Lost money to a UPI scam? Your first-hour checklist
Paid a scammer by UPI? Here is the step-by-step checklist for the first hour: call 1930, file on cybercrime.gov.in, alert your bank and protect your accounts.
You tapped "Pay", the money left your account, and a second later your stomach drops. It was a fake KYC call, a wrong collect request, or a "refund" link. What you do in the next hour matters more than almost anything else. This guide is a calm checklist you can save on your phone before you ever need it.
Why speed matters
When a fraud is reported quickly, banks and police have a better chance of tracing where the money went and putting a hold on it. Official-style advisories and consumer-finance reports describe this early window as the "golden hour". Money that is moved on through several accounts becomes much harder to chase, so every minute counts. Nothing is guaranteed, but reporting fast is the best thing in your control.
Step 1: Call 1930 immediately
India's national cyber crime helpline for financial fraud is 1930, and it is reported to work round the clock. Calls are logged in the Citizen Financial Cyber Fraud Reporting and Management System, which alerts banks and payment intermediaries so they can try to hold the funds.
Keep these ready:
- Your name, phone number and bank
- Amount, date and time of the debit
- The transaction ID (UTR / UPI reference) from your payment app or SMS
- The scammer's UPI ID, phone number or account number
- A two-line description of what happened
If the helpline is busy or won't connect, don't wait. Go straight to the next step.
Step 2: File a complaint on cybercrime.gov.in
The National Cyber Crime Reporting Portal (cybercrime.gov.in) lets you file a complaint online with screenshots. Note down your acknowledgement number. Reports suggest that a helpline report may need to be followed up with a formal complaint or FIR, so keep your reference numbers safe and follow up with your local police station if asked.
Step 3: Tell your bank right away
Call the customer care number printed on your card or on your bank's official app or website (never a number from a search ad or an SMS). Ask them to:
- Flag the transaction as fraud and register a dispute
- Block your UPI ID, card or net banking if the scammer may still have access
- Give you a written complaint reference
Step 4: Cut off further access
- Change your UPI PIN, net banking password and email password
- Remove unknown apps, especially screen-sharing or remote-access apps
- Log out of all sessions where you can
- Warn family if the scammer has their numbers too
Step 5: Document everything
Take screenshots of chats, call logs, the payment confirmation and any links. Do this before you delete anything. Write a short timeline with times. Clear records help your bank and the police.
What not to do
- Don't pay "recovery agents". Anyone who promises to get your money back for a fee is likely a second scam.
- Don't be embarrassed. Educated, careful people get caught every day. Scammers rely on shame to keep victims quiet.
- Don't share your OTP or UPI PIN with anyone, including someone claiming to be from your bank. Entering your PIN is only ever needed to send money, never to receive it.
Practical takeaways
- Save 1930 and cybercrime.gov.in in your phone notes today.
- Set daily UPI limits that match your real spending.
- Turn on SMS and app alerts for every debit.
- Review your transactions weekly so odd debits stand out fast.
- Pause before any request that creates urgency.
This is general information, not financial advice.
How Dhuddu helps
A clean, up-to-date record of your spending makes unusual debits easy to spot, and gives you exact amounts, dates and references if you ever need to report one. Dhuddu can sync your bank alerts from Gmail and import statements, so every debit lands in one place. You can also get the Android app on Google Play.