Cyber fraud: what to do in the first 1 hour

Quick actions that increase your chances of freezing funds and preserving evidence.

Cyber Safety← Back to guides

Step-by-step checklist

  1. Call the cyber helpline (1930) immediately and report the incident.
  2. Contact your bank/payment app to block/freeze transactions and change PIN/passwords.
  3. Preserve evidence: screenshots, transaction IDs, chats, URLs, phone numbers.
  4. File an online complaint through the official cyber reporting channel (keep acknowledgement).
  5. Notify your contacts if your account was compromised to prevent further harm.

Documents needed

  • Transaction reference IDs
  • Screenshots of chats/links
  • Bank statements (if available)
  • Device details (phone model, SIM used)

Typical timeline

  • 0–1 hour: helpline + bank freeze + preserve evidence
  • Same day: file online complaint + local station diary entry (if needed)
  • Next 7 days: follow up with bank and police with acknowledgements

FAQs

Should I delete scam messages?
No. Keep them as evidence. Take screenshots and keep backups.
What if I shared my OTP?
Change passwords/PINs immediately and inform the bank. OTP sharing is common in impersonation scams.

Related helplines

National Emergency
24x7
Call 112
Cyber Crime Helpline
24x7 • Report financial cyber fraud immediately.
Call 1930
NALSA / Legal Aid
Legal aid / advice referrals (availability varies by state).
Call 15100

Relevant legal provisions

Sections 66C / 66D — Identity theft & cheating by personation
Information Technology Act, 2000
Section 43 — Unauthorized access/damage to computer resources
Information Technology Act, 2000