How to File a Cybercrime Complaint in India: A Step-by-Step Guide

Most guides mention "report it to cybercrime.gov.in" as an afterthought. It deserves its own walkthrough, because the process has a specific order, a time-sensitivity most people don't realize, and separate paths depending on whether money was actually lost.

Step 1: If money is involved, call 1930 first — immediately

The National Cyber Crime Helpline, 1930, is specifically built for financial fraud — UPI fraud, OTP fraud, online banking fraud, card fraud — and is toll-free, 24/7. When you call, the operator logs your complaint directly into the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), which can alert the receiving bank to freeze the funds before they move further down the chain. Speed matters enormously here — the earlier you call, the higher the chance funds are still traceable and recoverable.

Step 2: Complete the formal complaint on the portal within 24 hours

Calling 1930 generates an SMS acknowledgment number, but it isn't the complete legal record — you're expected to file the full complaint at cybercrime.gov.in using that acknowledgment number, typically within 24 hours. This portal, run under the Indian Cyber Crime Coordination Centre (I4C) within the Ministry of Home Affairs, is what creates the actual documented case.

What you'll need for the portal complaint

• Your registered mobile number (ideally the same one used on the 1930 call)
• Transaction details — UTR/transaction ID, date, amount, and the bank or wallet involved
• A written description of the incident (most portals require a minimum character count for the narrative)
• Supporting evidence — screenshots of SMS alerts, chat logs, or suspicious messages

Step 3: Separately contact your bank

Reporting to 1930 and the portal doesn't automatically freeze your account or card — that's a separate action. Call your bank's fraud helpline directly, ask them to block the affected card or UPI access, and explicitly request a written dispute be logged for the transaction.

If it's not a financial fraud case

The 1930/CFCFRMS path is built specifically around financial cyber fraud. For other cybercrimes — harassment, impersonation, non-financial data misuse — the cybercrime.gov.in portal still handles the complaint, under a different category selection ("Report Other Cyber Crime" rather than the financial-fraud track), but without the urgent fund-freezing mechanism attached to 1930.

If your complaint isn't being acted on

Registration of an FIR is a legal requirement for a cognisable offense, and cyber fraud generally qualifies as one. If your local police station is reluctant to register a complaint, you can escalate through your state's cyber cell (many districts now have a dedicated Cyber Police Station), and if that's unresponsive too, escalate further to your State DGP's office. Keep every acknowledgment number, screenshot, and reference ID from each step — this documentation trail is exactly what strengthens escalation if the first response falls short.

Watch out for fraud built around the reporting process itself

A specific scam pattern has emerged where fraudsters call claiming to be from 1930 itself, asking for an OTP "to process your refund." The genuine 1930 line does not call you back from an ordinary 10-digit mobile number — if you get a callback like this, hang up and redial 1930 directly yourself to verify.

Why acting on exposure before it becomes a fraud case matters

This process exists for after something has already gone wrong — the better position is catching exposure before it's used against you. Checking whether your phone number and email are already circulating in breach or broker databases gives you a earlier warning than waiting for an actual fraud attempt. Scan My Shadow checks exactly that, across 1,500+ sources.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.