What to Do If You're Scammed Online: Your Legal Rights and Next Steps

A student pays ₹5 lakh to a Telegram channel promising NEET exam papers. A retired teacher transfers ₹2 lakh to someone offering guaranteed stock returns. A young professional sends money for a product that never arrives. Every day, thousands of Indians lose money to online fraud.

If you've been scammed online, you're not helpless. Indian law gives you several routes to report the crime, recover your money, and help catch the fraudsters. Here's what you need to know.

What counts as online fraud or cyber crime?

Online fraud happens when someone uses the internet or a digital platform to cheat you out of money or personal information. Common examples include fake sellers who never deliver goods, phishing messages that steal your bank details, investment schemes promising unrealistic returns, impersonation scams where fraudsters pose as officials or relatives, and exam or job rackets that sell fake papers or promise guaranteed selection for a fee.

Under the Indian Penal Code and the Information Technology Act, cheating and fraud are serious criminal offences. The person who tricks you can face imprisonment and fines. But first, you need to report it properly.

Step one: Report to the Cybercrime Portal immediately

The moment you realise you've been scammed, visit the National Cybercrime Reporting Portal at cybercrime.gov.in. This is a government website that operates 24x7. You can file a complaint in any Indian language without visiting a police station.

When filing your complaint, include every detail you have. Screenshots of messages or advertisements, bank account numbers or UPI IDs where you sent money, phone numbers or email addresses of the fraudster, dates and times of all transactions, and any recordings of phone calls if you have them. The more evidence you provide, the better your chances of action.

After you file online, you'll receive a complaint number. Save this carefully. In many cases, if you report within a few hours of transferring money, authorities can freeze the fraudster's bank account before they withdraw the funds.

Step two: File an FIR at your local police station

While the online portal is crucial for quick action, you should also file a First Information Report at your nearest police station. Under Section 154 of the Criminal Procedure Code, police are legally required to register an FIR when you report a cognizable offence, which includes cheating and fraud.

Take a printout of your cybercrime portal complaint and all your evidence. If the police refuse to register an FIR, note down the officer's name and designation. You have the right to send your complaint directly to the Superintendent of Police by registered post, and they must either register the FIR or provide written reasons for refusal.

The FIR is important because it creates an official criminal record. Insurance claims, bank disputes, and any future legal action will require this document.

Step three: Inform your bank and freeze transactions

Call your bank's customer care immediately if you transferred money or shared card details. Most banks have a fraud reporting helpline that operates round the clock. Ask them to block your card, freeze suspicious transactions, and report the fraud to the recipient's bank.

Under Reserve Bank of India guidelines, if you report unauthorised transactions within three working days, your liability for lost money is limited. After that, recovery becomes harder but not impossible.

Can you actually get your money back?

Honestly, recovery depends on how quickly you act. If you report within hours and authorities freeze the fraudster's account before withdrawal, you have a good chance. If days or weeks have passed, the money has likely moved through multiple accounts and may be difficult to trace.

However, many victims do recover funds, especially in cases involving large amounts where police prioritise investigation. Even if full recovery isn't possible, your complaint helps build a case against repeat offenders.

What if the scammer is in another country?

Many online frauds involve callers or websites based outside India. This makes enforcement harder, but not impossible. The cybercrime portal works with international agencies through Interpol and mutual legal assistance treaties. Your complaint adds to a pattern that can trigger international action.

Protect yourself from future scams

Never pay advance fees for exam papers, job placements, or investment opportunities. Legitimate organisations don't operate this way. Be suspicious of guaranteed returns or insider information. If it sounds too good to be true, it is. Never share OTPs, card CVV numbers, or internet banking passwords with anyone, including people claiming to be from your bank. Before sending money, verify the person or company through independent research, not through contact details they provide.

What happens to the fraudster?

If caught, the accused faces trial for cheating under Section 420 of the Indian Penal Code, which carries up to seven years imprisonment, and cyber fraud under the IT Act, which adds additional penalties. Remember, until a court convicts someone, they are legally considered innocent, but investigations can lead to arrests and prosecution.

Your complaint matters even if you've lost a small amount. Fraudsters operate in patterns, and your report might be the one that connects multiple cases and leads to their arrest.

If you've been scammed or want to understand your options before taking action, speak with a verified advocate on Lex Now who can guide you through the specific steps for your situation.

This article is general legal awareness, not legal advice. Laws change and every case is different — consult a verified advocate on Lex Now for guidance on your situation.

Need advice on your situation?

Connect with a verified advocate on Lex Now for guidance specific to your case.