Know your rights

Know your rights during cyber fraud.

Plain-language guidance on what you can refuse, what you can ask for, and where to escalate after online fraud in India.

General information only. Not legal advice. Not a government website. No refund or recovery guarantee.

  • Not legal advice
  • Not government affiliated
  • No OTP or password asked
  • No refund guarantee

If money, account access, or private images are at risk, act first.

Money

Money moved from bank/UPI/card

Call 1930, inform your bank or payment app, then report on cybercrime.gov.in.

Account

Account hacked or password shared

Recover the email or phone first, change passwords, log out other sessions, and enable 2FA.

Threat

Threat, blackmail, or private image misuse

Do not pay. Save evidence. Report the profile/platform abuse and file a cybercrime complaint.

Rights to know

The rights you should know.

01

You have the right to report cybercrime

You can report online financial fraud, account hacking, fake profiles, threats, and other cybercrime through official reporting channels.

02

You have the right to refuse OTP, PIN, password, and screen access

No genuine bank, police, court, or government process should need your OTP, UPI PIN, CVV, password, WhatsApp code, or remote screen access.

03

You have the right to notify your bank immediately

For unauthorised electronic banking transactions, RBI rules use reporting timelines to decide customer liability in covered cases. Report fast and keep the complaint number.

04

You have the right to complaint numbers and written records

Ask for a reference number, ticket ID, acknowledgement, diary number, or email trail whenever you report to a bank, app, platform, police station, or cyber cell.

05

You have the right to protect your personal data

In relevant situations, personal data rights may include access, correction, updating, erasure, grievance redressal, and consent withdrawal under Indian data-protection law.

06

You have the right to report impersonation and image misuse

Fake profiles, impersonation, blackmail, and private image misuse should be reported to the platform and through official cybercrime channels.

07

You have the right to lock Aadhaar or biometrics

If Aadhaar/KYC misuse is suspected, use official UIDAI services to check and protect Aadhaar-related access where applicable.

08

You may have access to free legal aid

NALSA/DLSA legal aid routes may help eligible people, including women, children, and other eligible categories.

Evidence

Save proof before deleting anything.

  • Transaction ID, UTR, bank SMS, and payment screenshots
  • Phone number, WhatsApp number, Telegram handle, email, or caller ID
  • UPI ID, QR code, bank account number, or website URL
  • Screenshots of chats, threats, fake profiles, payment pages, or app screens
  • App name, APK link, remote-access tool name, or suspicious website
  • Cybercrime complaint acknowledgement
  • Bank or payment-app complaint number
  • Platform report number

Do not upload evidence to this website. Keep it safely with you for official reporting.

Escalation ladder

If one channel does not help, escalate in writing.

1

Bank or payment app

Block card/account/UPI if needed. Ask for complaint number.

2

1930 and cybercrime.gov.in

Use official reporting channels for financial cyber fraud and cybercrime complaints.

3

Platform report

For fake profile, impersonation, threats, private image misuse, or hacked social accounts.

4

Cyber cell or local police

Carry your complaint acknowledgement and evidence summary.

5

Bank grievance or nodal officer

Escalate in writing if the branch or support team does not respond properly.

6

RBI CMS / Ombudsman route

For eligible unresolved bank complaints, use official RBI grievance channels.

7

NALSA / DLSA / lawyer

Use legal aid or a qualified advocate when serious threats, police inaction, or complex legal issues are involved.

Never share

Never share these during a fraud complaint.

  • OTP
  • UPI PIN
  • CVV
  • Card PIN
  • Netbanking password
  • Screen-sharing access
  • Remote-control app access
  • Aadhaar OTP
  • Email password
  • WhatsApp verification code

Scam Rescue India will never ask for these.

FAQ

Common rights questions.

Is this legal advice?

No. This is general safety information for cyber-fraud victims in India. For legal advice, consult a qualified advocate or legal aid authority.

Will I definitely get my money back?

No one can promise refund or recovery. Fast reporting can improve your chance of limiting damage, but the outcome depends on facts and official action.

What if I shared OTP or UPI PIN?

Report anyway. Tell your bank or payment app immediately and file through official cybercrime channels. Do not hide the detail.

Should I delete chats, photos, or call logs?

No. Save evidence first. Screenshots, transaction IDs, phone numbers, URLs, and complaint numbers can help official reporting.

Can I report online first?

Many cybercrime complaints can be started through the National Cyber Crime Reporting Portal. Financial fraud victims should also call 1930 quickly.

What if the bank does not help?

Escalate in writing through the bank's grievance channel. For eligible unresolved complaints, use official RBI complaint channels.

Is Scam Rescue India official?

No. Scam Rescue India is independent and is not affiliated with any government agency, bank, police department, or court.

Scam Rescue India is an independent public-help resource. It is not a government body, bank, police authority, or law firm. This page is general information, not legal advice. We make no promise of refund, recovery, arrest, account freeze, or any specific police, bank, platform, or court action. We never ask for OTP, UPI PIN, CVV, passwords, bank login, screen access, or money.