The question every client asks first is the one that matters least in the first hour: will I get my money back? The honest answer is that it depends on speed, on the bank, and on which of three legal routes fits your facts. This article sets out those routes and what each can realistically deliver.
Why the first three working days matter
The Reserve Bank of India's directions on customer liability in unauthorised electronic banking transactions divide victims into three groups. If the fraud happened because of the bank's own failure, the customer's liability is nil. If it happened because of a third party's breach and the customer reports within three working days, liability is again nil. Report between four and seven working days, and liability is capped at a fixed amount depending on the account type. Report later, and the bank's board policy decides.
Two consequences follow. First, report in writing on day one, even if you have no idea how the fraud was done. Second, the words you use matter: an "unauthorised transaction" is treated differently from a transfer you made yourself under deception. Many UPI frauds fall into the second category, which is why the criminal route and the 1930 hold are usually the main hope of recovery.
Route one: the 1930 hold and the criminal complaint
The 1930 helpline and the National Cyber Crime Reporting Portal exist to freeze the money before it leaves the receiving account. When a hold attaches, the amount is available for release to the victim through the court that supervises the investigation, ordinarily on an application under the Bharatiya Nagarik Suraksha Sanhita, 2023. That application is the point at which an advocate typically becomes involved: the police may need a request, the bank a court order, and the Magistrate a properly documented claim to the amount.
The offences themselves fall under Sections 66C and 66D of the Information Technology Act, 2000, and the cheating provisions of the Bharatiya Nyaya Sanhita, 2023 (Section 318 replaced the old Section 420 of the IPC). Registration of an FIR is not a formality: it is what allows the investigating agency to obtain KYC details from the receiving bank and trace the mule accounts.
Route two: the consumer complaint against the bank
Where the bank has failed in a duty of its own, the District Consumer Disputes Redressal Commission is often the faster forum. Typical failures include ignoring a written report for days, allowing transactions outside the customer's usual pattern without an alert, failing to act on a 1930 hold request, or applying the limited-liability policy wrongly. The complaint seeks the amount lost with interest and compensation for deficiency in service. The limitation period is two years from the cause of action, and the fee is modest.
Route three: civil recovery
Where the recipient is identifiable, for instance a fake investment platform run through a registered company, a civil suit for recovery lies. It is rarely the first choice, because such entities are usually shells, but it becomes relevant where assets have been frozen and a decree is needed to claim them.
What "recovery" usually looks like
In our experience, three outcomes are common. In the best case, the 1930 hold attaches within hours and the amount is released after an application before the Magistrate; this takes weeks, not days. In the middle case, part of the amount is held and part has moved; the held portion is recovered and the rest becomes a question of the investigation. In the worst case, the money has passed through several accounts before any report was made, and the realistic objective becomes an FIR, a bank complaint where the bank was at fault, and closure.
We tell clients at the first meeting which case they are in. It is better to know.
A note on "digital arrest" and courier scams
These frauds are not unauthorised transactions; the victim transfers the money under coercion or deception. The bank's limited-liability framework offers little. Everything depends on the 1930 hold and the criminal investigation. If you are on such a call now: hang up, call 1930, and do not transfer anything. No police force, court or agency in India conducts an arrest by video call or demands payment to avoid one.
Frequently asked questions
Should I accept the bank's offer to close the matter with a goodwill credit? Only after understanding whether your facts place the loss on the bank under the RBI framework. A goodwill credit is often less than the amount the bank would be liable for.
Can the fraudster's account be traced? Yes, through the investigation, once an FIR is registered. Speed and a clear money trail in the complaint are what make it work.
Is a lawyer necessary? Not for the first reports. Usually yes for release of a held amount, a consumer complaint, or an investigation that has stalled.
This article is general information, not legal advice. For your specific matter, contact the firm.
When To Call Sarvā Nyāy
You do not have to work this out alone. A short first conversation tells you what to preserve, where to file and whether you need us at all. No obligation, no pressure.
Response within 24 hours · Advocate-client confidentiality · Lucknow