The message arrives and your stomach drops.
Money has gone.
You know at once you should not have tapped that.
The next hour matters more than anything else.
Shame is the thing most likely to waste it.
So here is the order to work in.
What do I do in the first ten minutes?
Stop anything more from leaving.
Open your bank app and block the card.
If the app will not open, use phone banking.
Call the bank on the number from your card.
Ask them to freeze the account and disable UPI.
Change your net banking password if you shared an OTP.
Do that from a different device.
Delete any app the caller asked you to install.
Only then sit down.
Who do I report it to?
Three places, in this order.
Your bank first, on their official number.
They are the only ones who can chase the transaction itself.
Then call 1930, the national cyber fraud helpline.
It exists to get the receiving account flagged quickly.
Then file the complaint at cybercrime.gov.in.
That gives you a written record and an acknowledgement number.
Speed genuinely matters here.
Money moves onward within hours.
The sooner that account is flagged, the more can be held.
Ask your bank for a complaint reference number and keep it.
What should I write down?
Open a notes app and record everything while it is fresh.
The exact date and time of the debit.
The amount.
The reference number on the transaction, sometimes labelled UTR or RRN.
The name and UPI ID it went to.
The number that called you, and any link you were sent.
Screenshot the messages and the transaction before anything is deleted.
Every one of these will be asked for.
Remembering them later is much harder than you expect.
Will I get the money back?
Sometimes, and it depends heavily on how fast you reported.
Rules limit what you must bear when you report promptly.
So a same-day report is not a formality.
Your bank will investigate and come back to you.
That can take weeks rather than days.
Keep following up in writing, and keep every reference number.
One last warning, because this catches people at their lowest.
Nobody who calls offering to recover your lost money is genuine.
No real agency charges a fee to return your funds.
Things to Remember
- Block the card and disable UPI before anything else.
- Call your bank, then 1930, then file at cybercrime.gov.in.
- Screenshot everything and note the transaction reference.
- Report the same day, because the rules reward speed.
- Ignore anyone who offers to recover your money for a fee.