Scammed on UPI? The First 30 Minutes That Decide If You Get Your Money Back
Lost money on UPI? The first-30-minutes playbook: call 1930, report on cybercrime.gov.in, freeze the account, and the RBI zero-liability rule.
Image: contactless mobile payment · Bogdan Hoyaux / European Commission · CC BY 4.0 · source
Quick answer: If you have just lost money on UPI, act in the next 30 minutes. Call 1930 and file a complaint at cybercrime.gov.in, then phone your bank or UPI app to report the fraud and freeze your account. Reporting fast is what lets the helpline freeze the money in the scammer's account before it is withdrawn.
Money that leaves your account on UPI is not always gone. There is a short window, often called the golden hour, when the destination account can still be frozen. What you do in the first half hour matters more than anything you do later.
What to do in the first 30 minutes
- Call 1930 now. The national cybercrime helpline runs the system that alerts the receiving bank to hold the money. The sooner you call, the better the odds. Keep your transaction details ready.
- File on cybercrime.gov.in. Register a complaint on the National Cyber Crime Reporting Portal. This creates the formal record the banks act on. Choose "Financial Fraud."
- Tell your bank and app. Call your bank's fraud number and report the transaction. Ask them to freeze the account and block the card if card details were shared. Report the fraud inside your UPI app (PhonePe, Google Pay, Paytm) as well.
- Freeze if your account is compromised. If a stranger has access to your account rather than just one payment, block UPI and internet banking immediately.
- Save the evidence. Screenshot the transaction, the UPI reference (UTR) number, the scammer's UPI ID or number, and any chat. You will need these for the complaint.
Why speed is everything
When you report to 1930 and cybercrime.gov.in, the complaint feeds a system that flags the beneficiary account across banks and payment providers. If the fraudster has not yet moved or withdrawn the money, it can be put on hold and, later, returned by order. Once the money is layered through several accounts or pulled out as cash, recovery becomes far harder. That is why minutes count.
The RBI rule that protects you
For an unauthorised transaction, one you did not make or approve, the Reserve Bank of India's customer-protection rules matter. If you report it to your bank within three working days of the bank alerting you to the transaction, your liability is zero and the bank must credit the amount within ten working days. Report within four to seven working days and your liability is limited (capped between ₹5,000 and ₹25,000 depending on your account type). Delay longer and you may bear more of the loss. Always report in writing and keep the acknowledgement.
From 1 January 2027, new RBI directions add a compensation scheme: for frauds up to ₹50,000, an eligible victim can receive 85% of the net loss or ₹25,000, whichever is lower, as a one-time lifetime benefit, provided the fraud is reported within five calendar days to both the bank and 1930 or cybercrime.gov.in. These rules are not in force yet, the rules above still govern complaints today, and it is not confirmed they will cover payments you were tricked into approving yourself.
If you were tricked into paying
Be clear-eyed about one thing. The zero-liability rule is for transactions you never authorised. If a scammer talked you into approving a payment yourself, by promising a refund, a job, a prize, or posing as your bank, that counts as an authorised transaction, and getting the money back is harder. Your best route is still speed: 1930 and cybercrime.gov.in immediately, so the receiving account can be frozen. Recovery is never guaranteed, but fast reporting is what gives you a chance.
Frequently asked questions
What number do I call? 1930, the national cybercrime helpline, available 24x7. Also file at cybercrime.gov.in.
How fast must I act? Within the hour if you can. For the RBI zero-liability protection on an unauthorised transaction, report to your bank within three working days.
Will I definitely get my money back? No. Recovery depends on how fast you report and whether the money is still sitting in the scammer's account. Unauthorised transactions have stronger protection than payments you were tricked into approving.
Do I report to the bank or the police first? Do both, fast. Call 1930 and your bank in parallel. The 1930 system is what triggers the freeze across banks.
What details do I need? The transaction date and amount, the UTR or reference number, the beneficiary UPI ID or account, and screenshots of any messages.
Related: how to report cybercrime in India, getting a frozen or lien-marked account released, and the digital-arrest scam.
If you have lost money to a scam, you are not alone. See our cybercrime help hub for step-by-step reporting and recovery guides.