You received a call from someone claiming to be a bank executive. Or maybe someone sent you a “collect request” on PhonePe and you approved it thinking it was a payment coming in. Within seconds, money was gone from your account. If this sounds familiar, you have been a victim of UPI fraud — and you are one of millions of Indians dealing with this every single year.
The worst part is not just losing the money. It is the feeling that there is nothing you can do about it. But that feeling is wrong. Indian law gives you clear rights, and there is a proper legal process to fight back and get your money refunded.
This guide tells you exactly what to do — step by step — to recover money lost in UPI fraud in India.
What Exactly is UPI Fraud?
UPI (Unified Payments Interface) fraud happens when a fraudster tricks you into authorizing a payment or stealing your UPI credentials to transfer money without your knowledge.
It is important to understand one thing clearly. In UPI, money only leaves your account when you enter your UPI PIN. Fraudsters cannot pull money from your account just by sending you a link or calling you. They trick you into doing it yourself. This is why UPI fraud is technically called “authorized fraud” — and why banks and the RBI have specific rules about how to handle it.
Most Common Types of UPI Fraud in India
Knowing how the fraud happens helps you explain your case better when reporting it.
The most widely reported type is the fake collect request scam. The fraudster sends a collect request on your UPI app pretending to be a buyer, bank, or government officer. You approve it thinking you are receiving money, but you are actually sending it.
Another common method is the screen sharing scam. The fraudster calls you on AnyDesk or TeamViewer pretending to offer technical support, watches you enter your UPI PIN, and transfers money immediately.
Fake customer care numbers are also widely used. You search for a bank or company’s helpline on Google, land on a fake number, and the fraudster on the other end convinces you to share your UPI ID, OTP, or PIN.
QR code fraud is also growing rapidly. The scammer sends you a QR code saying “scan this to receive your refund.” When you scan and enter your PIN, money is debited from your account.
Step 1 — Call Your Bank Immediately
Do not waste a single minute. As soon as you realize money has been transferred fraudulently, call your bank’s 24-hour customer care number and report the transaction.
Ask the bank to immediately raise a fraud dispute and place a hold on the beneficiary account if possible. Note down the complaint reference number they give you. Send a follow-up email to the bank’s official email address with all transaction details so you have written proof of the complaint.
Banks are required under RBI guidelines to acknowledge fraud complaints and initiate investigations. Your written complaint is the starting point of the entire recovery process.
Step 2 — Call Cyber Crime Helpline 1930
Right after calling your bank, call 1930 — the National Cyber Crime Financial Fraud Helpline operated by the Ministry of Home Affairs.
This helpline has a direct coordination system with all major banks and payment platforms. When you report a fraud transaction on 1930, they immediately flag the receiving account and contact the concerned bank to freeze the funds before they are withdrawn or transferred further.
The 1930 helpline is available 24 hours a day, 7 days a week. The faster you call, the higher the chance that the money is still sitting in the fraudster’s account and can be frozen. Many victims have recovered their full amount simply by calling 1930 within the first hour of the fraud.
Step 3 — File Complaint on www.cybercrime.gov.in
Go to the official government cybercrime portal and file a detailed written complaint under the Financial Fraud category. This creates an official digital record of your complaint with a unique reference number.
In the complaint, mention your full name, the amount deducted, the exact date and time of the transaction, the UPI transaction ID, the name of your UPI app (PhonePe, GPay, Paytm, etc.), and how the fraud happened. Upload screenshots of the fraudulent transaction from your bank statement or UPI app.
This complaint is shared with the relevant state cyber crime police and also puts pressure on the bank to resolve your dispute faster.
Step 4 — Raise a Dispute on Your UPI App
Every major UPI app — PhonePe, Google Pay, Paytm, BHIM — has a built-in dispute and fraud reporting feature.
Open the transaction in your app, tap on “Raise a Dispute” or “Report Fraud,” and select the appropriate reason. The app forwards your complaint to the NPCI (National Payments Corporation of India), which oversees all UPI transactions in India.
NPCI has its own grievance redressal mechanism and can direct banks to investigate and reverse fraudulent transactions. This step works in parallel with your bank complaint and strengthens your overall case.
Step 5 — File a Formal FIR at Cyber Crime Police Station
If the amount is significant or if you are not getting a satisfactory response from your bank, file a First Information Report at your nearest Cyber Crime Police Station.
UPI fraud is punishable under Section 420 (cheating and dishonestly inducing delivery of property) and Section 66C and 66D of the Information Technology Act, 2000. These are cognizable offences, which means the police are legally obligated to register your FIR.
Bring printouts of your bank statement showing the fraudulent transaction, screenshots of any communication with the fraudster, and your cybercrime portal complaint number. Ask for a copy of the FIR — you will need it for further escalation.
Step 6 — Escalate to RBI Banking Ombudsman
If your bank does not resolve your complaint within 30 days or gives you an unsatisfactory response, you can escalate to the RBI Banking Ombudsman.
File your complaint at cms.rbi.org.in — the RBI Complaint Management System. The Banking Ombudsman has the authority to direct banks to refund fraudulent transactions and even impose penalties on banks that fail to handle complaints properly.
This is a free service and extremely effective for cases where banks are being unresponsive or dismissive. The RBI takes banking fraud complaints very seriously.
Step 7 — Approach Consumer Forum if Needed
If all other steps fail, you can file a case against your bank in the Consumer Disputes Redressal Forum (Consumer Court) for deficiency in service.
Banks have a duty of care toward their customers. If the bank failed to act on your fraud complaint in a timely manner, failed to freeze the beneficiary account, or refused to investigate a clearly fraudulent transaction, they are liable for deficiency in service under the Consumer Protection Act, 2019.
Consumer court cases for banking fraud are increasingly being decided in favor of customers, with courts ordering banks to refund the full amount along with compensation.
What Are Your Rights Under RBI Guidelines?
The RBI has issued clear guidelines on customer liability in unauthorized electronic transactions. If you reported the fraud to your bank within 3 working days of the transaction, your liability is zero — the bank must refund the full amount. If you reported between 4 to 7 working days, your liability is limited to a maximum of Rs. 10,000. If you reported after 7 days, the bank’s board-approved policy applies, but you still have the right to request a refund.
These guidelines apply when the fraud happened due to a third-party breach and was not caused by your own negligence. This is why reporting within 3 days is so critical.
Evidence You Must Preserve
Never delete anything related to the fraud. Take a screenshot of the fraudulent transaction in your UPI app and bank statement. Save all SMS or email alerts you received from your bank. If the fraudster called you, save the number and note the exact time of the call. Screenshot any WhatsApp, Telegram, or social media messages from the scammer. Keep a record of all complaint reference numbers from your bank, 1930 helpline, and cybercrime portal.
This evidence is what makes or breaks your recovery case.
Frequently Asked Questions
Q: How long does it take for a UPI fraud refund?
A: If reported within 3 days and the bank acts promptly, refunds can happen within 10 to 30 working days. Complex cases involving police investigation may take longer.
Q: I voluntarily entered my PIN — can I still get a refund?
A: It depends. If you were tricked through deception, it may still qualify as fraud. File a complaint and let the bank and cyber police investigate. Consumer forum and RBI Ombudsman cases have been won even in such situations.
Q: What if the fraudster’s account has already been emptied?
A: If the money has been moved, recovery becomes harder but not impossible. Police can trace the chain of transactions, and courts can order asset attachment.
Q: Can I track who received my money?
A: Your bank and the NPCI can identify the account where the money went. Cyber police have the authority to request this information during the investigation.
Conclusion
UPI fraud can happen to anyone — educated or not, tech-savvy or not. Fraudsters are becoming more sophisticated every day. But the law is also catching up, and victims who act quickly and follow the right process are successfully recovering their money.
Call your bank, call 1930, file on cybercrime.gov.in, raise a dispute on your UPI app, and file an FIR if needed. Do not let embarrassment or hopelessness stop you from fighting back. Every complaint you file makes the system stronger for every Indian.
Disclaimer: This article is for informational purposes only. For complex fraud cases or large amounts, please consult a qualified cybercrime lawyer or banking law attorney in India.