For a UPI fraud, act in the first minutes: raise the dispute inside the payment app, call your bank and ask it to freeze the UPI ID, and register the fraud on the cyber crime helpline 1930 or the National Cyber Crime Reporting Portal. Recovery then turns on the transaction reference and the virtual payment address (VPA) you give the bank and the police, the complaint before the cyber cell, and the liability rules that apply where the debited amount is proved to be an unauthorised transaction.
When this matters
UPI fraud covers a "collect request" you were tricked into approving, a QR code that debits instead of credits, a fake customer-care number that captured your PIN, a fraudulent mandate, or a payment made to a seller who vanished. In every case the money moved through a UPI ID, and the speed with which the receiving account is frozen decides whether it can be returned. The paper trail you build in the first hours supports both the police complaint and the bank claim.
What to do in the first minutes
- Raise the dispute in the app: open the UPI or bank app, find the transaction, and use the "raise dispute" or "report fraud" option; note the dispute reference.
- Call the bank: tell the bank the transaction was unauthorised and ask it to freeze the beneficiary UPI ID and the linked account, and to block your own mandate if one was misused.
- Call 1930 and file on the portal: the national cyber crime helpline routes the alert into the financial-fraud response chain quickly, which is the fastest way to freeze a beneficiary account.
- Write it down: send the bank a written complaint by email or through the app, stating the amount, the UPI reference, the VPA and the date and time.
The transaction reference and VPA as evidence
- The UPI transaction reference number (also called the UTR) uniquely identifies the payment and is the single most important detail.
- The virtual payment address of the beneficiary (the "name@bank" identifier) and the beneficiary name shown in the app.
- The date, time and amount, and the mandate reference where a mandate was used.
- The app screenshot of the transaction, and the bank SMS or email alert for the debit.
Give these details identically to the bank, the police and the portal. A mismatch in the reference number slows the freeze.
The complaint to the cyber cell and the mandate dispute
File the complaint on the portal or at the cyber cell with the transaction reference and the beneficiary VPA, so the money trail can be traced. Where the fraud used an autopay or UPI mandate, use the app's mandate management and the bank's dispute mechanism to revoke the mandate and seek reversal before the next debit. Once an FIR is registered, the investigating officer can requisition the bank records under Section 94 BNSS 2023 (formerly Section 91 CrPC) and pursue the beneficiary. A UPI and cyber fraud claim is built on these same facts, and a written notice can be issued using the civil litigation formats if the bank refuses the claim.
The bank's liability where the transaction is unauthorised
Where the transaction is proved to be unauthorised, the liability rules that apply to electronic banking transactions apply to UPI as well. The framework the Reserve Bank of India prescribes for a customer's limited liability in unauthorised electronic transactions requires you to report the transaction to the bank without delay and in writing. Where the loss arises from the bank's negligence the liability is zero; where the loss is due to your own negligence, such as sharing the PIN or approving a collect request you were tricked into, the liability is graded. Report promptly, in writing, and keep the acknowledgment, because the level of your liability turns on how quickly you reported. A banking lawyer can press the claim if the bank resists.
The paper trail that supports a chargeback
- The written complaint to the bank with the ticket or dispute number.
- The bank statement showing the debit and the transaction reference.
- The portal or police complaint reference number.
- All chat, SMS and call records showing how you were induced to pay or approve the request.
- Every reply from the bank and the date received, and any rejection of the chargeback.
If the bank rejects the claim, escalate to the bank's grievance redressal officer and then the banking ombudsman, or file a consumer complaint before the district commission; the consumer claim can cover the deficiency in service.
Common mistakes
- Approving a collect request because the caller said it was needed to "receive" money; a collect request debits you.
- Sharing the UPI PIN or an OTP over a call, which supports a finding of negligence.
- Reporting only to the app and not to the bank, so the freeze on the beneficiary account is never requested.
- Using a different transaction reference in each complaint, which delays the trace.
- Waiting days before reporting, which weakens the limited-liability claim.
Common questions
Can UPI fraud money be recovered?
Sometimes. If the beneficiary account is frozen before the funds are withdrawn further, the traced amount can be returned. If the money has already moved through several accounts, recovery is much harder. Speed is the deciding factor.
Will the bank refund a UPI fraud amount?
Where the transaction is proved unauthorised and you reported without delay and in writing, the limited-liability framework applies and your liability is limited or nil. If you shared the PIN or approved the request carelessly, the liability is graded by the delay in reporting.
What is the biggest mistake people make with a collect request?
They approve it believing they are receiving money. A collect request, or a "request money" notification, debits the payer. Never approve a request or enter a PIN in order to receive funds.
Do I need to file both a police complaint and a bank claim?
Yes, ideally both. The police complaint helps trace and freeze the beneficiary account; the bank claim is what returns the money through a chargeback. They run on separate tracks and neither should wait for the other.
FileX Advocates & Legal Consultants, Kolkata, drafts and files these matters before the Calcutta High Court, City Civil and Sessions courts, magistrate, family, consumer and tribunal forums. Call +91 7439811422 or WhatsApp us for a free first consultation.