All explainers
Analysis

Why the first hour decides whether your money comes back

Recovery in cyber fraud is almost entirely a question of speed. Here is what actually happens to the money after it leaves your account, and why the window is measured in hours.

By Editorial team 14 September 2026 7 min read
If it just happened

National cyber crime helpline

1930 How to report a fraud
On this page

The money does not sit still

The account your money lands in is rarely the fraudster's. It is a mule account, often opened with a real person's documents, sometimes belonging to someone who was paid a few thousand rupees for access. Within minutes the amount is split and pushed onward through three or four more accounts.

By the time a complaint reaches the beneficiary bank a day later, the trail has usually branched past the point where a single lien is useful. This is the whole reason the helpline exists as a phone number rather than a form.

What 1930 actually does

A call to 1930 creates a ticket on the Citizen Financial Cyber Fraud Reporting and Management System, which pushes an alert to both the sending and receiving bank. Where the money has not yet moved out, the receiving bank can place a hold on it.

This is not a refund. It is a freeze. Getting the money back afterwards still runs through your bank's dispute process and, in contested cases, through the courts. But nothing can be returned that was not first stopped.

The three things to have ready

Your own account number and the transaction reference, the beneficiary UPI ID or account number if you can see it, and the exact time of the debit. Nothing else is needed for the first call.

People lose time hunting for screenshots before calling. Call first with what you already know, then gather evidence for the written complaint.

After the call

File on cybercrime.gov.in the same day and keep the acknowledgement number. Give that number to your bank in writing, not over the phone, and ask for a written dispute reference in return.

Then follow up weekly. Complaints that move are the ones where the complainant keeps a dated record of every call and escalates to the bank's nodal officer when the branch goes quiet.

Real accounts from readers

Read next

Comment rules
  • Do not share bank details, OTPs, card numbers, Aadhaar or complaint numbers.
  • Do not name or accuse individuals. Make official reports at cybercrime.gov.in.
  • Comments are reviewed before publication. Never pay anyone who offers to recover your money.

Add a comment

This name is public. Do not enter your email or phone number.

Plain text

Quick check