What to Do After UPI or Payment Fraud in India (2026)
What to do right after a UPI or payment fraud in India: the immediate steps, how the bank and NPCI complaint works, when to escalate to the RBI Ombudsman, and the legal recovery route. Last verified October 2026.
How-To Guide · UPI & Payments
If money was taken through a UPI or digital payment fraud, act in minutes, not days. Call 1930 and report at cybercrime.gov.in, tell your bank and your UPI app at once, and raise a dispute. The faster you report, the better the chance the receiving account is frozen before the money moves on. This guide sets out the immediate steps, how the bank and NPCI complaint works, when to escalate to the RBI Ombudsman, and the legal recovery route if the money is not refunded. Last verified October 2026.
- Report at once: call 1930 and file at cybercrime.gov.in, then raise a complaint in your UPI app and with your bank, all in writing.
- Limited liability: prompt reporting of an unauthorised debit can mean you bear little or no loss under the RBI framework.
- Escalate: if the bank does not resolve the complaint in 30 days, take it free of cost to the RBI Ombudsman.
- Recover: use a consumer complaint, the criminal FIR, or a civil suit where the fraudster is identified.
- Avoid: you never enter a UPI PIN to receive money; PINs, QR codes and collect requests are only for paying.
01Act in minutes
UPI moves money instantly, and so do fraudsters. The moment you realise a payment was fraudulent or unauthorised, do two things at the same time:
- Report to the national system: call 1930 and file at cybercrime.gov.in, which can route a hold request to the banks involved.
- Tell your bank and UPI app: report the transaction as unauthorised and ask for it to be disputed and held.
Do not wait to collect perfect paperwork. Report first, with the transaction ID and the amount, and add the rest later. The chance of a reversal is highest while the money is still in the receiving account.
02Raise the UPI and bank complaint
UPI runs on the Unified Payments Interface operated by the National Payments Corporation of India (NPCI), and there is a built-in way to complain.
- In your UPI app: most apps have a transaction history where you can raise a complaint or dispute against a specific payment. This starts the formal dispute process.
- Through NPCI: UPI complaints can also be raised through the NPCI dispute redressal mechanism if the app route does not resolve it.
- With your bank: report the unauthorised debit to your bank in writing, by email or the net-banking message box, so there is a dated record, and get a complaint reference number.
Write it down and keep the number
Keep every complaint reference number, from 1930, the UPI app, NPCI and your bank. A written, timed complaint is what protects your limited-liability claim and supports any later case.
03Limited liability for the debit
If money left your account without your authorisation and the fault was not yours, the Reserve Bank of India's customer-protection framework can limit or remove your liability, provided you report the transaction to your bank promptly. The earlier you report, the stronger the protection.
This is a key reason to complain to the bank in writing the moment you notice the debit, and to keep the date. Note that if you willingly approved the payment because you were tricked into it, the bank may treat it differently from a purely unauthorised debit, which is why the facts of how the fraud happened matter.
04Escalate to the RBI Ombudsman
If your bank does not resolve your complaint, you can escalate to the RBI Ombudsman under the Integrated Ombudsman Scheme, 2021, at no cost. As a rule you first complain to the bank and give it time to respond. If the bank rejects the complaint, or does not reply within 30 days, you can take it to the Ombudsman.
The complaint is filed online through the RBI's complaint management system. For the full steps, see how to file an RBI Banking Ombudsman complaint.
05The legal recovery route
The Ombudsman handles deficiency by the bank. If that does not get your money back, or the dispute is really with the fraudster, there are legal routes:
- Consumer complaint: where there is deficiency of service by the bank or payment provider, a consumer complaint can seek a refund and compensation.
- Criminal case: the FIR you filed, usually under the IT Act Section 66D and the cheating provisions of the Bharatiya Nyaya Sanhita, lets the police investigate and trace the money.
- Civil recovery: where the fraudster is identified, a civil suit can be brought to recover the amount.
For the wider recovery picture across all online frauds, see how to recover money lost to online fraud.
06How to avoid the next one
A few habits cut most UPI fraud:
- You never need to enter your UPI PIN to receive money. If someone asks you to enter a PIN to get a refund or a prize, it is a scam.
- Do not scan a QR code or approve a collect request to receive money. QR codes and collect requests are for paying, not receiving.
- Check the name shown before you pay, and do not act on urgent calls claiming to be your bank, a delivery agent or an official.
Most UPI frauds work by getting you to approve a payment yourself, so a moment's pause before approving is the best protection.
07Where Claw fits
Claw is an all-in-one legaltech platform for Indian advocates, law firms, and corporate legal teams, combining AI-based case search, an AI legal assistant (Legal GPT), case management, and compliance automation across all Indian courts and tribunals.
If a UPI fraud becomes a consumer, Ombudsman or court matter, it helps to see how similar disputes over bank liability and unauthorised transactions have been decided. Claw lets you search 30 crore+ judgments, with Supreme Court decisions from 1950 and High Court decisions from 1990, to find rulings on point, in under 5 seconds. If you file a case, Claw tracks cases, orders and hearings across 9,102 courts, benches and forums, so you can follow it by party name. Claw does not use your case documents to train its AI models.
Create a FREE Claw account to research how courts have decided payment-fraud and bank-liability disputes, using case search across Indian courts.
08Sources and further reading
- National Cyber Crime Reporting Portal: cybercrime.gov.in
- National Payments Corporation of India (UPI): npci.org.in
- Reserve Bank of India (ombudsman and customer protection): rbi.org.in
- Claw: clawlaw.in
This guide is general information, not legal advice. Reporting flows and RBI rules can change, so check the current position and take advice before you act.
09Frequently asked questions
What should I do first after a UPI fraud?
Report immediately. Call 1930 and file at cybercrime.gov.in so the beneficiary account can be flagged for a hold, raise a complaint in your UPI app for the transaction, and tell your bank in writing to dispute the unauthorised debit. Speed gives the best chance of freezing the money before it moves.
How do I complain about a UPI transaction?
Most UPI apps let you raise a complaint or dispute against a specific transaction in the payment history. If that does not resolve it, you can use the NPCI dispute redressal mechanism, and separately complain to your bank in writing. Keep every reference number.
Will the bank refund money lost to UPI fraud?
It depends on how the fraud happened. If money was debited without your authorisation and you reported it promptly, the RBI customer-protection framework can limit or remove your liability. If you were tricked into approving the payment yourself, the bank may treat it differently, so the facts matter.
When can I go to the RBI Ombudsman for UPI fraud?
First complain to your bank. If the bank rejects the complaint, or does not reply within 30 days, you can escalate free of cost to the RBI Ombudsman under the Integrated Ombudsman Scheme, 2021, through the RBI complaint portal.
Do I need a UPI PIN to receive money?
No. You never enter your UPI PIN to receive money. Anyone asking you to enter a PIN, scan a QR code or approve a collect request to get a refund or prize is trying to make you pay them, which is the most common UPI fraud.
Can I take a UPI fraud to court?
Yes. Beyond the bank and the Ombudsman, you can bring a consumer complaint for deficiency of service, support the police FIR (often under IT Act Section 66D and the BNS cheating provisions), or file a civil suit to recover the amount where the fraudster is identified.