How to File a Cybercrime Complaint in India

If money has just disappeared from your bank account, UPI wallet or card because of a cyber fraud, do not spend the next hour searching for the right police station.

Call 1930 immediately, inform your bank through its official fraud-reporting channel and file the incident on India’s National Cyber Crime Reporting Portal.

For other cyber offences, including hacking, identity theft, social-media abuse, ransomware, cryptocurrency-related crime and online harassment, complaints can be filed through [cybercrime.gov.in] https://cybercrime.gov.in/

The portal, commonly called NCRP, is part of the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs.

It accepts reports concerning all types of cybercrime, with particular focus on crimes against women and children. Complaints are ultimately handled by the relevant State or Union Territory law-enforcement agency.

For financial fraud, speed can have a direct practical consequence. The government’s Citizen Financial Cyber Fraud Reporting and Management System, or CFCFRMS, connects law-enforcement agencies with banks and other financial intermediaries to help prevent fraud proceeds from being moved further.

By June 30, 2026, the system had helped save more than ₹11,158 crore across more than 32.80 lakh complaints, according to the Ministry of Home Affairs.

First: Is This Something You Can Report on Cybercrime.gov.in?

The portal is not limited to UPI scams.

Its official FAQ says the system covers online financial fraud, mobile-related crime, social-media and online crime, ransomware, hacking, cryptocurrency-related crime and online cyber trafficking, alongside offences involving women and children.

In practical terms, use NCRP if you have faced incidents such as phishing or payment fraud, an account takeover, identity theft, impersonation, hacking, online blackmail, cyberstalking, malicious social-media activity or similar cyber-enabled crime.

There is also an important distinction between being a victim and merely spotting something suspicious. I4C now provides a separate “Report Suspect” facility for suspicious website URLs, WhatsApp numbers, Telegram handles, phone numbers, email IDs, SMS headers and social-media URLs.

If you have actually suffered a cybercrime, I4C directs you instead to the main complaint system or, where relevant, 1930.

Lost Money? Call 1930 Before Doing Anything Else

For cyber financial fraud, the National Cyber Crime Reporting Portal itself tells victims to call 1930 for immediate reporting. The helpline operates 24×7.

Do not treat 1930 as a guaranteed refund mechanism. Its purpose is rapid reporting and coordination. Whether money can actually be stopped or restored depends on circumstances including where the funds have moved and what action banks and law enforcement can take.

The urgency is supported by the scale of the system. Government data for 2021-2025 recorded more than 65.89 lakh financial-fraud complaints on NCRP involving more than ₹55,050 crore. More than ₹8,189 crore was marked as lien and more than 1.95 lakh FIRs were registered in relation to those complaints.

Alongside 1930, contact your bank, card issuer, wallet or payment service through an official channel.

RBI rules require banks to provide customers with 24×7 channels for reporting unauthorised electronic transactions and to take immediate steps to prevent further unauthorised transactions after receiving a report. The RBI framework also links customer liability in certain third-party breaches to how quickly the unauthorised transaction is reported.

That is another reason not to wait.

For a detailed explanation of how the 1930 cybercrime helpline works, when to call and what happens after reporting a financial fraud, read https://the420.in/cybercrime-helpline-1930-report-fraud-money-recovery-india/

What Should You Keep Ready Before Filing?

A good cybercrime complaint is not simply “I was scammed.” Investigators need identifiers that allow them to reconstruct what happened.

The NCRP officially lists evidence such as bank statements, credit-card receipts, online money-transfer receipts, emails, webpage URLs, chat transcripts, screenshots of suspect mobile numbers, videos, images and other relevant documents.

Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise

For a financial fraud, keep the amount, transaction date and time, transaction ID or UTR where available, originating bank or wallet details, suspect account or UPI details, phone numbers and the communication through which the fraud began.

Preserve original messages and files wherever possible. Do not delete a scammer’s chat simply because you have blocked the account.

If the incident involved a website, save its exact URL. If it happened through WhatsApp, Telegram, Instagram, email or another service, preserve the account identifiers and relevant conversation.

NCRP also explains that uploaded digital evidence can be associated with a hash value, essentially a digital fingerprint used to support the integrity of the file.

How to Report Cybercrime Online in India: Step by Step

Step 1: Go Only to the Official Portal

Open [National Cyber Crime Reporting Portal] https://cybercrime.gov.in/

Check the domain carefully. A cybercrime complaint should not begin by giving sensitive information to a website reached through a random advertisement, WhatsApp link or unsolicited message.

The current NCRP homepage separates complaints into three prominent routes: Women/Children Related Crime, Financial Fraud and Other Cyber Crime.

Step 2: Choose the Correct Reporting Route

For most non-financial incidents, choose Other Cyber Crime.

For financial fraud, use the financial-fraud reporting route and call 1930 immediately.

For qualifying crimes involving women or children, the portal provides dedicated reporting options. Certain sexually explicit content-related complaints can also be reported anonymously.

Anonymous reporting is not a blanket anonymous-complaint facility for every cybercrime.

Step 3: Register With Your Mobile Number

For “Report Other Cybercrimes”, NCRP requires registration using your name and a valid Indian mobile number.

An OTP is sent to the number. The portal’s official FAQ states that this OTP remains valid for 30 minutes. Once registration is completed, you can select the appropriate crime category and sub-category and proceed with the complaint.

Step 4: Enter the Incident Accurately

Provide the date, approximate time, platform or channel involved, what happened, identifiers associated with the suspect and the sequence of events.

For financial fraud, transaction details are particularly valuable. For account compromise, provide the affected service and relevant identifiers. For abusive or threatening content, preserve URLs, usernames, timestamps and copies of the communication.

Do not exaggerate or fill gaps with guesses. The portal explicitly says accurate and complete information helps police take appropriate action.

Step 5: Upload Your Evidence

Attach the strongest available material supporting the complaint.

That could include screenshots, bank records, payment receipts, emails, URLs, chat transcripts, photographs or video. NCRP recommends supplying as much relevant information as possible so that authorities can act on the complaint.

Keep your own copy of everything submitted.

Step 6: Review Before Submitting

Check phone numbers, bank-account details, UPI IDs, dates, transaction IDs, URLs and amounts carefully.

One wrong digit can point investigators towards the wrong account or transaction.

Then submit the complaint.

Step 7: Save Your Acknowledgement Number

For complaints submitted through “Report and Track” or “Report Other Cybercrime”, the portal says the complainant receives confirmation and a complaint reference number through SMS and email.

Save that number somewhere outside the device involved in the incident.

It is your key reference for following the complaint.

How Do You Track a Cybercrime Complaint?

Return to NCRP and select Track your Complaint.

The current status page asks for the acknowledgement number and authentication details including OTP and CAPTCHA.

The acknowledgement number allows you to follow the complaint’s progress, but an acknowledgement is not the same thing as an FIR number.

That distinction matters.

The Ministry of Home Affairs says cybercrime incidents submitted through NCRP, their conversion into FIRs and subsequent investigation, arrests, chargesheets and resolution are handled by the concerned State or UT law-enforcement agencies under applicable law.

In other words, submitting an NCRP complaint does not by itself mean an FIR has automatically been registered.

If the response to a complaint filed through “Report & Track” is not appropriate, NCRP publishes contact details for State and UT nodal cyber officers and grievance officers.

Can You Report Cybercrime Anonymously?

Yes, but only in specified circumstances.

NCRP provides anonymous reporting for certain women/child-related complaints involving online rape or gang-rape content or specified sexually explicit content. Personal information is not required under that route, but incident information still needs to be accurate and sufficiently complete for police action.

For normal “Other Cyber Crime” reporting, registration with a valid Indian mobile number is required.

If follow-up by investigators is likely to be necessary, the portal itself encourages use of the trackable reporting route.

Which State Should You Select?

This can be confusing when the scammer is in another state or even another country.

For anonymous women/child-related complaints, NCRP directs users to select the victim’s location or the State/UT where the incident occurred, subject to the specific exception described for certain hosted content.

You do not need to establish where the cybercriminal is physically sitting before you report the offence.

The portal also confirms that an Indian citizen can submit a complaint even where the alleged offender is a foreign individual or company.

What Law Applies to a Cybercrime Complaint in 2026?

One problem with older cybercrime guides is their continuing reliance on the Indian Penal Code as though it remains India’s operative general penal statute.

The Bharatiya Nyaya Sanhita, 2023 (BNS) came into force on July 1, 2024.

Depending on the facts, cybercrime investigations can involve both the BNS and the Information Technology Act, 2000.

For example, the IT Act contains Section 66C on identity theft and Section 66D on cheating by personation using a computer resource or communication device. Sections 67, 67A and 67B deal with specified categories of obscene or sexually explicit electronic material and material involving children.

Under the BNS, Section 318 deals with cheating and Section 319 with cheating by personation. BNS Section 78 covers stalking, including specified monitoring of a woman’s internet, email or other electronic communications.

You do not need to identify the perfect statutory section before using NCRP. Report the facts accurately. The applicable offences are a matter for investigators based on the evidence.

The Digital Personal Data Protection Act/Rules framework is also not a replacement for NCRP when someone has committed a cybercrime against you. Data-protection complaints and criminal cybercrime reporting are distinct regulatory processes.

Similarly, the 2026 amendments to the IT Rules deal substantially with intermediary obligations, including rules concerning synthetically generated information; they do not replace NCRP as the citizen cybercrime-reporting channel.

What Happens After You Submit the Complaint?

The complaint moves to the relevant State or UT law-enforcement machinery.

What happens next depends on the facts. Authorities may seek additional evidence, examine digital identifiers, trace accounts or transactions, coordinate with banks or intermediaries, or take other investigative action.

Financial-fraud complaints have an additional mechanism. CFCFRMS was launched in 2021 specifically for immediate reporting and to help prevent fraudsters from siphoning away funds. A January 2026 government SOP introduced a standardised framework covering complaint processing, bank coordination, grievance redressal, removal of lien markings and restoration of defrauded funds to rightful claimants.

But filing a complaint does not guarantee recovery.

The government’s ₹11,158 crore figure represents money saved through the system across more than 32.80 lakh complaints up to June 30, 2026. It should not be read as a promise that every victim will receive their money back.

What Should You Do Immediately After Reporting?

For financial fraud, continue dealing with your bank through its official fraud-reporting and grievance channels. Record complaint numbers and timestamps.

RBI’s framework makes prompt notification significant in unauthorised electronic transactions.

In specified third-party breach cases where neither the customer nor bank is responsible, notification within three working days can result in zero customer liability under the RBI framework. Different rules apply where customer negligence is involved, including cases involving shared payment credentials.

Change compromised passwords from a clean device. Secure the affected email account first if it can be used to reset other accounts. Block compromised cards or payment instruments through official channels.

Do not send additional money because a scammer promises to “release”, “verify” or “refund” the original payment.

This is especially relevant in impersonation and so-called digital-arrest frauds. There is no legitimate legal procedure under which police or central agencies place somebody under a “digital arrest” over WhatsApp or video call and demand money.

To understand how digital-arrest scams work, the warning signs to watch for and what victims should do, read https://the420.in/digital-arrest-scam-india-law/

Common Mistakes That Can Weaken a Cybercrime Complaint

The first is waiting because the amount appears small. A ₹500 fraudulent transaction may still contain identifiers relevant to a larger network.

The second is deleting evidence after blocking the fraudster.

The third is communicating further with the criminal in an attempt to conduct your own investigation.

The fourth is assuming that an NCRP acknowledgement automatically means an FIR has been registered. It does not.

The fifth is reporting only to a social-media platform when an actual crime has occurred. Platform reporting can help deal with an account or content, but it does not replace reporting the alleged crime to NCRP or police.

Finally, do not assume every account receiving fraudulent money belongs to the mastermind. Cybercrime networks frequently use intermediary or “mule” accounts to receive and route proceeds.

FAQ: Reporting Cybercrime Online in India

1. What is the official website for reporting cybercrime in India?

The Government of India’s National Cyber Crime Reporting Portal is  https://cybercrime.gov.in/

It accepts complaints involving multiple categories of cybercrime.

2. What is India’s cybercrime helpline number?

1930 is the national cybercrime helpline used particularly for immediate reporting of cyber financial fraud and assistance with lodging online cyber complaints.

3. Can I report cybercrime without going to a police station?

Yes. NCRP allows online reporting. However, complaints are ultimately handled by the relevant State/UT law-enforcement agency, and circumstances may require further interaction with police.

4. Does an NCRP complaint automatically become an FIR?

No. MHA distinguishes between incidents reported on NCRP and their subsequent conversion into FIRs by State/UT law-enforcement agencies.

5. Can I track my cybercrime complaint?

Yes, complaints filed through the trackable routes receive an acknowledgement number that can be used through NCRP’s complaint-status facility.

6. Can I withdraw an online cybercrime complaint?

According to NCRP’s FAQ, a complaint under the women/child-related crime section cannot be withdrawn. A complaint under the general cybercrime section may be withdrawn before it is converted into an FIR.

7. Can I report a foreign scammer?

Yes. NCRP says an Indian citizen who has been victimised online by a foreign national or company may file a complaint through the portal.

8. I just lost money. What should I do first?

Call 1930 immediately, notify your bank or payment provider through its official channel, preserve the transaction evidence and file the complaint through NCRP. Do not wait to collect every possible document before making the initial financial-fraud report.

The420 Insight

A cybercrime complaint becomes more useful when it is fast, specific and evidence-backed. If money is involved, treat 1930 and your bank’s fraud channel as immediate-response tools, not steps for tomorrow. For other offences, preserve the digital trail before accounts, messages, webpages or transaction details disappear.

Most importantly, save your NCRP acknowledgement number and follow the complaint. If a “Report & Track” complaint receives an inadequate response, NCRP itself provides State and UT nodal and grievance-officer contacts for escalation.

About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.