If money has just left your bank account because of an online scam, one of the first numbers to call in India is 1930. The Cybercrime Helpline is built specifically to get financial cyber fraud reported quickly enough that police, banks, and financial intermediaries can try to stop the stolen money before it moves further through the financial system.
That said, it's worth being upfront about what 1930 actually does and doesn't do. Calling it doesn't automatically reverse a UPI transfer, register an FIR, or guarantee your money comes back. What it does is kick off an emergency reporting and fund-tracing process linked to the National Cyber Crime Reporting Portal (NCRP) and the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS).
This system has become increasingly important as online financial fraud has grown. The Ministry of Home Affairs reported that by June 30, 2026, more than ₹11,158 crore had been "saved" across more than 32.80 lakh complaints through CFCFRMS. Government data also shows more than 65.89 lakh financial-fraud complaints, involving over ₹55,050 crore, were reported on NCRP between 2021 and 2025.
One important distinction: "saved" isn't the same as "refunded." Money placed on hold may still need to go through verification, investigation, and the applicable restoration procedure before it actually reaches a victim.
What Is the Cybercrime Helpline 1930?
1930 is India's national helpline for reporting cyber-enabled financial fraud, operating within the Ministry of Home Affairs' Indian Cyber Crime Coordination Centre (I4C) framework. The underlying CFCFRMS system was introduced in 2021 specifically to enable rapid reporting of financial fraud and prevent fraudsters from siphoning stolen funds away before authorities can act. The NCRP, separately, lets citizens report cybercrime online more broadly.
Under the January 2, 2026 Standard Operating Procedure for NCRP-CFCFRMS, calls to 1930 are handled by police from the relevant State or Union Territory. When a qualifying cyber-enabled financial crime is reported, transaction information can be entered into CFCFRMS so action can begin across participating financial institutions, making 1930 particularly relevant whenever money has actually been transferred, debited, or fraudulently taken.
When Should You Actually Call 1930?
Call as soon as you discover you've lost money or that an unauthorised transaction has occurred through cyber-enabled fraud, whether that's UPI fraud, internet banking fraud, card fraud, wallet fraud, fraudulent investment schemes, fake customer-care impersonation, phishing, fraudulent shopping transactions, or digital arrest scams.
Don't wait until you've reconstructed every detail. The whole point of calling immediately is to reach the financial system while some or all of the money may still be traceable. Fraud proceeds often move quickly through multiple beneficiary or mule accounts, and can be withdrawn, spent, or moved out of the accessible financial system entirely. If the money is still somewhere along that trail when you report it, the system may be able to place the relevant amount on hold.
What to Keep Ready Before You Call
The most useful information is whatever identifies the actual transaction: your mobile number, bank or wallet details, UPI ID where relevant, transaction ID or UTR/RRN, transaction date, and amount. For card-related fraud, relevant card details matter too. Preserve screenshots of transaction confirmations, bank messages, and any other supporting evidence.
Also hold onto the scammer's phone numbers, WhatsApp or Telegram details, any URLs, email addresses, QR codes, payment requests, chat history, and fake documents they may have sent. Don't delete a conversation just because it's embarrassing or threatening, those records can genuinely help investigators reconstruct what happened later.
What Actually Happens When You Call
The 2026 NCRP-CFCFRMS SOP lays out a fairly clear process:
1. Your details get recorded. The police officer handling the call records your reported transaction and basic personal information. Before the complaint enters CFCFRMS, the officer has to be satisfied the information genuinely discloses a cyber-enabled financial crime, the SOP specifically warns against pushing motivated or unrelated complaints into the financial-fraud system.
2. You receive a 14-digit acknowledgement number. For complaints initiated through 1930, the SOP says you'll receive this number, starting with "3", via SMS carrying the official NCRP header. Keep this SMS and number safe; it matters.
3. You need to complete the complaint on the NCRP portal. The phone call isn't the end of the process. The SMS you receive will contain instructions to submit complete fraud details on the NCRP using your acknowledgement number. Follow those instructions and timelines exactly as given in your message, rather than assuming the call alone was sufficient.
4. Police can push the complaint into CFCFRMS. Once the reported facts indicate a genuine cyber-enabled financial crime, the complaint enters CFCFRMS, the part of the system actually designed to trace the money. The SOP provides for notices to banks and financial intermediaries to hold the reported amount while the transaction trail is established, and if the money has moved again, updated transaction information can keep that trail going.
5. The beneficiary bank may place a hold. Say ₹80,000 is fraudulently transferred from your account into Account A. If that amount is still available when the complaint reaches the beneficiary institution, the bank may place it on hold under the SOP's process. If Account A has already forwarded the money to Accounts B and C, the system is designed to follow that trail onward; if the proceeds have already exited the financial system, that fact simply gets recorded instead. This is exactly why speed matters, and also why no legitimate authority can promise that calling within any specific number of minutes guarantees recovery.
Does Calling 1930 Freeze the Scammer's Entire Account?
Not necessarily. The 2026 SOP is built around proportionality, tracing the specific reported proceeds, not seizing an entire account outright. It provides for putting the reported amount on hold, with separate procedures governing suspension of digital banking services and full seizure of accounts or property, legally distinct actions from a simple hold.
This distinction matters more than it might seem, because cyber-fraud proceeds often pass through multiple accounts, sometimes creating genuine disputes involving downstream account holders who had nothing to do with the original fraud. The January 2026 SOP includes a dedicated grievance mechanism specifically for issues involving holds, account freezes, and lien markings.
Does a 1930 Complaint Automatically Become an FIR?
No. A cybercrime complaint, a CFCFRMS action, and an FIR are three genuinely different things. The Ministry of Home Affairs has said that cybercrime incidents reported through NCRP, their conversion into FIRs, and subsequent investigation, arrests, chargesheets, and resolution are handled by the concerned State or UT law-enforcement agency under applicable law. The 2026 SOP does contain provisions for FIR or e-FIR registration in circumstances involving freezing, suspension of digital banking services, or return of reported money, but a 1930 acknowledgement number is valuable evidence that you reported the incident, not an FIR number in itself.
Should You Also Report to Your Bank?
Yes, absolutely, and immediately alongside your 1930 call. Report to your bank, card issuer, wallet provider, or other payment service directly, and ask for a complaint or reference number confirming they've recorded the fraud or unauthorised transaction.
This matters especially for unauthorised electronic banking transactions. RBI's customer-protection framework provides zero liability in specified situations, including certain third-party breaches where neither the bank nor customer is at fault, provided the customer notifies the bank within three working days of receiving the transaction communication. Different liability rules apply where the customer was negligent, including sharing payment credentials. This banking-liability process runs entirely separately from whether police eventually trace and recover money from the actual fraudster.
It's also worth knowing that RBI's digital-payment authentication rules have evolved. Its 2025 Directions, effective for compliance from April 1, 2026, require at least two distinct authentication factors for covered domestic digital-payment transactions (subject to specified exemptions), with at least one factor dynamically created or proven for digital payments beyond card-present transactions. SMS OTP hasn't been abolished under this framework.
Can Money Actually Be Recovered?
It can, but recovery is never guaranteed. CFCFRMS's first objective is stopping reported fraud proceeds from disappearing; getting money placed on hold and getting that money actually restored to the victim are two separate stages, a distinction that's often missing from simplified explanations of how 1930 works.
The government's reported ₹11,158 crore "saved" across more than 32.80 lakh complaints by June 30, 2026 is evidence that funds are being intercepted through the system, not a promise that every rupee reached the original complainants immediately or at all.
What Is the Money Restoration Module?
A significant change arrived in 2026. The Ministry of Home Affairs confirmed the Money Restoration Module (MRM) became functional in April 2026 as part of the new NCRP-CFCFRMS framework, specifically designed to speed up restoration of defrauded money that's been held or otherwise secured for victims. A separate Grievance Redressal Module handles disputes involving frozen accounts and lien-marked amounts.
Under the 2026 SOP, several processes can apply for interim custody or restoration depending on the circumstances. For a single victim, the SOP provides a process under Section 106(3) of the Bharatiya Nagarik Suraksha Sanhita for amounts below ₹50,000 that have been put on hold. Amounts above ₹50,000 come with additional procedural requirements under the same process, including connection with an FIR. Eligibility for any particular restoration route depends entirely on the specific facts and procedural status of the complaint, a portal request alone doesn't guarantee payment.
What Laws Can Apply to Online Fraud?
There's no single "1930 offence"; the actual criminal provisions depend on what the fraudster specifically did. For incidents after the new criminal laws took effect on July 1, 2024, cheating can engage Section 318 of the Bharatiya Nyaya Sanhita, 2023, while Section 319 covers cheating by personation.
Cyber-enabled impersonation and identity misuse may also draw on the Information Technology Act, 2000, Section 66C addresses identity theft involving fraudulent or dishonest use of another person's electronic signature, password, or other unique identifying feature, while Section 66D covers cheating by personation using a communication device or computer resource. Which provisions actually belong in an FIR is ultimately a matter for investigators to determine based on evidence; victims don't need to correctly identify every applicable penal section before making an emergency 1930 report.
What to Do the Moment You Discover Cyber Fraud
The practical sequence is simple: stop further access to your money, report the transaction, and preserve every piece of evidence. Call 1930 immediately. Notify your bank or payment provider through its official fraud-reporting channel. Complete the complaint through official NCRP instructions and hold onto your acknowledgement number. Save transaction IDs, UTRs, account details, screenshots, phone numbers, messages, emails, and URLs.
If you installed a suspicious remote-access or APK application, or disclosed credentials at any point, secure your affected banking and digital accounts from a clean device, using the service provider's official channels only. Never send another payment because someone claims it's required to "release," "verify," or "recover" your original amount, and never pay a supposed police officer, bank employee, or recovery agent promising guaranteed recovery through a 1930 complaint. That promise itself is a common secondary scam.
Common Questions Worth Answering Directly
Is 1930 available for all cybercrime complaints? It's specifically central to rapid reporting of cyber-enabled financial fraud. Other cybercrime types can be reported through the NCRP and appropriate police authorities, and NCRP also offers a separate facility for reporting suspicious identifiers like phone numbers, WhatsApp or Telegram handles, URLs, email addresses, and social-media links.
Can I call 1930 after several days? Yes, you can still report the fraud, and a delayed complaint shouldn't be abandoned just because time has passed. But because the system's core purpose is rapid intervention, the possibility of placing money on hold depends partly on where the proceeds actually are by the time action reaches the relevant financial institutions.
Does calling guarantee a refund? No. 1930 begins a reporting and intervention process; whether money can actually be held and restored depends on the transaction trail, fund availability, verification, investigation, and applicable legal procedure.
Should I call my bank first or 1930 first? Do both immediately rather than treating them as alternatives. 1930 connects the incident to the national cyber-financial-fraud response system, while reporting directly to your bank creates the institution's own fraud record and can affect your rights in unauthorised electronic transaction cases.
Can someone else report on my behalf? Yes. The 2026 SOP allows an NCRP complainant to be the victim or someone acting on the victim's behalf, though identity and complaint details still need to be provided and verified through the system.
If money is on hold, when will I get it back? There's no universal timeline. A hold prevents the money from moving further; restoration is a separate process, and the applicable route depends on the amount, whether there are single or multiple victims, FIR status, investigation progress, and other factors under the 2026 SOP.
Where should I go next after filing? Keep your NCRP acknowledgement number, bank complaint number, and all evidence together in one place. Track and complete your complaint through the National Cyber Crime Reporting Portal. Where funds have been placed on hold and your case is eligible, follow the current Money Restoration Module process. If the NCRP response feels inadequate, the portal also publishes State and UT nodal and grievance officer details for escalation.
The most useful rule here is also the simplest: after a financial cyber fraud, report first and reconstruct the full story afterward. The 1930 system is built around speed precisely because stolen money can move through several accounts far faster than a conventional police complaint can typically be processed.
FAQs
Q1. What number should I call immediately after losing money to an online scam in India?
1930, India's national cybercrime helpline for reporting cyber-enabled financial fraud.
Q2. Does calling 1930 guarantee my stolen money will be returned?
No. It begins a reporting and fund-tracing process; whether money is actually recovered depends on the transaction trail, fund availability, and the applicable legal procedure.
Q3. What is the 14-digit acknowledgement number I receive after calling 1930?
It identifies your NCRP complaint and starts with "3" under the 2026 SOP. It's used to complete and track your complaint on the National Cyber Crime Reporting Portal, and should be kept safe.
Q4. Should I contact my bank or 1930 first after discovering fraud?
Do both immediately. They serve different purposes: 1930 links your case to the national fraud-response system, while your bank creates its own fraud record relevant to your rights in unauthorised transaction cases.