Reporting Cybercrime Incident: Online Filing, Helpline Number, WhatsApp (Chennai & Rest of India)

To report a cybercrime incident in India, victims can dial the national emergency helpline 1930 for financial frauds or register a formal online complaint through the National Cyber Crime Reporting Portal at cybercrime.gov.in. Citizens can also file physical complaints at designated Cyber, Economic Offences and Narcotics (CEN) police stations located across Bengaluru, Chennai, Mumbai, Delhi, and other major metropolitan areas.

Immediate Action for Financial Fraud: The 1930 Helpline and the Golden Hour

Financial cyber fraud requires instantaneous intervention. When unauthorized fund debits occur via unified payments interface (UPI) scams, phishing links, counterfeit investment applications, or credit card compromises, time is the single most decisive factor in recovering lost assets. The Indian Cyber Crime Coordination Centre (I4C), operating under the Ministry of Home Affairs, established the citizen financial cyber fraud reporting and management system accessible via the toll-free helpline number 1930 (formerly 155260).

The concept of the "Golden Hour" refers to the initial two to three hours immediately following an unauthorized transaction. During this critical window, transacted funds typically reside in intermediary nodal accounts, merchant payment gateways, or secondary bank accounts of fraud syndicates before being laundered through cryptocurrency exchanges or automated teller machine withdrawals. Calling 1930 triggers automated inter-bank alerts across connected scheduled commercial banks, non-banking financial companies, and digital payment intermediaries, enabling prompt freezing of beneficiary accounts.

When placing a call to the 1930 helpline, complainants should have specific transactional information readily available:

• Primary victim bank account number, account holder name, and registered mobile contact.
• Exact date, timestamp, and transaction reference numbers (such as UTR numbers or UPI transaction identifiers).
• Beneficiary account numbers, virtual payment addresses (VPA), or payment gateway merchant codes displayed on debit alerts.
• Phone numbers, email addresses, or website links utilized by the fraudsters to initiate contact.
• Screenshots of SMS notifications, debit confirmations, and transaction slips.

Upon recording the incident, the 1930 system generates a unique acknowledgment token sent via SMS to the victim’s phone. The victim must use this token within 24 hours to finalize and submit a detailed formal complaint on the national portal.

The National Cyber Crime Reporting Portal (cybercrime.gov.in)

The National Cyber Crime Reporting Portal (https://cybercrime.gov.in) functions as the centralized digital interface for citizens across all Indian states and Union Territories. Maintained under the supervision of the Ministry of Home Affairs, the portal eliminates traditional territorial jurisdiction hurdles, enabling complainants to lodge reports regardless of where the criminal perpetrator resides or operates.

The portal segregates complaints into three core functional streams:

1. Report Cyber Crime Related to Women / Child: Dedicated channel for reporting cyber pornography, non-consensual image sharing, child sexual abuse material (CSAM), cyberstalking, harassment, and morphing. This stream permits both anonymous reporting and formal authenticated lodging.
2. Report Financial Frauds: Synchronized with the 1930 citizen helpline database, providing structured forms for banking scams, loan app extortion, fake trading platforms, and identity compromise.
3. Report Other Cyber Crimes: Detailed module covering hacking, unauthorized computer access, ransomware infections, website defacement, cryptocurrency thefts, email spoofing, and corporate espionage.

Step-by-Step Guide to Filing an Online Complaint on cybercrime.gov.in

Filing a formal cybercrime complaint online requires methodical data entry and accurate evidence attachment. Following this standardized procedure ensures swift processing and jurisdictional assignment:

Step 1: User Registration and Authentication

Navigate to the official portal at cybercrime.gov.in and select the appropriate category. For authenticated filing, click on "Citizen Login" and provide your state of residence, full name, and mobile number. Validate the registration using the One-Time Password (OTP) received on your registered device.

Step 2: Entering Incident Details

Select the precise sub-category representing the offense (e.g., UPI Fraud, Social Media Harassment, Identity Theft, or Ransomware). Specify the exact date, time, and recurring pattern of the incident. Provide a factual narrative describing the sequence of events without emotive speculation, detailing how the scam began, communications exchanged, and the exact harm or financial loss suffered.

Step 3: Providing Suspect and Beneficiary Information

Input any known details regarding the perpetrator. Include caller numbers, WhatsApp contact identifiers, social media handles, email headers, fraudulent website domains, bank account numbers, UPI IDs, and cryptocurrency wallet addresses. Even partial identifiers assist cyber forensics investigators in cross-referencing multi-state crime patterns.

Step 4: Uploading Evidentiary Documents

Attach supporting digital evidence in accepted formats (PDF, JPEG, PNG). Ensure that bank statements reflect the suspect transactions clearly, chat logs show complete dates and timestamps, and email attachments preserve full technical headers. Review all entries and submit the form to receive a permanent 14-digit Complaint Acknowledgment Number.

Ten Major Cybercrime Modalities in India and Practical Response Protocols

Understanding the operational mechanics of prevalent cyber fraud categories enables victims to identify scams early and collect targeted evidentiary documentation:

1. Instant Digital Loan App Extortion

Unregulated digital lending applications entice users with instant micro-credit approvals without credit checks. Upon installation, the mobile application harvests contacts, media galleries, and location permissions. When borrowers seek repayment clarifications or experience minor delays, operators deploy abusive debt recovery agents who circulate morphed photographs to family and workplace contacts. Victims should immediately revoke device permissions, uninstall the malicious APK, archive threatening messages, and lodge complaints under Section 66E IT Act and Section 384 IPC.

2. Digital Arrest and Law Enforcement Impersonation Scams

Scammers pose as officers from the Central Bureau of Investigation, Narcotics Control Bureau, Telecom Regulatory Authority of India (TRAI), or state police departments via Skype or WhatsApp video calls. Victims are falsely informed that contraband or illegal narcotics were intercepted in a package sent under their Aadhaar identity. Fraudsters stage mock courtrooms and issue forged arrest warrants, coercing victims into transferring funds into "clearing accounts" for financial verification. Citizens must note that law enforcement agencies never conduct arrests or investigations via video calls, nor do they demand money transfers for verification.

3. Part-Time Task and YouTube / Google Review Frauds

Perpetrators contact individuals via Telegram or WhatsApp offering lucrative daily remuneration for liking videos, rating hotels, or writing product reviews. Initial minor rewards are promptly credited to build trust. Victims are subsequently persuaded to join "VIP prepaid tasks" requiring substantial upfront deposits. Once substantial funds are invested, the syndicate freezes account withdrawals citing tax compliance or verification errors. Complainants should download full Telegram chat records and transaction receipts before account deletion.

4. Aadhaar Enabled Payment System (AePS) Biometric Cloning

Fraudsters harvest biometric fingerprint patterns from publicly available property registration documents, land deed portals, or unauthorized photocopy shops. Using synthetic silicone molds, attackers execute unauthorized daily cash withdrawals via micro-ATMs. To mitigate AePS risks, citizens should immediately lock their biometrics using the official UIDAI portal or mAadhaar mobile application and file formal complaints citing unauthorized banking access under Section 43/66 IT Act.

5. SIM Swap and Telecom Interception Attacks

In SIM swap fraud, scammers gather personal identifying information through social engineering or data breaches and submit counterfeit identity documents to telecom service providers to obtain a replacement SIM card. Once the duplicate SIM activates, the victim’s original SIM is deactivated, granting the attacker access to banking OTPs and two-factor authentication prompts. Immediate reporting to the telecom service provider to suspend the SIM and notifying the bank to freeze accounts is imperative.

6. Sextortion and Video Call Blackmail

Victims receive unsolicited video calls on WhatsApp or Instagram from unknown profiles displaying compromising media. The perpetrator records the video screen with the victim's face and threatens to broadcast the recorded video across Facebook, LinkedIn, or family contact groups unless exorbitant ransom amounts are paid. Victims should refrain from paying ransom amounts, as extortion demands invariably escalate. Instead, record the transaction demands, preserve username handles, and report under the dedicated women and child portal stream.

7. Fake Stock Trading and Cryptocurrency Investment Syndicates

Syndicates operate deceptive WhatsApp and Telegram groups purportedly managed by institutional fund managers or foreign brokerage houses. Victims are directed to install manipulated investment applications displaying fabricated hyper-inflated trading profits. When investors attempt withdrawals, operators demand excessive advance taxes, processing charges, or currency conversion fees. All deposit transaction slips, bank accounts of recipient entities, and trading dashboard screenshots must be compiled for submission to cyber crime cells and SEBI.

8. Electricity Bill and Utility Disconnection SMS Scams

Consumers receive SMS notifications claiming their electricity, water, or piped gas connection will be disconnected tonight due to unpaid dues, urging them to call a specified mobile number. When victims call, fraudsters instruct them to download remote desktop applications (such as AnyDesk, TeamViewer, or RustDesk) to pay a nominal fee of ten rupees, which is then used to capture credentials and execute unauthorized transfers.

9. Matrimonial and Dating Platform Financial Deception

Criminals establish elaborate fake profiles on matrimonial and dating portals, presenting themselves as affluent overseas professionals or doctors. After establishing emotional rapport, the fraudster fabricates an emergency involving customs detention of expensive gifts, medical crises, or currency exchange shortages, persuading the victim to transfer money to courier agents or customs accounts.

10. Corporate Business Email Compromise (BEC) and Invoice Fraud

Attackers compromise executive or vendor email accounts through targeted spear-phishing campaigns. Once inside corporate email infrastructure, perpetrators monitor commercial transactions and alter beneficiary bank account details on pending vendor invoices. Corporate finance departments must establish strict out-of-band voice verification procedures before modifying vendor banking coordinates.

Anonymous Reporting Framework for Crimes Against Women and Children

Recognizing the sensitive nature of online gender-based harassment, sextortion, and privacy violations, the portal provides a specialized "Report Anonymously" option for incidents concerning women and children. Under this modality:

• Complainants are not required to provide personal identifying information, national identity cards, or phone numbers.
• Users submit URL links where infringing content is hosted, uploaded screenshots, and contextual descriptions of the offense.
• The system routes the information to nodal state cyber police teams and content takedown officers who coordinate with social media intermediaries and hosting services for rapid content suppression.

Where victims require formal investigation, First Information Report (FIR) registration, and prosecution of the offender, opting for authenticated filing with citizen details is necessary to enable law enforcement agencies to record formal statements and initiate criminal proceedings. For domestic harassment or interpersonal conflict scenarios, consulting specialized domestic dispute and family law guidance helps clarify civil and criminal legal remedies.

Digital Forensics and Evidence Preservation Guidelines

Digital evidence is volatile by nature and susceptible to deletion, alteration, or expiration. Establishing an unbroken digital chain of custody is essential for securing successful convictions and supporting asset recovery applications in court. Complainants should observe the following digital forensics best practices:

• Preserve Complete Chat Histories: Never delete conversations or block suspects prior to creating complete offline backups. Export chat threads including system metadata, media files, and phone contact numbers.
• Capture High-Resolution Screenshots: Take full-screen captures displaying the system clock, battery indicator, status bar, and sender phone numbers rather than cropped message bubbles.
• Obtain Full Email Headers: For phishing emails, business email compromise, or extortion demands, export original message files (.eml or .msg format) or extract the complete MIME headers containing originating IP addresses and routing hops.
• Secure Bank Statements and Payment Slips: Obtain stamped official account statements from your bank showing debit transaction references, IMPS/NEFT/UPI session IDs, and recipient account designations.
• Preserve Call Detail Records: Record dates, times, durations, and telephone numbers of fraudulent calls, taking screenshots of call log histories.
• Maintain Hardware State: In malware or ransomware incidents, immediately disconnect the affected machine from local networks and Wi-Fi to prevent lateral spread, while avoiding reformatting or rebooting until forensic disk images are captured.

Electronic Evidence Admissibility: Certification under Section 65B of the Evidence Act

In Indian courts, electronic records such as computer printouts, chat transcripts, email copies, and server logs are treated as secondary evidence governed by strict statutory certification requirements. Under Section 65B of the Indian Evidence Act, 1872 (corresponding to Section 63 of the Bharatiya Sakshya Adhiniyam, 2023), any electronic output must be accompanied by an evidentiary certificate signed by a person occupying a responsible official position in relation to the operation of the relevant device or the management of the relevant activities.

The Supreme Court in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal reaffirmed that the production of a Section 65B certificate is a mandatory condition precedent for the admissibility of electronic evidence. When victims submit printouts of bank transactions or email communications to the investigating police officer, ensuring that the certificate details the device specifications, lawful custody, and proper functioning of the computer system is vital to prevent evidence rejection during trial.

Cyber Crime Reporting in Bengaluru: CEN Police Stations Directory

The Bengaluru City Police operates dedicated Cyber, Economic Offences and Narcotics (CEN) Police Stations divided by divisional jurisdictions across the metropolitan area. Complainants residing in Bengaluru can approach their local CEN police station with physical copies of online complaint acknowledgments, digital evidence, and written representations:

• Central Division CEN Crime Police Station: Located at Cubbon Park Police Station premises, Kasturba Road, Bengaluru - 560001. Covers central commercial and residential sectors.
• South Division CEN Crime Police Station: Located at Jayanagar 4th Block, 9th Cross, Bengaluru - 560011. Serves southern residential layouts including Jayanagar, JP Nagar, and Banashankari.
• East Division CEN Crime Police Station: Located at Halasuru Police Station premises, Old Madras Road, Bengaluru - 560008. Covers Indiranagar, Halasuru, and eastern zones.
• West Division CEN Crime Police Station: Located at Rajajinagar Police Station compound, Bengaluru - 560010. Covers Malleshwaram, Rajajinagar, and western localities.
• North Division CEN Crime Police Station: Located at Yeshwanthpur Police Station compound, Tumkur Road, Bengaluru - 560022. Serves northern industrial and educational corridors.
• South-East Division CEN Crime Police Station: Located at Koramangala Police Station complex, 80 Feet Road, Bengaluru - 560034. Covers IT hubs including Koramangala, HSR Layout, and Electronics City.
• Whitefield Division CEN Crime Police Station: Located at Whitefield Police Station premises, ITPL Main Road, Bengaluru - 560066. Serves major software technology parks and residential townships.
• North-East Division CEN Crime Police Station: Located at Yelahanka New Town, Bengaluru - 560064. Covers Hebbal, Yelahanka, and airport connectivity zones.
• CID Cyber Crime Division Karnataka: Criminal Investigation Department Headquarters, Carlton House, No. 1 Palace Road, Bengaluru - 560001. Handles high-value, multi-jurisdictional, and complex digital forensics investigations.

Cyber Crime Reporting in Chennai and Tamil Nadu

In Tamil Nadu, the Cyber Crime Wing of the State Police has established specialized Cyber Crime Police Stations across all police commissionerates and district headquarters. In Chennai, the infrastructure includes:

• Cyber Crime Cell, Greater Chennai Police: Police Commissioner’s Office, No. 132, EVK Sampath Road, Vepery, Chennai - 600007. Phone: 044-23452324 / 044-23452325. Email: cybercrimecell.cop@gmail.com.
• Cyber Crime Wing, Crime Branch CID (CB-CID): Block No. 3, Sidco Industrial Estate, Guindy, Chennai - 600032. Handles state-level, inter-state, and high-complexity digital fraud cases.
• Tambaram Police Commissionerate Cyber Cell: Sholinganallur, Chennai - 600119. Serves the southern IT corridor along Old Mahabalipuram Road (OMR) and GST Road.
• Avadi Police Commissionerate Cyber Cell: HVF Road, Avadi, Chennai - 600054. Covers western suburban industrial and residential areas.
• Economic Offences Wing (EOW) Tamil Nadu: Police Training College Campus, Ashok Nagar, Chennai - 600083. Specializes in multi-crore investment scams, fraudulent non-banking schemes, and illegal multi-level marketing platforms.

Where corporate and financial crimes involve multi-party contractual breaches or corporate misfeasance, litigation procedures often intersect with principles examined in commercial disputes and regulatory litigation.

Cyber Crime Infrastructure in Other Major Metros

Citizens across other Indian metropolitan centers can access specialized cyber units operating within their respective police commissionerates:

Mumbai and Maharashtra

The Mumbai Police operates specialized Cyber Police Stations across five administrative regions: Bandra-Kurla Complex (BKC Cyber Police Station, Central Region), South Cyber Police Station (Worli), North Cyber Police Station (Kandivali), East Cyber Police Station (Ghatkopar), and West Cyber Police Station (Bandra). The State Cyber Headquarters is situated at the World Trade Centre, Cuffe Parade, Mumbai.

Delhi National Capital Region

Delhi Police operates the Intelligence Fusion and Strategic Operations (IFSO) unit under the Special Cell located at Sector 16, Dwarka, New Delhi. Additionally, dedicated Cyber Police Stations operate within each of the 15 police districts across Delhi to register localized complaints.

Hyderabad and Telangana

The Telangana State Cyber Security Bureau (TSCSB) oversees cyber investigations statewide. In Hyderabad, citizens can approach the Cyber Crime Police Station at the Hyderabad Police Commissionerate, Basheerbagh, or the Cyberabad Cyber Crime Police Station at Gachibowli, covering the Cyberabad IT zone.

Legal Provisions under the Information Technology Act and Penal Statutes

Cybercrime prosecutions in India derive statutory backing from the Information Technology Act, 2000 (as amended in 2008) read with substantive penal provisions. Key actionable statutory sections include:

• Section 43 IT Act: Civil liability for unauthorized access, downloading, damaging, or disrupting computer systems and databases.
• Section 66 IT Act: Hacking and fraudulent or dishonest commission of acts specified under Section 43, punishable with up to three years imprisonment and fine.
• Section 66C IT Act: Identity theft, unauthorized use of electronic signatures, passwords, or unique identification features.
• Section 66D IT Act: Cheating by personation using computer resources or communication devices, widely applied in online job scams, lottery frauds, and phishing.
• Section 66E IT Act: Privacy violation through capturing, publishing, or transmitting images of private body areas without consent.
• Section 67 & 67A IT Act: Publishing or transmitting obscene or sexually explicit material in electronic form.
• Section 67B IT Act: Stringent penalties for creating, publishing, or facilitating child sexual abuse material online.
• Section 70 IT Act: Unauthorized access to protected computer systems designated as Critical Information Infrastructure.
• Penal Provisions (IPC / BNS): Sections 419 and 420 IPC (cheating and personation), Section 468 IPC (forgery for cheating), Section 503 IPC (criminal intimidation), and Section 509 IPC (outraging modesty), corresponding to relevant provisions under the Bharatiya Nyaya Sanhita, 2023.

Summary Table: Cybercrime Types, Required Evidence, and Legal Remedies

Banking Regulatory Redressal: RBI Ombudsman and Customer Liability Framework

In addition to criminal police reporting, victims of unauthorized electronic banking transactions have recourse through regulatory banking mechanisms. Under the Reserve Bank of India (RBI) Master Circular on Customer Protection (Limiting Liability of Customers in Unauthorised Electronic Banking Transactions), customer liability is structured as follows:

• Zero Liability: Where the unauthorized transaction occurs due to contributory fraud, negligence, or deficiency on the part of the bank (whether reported by the customer or not), or where third-party breach occurs and the customer notifies the bank within three working days of receiving the SMS/email alert.
• Limited Liability: Where the loss is due to customer negligence (such as sharing credentials), the customer bears the entire loss until the unauthorized transaction is reported to the bank. However, any transaction occurring after reporting is fully indemnified by the bank. If the delay in reporting is between four to seven working days, customer liability is capped according to account category (Rs. 5,000 for basic savings accounts, Rs. 10,000 for standard savings/credit cards with limits up to Rs. 5 lakh, and Rs. 25,000 for credit cards with higher limits).
• RBI Integrated Ombudsman Scheme: If the bank rejects a valid refund claim or fails to resolve the grievance within 30 days, the customer can escalate the dispute to the RBI Integrated Ombudsman via the official portal at cms.rbi.org.in. The Ombudsman possesses authority to award compensation for direct losses as well as damages for harassment and mental anguish.

Civil Compensation Remedies: The Adjudicating Officer under Section 46 IT Act

While criminal proceedings focus on penalizing the offender, Section 46 of the Information Technology Act provides a specialized quasi-judicial mechanism for victims to claim monetary compensation and damages from perpetrators, banks, or intermediaries for data compromise and financial injury:

• The State IT Secretary is designated as the Adjudicating Officer in each state and union territory.
• The Adjudicating Officer exercises powers of a civil court to adjudicate claims for compensation and damages up to Rs. 5 crore per incident.
• Victims can file a petition before the Adjudicating Officer demonstrating failure of reasonable security practices under Section 43A or unauthorized extraction under Section 43.
• Appeals against orders of the Adjudicating Officer lie directly before the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) under Section 57 of the IT Act.

Post-Filing Procedures and Judicial Remedies for Fund Recovery

Submitting an online complaint or lodging a police report represents the initial administrative phase. Victims seeking to recover frozen funds must understand subsequent procedural and judicial steps:

Tracking Complaint Progress

Complainants can monitor status updates on cybercrime.gov.in using their 14-digit acknowledgment number. The portal reflects progression milestones such as verification, assignment to investigating officer, and formal registration of an FIR.

Bank Account Freezing and Section 102 CrPC

Upon receiving automated alerts from the 1930 system or formal directives from the investigating officer, financial institutions freeze debit transactions on the recipient fraudulent accounts under Section 102 of the Code of Criminal Procedure, 1973 (CrPC). This procedural safeguard prevents scammers from siphoning funds while the investigation proceeds.

Securing Court Orders under Section 457 CrPC

Banks cannot unilaterally disburse frozen funds back to the victim without judicial authorization. To retrieve frozen money, the victim must engage legal counsel to file an application under Section 457 of the CrPC before the jurisdictional Chief Judicial Magistrate (CJM) or Metropolitan Magistrate court. The court issues notices to the bank, examines the audit trail submitted by the police, and orders release of the lien amount to the rightful owner upon execution of an indemnity bond.

Zero FIR and Territorial Jurisdiction in Cybercrime Matters

Because cybercrimes operate across distributed computer networks, perpetrators and victims are frequently located in different administrative districts or states. Under Indian criminal law, the concept of Zero FIR permits any police station to register a First Information Report for a cognizable offense irrespective of where the crime occurred. Once registered, the Zero FIR is numbered and subsequently transferred to the jurisdictional police station for active investigation.

Furthermore, under Section 178 and Section 179 of the Code of Criminal Procedure (CrPC), where an offense is committed partly in one local area and partly in another, or where the consequence of an act ensues in a specific location, the courts having jurisdiction over either area possess lawful authority to inquire into and try the offense. Consequently, victims of cybercrime can initiate legal proceedings at the police station having territorial jurisdiction over their place of residence where the financial loss or harassment occurred.

Essential Cyber Hygiene to Prevent Digital Scams

Proactive security practices substantially reduce vulnerability to modern social engineering tactics. Adhere to these core preventive rules:

1. Never Disclose Sensitive Credentials: Legitimate banking institutions and government authorities will never request OTPs, ATM PINs, UPI PINs, or password credentials over phone, email, or messaging apps.
2. Verify UPI Payment Dynamics: Entering a UPI PIN is required strictly when sending money, never when receiving payments. Any request to enter a PIN to receive funds or cashback is a fraudulent scam.
3. Avoid Unauthorized Sideloaded APKs: Refrain from installing mobile applications from third-party links or messaging platforms. Download applications exclusively through verified app stores.
4. Enable Multi-Factor Authentication: Protect all email accounts, social media profiles, and financial portals with app-based multi-factor authentication or hardware security keys.
5. Exercise Caution with High-Return Investment Schemes: Treat unsolicited Telegram and WhatsApp invitations offering guaranteed daily stock, cryptocurrency, or part-time task returns as deceptive fraud operations.
6. Regularly Audit Connected Devices: Inspect active login sessions on WhatsApp Web, Telegram Desktop, Google Account, and social media platforms, promptly terminating unfamiliar or inactive device sessions.
7. Verify Caller Identity Independently: If a caller claims to represent your bank, law enforcement, or an e-commerce platform, disconnect immediately and dial the official customer care number listed on the entity's authenticated website.