Playbooks / UPI & bank fraud

UPI or bank fraud: money already sent

You approved a collect request, paid a fake QR, shared an OTP, or money left your account without your consent.

Use this within minutes. The first hours decide whether money can be frozen.

Do these immediately

Call 1930, India's National Cyber Crime Helpline, and give the transaction ID, amount, time and the receiver's UPI ID or account. It alerts the banks so the money can be frozen.
Report the fraud on cybercrime.gov.in and note the acknowledgement number.
Call your bank's fraud line, block the card, UPI app and net banking, and ask for the transaction to be flagged as fraud.
Do not send more money to “recover” the first amount. Recovery scams target people who have just been defrauded.

Change the UPI PIN, net banking password and the phone's screen lock. Remove any remote-access app (AnyDesk, TeamViewer, QuickSupport) that the caller had you install.
If the SIM may be swapped (you lost mobile signal unexpectedly), contact your operator at once.
Check other accounts that use the same phone number or e-mail.

Write to the bank's nodal officer within three working days and keep copies; the RBI's limited-liability rules favour customers who report promptly.
If the bank does not resolve it, escalate to the Banking Ombudsman through the RBI's complaint portal (cms.rbi.org.in).
Know the pattern: no genuine person needs your OTP, UPI PIN or a screen-share, and you never enter a PIN to receive money.

1930 (24x7 helpline) and cybercrime.gov.in.

General guidance, not legal or forensic advice. For a serious incident, involve a professional incident-response firm.