Most Important Thing

When money is stolen online, there is a short window — often called the "golden hour" — during which the fraud can still be stopped. Here is why: when a scammer takes your money, it doesn't vanish instantly. It sits in their account for a while before they move or withdraw it. If you report immediately, the authorities can coordinate with the banks and payment companies to freeze that money before it slips away.

This is the entire logic behind the national helpline 1930, run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs, working 24×7. The moment you call and report, a system alerts the relevant banks to put a hold on the suspect account. Cyber cells across India have saved hundreds of crores this way — but almost always for the people who called within the first hour or two. Every minute you delay out of panic or embarrassment is a minute the fraudster uses to disappear with your money.

Remember this above all: The instant you realise you've been defrauded, call 1930 and report on cybercrime.gov.in. Don't first call the fraudster back, don't wait to "understand what happened," don't feel too ashamed to act. Speed is everything — the golden hour is your best and sometimes only chance to recover your money.

Exactly What to Do If Money Is Stolen — Step by Step

The moment you're defrauded — act in this order
Every minute counts
1. Call 1930 immediately — the national cyber-fraud helpline — and report the theft (keep your bank details, transaction ID, and the fraudster's number/UPI ready). 2. File a complaint on cybercrime.gov.in (the "Report Financial Fraud" option) — you'll get an acknowledgement number. 3. Immediately inform your bank (its official number or app), report the unauthorised transaction, and ask them to block the card / freeze the account / stop further transactions. 4. Do this within 3 working days to claim zero liability under RBI rules. 5. Change your passwords and UPI PIN, and revoke any screen-sharing or app access you granted. 6. Keep every screenshot, message, and reference number — they are your evidence.

The RBI Rule That Can Make Your Loss Zero

Most people don't know this, and it's worth money: the Reserve Bank of India (RBI) has rules that limit or completely erase your liability for unauthorised electronic transactions — if you report promptly.

  • Zero liability: If the fraud happened due to a third-party breach (not your bank's fault and not your own negligence) and you notify the bank within 3 working days, you bear no loss at all — the bank must refund you.
  • On being notified, the bank must credit the disputed amount back to your account (a "shadow reversal") within 10 working days.
  • Limited liability: If you delay and report within 4 to 7 working days, your liability is limited to a capped amount depending on the account type.
  • Delay beyond that can increase your liability — another reason speed matters.

The key takeaway: notify your bank in writing quickly (email/app/branch), because the RBI clock is what protects your wallet. Keep proof of when you reported.

How to use it: After calling 1930, formally report the unauthorised transaction to your bank in writing and note the date and time. If they resist refunding a genuine third-party fraud you reported within 3 days, cite RBI's "Customer Protection — Limiting Liability" guidelines, and escalate to the Banking Ombudsman if needed.

Beware the "Digital Arrest" Scam

One scam has exploded recently and deserves its own warning, because it has cost Indians thousands of crores. In a "digital arrest," fraudsters call or video-call you posing as the CBI, police, ED, or customs, claim your identity/parcel/bank account is linked to a serious crime (drugs, money laundering), and then keep you on a video call for hours — sometimes days — in a fake "interrogation," forbidding you to contact anyone, until you transfer your money to "clear your name."

Burn this into memory: there is no such thing as a "digital arrest" in Indian law. The Indian Cyber Crime Coordination Centre and the government have repeatedly warned that no genuine agency — not the CBI, police, ED, or any other — arrests, interrogates, or demands money from you over a video call or phone. No real officer will keep you on camera and tell you to transfer funds to a "safe account."

How to respond: If anyone claiming to be from an agency puts you on a video call, accuses you of a crime, and pressures you for money or secrecy — it is a scam. Cut the call. Do not transfer anything, do not stay silent out of fear. Talk to your family, and report on 1930 and cybercrime.gov.in. Genuine legal processes never work this way.

The Common Frauds to Recognise

Fraudsters rely on you not recognising the pattern. The most common online frauds in India include:

  • Phishing / OTP fraud — fake calls, SMS, or emails posing as your bank, asking for your OTP, PIN, CVV, or card details. No genuine bank ever asks for these.
  • UPI fraud — tricks like fake "collect requests," QR codes that debit (not credit) you, or scammers getting you to enter your PIN to "receive" money. (See our detailed guide on protecting yourself from UPI fraud.)
  • Fake customer care — a scammer's number appears on top when you search for a company's helpline; they then "help" you while stealing your details.
  • Job, loan, and investment scams — upfront "fees" for fake jobs, instant-loan apps that harass and blackmail, and "guaranteed high return" investment/trading schemes.
  • Sextortion — a stranger lures you into a compromising video call, records it, and blackmails you.
  • Matrimonial and romance fraud — a fake online partner who eventually asks for money.

The common thread: urgency, secrecy, fear, or a too-good-to-be-true offer, followed by a demand for an OTP, a transfer, or a "fee." Recognise that pattern and you defeat most scams.

The Law Is on Your Side

Cyber fraud is a serious crime, not just "bad luck." The Information Technology Act, 2000 specifically punishes it — Section 66C covers identity theft (using someone's password, digital signature, or credentials) and Section 66D covers cheating by personation using a computer (impersonating your bank, a company, or an officer), each punishable with imprisonment up to three years and a fine. These are used alongside the general offence of cheating under the new Bharatiya Nyaya Sanhita (BNS), 2023. Reporting isn't only about your refund — it helps the police build cases and stop the gang harming others.

A Special Word for Women and Children

Some cyber crimes target women and children specifically — sextortion, morphed images, harassment, stalking, and the sharing of private content. These are serious crimes with strong protections:

  • You can report anonymously on cybercrime.gov.in, which has a dedicated section for crimes against women and children (including child sexual abuse material).
  • A woman's complaint is handled with confidentiality; her identity is protected by law.
  • For any woman in distress, the Women's Helpline 181 and the police 112 are always available, alongside 1930 for the financial side.
How to use it: If you or a child faces sextortion or online abuse, do not pay and do not stay silent out of shame — paying rarely stops a blackmailer. Preserve evidence, block the person, and report immediately. The law treats you as the victim, not the wrongdoer.
Why this matters to you

Cyber fraud thrives on two things: panic and delay. The scammers win when you freeze, feel ashamed, and lose the golden hour. But India now has a real, fast system to fight back — one number (1930), one portal (cybercrime.gov.in), and an RBI rule that can make your loss zero if you report within three days. The most powerful protection is simply knowing what to do before it happens: never share an OTP, recognise that "digital arrest" is a lie, and report instantly instead of hesitating. Share this with your parents and children — the people scammers target most. A prepared citizen is a very hard target.

How to Protect Yourself — A Practical Checklist

  • Never share your OTP, PIN, CVV, or password — with anyone, ever. No genuine bank or agency asks for them.
  • Save the numbers: cyber fraud 1930 · portal cybercrime.gov.in · police 112 · women 181.
  • Report within the golden hour. The faster you call 1930, the better your chance of freezing the money.
  • Tell your bank within 3 working days in writing to claim zero liability under RBI rules.
  • Treat "digital arrest" as an automatic scam — cut the call; no agency arrests you on video.
  • Verify before you trust — find helpline numbers only on official websites, not from a search-result ad or a caller.
  • Beware urgency and secrecy — the pressure to "act now" and "tell no one" is the scammer's core weapon.
  • Protect the vulnerable — brief elderly parents and children, the most-targeted groups.

Frequently Asked Questions

What is the first thing to do if money is stolen from my account online?
Call the national cyber-fraud helpline 1930 immediately and report the fraud on cybercrime.gov.in — within the "golden hour" if possible, so the money can be frozen before the scammer withdraws it. Then inform your bank in writing to block the card/account and report the unauthorised transaction. Speed is the single biggest factor in getting your money back.
Can I get my money back after an online fraud?
Often, yes — if you act fast. Reporting within the golden hour on 1930 lets authorities freeze the fraudster's account. Separately, under RBI rules, if an unauthorised transaction was due to a third-party breach and you notify your bank within 3 working days, you have zero liability and the bank must refund you (a shadow reversal within 10 working days). Delay increases your liability.
Is "digital arrest" real?
No. There is no such thing as a "digital arrest" in Indian law. The CBI, police, ED, customs, or any other agency will never arrest, interrogate, or demand money from you over a video call. Anyone doing so is a scammer — cut the call, do not transfer money, and report it on 1930 and cybercrime.gov.in.
Which law punishes online fraud in India?
The Information Technology Act, 2000 — especially Section 66C (identity theft) and Section 66D (cheating by personation using a computer) — punishes cyber fraud with imprisonment up to three years and a fine, alongside the offence of cheating under the Bharatiya Nyaya Sanhita, 2023. Reporting helps police act against the offenders.
How do I report sextortion or online abuse of a woman or child?
Report on cybercrime.gov.in, which has a dedicated section for crimes against women and children and allows anonymous reporting; the victim's identity is protected by law. You can also call the Women's Helpline 181 or the police 112. Do not pay a blackmailer and do not stay silent out of shame — preserve evidence and report immediately.

Sources