Money & banking › UPI or online fraud
SIM swapped and money taken from my bank
What usually matters in this situation, and the papers to keep ready before you meet an advocate or free legal aid (call 15100).
Your situation
- Which best describes what happened? Money left without me doing anything
Where you stand
- Next step Report to your bank AND to 1930 / cybercrime.gov.in — from 2027, compensation depends on both reports within 5 calendar days.
Do these now
- Report at 1930 / cybercrime.gov.in and keep the acknowledgement number
An official report can lead to the receiving account being put on hold. Where: Call 1930 or file at cybercrime.gov.in.
Papers to gather
- Transaction records for every payment (date, time, amount, UTR/reference)
The 12-digit UTR or reference is the key to tracing each payment. Where: UPI app history, bank statement, card statement. - Bank SMS and email alerts for those payments
Alert times help show when you first knew. Where: Your phone and email. - Your written complaint to the bank and its reference number
For money taken without your action, the time you informed the bank can affect whether you bear any loss. Where: Bank app, email, branch. - The complete conversation with the scammer (chat, call log, emails, links)
Shows what was promised or claimed, and who was involved. Where: WhatsApp, Telegram, SMS, email, call log.
You may also need, depending on your answers
- 1930 / cybercrime.gov.in acknowledgement number — Your advocate and the police will use it to track the complaint.
- Anything left about the scammer (numbers, names, website, payment request) — Even partial details help.
- Receiving UPI ID, account number or phone number — Lets the police and banks act on the receiving account.
- Police complaint or FIR copy — Often needed for bank claims and recovery.
- The bank's reply (refund, rejection or none) — Needed to escalate to the RBI complaint system.
What the law says
Until 31 Dec 2026: for an unauthorised transaction caused by a third-party breach, you bear nothing if you tell your bank within 3 working days. For transactions from 1 Jan 2027 (RBI directions of 24 June 2026): the window is 5 calendar days, the rules also cover payments you were tricked or pressured into making, banks must decide within 45 days, and small frauds (loss up to ₹50,000) can get a one-time compensation of 85% of the net loss or ₹25,000, whichever is lower — only if you report to BOTH your bank and 1930 / cybercrime.gov.in within 5 calendar days.
General information, not legal advice.
Saboot will also ask
- When did the money leave your account?
- Where have you reported it so far?
- How did the money go?
Similar situations
- Money gone after I accepted a UPI collect request
- Scammer told me to scan a QR code to “receive” money
- I shared an OTP and money was taken
- Money taken after I installed a screen-sharing app
- Fake customer care number took my money
- Money taken from my account by fraud — I did nothing
- Card cloned and used at an ATM or shop
- Fraud through a fake electricity-bill disconnection message
Sources
- RBI press release, 24 Jun 2026: Amendment Directions on limiting customer liability in digital transactions (effective 1 Jan 2027)
- National Cyber Crime Reporting Portal (MHA)
- RBI complaint portal (Integrated Ombudsman Scheme)
The full guide: I was cheated online or money left my account without permission · All situations