To report UPI payment fraud in India, call 1930 immediately, notify your bank, and file the details at cybercrime.gov.in. Save the transaction reference and complaint acknowledgements. A report creates an opportunity to trace and hold funds; it does not guarantee repayment.
The Ministry of Home Affairs’ July 28, 2026 update said India’s financial cyber-fraud reporting system had saved more than ₹11,158 crore across over 32.80 lakh complaints by June 30. Those figures cover financial cyber fraud generally, not UPI alone.
Key Highlights
- Report the fraud to both 1930 and your bank
- Complete the online complaint using your acknowledgement
- Preserve payment records and conversations
- Distinguish money held by banks from money actually refunded
What To Do Immediately After UPI Fraud
Stop sending money, including any payment a caller demands to “unlock” a refund. Start reporting instead of negotiating with the caller.
Take these actions without waiting for the scammer to respond:
- Call 1930: Give the operator your contact details, bank name, transaction reference, amount, and payment date
- Notify your bank: Use its official app, website or published fraud helpline; request measures to prevent further unauthorised debits
- Flag the payment: Open the transaction in your UPI app and use its available support option, while keeping the bank complaint active
NPCI’s UPI Help guidance specifically directs fraudulent-transaction complaints to the bank. An app support ticket therefore should not become a reason to postpone contacting the bank or cybercrime authorities.
Keep the bank’s complaint number and reporting time; they help establish when you notified it. RBI’s customer-protection rules make that timing relevant to liability.
Online Complaint Steps And Evidence To Keep
Open the National Cyber Crime Reporting Portal directly. Its official FAQ places financial-fraud complaints under “Report Other Cybercrimes”; select the relevant financial-fraud and UPI options presented.
- Register or sign in: Use your name and valid Indian mobile number, then verify the portal’s OTP
- Describe the incident: Explain how contact began, what the person claimed, and how the transfer happened
- Enter payment details: Supply the bank name, transaction ID or UTR, date, and disputed amount
- Upload evidence and submit: Add relevant records, review the entries, and save the acknowledgement
The portal’s complainant checklist asks for national identification and supporting evidence. Keep the debit message or statement, payment screenshot, and relevant chats. Include the recipient’s UPI ID and suspect’s phone number where available; do not invent missing details.
If you first report through 1930, official reporting guidance instructs you to complete the portal complaint within 24 hours, using the acknowledgement sent to you. That completion window is not advice to delay the initial call.
For several payments, prepare a separate entry for each transaction reference and amount. A single total without the underlying payment records makes the sequence harder to explain.
What Reporting Can Achieve And How Refund Rules Work
Banks and police use the reporting system to trace transfers and seek holds on available funds. Recovery and release still require follow-up; a hold does not itself return money to your account.
MHA said money-restoration and grievance-redressal modules became functional in April 2026. The latter addresses issues involving account freezes and amounts under lien.
For unauthorised bank-account transactions, RBI’s existing framework distinguishes the source of the failure:
| Circumstance | Customer-Liability Position |
| Bank fraud, negligence or deficiency | Zero customer liability |
| Third-party breach, with neither bank nor customer at fault | Zero liability when reported to the bank within 3 working days of its transaction communication |
| Customer negligence, such as sharing payment credentials | Customer bears losses until reporting; bank bears subsequent unauthorised losses |
These conditions do not promise reimbursement for every transfer a scammer persuades someone to authorise. Explain exactly what happened rather than describing all scam payments as unauthorised debits.
RBI’s revised framework starts on January 1, 2027. Do not treat its future compensation provisions as an automatic entitlement for an October 2026 loss.
Report UPI payment fraud through both routes now. Keep your acknowledgements, track the portal complaint and use the bank’s reference for follow-up.
FAQs
What if I cannot get through to 1930?
File the complaint directly at cybercrime.gov.in and notify your bank immediately. Keep trying the helpline if needed; waiting for a connection should not delay those reports.
Does a cybercrime acknowledgement count as an FIR?
The acknowledgement confirms your portal report. State or Union Territory police handle subsequent action, including FIR registration; the acknowledgement alone does not establish that registration occurred.
Can I complain without knowing the scammer’s identity?
Yes. The portal lists suspect information as optional where unavailable. Provide the payment trail and whatever contact details you hold, without guessing names or account information.
Stay Alert: More UPI, Banking and Cyber Fraud Updates You Should Know!
1. Will ₹2,000 UPI Payments Carry Charges?
Check out the facts behind UPI merchant charges and payments above ₹2,000.
2. Can UPI Pay For Overseas Attractions?
Discover how UPI features in bookings for Burj Khalifa and Resorts World Sentosa.
3. Will Paytm Bank Changes Affect UPI?
Find out what Paytm Payments Bank’s regulatory developments mean for UPI users.
4. Why Are Rajasthan Mule Accounts Targeted?
Uncover the crackdown on suspicious bank accounts involving students and workers in Rajasthan.
5. How Do You Report Cyber Fraud?
Explore the 2026 complaint process for reporting UPI scams and online financial fraud.
