How to File a Cyber Crime Complaint Online in India (cybercrime.gov.in)

The National Cyber Crime Reporting Portal (cybercrime.gov.in) is the Government of India's official, free channel for reporting cyber crimes — online financial fraud, hacking, identity theft, cyberbullying, and other internet-related offences — run by the Ministry of Home Affairs' Indian Cyber Crime Coordination Centre (I4C). It's designed to let any citizen file a complaint directly, without needing to first visit a physical police station, and specifically for financial fraud, it connects into a time-sensitive mechanism that can actually freeze fraudulently transferred money before it disappears — which is exactly why acting quickly through the right channel matters more here than for most other kinds of complaints.

What kinds of complaints the portal handles

• Financial fraud — UPI fraud, unauthorized bank transactions, fake loan apps, investment scams, phishing that led to a financial loss.
• Women/child-related cyber crimes — cyberbullying, harassment, non-consensual image sharing, online child exploitation — reportable anonymously if preferred.
• Other cyber crimes — hacking, identity theft, ransomware, social media account compromise, online defamation, and general cyber offences not falling into the above two categories.

Why speed matters specifically for financial fraud

For a fraudulent financial transaction — money sent via UPI to a scammer, an unauthorized card transaction, funds transferred through a fake investment scheme — the portal (and the underlying National Cybercrime Reporting Portal / RBI-linked mechanism it connects to) is built to trigger a freeze request to the recipient bank account as quickly as possible, since the fraudulent funds are frequently moved onward or withdrawn within hours. Reporting within the first 24 hours of a financial fraud genuinely improves the realistic chance of the transferred money being frozen before it's moved further — waiting days to report, even with a strong case, meaningfully reduces this window.

Step-by-step: filing a complaint on cybercrime.gov.in

1. Visit cybercrime.gov.in and choose the relevant category — "Report Cyber Crime related to Women/Child" (can be filed anonymously) or "Report Other Cyber Crimes" (covers financial fraud and everything else).
2. For financial fraud specifically, also call the National Cyber Crime Helpline (1930) immediately, in parallel with the online filing, since phone reporting can trigger a faster transaction-freeze request.
3. Register/log in with a mobile number (OTP-verified) to file a trackable complaint, or proceed anonymously for the women/child category if preferred.
4. Fill in the incident details as precisely as possible — date, time, amount (for financial fraud), the platform or app involved, and a clear description of what happened.
5. Upload all available supporting evidence — screenshots of the fraudulent transaction, the suspicious message/call/app, transaction reference numbers, the fraudster's UPI ID or bank account details if known.
6. Submit the complaint and note the acknowledgment/complaint number generated — this is what you'll use to track status and reference in any follow-up with your bank or local police.

What evidence actually helps a complaint move faster

• For financial fraud: the exact transaction ID/UTR number, the recipient's UPI ID or account number, a screenshot of the transaction confirmation, and the exact time it occurred (down to the minute, if available from your bank app).
• For phishing/scam messages: a full screenshot of the message or email, including the sender's number/address, not just the message text — headers and sender details matter for tracing.
• For hacked accounts: any notification you received about the compromise, the approximate time it happened, and screenshots of any suspicious activity visible on the account afterward.
• For harassment/cyberbullying: screenshots of the offending content with visible usernames/profile details and timestamps, preferably before the content can be deleted by the perpetrator.

Also informing your bank — a parallel, equally urgent step

Filing the cybercrime portal complaint doesn't replace directly contacting your bank's fraud/dispute helpline the moment you notice an unauthorized transaction — banks have their own internal fraud-response timelines and, under RBI's customer liability rules, reporting an unauthorized electronic transaction within a specified window (commonly cited as within 3 working days for zero liability, with graduated liability for later reporting) genuinely affects how much of the loss you're liable for. Doing both — the cybercrime portal complaint and a direct call to your bank's fraud helpline — immediately and in parallel, rather than sequentially, maximizes both the chance of fund recovery and your protection under the bank's own liability framework.

What happens after you file

Once submitted, the complaint is routed to the relevant jurisdiction (based on where the crime occurred or where you're filing from) and, for financial fraud reported quickly enough, into the mechanism that can flag the recipient account for a potential freeze. You'll receive a complaint/acknowledgment number to track status on the portal. For anything requiring further police investigation (identity theft, hacking, ongoing harassment), the complaint may be forwarded to the relevant local police cybercrime cell, who may follow up directly for additional statements or evidence — this follow-up process can take time, and portal status updates don't always reflect every step of an active investigation in real time.

Filing an FIR vs a cybercrime portal complaint

A cybercrime portal complaint and a formal First Information Report (FIR) at a police station aren't strictly the same thing, though they're related — the portal complaint is specifically designed to route the matter to the appropriate cyber crime cell efficiently, and can itself lead to an FIR being registered if the case warrants it. For cases requiring formal legal proceedings, insurance claims, or certain kinds of employer/institutional reporting, having an actual FIR copy (not just a portal acknowledgment) may specifically be required — worth checking whether you need to separately visit a police station or your local cyber crime cell to formalize an FIR, particularly for a significant financial loss or a case likely to need to be pursued through the courts.

Common mistakes when reporting cyber crime

• Waiting days before reporting a financial fraud, significantly reducing the realistic chance of a transaction freeze.
• Only calling the bank, or only filing the portal complaint, instead of doing both in parallel immediately.
• Not preserving screenshots and evidence before a scammer deletes the fraudulent account, message, or listing.
• Assuming a portal complaint acknowledgment is equivalent to a formal FIR when one is specifically required for insurance, legal or institutional purposes.
• Providing vague or incomplete transaction details (missing UTR/transaction ID, approximate rather than exact time), which slows down the ability to trace and act on the fraud.

Protecting yourself going forward

After resolving an immediate incident, reviewing and strengthening basic account security — using a password manager for unique passwords across accounts, and enabling two-factor authentication wherever it's offered — meaningfully reduces the chance of a repeat incident, since many cyber crimes exploit a single reused password or the absence of a second authentication factor rather than a sophisticated, hard-to-prevent attack. Treating a cyber crime incident as also a prompt to audit broader personal digital security, not just resolve the immediate loss, is worth the modest extra time it takes.

Common online fraud patterns worth recognizing

• Fake customer care numbers — a scammer posing as a bank or company's support line, found through a search engine or a fraudulent social media post rather than the company's actual official channel, requesting card details, OTPs, or remote-access app installation.
• KYC update scams — a message or call claiming your bank account, UPI ID, or SIM card will be blocked unless you "update KYC" immediately through a suspicious link, designed to create urgency that bypasses normal caution.
• Fake job or work-from-home offers — requesting an upfront "registration fee" or banking details before any legitimate work relationship is established.
• Investment and trading scams — promising unrealistically high, guaranteed returns, often through a fake trading app or a group chat designed to look like a legitimate community of successful traders.
• Screen-sharing/remote-access scams — a caller convincing the victim to install a remote-access app (often under the guise of "help resolving an issue"), then using that access to initiate transactions directly.

What NOT to do while waiting for a resolution

While a fraud complaint and any related freeze request are being processed, it's worth avoiding a few common, well-intentioned mistakes: don't share any further OTPs, PINs or personal banking details with anyone claiming to be following up on your complaint (a genuine bank or police official will never ask for these over a call), don't make any further payments to the same source hoping to "recover" the original loss (a common secondary scam specifically targets people who already reported a fraud, posing as a recovery service that itself demands an upfront fee), and don't delete any app, message thread or account involved in the incident, since these often contain evidence still needed for the investigation.

Following up on a filed complaint

The portal lets you check status using your complaint acknowledgment number, though updates on an actively investigated case can be sparse compared to the frequency someone anxious about a financial loss might expect — this is a genuine, if frustrating, characteristic of how these investigations typically proceed, especially when they involve tracing funds across multiple bank accounts or identifying an anonymous online scammer. If a significant amount is involved, or if there's been no meaningful update after a reasonable period, following up directly with your local police station's cyber crime cell (which the complaint may have been routed to) with your acknowledgment number in hand is a reasonable, proactive next step rather than waiting indefinitely for the portal status to change on its own.

International and cross-border fraud

A meaningful share of online fraud today involves funds or scammers operating from outside India, or a platform/app hosted overseas — the portal still accepts and processes these complaints, though the practical mechanics of freezing or recovering funds sent internationally, or identifying a scammer operating from another jurisdiction, are genuinely more difficult than a purely domestic case, given the added complexity of cross-border legal cooperation. This isn't a reason to skip reporting — filing still creates an official record, contributes to broader pattern-tracking that can help identify repeat scam operations, and remains the correct first step regardless of how complex the underlying case eventually turns out to be to resolve.

Reporting on behalf of someone else — elderly parents and family members

Cyber fraud disproportionately targets people less familiar with common scam patterns — often elderly parents or family members who may not immediately recognize a fake customer-care call or a KYC-update phishing message for what it is. The same portal and helpline can be used to file a complaint on behalf of a family member, and walking a less tech-familiar relative through basic recognition patterns (a bank will never call asking for an OTP; a genuine KYC update happens through the bank's own app or branch, not an unsolicited link) is a genuinely practical, low-effort way to reduce a household's overall exposure, given how frequently this specific category of fraud targets exactly this demographic.

Corporate and business victims — a slightly different process

A business that's been the victim of cyber fraud (a compromised company email account used for a fraudulent payment redirect, a ransomware attack, a data breach) can also file through the same portal, though larger-scale corporate incidents often additionally warrant direct engagement with the company's own bank relationship manager, cyber insurance provider (if one exists), and potentially a dedicated cybersecurity incident response service, given the typically larger financial exposure and more complex technical investigation involved compared to an individual consumer fraud case. The portal remains the correct first formal reporting channel either way, but a business facing a significant incident shouldn't treat the portal complaint as the only step needed, since the broader response typically spans legal, financial and technical remediation well beyond what a single complaint filing can address on its own, often involving multiple internal teams and external partners working in parallel.