UPI Scam? What to Do Within 24 Hours

The digital economy is booming, but so are the risks. If you’ve just realized you are a victim of a UPI scam, the clock is ticking. The first 24 hours are the most critical for recovering your funds and protecting your identity.

1. The Golden Hour: Report to the NPCI & Bank

As soon as you notice an unauthorized transaction, do not wait. Your first move should be technical and administrative.

• Call 1930 Immediately: This is the National Cyber Crime Helpline number in India. Reporting here immediately can lead to the “freezing” of the scammer’s node, preventing them from moving your money further.
• Notify Your Bank: Call your bank’s dedicated 24/7 fraud helpline. Request them to block your UPI ID and linked bank account.
• Report on the App: Whether you use Google Pay, PhonePe, or Paytm, use the “Raise a Dispute” or “Report Fraud” feature within the specific transaction history.

2. File a Formal Complaint (Cyber Cell)

A phone call to 1930 is a great start, but for legal standing, you must file a formal digital complaint.

• Visit cybercrime.gov.in: This is the official portal of the Ministry of Home Affairs.
• Keep Evidence Ready: You will need screenshots of the transaction, the scammer’s UPI ID/Phone number, and any chat logs or SMS alerts you received.
• The “Zero Liability” Rule: According to RBI guidelines, if you report an unauthorized transaction within 3 working days, your liability can be zero. The longer you wait, the harder it becomes to claim a refund.

3. Legal Steps Under the IT Act

Under the Information Technology Act, 2000, and the Consumer Protection Act, you have rights as a digital consumer.

• Visit the Local Police Station: If the amount is significant, file an FIR with the Cyber Cell of your local police. A physical copy of the FIR is often required by banks to process insurance claims for fraud.
• Contact an Adjudicating Officer: Every state has an officer (usually the Secretary of the IT Department) who can hear cases regarding data breaches and digital fraud under Section 46 of the IT Act.

4. Immediate Safety Measures

While dealing with the legal side, secure your digital perimeter:

Revoke Third-Party Access: Go to your Google or Apple account settings and remove any suspicious “Authorized Devices.”ide on what to do immediately.

Change All PINs: Update your UPI PIN, Netbanking password, and even your email password.

Check for Malware: If the scam happened after clicking a suspicious link, your phone might be compromised. Run a security scan or factory reset if necessary.