Money that has just left your account is not yet gone. For a short window it is sitting in an identifiable account, and it can be frozen. After that window it is broken into pieces, moved through a chain of accounts, and converted — and the practical chance of recovery collapses. Almost everything is decided in that first hour, and most people spend it on hold.
The order, and it is an order
- Call 1930. Not your bank first — the helpline. It is the national cyber-fraud line, and its function is to get a freeze request to the beneficiary bank fast. This is the single highest-value action available to you and it takes minutes.
- File at cybercrime.gov.in while you are still on the call or immediately after. Keep the acknowledgement number.
- Tell your own bank, through a channel that leaves a record, and get a complaint reference number. This is what starts the RBI liability clock, on which your liability is zero if you report within three working days of the bank’s communication about the transaction.
- Block the instrument — card, UPI handle, net banking access — so the same route cannot be used again.
- Change credentials, from a device you are confident is clean.
What to have ready when you call
Every minute spent hunting for a number is a minute the money is moving. Have: your account number, the transaction reference or UTR, the exact amount and time, the beneficiary details if visible, and the phone number, link or app involved.
Preserve, before anything is deleted
Screenshots of the messages, the call log, the SMS alerts, the transaction entries, the website address, the app, any document that was sent to you. Delete nothing, including things that feel embarrassing. Investigations into networks of this kind are built on exactly this material, and the account you can identify is the thread that gets pulled.
Two things that cost people the recovery
Waiting to be certain. People delay because they are not sure yet whether it was fraud, or because they are hoping a pending transaction reverses. The freeze request costs nothing if you are wrong and is worthless if you are late.
Shame. These scams are engineered to isolate, and victims routinely spend the critical hour deciding whether to tell anyone. The people running them count on precisely that delay. Nobody at 1930 needs you to explain how it happened.
Afterwards
Your bank must credit the disputed amount within ten working days of your notification where the liability framework places the loss on it, value-dated to the date of the transaction. If it does not, escalate free of charge to the RBI Ombudsman at cms.rbi.org.in.
And treat any subsequent call offering to recover the lost money for a fee as a second fraud aimed at the same person. Lists of victims circulate, and the follow-up call is a known pattern.
How to use this page
This page describes published regulatory frameworks and the official channels that go with them. It is general information, not advice on your particular case, and the documents governing your own account, loan or policy control the specifics.
Every route here is free
No agent, consultant or recovery service can obtain an outcome you cannot obtain yourself, and none is required at any stage. Oquilia takes no fee from readers, offers no recovery service, and refers no one to any legal practice.
Escalation, in order
The entity’s own grievance channel first. Then, for banks, NBFCs and payment systems, the RBI Ombudsman at cms.rbi.org.in; for insurers, the Insurance Ombudsman; for online financial fraud, cybercrime.gov.in or 1930.
Source
National Cyber Crime Reporting Portal (cybercrime.gov.in) and helpline 1930; RBI circular of 6 July 2017 on limiting customer liability in unauthorised electronic banking transactions