Cybercrime Complaint Filing in India begins the moment you discover unauthorised online activity. Whether you’ve lost money through a UPI scam, phishing attack, fake bank call, or OTP fraud, taking immediate action can significantly improve your chances of freezing the transaction and recovering your funds. This guide explains how to report cybercrime through cybercrime.gov.in, call the 1930 helpline, understand the legal framework, and preserve crucial digital evidence.
Introduction
The debit alert arrives before the panic does. A UPI transaction you didn’t authorise, a caller pretending to be your bank’s fraud department, an OTP you shared a second too soon, and suddenly the only thing standing between you and a permanent loss is how fast you act in the next sixty minutes. India’s cybercrime reporting system has been rebuilt around exactly this insight: speed determines recovery. This guide walks through precisely how to use it: the National Cyber Crime Reporting Portal, the 1930 helpline, and the legal provisions that give your complaint teeth.
Why This Topic Matters in 2026
Cyber fraud in India now moves at a scale that dwarfs most other categories of crime measured by reported financial loss. Between April 2021 and November 2025, the government’s own fund-tracing system reported roughly ₹52,969 crore in cyber-fraud complaints, of which about ₹7,647 crore was successfully frozen before reaching criminals, but only around ₹167 crore, a mere 2.18%, has actually been restored to victims so far. That gap between money frozen and money returned is precisely why the Ministry of Home Affairs issued a fresh Standard Operating Procedure on 2 January 2026 tightening bank-police coordination timelines. Recovery rates have still improved meaningfully from roughly 10-11% in 2024 to about 24% in 2025, largely because more victims are reporting within the first six hours, when freezing a receiving account is still possible.
Background: From the IT Act 2000 to I4C
India’s cyber law framework begins with the Information Technology Act, 2000, later strengthened by the 2008 amendment passed in the aftermath of the 26/11 Mumbai attacks, which introduced several of the offence provisions still in use today. For years, reporting mechanisms remained fragmented across state cyber cells with inconsistent capability. That changed with the launch of the National Cyber Crime Reporting Portal (cybercrime.gov.in) in 2019 by the Ministry of Home Affairs, operated under the Indian Cyber Crime Coordination Centre (I4C). The portal’s financial-fraud arm, the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), was layered on top to let police and banks trace and freeze the money trail in near real time. The dedicated 1930 helpline (which absorbed the earlier 155260 number) became the front door for urgent financial-fraud reporting, and in May 2025, I4C introduced the e-Zero FIR initiative, automatically escalating high-value fraud complaints into a formally registered FIR.
Legal Framework: Sections You Must Know
Section 43, IT Act 2000: civil liability for unauthorised access, damage, or data theft from a computer system; the Adjudicating Officer can award compensation up to ₹5 crore under Sections 43 and 46.
Section 66, IT Act 2000: criminalises dishonest or fraudulent acts covered under Section 43; punishable up to 3 years’ imprisonment and/or fine up to ₹5 lakh.
Section 66B, IT Act 2000: dishonestly receiving stolen computer resources or communication devices; up to 3 years and/or ₹1 lakh fine.
Section 66C, IT Act 2000: identity theft: fraudulent or dishonest use of another person’s electronic signature, password, or unique identification feature; up to 3 years and fine up to ₹1 lakh.
Section 66D, IT Act 2000: cheating by personation using a computer resource or communication device (the classic ‘fake bank official’ or phishing scenario); up to 3 years and fine up to ₹1 lakh.
Section 66E, IT Act 2000: violation of privacy through capturing, publishing, or transmitting images of a person’s private area without consent.
Sections 67 / 67A, IT Act 2000: publishing or transmitting obscene material, and sexually explicit material, in electronic form.
Section 318, BNS 2023 (replaces IPC Section 420): cheating; frequently charged alongside IT Act sections in financial fraud FIRs.
Section 316, BNS 2023 (replaces IPC Section 406): criminal breach of trust, relevant where a trusted party (employee, agent) misuses digital access.
Sections 336–341, BNS 2023 (replace IPC Sections 463–471): forgery, relevant to fabricated documents, forged digital signatures, and doctored evidence.
Section 63, Bharatiya Sakshya Adhiniyam 2023 (replaces Evidence Act Section 65B): governs admissibility of electronic evidence; a certificate under this section is generally mandatory for secondary electronic evidence (screenshots, call data, server logs) to be admitted in court.
A single fraud incident routinely triggers multiple sections at once: for example, a fake-bank-official OTP scam typically involves Section 66D (cheating by personation), Section 66C (if credentials were misused), and Section 318 BNS (cheating) simultaneously. Naming the specific sections in your written complaint materially improves how quickly it gets triaged.
The Golden Hour: Why Speed Decides Everything
Two independent clocks start the moment fraud occurs, and both favour speed. The first is the RBI’s zero-liability framework: if you notify your bank in writing within three working days of an unauthorised transaction, you are generally not liable for the loss; delay shifts liability toward you.
The second is the practical reality of fund-freezing: stolen money typically moves through several ‘mule’ accounts within hours, and each hop makes recovery harder. Reporting within the first 24 hours through 1930 (ideally the first 6 hours) gives police the best chance of placing a hold on the receiving account before the money moves further; industry data shows recovery rates fall sharply after that window, and drop below roughly 20% after 7 days.
Landmark Judgments on Cyber Offences & Evidence
| Case | Citation | Court | Held / Significance |
| Shreya Singhal v. Union of India | (2015) 5 SCC 1 | Supreme Court | Struck down Section 66A of the IT Act (punishing ‘offensive’ online messages) as unconstitutionally vague and violative of Article 19(1)(a) — the foundational cyber-law free-speech judgment; complaints still occasionally cite the repealed Section 66A, which is a ground for immediate objection. |
| Anvar P.V. v. P.K. Basheer | (2014) 10 SCC 473 | Supreme Court | Held that secondary electronic evidence (CDs, screenshots, printouts) is inadmissible without a certificate under Section 65B of the Evidence Act (now Section 63, BSA) — meaning your WhatsApp/email screenshots need proper certification to hold up in court, not just be attached to your complaint. |
| Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal | (2020) 7 SCC 1 | Supreme Court (Constitution Bench) | Reaffirmed that a Section 65B-equivalent certificate is mandatory for secondary electronic evidence, while clarifying that courts may, in limited circumstances, permit the certificate to be produced at a later stage — directly relevant to how you should preserve and later formalise digital evidence in a cyber fraud case. |
Note: verify operative paragraphs on sci.gov.in or Indian Kanoon before citing in a formal proceeding.
Cybercrime Complaint Filing in India, Step-by-Step: Filing on cybercrime.gov.in
1. Go to cybercrime.gov.in: the official Ministry of Home Affairs portal (verify the .gov.in domain; never pay any fee for filing).
2. Choose the category: ‘Report Financial Fraud’ for money-related crimes, or ‘Report Other Cyber Crime’ for hacking, harassment, obscene content, etc.; for offences against women/children, anonymous reporting is available.
3. Fill in incident details: date, time, mode of fraud, amount involved, transaction/UTR IDs, and the specific IT Act/BNS sections if known.
4. Upload evidence: screenshots, transaction receipts, chat logs, and any communication from the fraudster, named and organised sequentially.
5. Submit and note your acknowledgment number: a 14 or 16-digit reference number is sent via SMS; save this to track status later.
6. Track status: via ‘Track Your Complaint’ on the portal, using your registered mobile number and OTP, or the acknowledgment number.
Step-by-Step: Calling the 1930 Helpline
1. Call 1930 immediately on noticing unauthorised or suspicious transactions: it is free, 24/7, and staffed by state police cyber-fraud operators.
2. Provide transaction details: account/UPI/wallet ID, transaction ID, amount, date and time, and the receiving party’s details if visible.
3. The operator raises a ticket on CFCFRMS and attempts to place an immediate hold on the funds at the receiving bank/wallet.
4. You will receive an SMS with a 14-digit acknowledgment number from ‘XXNCRP’: you must complete the full complaint on cybercrime.gov.in using this number, typically within 24 hours.
5. Simultaneously, notify your own bank in writing to trigger the RBI’s zero-liability clock.
The e-Zero FIR Rule for Losses Above ₹10 Lakh
Since I4C’s e-Zero FIR initiative launched in May 2025, complaints reported through NCRP or 1930 involving a financial loss exceeding ₹10 lakh are automatically escalated into a Zero FIR, registered with the dedicated e-Crime Police Station in Delhi and then transferred to the police station with actual jurisdiction: mirroring the Zero FIR mechanism now codified for physical crimes under Section 173, BNSS (covered in our companion guide on e-FIR & Zero FIR).
For losses below that threshold, the NCRP complaint remains a preliminary report, not an FIR in itself; converting it into a formal FIR typically requires a visit to your local cyber cell or police station.
Converting a Portal Complaint Into an FIR
1. Visit your nearest cyber crime police station (or any police station: cyber offences carry nationwide jurisdiction) with your NCRP acknowledgment number and all evidence.
2. Request formal FIR registration, citing the specific IT Act/BNS sections applicable to your case.
3. The officer records your statement, prepares the FIR, and you should review it carefully before signing.
4. Collect your FIR copy and note the Investigating Officer’s name and contact details for follow-up.
5. If refused, the same BNSS remedies apply as for any cognizable offence; escalate in writing to the Superintendent of Police under Section 175, then to the jurisdictional Magistrate under Section 175(3) if unresolved.
Practical Scenario
A salaried employee receives a call from someone claiming to be their bank’s fraud-prevention team, warning of a ‘suspicious’ transaction and asking them to share an OTP to ‘block’ it. Within minutes, ₹2.8 lakh is debited via UPI. The victim calls 1930 within four hours, well inside the golden window, and separately files the full complaint on cybercrime.gov.in citing Section 66D (cheating by personation) and Section 318 BNS (cheating).
The receiving account is partially frozen by the bank in response to the CFCFRMS ticket, and the case proceeds to investigation, illustrating both how the system is designed to work and why the specific sections cited in a complaint matter to how it’s triaged.
Common Mistakes to Avoid
Waiting to see if the transaction ‘reverses on its own’: banks do not self-reverse fraudulent transfers without a formal complaint.
Reporting only to the bank and skipping 1930/NCRP: the account-freeze mechanism is triggered through the law-enforcement channel, not the bank alone.
Selecting the wrong complaint category on the portal, which misroutes the case and delays action.
Submitting incomplete evidence: missing screenshots or transaction IDs are among the most common reasons complaints stall.
Assuming an NCRP complaint number is the same as an FIR number: it is not, and for many purposes (insurance claims, employer verification) you will specifically need the FIR.
Facts vs Myths
| Myth | Fact |
| Filing on cybercrime.gov.in costs money. | False; it is a free Government of India service; anyone charging a fee to ‘help’ you file is itself running a scam. |
| An NCRP complaint is the same as an FIR. | False, NCRP is a complaint/reporting mechanism; an FIR requires registration under Section 173 BNSS, either automatically (e-Zero FIR for losses above ₹10 lakh) or at a police station. |
| You can only report cybercrime to police in the city where the fraud happened. | False, cyber offences have nationwide jurisdiction; you can report at any cyber cell or police station in India. |
| Nothing can be done once money leaves your account. | False, funds routed through India’s banking system can often still be frozen at the receiving end for hours to a few days, which is why speed matters so much. |
NCRP Complaint vs FIR: Comparison
| Aspect | NCRP / 1930 Complaint | FIR (Section 173, BNSS) |
| Filed at | cybercrime.gov.in portal or 1930 call | Police station / cyber cell, or auto-triggered above ₹10 lakh loss |
| Legal status | Preliminary complaint/reporting mechanism | Formal criminal proceeding |
| Triggers investigation directly? | Routes complaint to relevant cyber cell | Yes — investigation formally begins |
| Needed for insurance/HR/legal claims? | Often insufficient alone | Usually required |
| Reference generated | 14–16 digit acknowledgment number | FIR number |
Timeline
2000: Information Technology Act enacted, India’s first cyber law framework.
2008: IT (Amendment) Act strengthens cyber-offence provisions post the 26/11 Mumbai attacks.
2019: National Cyber Crime Reporting Portal (cybercrime.gov.in) launched by MHA under I4C.
2021 onward: CFCFRMS deployed to trace and freeze the money trail on financial-fraud complaints.
May 2025: e-Zero FIR initiative launched for cyber-fraud complaints involving losses above ₹10 lakh.
2 January 2026: MHA issues a fresh SOP tightening bank-police coordination timelines under CFCFRMS.
2026: National cyber-fraud recovery rate rises to roughly 24%, up from about 10-11% in 2024.
Reporting Flowchart
Cyber fraud/incident occurs → Call 1930 immediately (financial fraud) and/or visit cybercrime.gov.in →
Receive acknowledgment number via SMS →
Complete full complaint on portal within 24 hours with evidence →
Notify your bank in writing (RBI zero-liability clock) →
[Loss above ₹10 lakh: automatic e-Zero FIR with Delhi e-Crime PS, transferred to jurisdictional station] / [Loss below ₹10 lakh: visit local cyber cell to convert into formal FIR] →
Investigation and fund-tracing via CFCFRMS →
[If police refuse FIR: escalate to SP under Section 175 BNSS, then Magistrate under Section 175(3)] →
Court proceedings for fund release/prosecution.
Evidence Checklist
Transaction ID / UTR number, date, time, and amount for every affected transaction.
Screenshots of the fraudulent SMS, call log, email, or chat, with visible timestamps.
Bank/wallet statement showing the disputed debit.
Any recording or written note of the fraudster’s phone number, name used, or claimed designation.
Your 1930/NCRP acknowledgment number and the date/time you called or filed.
Written notification sent to your bank, with the date it was sent.
Frequently Asked Questions
Q: What is the fastest way to report a financial cyber fraud in India?
A: Call the 1930 helpline immediately: it is free, available 24/7, and directly connects to the fund-freezing mechanism (CFCFRMS), then complete the full complaint on cybercrime.gov.in using the acknowledgment number sent to you.
Q: Is cybercrime.gov.in a genuine government website?
A: Yes: it is the official National Cyber Crime Reporting Portal run by the Ministry of Home Affairs under the Indian Cyber Crime Coordination Centre (I4C). It is entirely free; never pay anyone claiming to file on your behalf for a fee.
Q: Can I file a cybercrime complaint anonymously?
A: Anonymous reporting is available specifically for offences against women and children. For financial fraud and most other cybercrimes, your identity is generally required for the investigation to proceed.
Q: Is an NCRP complaint the same as an FIR?
A: No. An NCRP complaint is a report that gets routed to the relevant cyber cell; it becomes a formal FIR only when registered under Section 173, BNSS; either automatically for losses above ₹10 lakh (e-Zero FIR) or after a visit to a police station/cyber cell.
Q: What is the e-Zero FIR rule?
A: Since May 2025, cyber-fraud complaints reported via NCRP/1930 involving losses above ₹10 lakh are automatically converted into a Zero FIR, registered with the e-Crime Police Station in Delhi and then transferred to the police station with actual jurisdiction.
Q: How much time do I have to notify my bank for zero liability?
A: Under RBI’s framework, notifying your bank in writing within three working days of an unauthorised transaction generally preserves your right to full reimbursement; delay shifts liability toward you.
Q: What IT Act sections apply to a phishing/OTP scam?
A: Typically Section 66D (cheating by personation) and, where credentials were misused, Section 66C (identity theft) of the IT Act, often alongside Section 318, BNS (cheating).
Q: Can cybercrime be reported from any police station regardless of where it happened?
A: Yes, cyber offences carry nationwide jurisdiction in India; you can report at any cyber cell or police station, similar to the Zero FIR principle for physical crimes.
Q: What happens if police refuse to register an FIR for cyber fraud?
A: The same escalation route applies as for any cognizable offence under BNSS — a written complaint to the Superintendent of Police under Section 175, followed by an application to the jurisdictional Magistrate under Section 175(3) if unresolved.
Q: Do I need a lawyer to file a cybercrime complaint?
A: No, filing on cybercrime.gov.in or calling 1930 requires no legal representation. A lawyer becomes useful for court proceedings, fund-release applications, or if the case is complex or high-value.
Q: What is CFCFRMS?
A: The Citizen Financial Cyber Fraud Reporting and Management System, the backend mechanism used by police and banks to trace, freeze, and attempt recovery of funds lost to cyber-enabled financial fraud.
Q: How likely is it that I’ll get my money back?
A: Recovery rates have improved from roughly 10-11% in 2024 to about 24% in 2025 nationally, and are meaningfully higher for complaints filed within the first 6-24 hours; they fall sharply after 7 days.
Q: Is my screenshot evidence enough to prove fraud in court?
A: Generally no on its own, courts require a certificate under Section 63, Bharatiya Sakshya Adhiniyam 2023 (formerly Section 65B, Evidence Act) for secondary electronic evidence like screenshots to be admissible; preserve originals and obtain proper certification when the matter proceeds to trial.
Conclusion
India’s cybercrime-reporting architecture has matured considerably since the 2019 launch of the NCRP portal, from a single web form into a coordinated system linking the 1930 helpline, CFCFRMS fund-tracing, and now automatic e-Zero FIR registration for high-value fraud. But the system’s effectiveness still depends almost entirely on how fast the citizen on the other end reacts.
Knowing which number to call, which portal to use, which sections to cite, and which three-day and twenty-four-hour clocks are running against you is what turns a devastating loss into a recoverable one or at least gives you the best possible odds.
Key Takeaways
Call 1930 within the first hour (certainly within 24 hours) of any financial cyber fraud; speed is the single biggest factor in fund recovery.
Cybercrime.gov.in is completely free; never pay anyone to file on your behalf.
An NCRP complaint is not automatically an FIR for losses above ₹10 lakh; it now auto-escalates via e-Zero FIR; below that threshold, you must convert it at a police station.
Notify your bank in writing within three working days to preserve RBI zero-liability protection.
Cite specific IT Act (66C/66D) and BNS (318) sections in your complaint: it materially improves triage speed.
Preserve original evidence and expect to need a Section 63 BSA certificate for screenshots/logs to be admissible in court.
Legal Disclaimer:
This article is for general legal awareness and educational purposes only. It does not constitute legal advice and should not be relied upon as a substitute for consultation with a qualified advocate for your specific facts. If you are currently experiencing an active financial fraud, call 1930 immediately rather than relying solely on this guide.
Read More:
Police Identification During Protests: Accountability, Law & Citizen Rights
RTI Act 2005: The Complete Citizen’s Guide to Filing, First Appeal & Second Appeal
e-FIR & Zero FIR Under BNSS 2023: The Complete Guide to Filing, Tracking & Escalating