Money can leave an account in minutes, and every hour after that makes tracing harder. LegalRaahi helps you call 1930, file on the cyber crime portal, alert your bank in writing, and pursue what can actually be recovered, with an advocate who explains each step honestly.
"Whoever, by means of any communication device or computer resource cheats by personation, shall be punished with imprisonment of either description for a term which may extend to three years and shall also be liable to fine which may extend to one lakh rupees." — Section 66D, Information Technology Act, 2000
Online fraud, also called cyber financial fraud or digital payment fraud, means cheating someone out of money through phones, apps, websites, or messages. It covers phishing links, fake customer care calls, QR code tricks, card cloning, identity theft, and unauthorised UPI transfers. In India it is dealt with under the Information Technology Act, 2000 (IT Act), the Bharatiya Nyaya Sanhita (BNS), and the Bharatiya Nagarik Suraksha Sanhita (BNSS).
Reporting runs through a dedicated system. The Indian Cyber Crime Coordination Centre (I4C), set up under the Ministry of Home Affairs (MHA), runs the 1930 helpline and the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), which links police, banks, and payment platforms so suspicious money can be held quickly. The Reserve Bank of India (RBI) regulates banks and sets customer protection rules.
Speed is the whole game. Fraudsters move money through several accounts within minutes, and each hop makes tracing harder. A complaint filed within hours gives banks and police something to act on. A complaint filed after weeks usually gives them a trail that has gone cold.
These terms appear on helpline calls, portal forms, and bank replies, so learn them early.
Scams change fast, but most follow these six patterns.
Fake bank, KYC, or delivery links and messages that steal passwords, card details, or OTPs. Usually prosecuted under Sections 66C and 66D of the IT Act.
Callers pose as police, customs, or CBI officers and keep you on a video call. "Digital arrest" does not exist in Indian law.
Scammers send a QR code "to receive money," but scanning and entering your PIN sends money out. You never need a PIN to receive.
Stolen Aadhaar, PAN, or SIM details used to open accounts, take loans, or approve payments in your name (Section 66C, IT Act).
Hidden devices at ATMs and shops copy card data, which is then used for cash withdrawals or online purchases.
Money leaves your account through a collect request, a screen-sharing app, or a hijacked SIM, often within minutes.
Genuine banks and agencies do not behave like this. Be alert if you see:
Threats that you must act within minutes or face arrest, account closure, or penalty.
Instructions not to tell family, friends, or the bank about the call.
Anyone asking for your OTP, UPI PIN, CVV, or card number is not your bank.
Requests to install screen-sharing apps such as AnyDesk or TeamViewer.
Payment links, QR codes, and "helpline" numbers from random search results or messages.
Use more than one channel. Each does a different job.
Logs a CFCFRMS ticket and alerts the bank to hold the money.
Records your detailed complaint and routes it to the state cyber cell.
Immediate police help if you are threatened or in danger.
Blocks the card or account, and raises dispute and chargeback requests.
Registers an FIR, including a Zero FIR, and investigates.
Handles complaints when the bank does not respond or resolve.
Three sets of rules shape most online fraud cases.
Section 66C punishes identity theft, and Section 66D punishes cheating by personation using a computer resource. Section 66 covers dishonest computer-related offences, and Section 78 requires an officer of Inspector rank or above to investigate.
Section 318(4) BNS punishes cheating that induces someone to hand over property, replacing Section 420 IPC, and Section 319 covers cheating by personation. BNSS Section 173 allows e-FIRs and Zero FIRs, Section 106 supports seizure and freezing, and BSA Section 63 governs electronic evidence.
RBI rules limit your liability for unauthorised electronic transactions. Report within three working days of a third-party breach and your liability is zero, with the bank generally crediting the amount within 10 working days. If you shared an OTP or PIN yourself, these protections may not apply.
Anyone who loses money or data to a digital scam can report. These basics apply:
Someone who approved a UPI payment after a fake customer care call or a collect request.
A person threatened by a caller claiming to be police, CBI, or customs, and told to stay on video.
A shopper or seller who scanned a QR code and lost money instead of receiving it.
A cardholder whose card was cloned or used without consent for online purchases.
A victim of identity theft whose Aadhaar, PAN, or SIM was misused to take loans or move money.
Someone whose bank account was frozen because fraud money passed through it.
Looking for a cyber crime lawyer to handle an online financial fraud complaint? Here is how we work.
We confirm that 1930, the portal, and your bank have all been alerted before anything else, because delay costs money.
Police and banks act on UTR numbers, timestamps, and account details. We build your complaint around them, not around a long story.
We chase the bank, the cyber cell, and the investigating officer, and keep a written trail of every request.
Screenshots, chats, and statements are preserved and certified so they can be used in court under the Bharatiya Sakshya Adhiniyam.
Recovery is never guaranteed. Sometimes all the money is held, sometimes part, sometimes none, and we tell you early where you stand.
Speed matters at the start, then patience matters. The timelines below are estimates, not promises.
We confirm that you have called 1930, help you register on the portal if you have not, and get your bank alerted in writing. Then we review what happened and which law applies.
Estimated timeline: Within hours of your callWe list every transaction with UTR or RRN numbers, save screenshots, call logs, and links, and prepare the Section 63 BSA certificate for electronic records where needed.
Estimated timeline: Same day to 2 daysWe finalise the portal complaint, approach the cyber crime police station or cyber cell for an FIR, and send a detailed written complaint to the bank's nodal officer asking for a hold and a dispute review.
Estimated timeline: 1 to 3 daysPolice can request banks to freeze accounts that received your money. We follow up with the investigating officer and the bank, escalate delays, and keep you informed of what has been held.
Estimated timeline: Weeks to months, case dependentHeld money is released through a Magistrate's order, so we prepare that application. Where the bank is at fault, we pursue the RBI Ombudsman or other remedies. The criminal case continues in court.
Estimated timeline: Several months, sometimes longerImportant note on safety: never call a number from a search result or message to "recover" your money. Fake recovery agents and fake helplines target victims, so use only 1930 and your bank's verified numbers.
A complaint with specifics gets acted on faster. Include:
Gather what you can in the first hour. Missing items should never delay your call to 1930.
Crucial Compliance Note: Report within hours, not days. Keep original devices and never delete chats, even embarrassing ones. Do not factory-reset your phone. File where you live, where your bank is, or at any police station for a Zero FIR. Never pay anyone who promises guaranteed recovery.
Panic leads to avoidable errors. Steer clear of these four.
Delay lets the money move through more accounts, so report first and wait later.
The bank cannot register an FIR, so use 1930, the portal, and the police as well.
Numbers found in search results or messages often belong to scammers.
Anyone asking an advance fee to "get your money back" is likely a second scammer.
Online fraud has no single location, so jurisdiction can sit with the place where you live, where your bank account is held, or where the fraudster operated. A Zero FIR under Section 173 BNSS lets you start the process at any police station, and the matter is later transferred. IT Act offences are investigated by an officer of Inspector rank or above.
If the police do not register your FIR, send the substance of your complaint to the Superintendent of Police under Section 173(4) BNSS. If that fails, apply to the Magistrate under Section 175(3) BNSS. Money held by banks is released only through a Magistrate's order.
Freeze requests can move within hours when you report quickly, while an FIR may take days. Investigations often run for months, and trials for years. Recovery depends on how fast the money was reported, whether it is still in the beneficiary account, and what the investigation finds. These are ranges based on how cases usually run, not promises.
Our network advocates handle cyber fraud, banking disputes, and FIR work every week. That experience shows in how quickly they read a transaction trail.
Every advocate on your matter is enrolled with a State Bar Council. Ask for the details and check them yourself.
Your messages, account details, and any embarrassing evidence stay with the team handling your matter, full stop.
Nobody can promise your money back, and we refuse to. You get a candid view of the odds before you spend on court fees.
Fraud cases drag. We keep chasing, keep you updated, and help with release applications and appeals.
"I paid a so-called refund fee to a fake customer care agent and realised within ten minutes. I called 1930, and LegalRaahi prepared my bank letter and portal complaint the same evening. Part of the amount was held."
"A caller claiming to be from the CBI kept me on video until I transferred money. LegalRaahi explained that 'digital arrest' does not exist in law, helped me file the complaint, and got the FIR registered."
"I scanned a QR code a 'buyer' sent to receive payment, and money left my account. The advocate wrote to my bank the same day and filed the complaint. Recovery is still pending."
"A fake KYC link drained my account. I reported to the bank within two days, and LegalRaahi's letter cited RBI's customer protection rules. After review, the bank credited the amount back."
"Cash was withdrawn using a cloned copy of my card while I was at home. The advocate helped me block the card, file the dispute, and lodge the complaint. The bank reversed the charges after investigation."
"I paid a 'registration fee' for a work-from-home job that never existed. LegalRaahi taught me what to save, prepared the evidence certificate, and filed the complaint, so my file was strong."
"The station kept asking me to come back tomorrow. LegalRaahi drafted a written complaint to the Superintendent of Police, and my FIR was registered a few days later."
"A loan appeared in my name after my SIM was misused. The advocate explained what to tell the lender, the credit bureau, and the police. It is slow, but I am no longer handling it alone."
Explore additional support for your cyber and banking legal matters.
Let our family law experts handle every legal detail so you can focus on what matters most — your new life together. Free consultation, transparent pricing, complete confidentiality.
Mon–Sat: 10:00 AM – 7:00 PM · Response within 30 min