If You Are the Next Victim of Cyber Fraud

By: CA  Anil K. Jain 
Chartered Accountant | Economist | Policy Researcher | Author
President – Ahimsa Foundation India
Email: CAINDIA@HOTMAIL.COM

“Wait, think, and take action.”
— Prime Minister Narendra Modi’s three-step guide against cyber fraud

1. Introduction: Stay Calm – Your First Line of Defence

The moment you realise you have fallen victim to cyber fraud, you are likely to be overwhelmed by shock, fear, anger, and deep regret. These emotions are entirely natural. But the greatest danger in those first minutes is not the money already stolen; it is the rash decisions you make in panic.

Remember one hard truth: after a successful scam, fraudsters typically transfer your funds through multiple “mule accounts” within minutes. Every minute you hesitate reduces your chances of recovery. At the same time, beware – the more desperate you are to retrieve your money, the more likely you are to fall prey to a secondary scam.

This chapter provides a step‑by‑step action plan specifically for victims in India, covering everything from the very first minute after discovery to long‑term psychological recovery.

2. The Golden 30 Minutes – Your Emergency Action Checklist

The first 30 minutes are the critical window in which funds may still be intercepted. Act in the following order of priority:

A.    Cut All Contact Immediately: Stop all communication – hang up the phone, stop replying to messages, and make no further transfers. Do not try to “reason” or “negotiate” with the fraudsters – they are professionally trained manipulators who will only exploit your anxiety to drag you deeper.

Follow a simple three‑step approach: “Wait – Think – Take Action.” As soon as you receive a suspicious call, wait – don’t panic, stay calm, don’t take any hasty steps, and don’t give your personal information to anyone. Then think – no government agency threatens people over the phone or interrogates over a video call. Then take action.

B.     Dial 1930 – The National Cyber Helpline: Immediately dial the toll‑free National Cyber Crime Helpline Number: 1930. This helpline operates 24×7×365 and is managed by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs.

Have the following information ready when you call:

1. Your bank account number
2. Bank transaction ID / UTR number
3. Suspect details such as phone numbers         
   
   

Upon successful submission of a complaint through 1930, you will receive a message with a 14‑digit acknowledgement number starting with “329”, along with a link to fill in further details within 24 hours. This is mandatory – you must complete the registration on the National Cyber Crime Reporting Portal within 24 hours.

Why 1930 works: As soon as a complaint is registered through 1930, it is immediately forwarded to banks to trace the money trail and freeze the suspect’s account before the funds are withdrawn. Through this system, financial amount of more than Rs. 3,431 crore has been saved in more than 9.94 lakh complaints.

C. Report on the National Cyber Crime Reporting Portal: Simultaneously, report the incident on the National Cyber Crime Reporting Portal at www.cybercrime.gov.in. Step‑by‑step guide to file a complaint:

1. Visit www.cybercrime.gov.in and click on “File a Complaint”
2. Read and accept the terms and conditions
3. Select “Report Other Cyber Crime”
4. Register as a new user with your name, mobile number, and email address
5. Verify your mobile number through OTP authentication
6. Fill in personal details, then select the appropriate category and sub‑category of the complaint
7. For financial complaints: Enter the debit transaction details – bank account number, transaction ID/UTR number, mode of payment, and transaction date
8. Enter the credited transaction details (the recipient’s information)
9. Upload supporting evidence such as screenshots or documents
10. Fill in suspect details if available, confirm, and submit

    xi.            Upon successful submission, you will receive an acknowledgement number beginning with “229”. You can check the status of your complaint at any time by logging into the portal.

D. Inform Your Bank: Immediately contact your bank to report the fraudulent transaction and request a freeze on the involved accounts. Banks and payment merchants like Paytm, Google Pay, etc., participate in the government’s financial cyber fraud reporting and management system.

E. Visit Your Local Police Station: File a formal complaint at your nearest police station. Always obtain a copy of the FIR – this is essential for tracking your case and for any compensation claims.

3. Preserving Evidence – Turn Every Record into a Weapon

While reporting, systematically collect and preserve all evidence. Crucially: do not delete anything from your phone or computer until you have secured all evidence.

Evidence Checklist:

1. Chat logs: All communications (WhatsApp, Telegram, SMS, email, etc.) – text, voice, images. Take screenshots that include the full conversation thread and timestamps.
2. Call logs: All phone calls with the scammers – times and numbers.
3. Transfer receipts: Bank e‑receipts showing transaction time, amount, recipient account and name; UPI transaction IDs; payment wallet screenshots.
4. The fraudster’s identity information: Phone numbers, UPI IDs, bank account numbers, email addresses, social media profiles.
5. Website/App details: The fraudulent website URL, app download source, etc.
6. Screenshots of the fraudster’s demands: Any messages demanding money, threatening legal action, or making false accusations.

4. Reporting Channels – Summary

Channel	Details
National Cyber Helpline	1930 (toll‑free, 24×7×365)
Online Portal	www.cybercrime.gov.in
Police Station	File an FIR at your local police station

 

 

 

Important: Cybercrime complaints are broadly categorised into two types: cyber financial and cyber non‑financial complaints. The 1930 helpline is the lifeline for reporting cybercrime – early reporting can help prevent you from losing money through the banking system.

5. Beware of Secondary Scams – The Most Dangerous Trap

This is the single most important piece of advice.“If anyone claims they can help you recover your stolen funds, do not believe them – you will be scammed twice.”Many victims, desperate to retrieve their money, search online for “methods to recover lost funds” and encounter fraudulent “hackers,” “insider refund agents,” or “professional legal teams” who promise recovery for a fee. Remember forever: only law enforcement has the authority to freeze and seize involved funds. Any unofficial “recovery service” is a scam.

The Ministry of Home Affairs has clearly stated that the Citizen Financial Cyber Fraud Reporting and Management System was launched specifically for immediate reporting of financial frauds and to stop siphoning off funds by fraudsters. Use only these official channels.

Case Studies:

                                i.            Case 1: Mumbai Couple Loses ₹58 Crore in “Digital Arrest” Scam: A city couple lost ₹58 crore to fraudsters who “digitally arrested” them for 40 days, using elaborate tactics to impersonate central agencies. The scam operated through cryptocurrency channels, with stolen funds routed overseas via multiple crypto wallets. Officials estimate that scams of this nature may have collectively generated more than ₹2,000 crore, exploiting victims across India.

Lesson: No government agency conducts “digital arrests” or demands money over phone or video calls. If someone claims you are under “digital arrest,” it is a scam.

                              ii.            Case 2: Bengaluru Woman Defrauded of ₹32 Crore Over Six Months: A 57‑year‑old Bengaluru woman was defrauded of nearly ₹32 crore in a digital arrest scam that lasted for over six months. Impersonators posing as CBI officials kept her under constant video surveillance and coerced her into making 187 bank transfers. The scammers continued demanding money before suddenly disappearing.

Lesson: Scammers can sustain frauds for months through psychological manipulation. If someone keeps you under “surveillance” and demands repeated transfers, it is a scam – seek help immediately.

                            iii.            Case 3: 81‑Year‑Old Retired Engineer Loses ₹26 Lakh: An 81‑year‑old man who retired from the Northern Railway as a junior engineer lost ₹26 lakh after receiving a call from a fraudster claiming to be a bank representative, who sought his bank details purportedly to update his “life certificate”.

Lesson: The elderly are prime targets. Fraudsters use plausible‑sounding official requests to extract sensitive information. Always verify calls by contacting your bank directly through official numbers.

                            iv.            Case 4: Woman Sells Property, Takes Loan – Loses ₹2.05 Crore: A 57‑year‑old woman was duped of ₹2,05,16,652 by cyber criminals posing as officials of a courier company and Mumbai Police in a classic “digital arrest” scam. She sold two plots, an apartment, and took out a loan to pay the fraudsters.

Lesson: Scammers exploit fear to make victims liquidate assets. If someone pressures you to sell property or take loans to “clear your name” or “avoid arrest,” it is a fraud.

                              v.            Case 5: ₹150‑Crore Cyber Fraud Network Busted in Pune: Pimpri Chinchwad police arrested an unemployed youth who allowed cyber fraudsters to use nine of his bank accounts as mule accounts to route money siphoned off from victims across the country. The accounts formed part of a cyber fraud network involved in scams worth over ₹150 crore. The accused received around ₹1.15 crore from 65 cyber fraud victims across multiple states.

Lesson: Never allow anyone to use your bank account to receive or transfer money – you could be held criminally liable as part of a mule account network. The National Cyber Crime Reporting Portal actively flags suspicious mule accounts.

6. Psychological Recovery – It Is Not Your Fault

The psychological toll of cyber fraud often outlasts and outweighs the financial loss. In Mumbai alone, three young people allegedly died by suicide in the past year after being conned by cyber fraudsters. A former Punjab Police Inspector General attempted suicide after being cheated of ₹8.1 crore.

Psychiatrist Harish Shetty explains: “There is this sense of helplessness and shame that comes along with losing money to cybercrime. In cases where people lose massive sums, they lose meaning in life. Also, many people in authority roles have this false sense of being omnipotent and wonder how they can fall prey to a crime. They feel they have let down close family members, and people will look down on them as someone who has been fooled, which increases extreme isolation and loneliness”.

A.    Remember These Truths: First, being scammed is not your fault. Fraudsters are professionally trained psychological manipulators who exploit universal human traits – trust, fear, greed, and loneliness. Anyone can be a victim. Second, you are not alone. Millions of people fall prey to cybercrime every year. In 2024 alone, cybercrime incidents surged from 15,92,917 in 2023 to 20,41,360.

B.     Support Resources:

1. Support groups: Psychiatrist Harish Shetty emphasises that one of the best ways of coping with such frauds is to be involved in support groups: “When victims become part of support groups, the incident becomes normalised when they see so many people having lost money. It seems to really help victims to come to terms with what has happened”.
2. Professional counselling: Various organisations now offer psychological counselling for cybercrime victims. In Rajasthan, the state’s first Cyber Support Centre provides free help to victims with the assistance of professional cyber experts and counsellors.
3. Seek help, don’t become isolated: “The most important thing is to seek help and not become isolated, and increasingly, people are reaching out to mental health specialists, which is a good sign”.

7. Victim Compensation – What You May Be Entitled To

The Reserve Bank of India has introduced a compensation mechanism for victims of small‑value digital frauds:

1. For fraud cases involving losses below ₹29,412, customers will be compensated 85% of the net loss
2. The compensation is capped at ₹25,000
3. The RBI bears 65% of the compensation, while the customer’s bank and the beneficiary bank contribute 10% each
4. Banks must credit the compensation to the victim within five calendar days after receiving a completed claim application
5. The compensation can be claimed only once during a customer’s lifetime

    vi.            The Supreme Court has also asked the Centre to examine the feasibility of introducing a shared liability and victim compensation framework for people who fall prey to digital scams.

8. Long‑Term Protection – Better Late Than Never

After the ordeal, take these steps to prevent future victimisation:

1. Change all important passwords: Bank accounts, UPI apps, email, social media.
2. Check your device security: Scan for malware; if necessary, factory reset your phone or reinstall your computer’s operating system.
3. Regularly check your bank statements: Monitor for any unauthorised transactions.
4. Enable two‑factor authentication on all financial and sensitive accounts.
5. Stay informed: Follow official updates from the Ministry of Home Affairs and the Indian Cyber Crime Coordination Centre (I4C).
6. Report suspicious mule accounts: If someone offers you money to use your bank account, report it immediately – you could be unwittingly participating in a cyber fraud network.

9. Money Restoration Portal – Getting Your Money Back

Filing a complaint through the 1930 helpline or the National Cyber Crime Reporting Portal (cybercrime.gov.in) is only the first step. What truly troubles victims is the agonising wait that follows — money is frozen, but it does not seem to come back. To address this, the Indian Cyber Crime Coordination Centre (I4C) under the Union Ministry of Home Affairs has launched a dedicated Money Restoration Module (MRM) — a specialised portal that enables victims of cyber financial fraud to apply online for the return of frozen or recovered funds.

A. What Is the Money Restoration Module (MRM)?

The MRM is a victim-centric digital mechanism developed by the I4C as part of the National Cyber Crime Reporting Portal (NCRP). Its primary purpose is to eliminate the need for victims to visit multiple government offices, police stations, or banks to get their money back. Instead, victims can raise refund requests online from the “comfort of their homes”.

The portal establishes real-time coordination among victims, investigating officers, banks, and other financial intermediaries. When a complaint is registered through 1930 or the NCRP, it is immediately forwarded to the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) , which connects state police, banks, payment wallets, and other financial institutions to trace the money trail and freeze suspect accounts before funds are withdrawn.

B. Who Is Eligible to Apply?

The MRM facility is available only to victims who meet the following criteria:

        i.            Prompt Reporting: You must have reported the fraud immediately through the 1930 Cyber Helpline or the National Cyber Crime Reporting Portal (cybercrime.gov.in).

      ii.            Valid Complaint ID: You must hold a valid 14-digit complaint acknowledgement number (beginning with “329” for helpline complaints or “229” for portal complaints).

    iii.            Frozen Funds: The defrauded amount must still be frozen or under lien in the fraudster's bank account. Funds that have already been withdrawn or transferred to other accounts cannot be restored through this module.          

Once your funds are identified as recoverable, you will receive an SMS and email with a link to the MRM portal, where you can verify your details and submit your claim electronically.

C. Three Categories of Refund – What You Need to Know

The government has created three categories of refunds, each with different documentation requirements:

The refund process depends on the amount frozen in the account.

Category 1: If the total frozen amount in a single account is below ₹50,000, no FIR or court order is required. The refund is processed based on a police complaint and an indemnity bond submitted online.

Category 2: If the total frozen amount exceeds ₹50,000 but is distributed across multiple accounts, with no individual account containing more than ₹50,000, an FIR is not required; however, the refund is subject to police verification.

Category 3: If the total frozen amount in a single account exceeds ₹50,000, an FIR is mandatory before the refund can be processed.

Additionally, if no court or restoration order exists, banks are obligated to lift the hold on amounts below ₹50,000 within 90 days. Important: Refunds up to ₹50,000 frozen in a single account can be processed without an FIR or court order, based solely on a police report and an indemnity bond submitted online.

D. Step-by-Step Guide to Apply for a Refund

Follow these steps to submit your refund request through the MRM portal:

Step 1: Visit the MRM portal at https://mrm-ncrp.mha.gov.in/public-info.

Step 2: Log in using the mobile number linked to your NCRP complaint.

Step 3: Complete OTP verification.

Step 4: Select the eligible cybercrime complaint from the list displayed.

Step 5: Choose the earmarked bank account to which the refund should be credited.

Step 6: Upload PAN details wherever applicable.

Step 7: Review the refund details carefully.

Step 8: Submit the refund request online.      

After submission, a designated police team will upload the required Indemnity Bond and Notice on the portal. Following verification by law enforcement agencies and banks, the refund will be credited directly to your bank account.

Note: Victims may also be required to visit the police station in person with supporting documents, including PAN card details and an indemnity bond executed on stamp paper, for verification before funds are released.

E. The Grievance Redressal Mechanism (GRM) – For Wrongly Frozen Accounts

Alongside the MRM, the I4C has also launched the Grievance Redressal Mechanism (GRM) portal. While MRM helps victims get their money back, GRM helps innocent account holders whose bank accounts have been wrongly frozen, placed under lien, or put on hold during cybercrime investigations.

Key features of GRM:

         i.            Enables account holders to seek a review of actions taken against their accounts

       ii.            Provides a three-tier escalation structure to ensure time-bound resolution of complaints

     iii.            Addresses grievances of individuals whose accounts were frozen due to suspicious transactions detected during investigations. 

This module is particularly important because many innocent citizens' bank accounts are often "held" (placed under lien) or "frozen" due to suspicion or technical reasons. The GRM provides a transparent, time-bound, and accountable mechanism for resolving such grievances.

F. Success Stories – MRM in Action

The MRM has already begun delivering results across India:

        i.            Delhi Police: Facilitated the restoration of Rs. 3.59 lakh to victims in 34 cyber fraud cases through the MRM. A total of 70 requests were received from the I4C for processing under the module.

      ii.            Haryana: Issued restoration orders in 38% of 14,731 cybercrime cases received, enabling the return of Rs. 2.51 crore to victims through the MRM — five times higher than the national average of 8%.

    iii.            Hyderabad Police: Facilitated the refund of more than Rs. 25 crore to cyber fraud victims between January and July 2026. The wing initiated refunds worth Rs. 2 crore through the MRM portal in a single month.

    iv.            Mumbai Cyber Police: Helped return Rs. 10.9 lakh to 85 online fraud victims through the upgraded MRM and GRM portals in just four days.

National Impact: Union Home Minister Amit Shah informed that nearly one lakh citizens have benefitted from the Money Restoration and Grievance Redressal mechanisms. Between 2021 and May 2026, cybercrime losses reported stood at Rs. 64,447 crore, of which around Rs. 10,718 crore has been frozen, and Rs. 323 crore has been refunded to victims through the money restoration mechanism.

G. Critical Warnings – Protect Yourself from Scammers

The MRM and GRM services are completely FREE. Authorities have cautioned citizens against middlemen and fraud agents who may promise to expedite refunds for a fee. Never share your OTPs, passwords, bank credentials, or personal information with anyone claiming to be a police officer, bank official, or government authority offering faster refunds. Fraudsters often impersonate officials to exploit desperate victims. Also remember that no fee is charged for filing a refund request through the official MRM portal. If someone asks for money to process your refund, it is a scam.

For assistance, citizens may:

         i.            Inform Cyber Crime over Phone 1930

       ii.            Approach local police station

     iii.            Contact the investigating officer handling the complaint

H. Supreme Court Directives – Strengthening the System

The Supreme Court of India has taken cognisance of the growing menace of cyber frauds and has issued nationwide directions to strengthen the money restoration framework:

        i.            All states, Union Territories, and law enforcement agencies have been directed to expeditiously operationalise the Grievance Redressal Module and the Money Restoration Module under the MHA SOP dated January 2, 2026

      ii.            The Reserve Bank of India has been given four weeks to prepare and circulate a Standard Operating Procedure (SOP) for dealing with mule accounts — bank accounts used to receive or transfer proceeds of cybercrime

    iii.            Registrar Generals of all High Courts have been directed to apprise courts of the grievance redressal and money restoration modules so that victims are made aware of the available remedies

I. Quick Reference Summary

Aspect	Details
Portal Name	Money Restoration Module (MRM)
Website	https://mrm-ncrp.mha.gov.in/public-info[reference:69]
Developed By	Indian Cyber Crime Coordination Centre (I4C), MHA
Eligibility	Prompt reporting via 1930 or NCRP + Valid 14-digit complaint ID
Refund (No FIR)	Up to ₹50,000 in a single account
Refund (FIR)	Above ₹50,000 in a single account
Cost	Free — No fees charged
Wrongly Frozen A/c	Grievance Redressal Mechanism (GRM)
Helpline	1930 (24×7×365)
Online Portal	cybercrime.gov.in

 

Conclusion

“If you have been a victim of cyber fraud, raise awareness among people about it.” — PM Modi

Cyber fraud is an asymmetric battle—the scammers have studied you for a long time, while you only encounter them at the final moment. However, every victim who files a report gives law enforcement another lead, and every courageous testimony helps protect future victims.

The Indian government has established a robust framework to combat cybercrime, including the 1930 helpline, the National Cyber Crime Reporting Portal, the Indian Cyber Crime Coordination Centre (I4C), the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), and the Money Restoration Module (MRM). The Supreme Court has also directed the CBI to crack down on "digital arrest" scammers and their associates. Initiatives such as Operation Mule Hunt, a nationwide drive against mule account holders, have already resulted in numerous FIRs and arrests. Justice is actively being pursued.

The Money Restoration Module (MRM) is a powerful mechanism designed to help victims recover their hard-earned money without the need to visit multiple offices. However, its effectiveness depends on prompt action. Victims should immediately report cyber fraud by calling the 1930 helpline or filing a complaint on the National Cyber Crime Reporting Portal. The sooner a complaint is lodged, the greater the chances of freezing the fraudulent transactions and recovering the funds through the MRM.

The refund process under the MRM depends on the amount frozen in the account. If the total frozen amount in a single account is below ₹50,000 (Category 1), no FIR or court order is required. The refund can be processed based on a police complaint and an indemnity bond submitted online. If the total frozen amount exceeds ₹50,000 but is distributed across multiple accounts, with no individual account containing more than ₹50,000 (Category 2), an FIR is not required; however, the refund is subject to police verification. If the total frozen amount in a single account exceeds ₹50,000 (Category 3), an FIR is mandatory before the refund can be processed.

The entire process is free, secure, and transparent. Victims should use only the official MRM portal and never pay anyone claiming to facilitate a refund. Most importantly, do not lose hope. Being scammed is not the end—it is the beginning of taking action. With timely reporting and the support of India's cybercrime response framework, there is a real opportunity to recover what is rightfully yours while helping prevent others from becoming victims.