Cyber Crime Complaints

Key takeaways

• Call 1930 immediately for online financial fraud so the transaction can be flagged.
• File a complaint on cybercrime.gov.in, the National Cyber Crime Reporting Portal.
• Save screenshots, transaction IDs, messages and URLs before you change anything.

Most people encounter cybercrime reporting under stress, having just lost money or access to an account, and make decisions in the first hour that affect everything afterwards.

Table of Contents

1. What Should You Do First?
2. What Evidence Should You Preserve?
3. Where Do You Report Cybercrime in India?
4. What Information Will You Need?
5. What Happens After You Report?
6. Which Offences Count as Cybercrime?
7. What If the Offender Is in Another State or Country?
8. How Can Businesses Prepare for This?
9. What Are the Common Mistakes?
10. How Do You Reduce the Chance of Needing This?
11. How Do You Write a Clear Complaint?

What Should You Do First?

Act on containment before reporting: secure the affected account, contact your bank if money is involved, and preserve evidence before deleting anything. The first hour matters most, particularly for financial fraud where funds may still be recoverable.

Banks generally have defined windows within which unauthorised transactions must be reported for liability protections to apply. Contacting your bank is therefore usually the very first action when money is involved, ahead of any other reporting.

What Evidence Should You Preserve?

Preserve everything before deleting anything: screenshots showing full context, original messages with headers intact, transaction references, URLs, phone numbers, and a written timeline of what happened and when.

• Screenshots - full screen including date, time and address bar
• Original messages - do not delete; headers carry technical detail
• Transaction references - IDs, amounts, timestamps, beneficiary details
• URLs and numbers - exactly as they appeared
• Written timeline - recorded while memory is fresh

The instinct to delete a fraudulent message is understandable and unhelpful. Original messages contain routing information investigators can use, which screenshots do not capture.

Where Do You Report Cybercrime in India?

The national cybercrime reporting portal accepts complaints online, and a dedicated helpline exists for financial fraud where speed matters. Complaints can also be filed at a local police station, and cyber cells operate in many cities.

For financial fraud specifically, reporting within the first hours materially improves the chance of funds being frozen before they are moved onward.

What Information Will You Need?

Expect to provide your identification, a clear description of what happened with dates and times, all preserved evidence, transaction details if money was involved, and any information about how contact was made.

Preparing this before you begin makes the process considerably faster. Reporting forms request specific detail, and gathering it midway through tends to produce incomplete submissions.

What Happens After You Report?

You receive an acknowledgement and reference number, the complaint is routed to the appropriate jurisdiction, and an investigation may follow. Timelines vary considerably, and not every complaint results in recovery or prosecution.

Being realistic about this is important. Cybercrime frequently crosses jurisdictions and involves offenders who are difficult to identify. Reporting remains worthwhile because it enables recovery attempts and contributes to pattern detection, but expectations should be calibrated.

Which Offences Count as Cybercrime?

Common categories include online financial fraud, identity theft, unauthorised account access, online harassment, data theft, ransomware, fraudulent websites, and offences involving the non-consensual sharing of images.

Offences involving harassment or intimate images generally have dedicated reporting routes with additional protections, including options for anonymous reporting. Anyone in that situation should look specifically for those channels rather than the general fraud process.

What If the Offender Is in Another State or Country?

You can still report locally. Police cannot refuse a complaint on jurisdictional grounds, and the national portal routes complaints appropriately. Cross-border cases are harder to pursue but reporting still supports recovery efforts and intelligence.

This matters because many victims assume nothing can be done when the offender is elsewhere. The complaint still has value even where prosecution is unlikely.

How Can Businesses Prepare for This?

Decide in advance who authorises reporting, understand your regulatory notification obligations and their deadlines, maintain contact details for your bank's fraud team, and rehearse the process rather than improvising it during an incident.

1. Name decision-makers - including out of hours
2. Know your obligations - regulatory notification deadlines vary by sector
3. Keep contacts ready - bank fraud team, legal counsel, insurer
4. Preserve before remediating - rebuilding destroys evidence
5. Rehearse it - a tabletop exercise reveals gaps documents hide

Evidence preservation is where incident response and forensics conflict - our digital forensics guide covers that tension.

What Are the Common Mistakes?

The recurring mistakes are deleting evidence, delaying the bank call, paying a fraudster further money hoping to recover the original loss, and engaging with the offender directly rather than through official channels.

The recovery-fee scam deserves specific mention: after an initial fraud, victims are frequently approached by someone claiming they can recover the money for an advance fee. That is a second fraud targeting the same person.

How Do You Reduce the Chance of Needing This?

Enable multi-factor authentication on financial and email accounts, verify payment requests through separately obtained contact details, keep devices updated, and treat urgency in any financial request as a warning sign.

Our guide to protecting personal data covers the practical measures in more detail.

How Do You Write a Clear Complaint?

Write it chronologically and factually: what happened, when, what you did, what was lost, and what evidence you hold. Avoid speculation about who was responsible, because unsupported assertions weaken an otherwise credible account.

Times matter more than people expect. Investigators and banks work from timestamps, and a complaint stating that something happened on a particular evening is considerably less useful than one giving the actual time a transaction was authorised.

Keep a copy of everything you submit, along with your reference number. Follow-up enquiries are much easier when you can quote precisely what was reported and when, rather than reconstructing it later.

Talk to a WebAsha training advisor about batches, syllabus and current fees.

Related reading

• How a Phishing Email Led to the Kidnapping of Laxman Shinde | A Cybersecurity Alert
• Fake SBI REWARDZ App Alert | Rajasthan Police Warns About Cyber Fraud Using APK Malware in 2026
• How Did Cybercriminals Impersonating an IPS Officer Scam ₹78.6 Lakh from an Elderly Couple in Chhatrapati Sambhajinagar?

Reference

For the authoritative details, see CERT-In (India).