UPI fraud: the first 3 calls you must make in 10 minutes
Panchaayat Consumer Desk · Published 23 September 2026 · 6 min read
The exact order of calls to make the moment you realise a UPI transaction was fraudulent, what each one actually does, and why the first 10 minutes matter more than anything you do afterward.
UPI fraud moves fast because the money moves fast — most fraudulent transfers are pulled onward to another account or converted within minutes of landing. Your response needs to move at the same speed. The order below is deliberate: each call narrows the window the fraudster has to move the money again.
Call 1: 1930 — the national cybercrime helpline
This is the single most important call, and it should be your first one, not your last. 1930 is the Indian Cyber Crime Coordination Centre’s dedicated helpline for reporting financial fraud, and it can trigger a freeze request that reaches the fraudster’s receiving bank before the money moves further. Have ready: your UPI transaction ID, the amount, the time, and the payee’s UPI ID or phone number if you have it.
Call 2: your bank or UPI app’s fraud helpline
Call your bank’s dedicated card/UPI fraud number (not general customer care — ask specifically to be routed to the fraud or dispute team) and request an immediate block if your UPI PIN or app itself may be compromised, plus a formal dispute on the specific transaction. Get a complaint reference number before you hang up.
Call 3: your mobile carrier, if a SIM swap is possible
If the fraud followed a lost phone, a SIM-swap attempt, or you suddenly lost signal with no explanation, call your carrier to check for and block any unauthorised SIM reissue — a compromised SIM can be used to intercept the OTPs that would otherwise have stopped the transaction.
While you’re making the calls, also do this
- Screenshot the transaction in your UPI app immediately — app history can be harder to screenshot cleanly once a dispute is marked
- Note the exact time you noticed the fraud, separately from the transaction time — both matter for the complaint
- File a formal complaint at cybercrime.gov.in within 24 hours — 1930 triggers urgent action but the online complaint is the formal record
- Do not reply to any follow-up call or message claiming to be "bank verification" — that is very often the second stage of the same fraud
NPCI’s dispute redressal mechanism exists for exactly this — Beyond your bank’s own process, NPCI runs a dispute redressal mechanism for UPI transactions. Your bank can escalate through it if the receiving bank is unresponsive — ask your bank’s fraud desk to confirm this has been triggered, not just logged.
What happens after the first hour
Expect your bank to open a formal fraud investigation, which can take 7–30 days depending on complexity and whether the receiving bank cooperates. If you reported promptly and the transaction is confirmed fraudulent, RBI’s limited-liability framework for electronic transactions significantly caps your exposure — which is exactly why speed in the first ten minutes changes the outcome, not just the inconvenience.
Real-world pattern
A public record helps once the formal process stalls
If your bank’s investigation drags past the committed timeline with no update, a public Panchaayat case citing your 1930 and cybercrime.gov.in reference numbers gives the bank’s nodal officer a visible, dated prompt — and gives you a record of exactly when you escalated if you need the RBI Ombudsman next.
Bank investigation gone quiet?
Put it on the public recordPut your complaint on the public record
Free, takes about a minute, and the company can reply in the open.
Raise a complaintFrequently asked questions
What is 1930 and should I call it first?
Yes — 1930 is the national cybercrime helpline for financial fraud, and calling it first (before even your bank) is the fastest way to trigger a freeze request on the fraudster’s receiving account.
How much of my money will I get back?
It depends on how quickly you reported and whether the funds were moved onward before the freeze request landed. RBI's limited-liability rules for electronic transactions significantly reduce your exposure if reported promptly, but recovery isn't guaranteed in every case.
Do I still need to file a formal complaint if I called 1930?
Yes — file the formal complaint at cybercrime.gov.in within 24 hours. The call triggers urgent action; the online complaint is the record that supports your bank dispute and any later escalation.
More from the blog
Why Your Telecom Complaint Keeps Getting "Auto-Closed"
A complaint that gets "resolved" overnight with no call, no fix, and no explanation isn’t a coincidence — it’s how most telecom ticketing systems are configured to behave by default.
Flight Cancelled? Here's Exactly What DGCA Entitles You To
Airlines rarely volunteer what you're owed under DGCA rules — they offer a voucher instead. Here's the exact entitlement, by notice period and delay length, so you know what to actually ask for.
Insurance Claim Rejected? Here's the Appeal Letter That Works
A rejected claim is rarely the end of the road — it's usually a form letter citing one policy clause, and most appeals fail because they argue emotion instead of that exact clause.
Panchaayat Consumer Desk publishes general information to help consumers and companies understand their options — it is not legal advice. For a specific dispute, the escalation routes named above (National Consumer Helpline, sector regulators, Consumer Commissions) are the authoritative next step.