How to Report Cyber Crime in India: Portal, Helplines and Recovery Steps

1. What is the Cyber Crime 'Golden Hour'?

The "Golden Hour" refers to the first 2 hours immediately after a financial cyber fraud occurs.

• During this window, the stolen funds are typically being transferred across multiple intermediary bank accounts before being withdrawn at an ATM or converted to cryptocurrency.
• If you report the transaction within this period, banks and payment processors can initiate an automatic transaction freeze under the Citizen Financial Cyber Fraud Reporting System, raising your chances of recovering the money.

2. Reporting via the National Helpline (1930)

The National Cyber Crime Helpline is the quickest way to freeze stolen financial transactions.

• Dial 1930 immediately from your registered mobile number.
• Provide the operator with:

* Your name and contact details.

* Bank Name / UPI App used (e.g., SBI, PhonePe, GPAY).

* Transaction ID / UTR Number.

* Amount lost and exact time of transaction.

• The operator logs the complaint in the National Cyber Crime Reporting Portal (NCCRP) system, which sends an alert to the beneficiary bank to freeze the corresponding funds (if your account was placed under an unintended debit lien or frozen during an investigation as a downstream recipient, see our legal guide on how to unfreeze a bank account frozen by cyber cell).
• You will receive an SMS containing a temporary login ID and a link to complete the portal registration within 24 hours.

3. Filing an Online Complaint on cybercrime.gov.in

If you missed calling 1930 or experienced non-financial cyber crime (such as social media hacking, online harassment, or identity theft), you must file a report on the official website.

• Official Website: cybercrime.gov.in
• Categories of Reporting:

* Report Women/Child Related Crime: For complaints involving online harassment, cyberbullying, or sharing of non-consensual images. Anonymous reporting is available.

* Report Other Cyber Crime: For financial frauds, ransomware, phishing, hacking, and online scams.

Cyber Police Station Jurisdiction:

If you need to file a physical complaint or follow up on a major fraud, you can visit any local Police Station or dedicated Cyber Police Station. Under Indian law, cyber police have extraterritorial jurisdiction, meaning they are legally required to file your complaint (usually as a Zero FIR if the crime occurred in another district) and forward it to the appropriate jurisdiction without delay. A Zero FIR allows any police station to register a complaint regardless of where the crime took place, saving crucial hours.

4. Common Types of Cybercrimes & Incident Evidence

To make your cyber complaint actionable, you must submit specific evidence based on the nature of the crime:

• UPI / Net Banking Fraud: Save transaction SMS alerts, bank account statements showing the debited amount, and the UTR (Unique Transaction Reference) number (if your dispute involves a technical timeout, failed merchant transfer, or wrong credit, read our comprehensive guide on UPI Chargeback Process & NPCI Dispute Redressal).
• Digital Arrest & Extortion Scams: Take screenshots of the WhatsApp calls, incoming phone numbers, fake police ID cards shown, and the bank details where you were forced to transfer funds.
• Part-Time Job / Telegram Task Scams: Save screenshots of the Telegram chats, task instructions, wallet recharge addresses, and bank accounts where you deposited money.
• Identity Theft & Profile Cloning: Collect URLs of the fake cloned social media profiles, screenshots of messages sent by the fraudster requesting money, and phone logs of callers.

5. Relevant Legal Provisions (IT Act & BNS)

Cybercrimes in India are prosecuted under the Information Technology (IT) Act, 2000 and the Bharatiya Nyaya Sanhita (BNS), 2023:

• Identity Theft: Section 66C of the IT Act deals with identity theft (using another person's password, biometrics, or digital signature).
• Cheating by Personation: Section 66D of the IT Act penalizes cheating by personation using computer resources.
• Data Privacy Protection: Section 43A of the IT Act holds corporate bodies liable for compensation if they fail to implement reasonable security practices to protect personal data.

Essential Safety Rules to Prevent Cyber Theft:

• Never Share OTPs or UPI PINs: Bank and police officials never ask for sensitive credentials to process refunds or blocks.
• Avoid Remote Access Apps: Never install screen-sharing software (like AnyDesk, TeamViewer) at the request of caller agents claiming to fix banking errors.
• Verify Website Domain Names: Legitimate banking and government portals always use secure HTTPS and official domain prefixes (.gov.in or .nic.in).
• Do Not Pay Processing Fees for Cyber Recovery: Cyber cells and nodal officers do not charge money to trace or recover stolen balances. Ignore private recovery agents.

Escalating Inactive Cyber Complaints:

If your portal complaint is stagnant for over 15 days without progress, you can file a physical representation with the District Superintendent of Police (SP) or Cyber Cell Nodal Officer. Under Section 156(3) of the CrPC/BNSS, you can also approach the local Judicial Magistrate Court to direct the police to register an FIR and submit status reports.

Official Sources

• National Cyber Crime Reporting Portal: cybercrime.gov.in
• Indian Cyber Crime Coordination Centre (I4C): i4c.mha.gov.in
• Department of Telecommunications (DoT): sancharsaathi.gov.in