To file a UPI fraud complaint, call the national cyber crime helpline 1930, then report it on cybercrime.gov.in, and tell your bank and UPI app the same day. These reports work together: the helpline and portal reach the police and banks quickly, and your bank complaint protects your rights under RBI rules.
Time is the biggest factor. Money taken in a scam is usually moved through several accounts within hours. The sooner you report, the better the chance that some of it is frozen before it leaves the system. This guide gives the exact order of steps, a worked example, your liability under RBI rules (including the revised rules from 1 January 2027), the scams to recognise and what evidence to keep. For other UPI problems, see the UPI guides hub.
Quick answer: UPI fraud complaint channels
| Channel | What it does | When |
|---|---|---|
| 1930 helpline | Starts a cyber fraud report so banks can be alerted | Immediately |
| cybercrime.gov.in | Formal online complaint with details and evidence | Same day |
| Your bank | Blocks UPI/account, records your complaint for liability rules | Same day |
| UPI app | Dispute on the specific transaction | Same day |
| Local police station | FIR if needed for larger amounts or court action | As advised |
| RBI Ombudsman | If the bank does not resolve within 30 days | Later |
Step-by-step: filing a UPI fraud complaint
- Call 1930. Give the transaction details: amount, time, UPI reference number and the receiver’s UPI ID or phone number. Note the acknowledgement number.
- Call your bank’s official helpline. Ask them to block UPI or freeze debits if your PIN or phone may be compromised. Note the complaint number and time.
- Report on cybercrime.gov.in. Choose the financial fraud option, fill in the transaction details and upload screenshots. If you got an acknowledgement from 1930, link it if the form allows.
- Raise a dispute in your UPI app on the fraud transaction.
- Secure your account. Change your UPI PIN, uninstall any screen-sharing or remote-access app the fraudster asked you to install, and check linked devices.
- Follow up. Keep all numbers in one place and check status every few days.
Worked example
At 10 AM a caller says your electricity connection will be cut unless you pay a “pending bill” by scanning a QR code. You pay ₹40,000 before you realise it is a scam. A strong response looks like this: 10:05 AM call 1930; 10:15 AM call your bank to block UPI; 10:40 AM file on cybercrime.gov.in with screenshots; 10:50 AM raise a dispute in the app; then change your UPI PIN. Write down each time and number. If the money is still in the receiving account when police and banks are alerted, it can be put on hold.
Your rights after a UPI fraud complaint: RBI rules
RBI’s 2017 directions on customer liability in unauthorised electronic banking transactions apply to debits from your bank account made before 1 January 2027.
- Zero liability if the fraud was due to a bank or system lapse, or a third-party breach that was not your fault and you report within 3 working days.
- Limited liability if you report in 4 to 7 working days: the transaction value or a cap of ₹5,000 (basic savings accounts), ₹10,000 (most other savings accounts) or ₹25,000 (other current accounts and high-limit credit cards), whichever is lower.
- Your own negligence, such as sharing your PIN or OTP, means you carry the loss until you report it.
- The bank should credit the disputed amount (shadow reversal) within 10 working days of your report in eligible cases, and resolve the complaint within 90 days.
Most UPI scams involve the victim entering their own PIN after being tricked. In those cases, banks often treat it as an authorised payment, so recovery depends on the police and on freezing the fraudster’s account. That is why 1930 is the first call.
What changes from 1 January 2027
RBI issued revised directions for commercial banks on 24 June 2026 for electronic banking transactions made on or after 1 January 2027. As reported in legal summaries:
| Point | Before 1 Jan 2027 (2017 rules) | From 1 Jan 2027 (2026 directions) |
|---|---|---|
| Zero liability for third-party breach | Report within 3 working days | Report within 5 calendar days |
| Bank’s resolution time | Within 90 days | Within 45 days (domestic), 60 days (cross-border) |
| Small-value fraud compensation | Not provided | 85% of net loss or ₹25,000, whichever is lower, for gross loss up to ₹50,000, subject to conditions |
The compensation conditions include reporting to the National Cyber Crime Reporting Portal or 1930, and to your bank, within five calendar days. Final details may vary by bank policy; check with your bank once the rules take effect.
Common UPI scams to recognise
| Scam | How it works |
|---|---|
| Fake “receive money” request | You are told to approve a request or enter your PIN to receive money. Entering a PIN always sends money. |
| Fake QR code | You scan a QR to “receive” a payment and end up paying. |
| Fake customer care | A number found online asks you to install a remote app or share OTP. |
| Wrong transfer story | Someone claims they sent money by mistake and asks you to “return” it, often using a fake SMS. |
| Job or task scam | Small payouts at first, then demands for bigger deposits. |
| Bill or KYC threat | A caller threatens to cut power, block your account or SIM unless you pay or “update KYC” right away. |
NPCI ended person-to-person collect requests on UPI from 1 October 2025, which removed one common trick. Scammers now rely more on QR codes, payment links and phone calls, so the rule stays the same: if a screen asks for your PIN, money is leaving your account. Our guide is it safe to share UPI ID explains what scammers can and cannot do with your details.
Evidence to collect
- Screenshot of the transaction with UPI reference number (see UPI transaction ID)
- Bank SMS of the debit, which shows when you were alerted
- Caller’s phone number, chat screenshots, links or QR images
- Name shown for the receiver in your app
- 1930 acknowledgement, portal complaint number and bank complaint number
Common mistakes after a fraud
- Calling a “recovery agent”. People who promise to recover scam money for a fee are often the second scam.
- Only raising an app dispute. The app alone cannot freeze the fraudster’s account; 1930 and the portal can start that.
- Waiting until the next day. 1930 and bank helplines can be called immediately.
- Keeping the remote-access app installed. Uninstall it before you do anything else on the phone.
What to do if…
- …you only got a suspicious call or SMS and lost no money: report it on the Chakshu facility of the Sanchar Saathi portal.
- …the bank rejects your claim: ask for the reason in writing, and go to the RBI Ombudsman at cms.rbi.org.in after 30 days or on rejection. Under the 2026 scheme you must file within 90 days.
- …you see more debits after reporting: call the bank again to block all channels, not only UPI.
- …money went to a wrong person by your own mistake, not fraud: see how to reverse a UPI transaction.
Safety tips
- You never enter a UPI PIN to receive money.
- Use only the help section inside your app, not numbers from search results.
- Do not share OTPs or screen access with anyone.
- Check the receiver name before you pay.
- Keep a lower daily UPI limit if your app allows it; see maximum limit of UPI.
FAQs on UPI fraud complaint
What is the UPI fraud complaint number?
Call 1930, the national cyber crime helpline. Also call your bank’s official customer care number.
Will I get my money back after a UPI fraud complaint?
Not always. Recovery is more likely when you report within hours and the money is still in the receiving account.
Do I need an FIR?
Not for the first report. Police may ask you to file one for further action or larger amounts.
Can I complain to RBI about UPI fraud?
Complain to your bank first. If it does not resolve it within 30 days, file with the RBI Ombudsman at cms.rbi.org.in within the 90-day window.
Is the new ₹25,000 compensation available now?
It is part of RBI’s revised directions for transactions made on or after 1 January 2027, subject to conditions. Frauds before that date follow the 2017 rules.
Can I report UPI fraud on behalf of a parent?
You can call 1930 and help them file online, but the bank complaint usually needs the account holder. Check with the bank.
Conclusion
For a UPI fraud complaint, the order is simple: 1930, bank, cybercrime.gov.in, app. Do all four on the same day and keep every number. For other problems see how to report a UPI transaction and the UPI guides hub.
Sources: National Cyber Crime Reporting Portal; RBI customer liability circular (2017); FoxMandal on RBI’s June 2026 revised directions; TaxGuru on the 2026 directions; The Week on end of P2P collect; NPCI dispute redressal; RBI CMS.
This guide is for general information only. Limits and features can change; check your bank or UPI app for the latest details. FIIAndDIIData.com is not affiliated with NPCI or any UPI app.
