How to Report Bank & Credit Card Fraud in India — Complete Step-by-Step Guide to Get Your Money Back
Mr Elite ··
22 min read
Have you or someone you know experienced bank or UPI fraud in India?
You just saw a debit of ₹47,000 you didn’t make. (Looking for the US guide or UK guide? We have those too.) Your heart is racing. You don’t know what to do first. I wrote this for exactly this moment. Bank fraud, UPI fraud, and credit card fraud in India are surging — India’s cybercrime portal received over 1.5 million financial fraud complaints in 2023 alone. Modern fraud increasingly uses AI-powered social engineering to make attacks more convincing — understanding the tactics helps you spot them before you lose money. What most victims don’t know is that time is the single biggest factor in recovery. Call the right number within the first hour and your chances of getting the money frozen — and eventually returned — are dramatically higher. Most people waste those critical hours panicking, calling the wrong numbers, or waiting for the bank to call back. Don’t be that person. Here is everything you need: every number, every website, every document, every escalation path — in the right order.
🎯 What You’ll Know After This
The single most important call to make in the first 5 minutes (most people don’t know this)
RBI’s Customer Protection rules — why you may have zero liability even after fraud
Step-by-step: bank complaint, cybercrime portal, FIR filing in the right order
What to do if your bank rejects your fraud claim — the escalation ladder
The complete documentation checklist that makes your case bulletproof
⏱️ 25 min read · bookmark this now
⚠️ If you’ve just been defrauded — do not read this article linearly. Jump immediately to Step 1: Call 1930 and Step 2: Block your card. Come back and read the full article once those are done. Every minute matters for frozen fund recovery.
📋 How to Report Bank Fraud in India 2026 — Complete Recovery Guide Contents
📞 1930 — National Cyber Crime Helpline — Call Right Now
1930 is not just a reporting line. It is an active intervention system. When you call 1930 and report a fraudulent transaction, the operators can directly alert the destination bank to flag and freeze the funds before they move further. This is the most powerful tool available to fraud victims in India and most people have never heard of it.
The helpline operates 24 hours, 7 days a week. It is run under the Ministry of Home Affairs’ Citizen Financial Cyber Fraud Reporting & Management System (CFCFRMS) — a platform that connects to all major banks in real time. When a transaction is flagged through 1930, an alert goes to the receiving bank immediately. If the money is still sitting in the receiving account, the bank can put a hold on it.
WHAT TO SAY WHEN YOU CALL 1930
# Have this information ready before calling:
1. Your name and mobile number
2. Your bank name and account number
3. The fraudulent transaction date and time
4. The transaction amount
5. Transaction reference number (from SMS alert)
6. Brief description of how the fraud happened
# What to say:
“I am calling to report a fraudulent transaction from my bank account.
I did not authorise this transaction. I need to flag it for freezing.”
# After the call — WRITE DOWN:
→ Complaint reference/ticket number provided
→ Name of operator (if given)
→ Date and time of your call
securityelites.com
The 3-Hour Rule — Why Time Matters So Much
0–1 hr
Best chance — money may still be in receiving account. Freeze possible with 1930 alert.
1–3 hr
Good chance — transaction may be reversible if freeze requested before further transfer.
3–24 hr
Reduced chance — money may have been moved multiple times. Complaint still essential.
24+ hr
Low freeze chance — but RBI refund rights still apply. File all complaints immediately.
📸 The 3-hour rule for bank fraud recovery in India. Financial fraud recovery rates drop sharply after the first few hours because fraudsters quickly move money through multiple accounts and cash out. The 1930 helpline and CFCFRMS platform can freeze funds at each hop in the chain — but only if they’re alerted before the money moves. Even after 24 hours, filing all complaints is essential for RBI-mandated refund rights and police investigation support.
STEP 2 — Block Your Card and Account Immediately
While someone is calling 1930 (or right after), immediately block your debit card, credit card, or UPI using the fastest method available to you. This prevents additional fraudulent transactions while you work on recovering the money already lost.
BANK FRAUD HELPLINE NUMBERS — MAJOR INDIAN BANKS
# SAVE THESE NUMBERS IN YOUR PHONE NOW — 24×7 helplines
SBI : 1800-11-2211 (Toll free) / 1800-425-3800
HDFC Bank : 1800-202-6161 / 1800-267-6161
ICICI Bank : 1800-1080 (24×7)
Axis Bank : 1860-419-5555 / 1860-500-5555
Kotak Bank : 1860-266-0811
Yes Bank : 1800-1200 (Toll free)
Bank of Baroda: 1800-258-4455 / 1800-102-4455
Punjab National Bank: 1800-180-2222
Canara Bank : 1800-425-0018
Union Bank : 1800-22-2244
# Fastest methods to block (use whichever is fastest for you):
1. Call bank helpline above
2. Log in to net banking → Card Management → Block Card
3. Open bank’s mobile app → Block card/account option
4. SMS: Some banks allow blocking via SMS (check your bank’s website)
# For UPI fraud — deactivate UPI immediately:
BHIM app: Profile → Deactivate UPI ID
GPay/PhonePe/Paytm: Settings → Deactivate UPI ID
OR: Call 1800-120-1740 (NPCI helpline)
Know Your Rights — RBI’s Zero Liability Rule
This is the most important thing most fraud victims don’t know: the Reserve Bank of India legally requires banks to protect you. Under RBI’s Customer Protection Circular (RBI/2017-18/15 dated July 6, 2017), your liability in an unauthorised transaction depends on who was at fault and how quickly you reported it.
RBI LIABILITY RULES — YOUR RIGHTS AT A GLANCE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
SCENARIO 1: Bank’s own negligence / data breach
YOUR LIABILITY: ZERO
Example: Bank system hacked, your data stolen, fraud occurs.
Bank must refund 100% regardless of when you report.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
SCENARIO 2: Third-party breach (not bank, not your fault)
Report within 3 WORKING DAYS → YOUR LIABILITY: ZERO
Report 4-7 working days later → Capped liability (see below)
Report after 7 working days → Per bank policy
Example: SIM swap fraud, phishing where you didn’t share OTP.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
SCENARIO 3: YOU shared OTP/PIN/credentials
LIABILITY: Full amount (you are responsible)
BUT: Still file all complaints — recovery still possible if
funds are frozen in time through 1930.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
CAPPED LIABILITY (4-7 days, third-party fraud):
Basic savings account : Max ₹5,000 liability
Savings/Prepaid ≤ ₹10L : Max ₹10,000 liability
Savings/Credit ≤ ₹25L : Max ₹25,000 liability
Above ₹25L / Business : Max ₹25,000 liability
Bank must refund amount above your capped liability.
The critical implication: If a third party hacked your account, obtained your data through a data breach, or used a SIM swap — and you did not share any credentials — your liability can be zero if you report within 3 working days. The bank is legally required to refund you. If they refuse without valid reason, the RBI Ombudsman can compel them to comply.
STEP 3 — File a Written Complaint with Your Bank
Calling the helpline is Step 1, but it is not enough. You must file a written complaint to create a formal paper trail. Without a written complaint, the bank can claim they were not properly notified, which weakens your case for a refund. Do this within 3 working days of the fraud — this is the RBI deadline for zero liability protection on third-party fraud.
HOW TO FILE YOUR BANK COMPLAINT
# Method 1: Email (fastest for timestamp evidence)
Email your bank’s official fraud/grievance email address
(Find on back of card / bank website under ‘Contact Us’)
# Method 2: Branch visit (get written acknowledgement)
Visit your home branch with printed complaint
Ask for written acknowledgement with date stamp and reference number
Insist on this — do not leave without it
# What your written complaint MUST include:
1. Your full name, account number, mobile number
2. Date, time, and amount of fraudulent transaction(s)
3. Transaction reference number(s) from SMS alert
4. Statement: “I did not authorise this transaction”
5. How you believe the fraud occurred (if known)
6. Your 1930 complaint reference number
7. Request for provisional credit within 10 working days
8. Request for written acknowledgement
🛠️ EXERCISE 1 — BROWSER (15 MIN · NO INSTALL)
Build Your Bank Fraud Response Kit Before You Ever Need It
⏱️ 15 minutes · Do this now — before fraud happens
ACTION 1: Save 1930 in your phone contacts as “FRAUD HELPLINE 1930”
Action 2: Save your bank’s 24×7 fraud helpline number in your contacts
Action 3: Note your bank’s fraud/grievance email address (write it here)
Action 4: Take a screenshot of your debit/credit card number
(last 4 digits + expiry — for complaint forms)
Action 5: Enable transaction SMS alerts from your bank
(Settings → Alert Preferences in your bank app)
Action 6: Bookmark this page: cybercrime.gov.in
Action 7: Note your bank branch address and IFSC code
Action 8: Check your bank’s policy on blocking card via SMS
(some banks: SMS “BLOCK [last 4 digits]” to a shortcode)
The goal: if fraud happens at 3 AM, you should be able to
call 1930 and block your card within 3 minutes — without
Googling anything.
✅ What you just did: Built a fraud response kit that could save you tens of thousands of rupees. The biggest delay most fraud victims experience is searching for the right numbers and websites while panicking. Having everything saved means you can act in the critical first minutes when action has the highest impact. Most people spend this time on hold with their bank’s main number (not the fraud line) or searching online.
📸 Share this checklist with family members who might not know about 1930. Tag #BankFraudIndia
STEP 4 — File Complaint on cybercrime.gov.in
The National Cyber Crime Reporting Portal (cybercrime.gov.in) is the official government platform for reporting financial cybercrime. Filing here creates a formal government record of your complaint, which strengthens your case with the bank and provides the basis for police investigation. The portal is connected to state cybercrime cells nationwide.
STEP-BY-STEP: FILE ON cybercrime.gov.in
# Go to: https://cybercrime.gov.in
Step 1: Click “Report Financial Fraud” on the homepage
Step 2: Select fraud type
→ “Online Financial Fraud” (for UPI, internet banking, card fraud)
→ “Social Media Fraud” (if fraud involved WhatsApp/Instagram scam)
→ “Cyber Crime Against Women/Children” (separate category)
Step 3: Register/login with mobile number
Step 4: Fill incident details
– Date, time, and amount of fraud
– Transaction ID/UTR number
– Fraudster’s phone number/account number (if known)
– Description of how fraud happened
Step 5: Upload evidence
– Screenshots of fraudulent SMS/messages
– Bank statement showing transaction
– Any call recordings (if applicable)
Step 6: Submit and SAVE your complaint reference number
→ This is different from your 1930 reference number
→ You will need this for FIR and bank escalation
securityelites.com
Bank Fraud Recovery — Complete Reference Timeline
When
What to Do
Get Reference
0–5 min
Call 1930, block card/UPI
1930 complaint no.
Same day
File on cybercrime.gov.in
Portal complaint no.
Within 3 days
Written complaint to bank
Bank complaint no.
Within 3 days
File FIR at police station
FIR number
Day 30+
If bank unresponsive → Ombudsman
Ombudsman ref. no.
Day 60+
If Ombudsman unresolved → Consumer Court
Court filing no.
📸 Complete bank fraud recovery timeline with reference numbers to collect at each step. Every reference number is evidence of timely action — your 1930 call timestamp, cybercrime portal complaint date, and bank complaint submission date collectively prove you acted within the RBI’s 3-working-day window. The Ombudsman and Consumer Court columns exist because sometimes bank recovery requires persistence — knowing you have these escalation paths reduces the bank’s leverage to dismiss valid claims.
STEP 5 — File an FIR at the Police Station
An FIR (First Information Report) creates a legal record of the crime and initiates a police investigation. Many people skip this step thinking it’s futile — don’t. An FIR is required for: insurance claims if you have cybercrime insurance, court proceedings if you need to sue, and it strengthens your bank complaint significantly. Police cannot legally refuse to register an FIR for a cognisable offence — cyber fraud qualifies.
HOW TO FILE A CYBER FRAUD FIR
# Step 1: Go to nearest police station (or dedicated Cyber Cell)
Search: “[Your City] Cyber Crime Police Station”
Major cities have dedicated cybercrime cells — prefer those
# Step 2: Documents to bring
→ Your ID proof (Aadhaar/PAN)
→ Bank statement (printed) showing fraud transaction
→ All SMS alerts related to the fraud (screenshots, printed)
→ Your 1930 complaint reference number
→ Your cybercrime.gov.in complaint reference number
→ Fraudster’s contact details (number, account) if known
# Step 3: Legal sections to mention
IT Act 2000: Section 66C (Identity theft) / 66D (Cheating by personation)
IPC: Section 420 (Cheating) / 406 (Criminal breach of trust)
# If police refuse to register FIR:
→ Request to speak with the Station House Officer (SHO)
→ File a complaint at the Superintendent of Police (SP) office
→ File an online FIR via your state police portal
→ Send complaint by registered post to Commissioner/SP
→ File a Section 156(3) CrPC petition in Judicial Magistrate court
STEP 6 — Escalate to RBI Ombudsman (If Bank Rejects Your Claim)
If your bank rejects your fraud complaint without valid justification, or does not respond within 30 days, you have a powerful tool: the RBI Integrated Ombudsman. This is a free, accessible dispute resolution service that has the authority to direct banks to refund money and pay compensation. You do not need a lawyer. You do not pay any fees.
HOW TO FILE RBI OMBUDSMAN COMPLAINT
# Online filing: https://cms.rbi.org.in
# Helpline: 14448 (Monday to Saturday, 9 AM–5 PM)
# You can file if:
✓ Bank rejected your complaint OR
✓ Bank did not respond within 30 days of your complaint OR
✓ Bank’s resolution is not satisfactory
# What to upload:
→ Copy of your original written complaint to the bank
→ Bank’s rejection letter OR proof they didn’t respond
→ All transaction details and evidence
→ Your 1930 and cybercrime portal complaint references
→ FIR copy
# What the Ombudsman can order:
→ Refund of the fraudulent amount
→ Interest on the amount from date of fraud
→ Compensation up to ₹1 lakh for mental harassment
→ Cost of filing complaint (reasonable actual costs)
🧠 EXERCISE 2 — THINK LIKE A HACKER (15 MIN · NO TOOLS)
Understand How Fraudsters Get Your Credentials — So You Never Give Them
⏱️ 15 minutes · Pure awareness exercise
Most bank fraud in India happens through a few common scripts.
Understanding them makes you immune to them.
SCENARIO 1 — “Your account is blocked”
Caller: “Sir/Madam, your SBI account has been blocked.
To verify and unblock, please confirm your OTP.”
ANALYSIS: Banks NEVER call asking for OTPs. The OTP they’re
asking you to read is actually an account access/transfer OTP.
If you read it out → they’re in your account.
WHAT TO DO: Hang up. Call your bank’s official helpline directly.
SCENARIO 2 — “KYC Update Required”
WhatsApp message: “Your account will be closed in 24 hours.
Please update KYC by clicking this link.”
ANALYSIS: Phishing link. The website looks like your bank’s
but captures your login credentials.
WHAT TO DO: Delete. Never click links in WhatsApp/SMS for banking.
SCENARIO 3 — “UPI Reversal Request”
You sold something on OLX. Buyer sends ₹1 request via UPI.
It says “₹5000 pending” — you click to collect.
ANALYSIS: Clicking a UPI RECEIVE request requires YOUR PIN.
If you enter your PIN, you’re authorising a PAYMENT, not receiving.
WHAT TO DO: Understand: YOU NEVER ENTER YOUR PIN TO RECEIVE MONEY.
SCENARIO 4 — Screen Sharing Scam
“Customer care” asks you to install TeamViewer/AnyDesk for help.
ANALYSIS: Once you share screen, they see your banking app,
OTPs, everything.
WHAT TO DO: Never install screen sharing apps at someone’s request.
FOR EACH SCENARIO: What is the ONE phrase that gives it away?
✅ What you just learned: All four scenarios share one characteristic — the fraudster needs YOU to take an action (read OTP, click link, enter PIN, install software). A legitimate bank never needs your OTP. A legitimate UPI payment never requires your PIN to receive. If someone is asking you to do something urgently on your banking apps — especially while on a call with them — it’s fraud. The urgency and authority they project are the manipulation tools, not technical tricks.
📸 Share these four scenarios with your parents and family members. They need this more than you do. Tag #BankFraudAwareness
securityelites.com
Complete Complaint Escalation Ladder — When Your Bank Won’t Help
Level 1 — Bank Internal Grievance (0–30 days)
Written complaint to bank branch / grievance email. Bank must respond within 30 days per RBI rules. Get complaint reference number in writing.
Free. No lawyers. Online filing. Bank has 30 days to resolve after Ombudsman notice. Can order refund + compensation up to ₹1 lakh. Helpline: 14448.
Level 3 — Lok Adalat (For amounts under ₹20 lakh)
Free. One-sitting resolution. Legally binding. Available through your district Legal Services Authority. Fast and underused by fraud victims.
Level 4 — Consumer Court / District Forum
Small filing fee. Bank must appear. Can order refund + interest + compensation + legal costs. File within 2 years of fraud.
Level 5 — High Court Writ (Extreme cases)
For systemic bank failure to comply with RBI orders. Requires lawyer. Reserved for large amounts and documented RBI Ombudsman non-compliance.
📸 Complete bank fraud complaint escalation ladder. Most fraud cases are resolved at Level 1 or 2 — the bank complaint and RBI Ombudsman together resolve the vast majority of valid claims. Levels 3-5 exist for cases where banks refuse to honour valid claims despite regulatory orders. The key insight: banks know this ladder exists. A complaint that references the Ombudsman and cites the RBI Customer Protection Circular specifically is treated more seriously than a generic complaint. Knowledge of your escalation options is itself a negotiating tool.
Specific Steps by Fraud Type
UPI Fraud: Call 1930. Deactivate your UPI ID in your app (Profile → Settings → Deactivate UPI ID). File complaint with NPCI at 1800-120-1740. Report the fraudster’s UPI ID at the payment app’s fraud reporting section (GPay, PhonePe, Paytm all have this). NPCI can block the receiving UPI ID.
Credit/Debit Card Fraud: Call the card hotline immediately (printed on back of card). Dispute the transaction online — log in to your credit card portal and mark the transaction as “disputed/fraudulent.” For international transactions, also file a chargeback request — card networks (Visa/Mastercard) have buyer protection programmes.
Internet Banking Fraud: Change your password immediately, disable all registered devices, and check for any changes to payee lists or email IDs. If you cannot log in, call the bank immediately — your login may have been changed by the fraudster.
SIM Swap Fraud: You’ll notice your phone loses signal suddenly. Call your telecom operator immediately on another phone to freeze your SIM. Then call your bank — a SIM swap is a technical fraud (how SIM swap works explained) that RBI classifies as “not customer’s fault,” meaning zero liability if reported promptly.
🛠️ EXERCISE 3 — BROWSER ADVANCED (15 MIN · NO INSTALL)
Verify the Official Resources and Read the Actual RBI Circular
⏱️ 15 minutes · Browser only
Step 1: Bookmark the official cybercrime portal
Go to: https://cybercrime.gov.in
Verify the URL is correct (government .gov.in domain)
Bookmark it now
Step 2: Read RBI’s actual Customer Protection Circular
Go to: https://rbi.org.in
Search: “Customer Protection Limiting Liability of Customers”
Find the 2017 circular. Read Section 6 (Liability of Customer)
Note the exact reporting window requirements
Step 3: Test the RBI Ombudsman portal
Go to: https://cms.rbi.org.in
What information does it require to file a complaint?
What types of complaints does it accept?
Step 4: Check your state’s cybercrime cell
Search: “[Your State] Cybercrime Police Station”
Note the address and phone number of your nearest cybercrime cell
This is faster than a regular police station for cyber FIRs
Step 5: Save the Lok Adalat option
Search: “Lok Adalat bank fraud India”
What is Lok Adalat? How is it useful for small fraud recovery amounts?
Many bank fraud disputes under ₹20 lakh can be resolved
through Lok Adalat at no cost and much faster than courts
✅ What you just learned: The RBI circular is the legal foundation for everything in this guide — reading the actual document means you can cite it precisely when dealing with an uncooperative bank. Lok Adalat is an underused alternative dispute resolution mechanism that many fraud victims overlook — it’s free, decisions are legally binding, and cases are resolved in one sitting. For fraud amounts under ₹20 lakh that banks are refusing to refund, Lok Adalat through the Banking Ombudsman is often the fastest path to recovery.
📸 Screenshot the RBI circular section on customer liability. Share in #BankFraudIndia on social media.
Complete Documentation Checklist
📋 Keep ALL of These — They Are Your Evidence
SMS alertsScreenshot and save EVERY transaction SMS from the time of fraud
Bank statementDownload and print the statement showing fraudulent transaction(s)
Call recordsIncoming calls from fraudster — screenshot your phone’s call log
MessagesWhatsApp/SMS from fraudster — screenshot all messages before deleting
Fraudster’s detailsPhone number, UPI ID, account number — anything they shared with you
1930 referenceScreenshot or write down your 1930 complaint reference and time of call
Cybercrime portal ref.cybercrime.gov.in complaint reference number and date
Bank complaint copyCopy of email/letter sent to bank with proof of delivery/read receipt
Bank acknowledgementWritten acknowledgement from bank with complaint reference number
FIR copyCertified copy of FIR from police station — insist on this
All responses from bankAny emails, letters, or calls from bank regarding your complaint
⚠️ Never Delete Anything: Even if you think a message is not relevant — keep it. Fraudsters sometimes use multiple phone numbers or email addresses. A single screenshot you almost deleted can be the link that connects dots for investigators. Create a dedicated folder on your phone and computer for all fraud-related evidence.
🧠 QUICK CHECK — Bank Fraud Recovery
Your elderly parent received a call from someone claiming to be from HDFC Bank. They were told their account was being misused and needed to share an OTP to secure it. They shared the OTP and ₹80,000 was immediately debited. It has been 45 minutes since this happened. What is the most important action RIGHT NOW?
🔖 Bookmark This Page — Share It With Family
You now know more about recovering from bank fraud than 95% of Indians. More importantly — share this with your parents, grandparents, and colleagues. Elderly family members are the most targeted demographic for phone banking fraud. The 1930 number alone could save someone you know tens of thousands of rupees.
❓ Frequently Asked Questions — Bank Fraud India 2026
What is the first thing to do after bank fraud in India?
Call 1930 immediately — the National Cyber Crime Helpline that can alert banks to freeze fraudulent transactions in real time. Simultaneously block your card/account using your bank’s 24×7 fraud helpline. Time is the most critical factor in recovery.
What is RBI’s zero liability rule?
Under RBI’s Customer Protection Circular, if fraud occurs due to bank negligence or a third-party breach (not your fault), and you report within 3 working days, your liability is zero — the bank must refund the full amount. If you shared credentials (OTP/PIN), liability may apply, but filing complaints still maximises recovery chances through transaction freezing.
How long does money recovery take after bank fraud in India?
If reported quickly and accepted by the bank: provisional credit within 10 working days per RBI guidelines, full resolution within 90 days. RBI Ombudsman escalation: typically 30-45 days. Actual fund recovery depends on whether the money was frozen before being cashed out.
Can I get money back after UPI fraud?
Potentially yes — call 1930, deactivate your UPI ID, file complaints with your bank and NPCI, and file on cybercrime.gov.in. If the fraud was a technical breach (not you approving the payment), RBI’s zero liability rule applies. Quick action gives the best chance of freezing funds.
What is the RBI Banking Ombudsman and how do I reach them?
Free dispute resolution for banking complaints. File at cms.rbi.org.in if your bank doesn’t resolve your fraud complaint within 30 days or rejects it unfairly. Can order refunds and compensation up to ₹1 lakh. Helpline: 14448. No fees, no lawyers required.
What documents do I need to report bank fraud in India?
Bank statement with fraudulent transaction, all SMS alerts, screenshots of fraudster’s messages/calls, fraudster’s phone number/UPI ID if known, your 1930 complaint reference, cybercrime.gov.in reference number, written bank complaint copy, bank acknowledgement, and FIR copy from police.
← Related
Bank Fraud Guide — USA
Related →
Bank Fraud Guide — UK
📚 Further Reading & Official Resources
How to Report Bank Fraud in the US— Complete step-by-step guide for US customers covering Regulation E rights, CFPB complaints, FBI IC3, and the federal escalation ladder.
How to Report Bank Fraud in the UK— UK-specific guide covering the October 2024 PSR mandatory APP fraud reimbursement, Section 75 Consumer Credit Act, Action Fraud, and the Financial Ombudsman.
How Hackers Bypass 2FA in 2026— Understanding how SIM swaps and OTP theft work helps you recognise the exact attack before you become a victim.
RBI Customer Protection Circular 2017— The actual RBI circular defining your zero liability rights — read this so you can cite it precisely when your bank tries to deny your claim.
I wrote this guide after a family member lost ₹1.2 lakh to a UPI fraud and spent three weeks not knowing what to do, calling the wrong numbers, and accepting the bank’s first rejection without knowing there was an entire escalation ladder available. We eventually recovered the funds through the RBI Ombudsman — but it took two months and a lot of documentation that should have been collected in the first 48 hours. The 1930 helpline is genuinely powerful. Banks are legally required to act on RBI’s zero liability rules. The system actually works if you know how to use it and you act fast. The tragedy is that most people who lose money to fraud don’t know any of this exists.