After online fraud, account compromise, impersonation or harassment, early decisions can affect financial tracing and digital evidence. The priority is to stop further loss, preserve reliable records and report through official channels.
1. Continuing contact with the offender
Stop sending money, OTPs, credentials or remote-access permissions. Do not pay a supposed police officer, courier agent, bank investigator or recovery service to avoid a threatened 'digital arrest'.
2. Delaying financial-fraud reporting
For suspected financial cyber fraud, promptly call the official helpline 1930, report through the National Cyber Crime Reporting Portal and notify the bank or payment provider through an official channel. Reporting does not guarantee recovery.
3. Deleting messages or accounts
Preserve chats, emails, usernames, URLs, call logs, transaction references and account alerts before blocking or closing access. Avoid editing screenshots in a way that removes dates or identifiers.
4. Installing more software
Fraudsters may ask victims to install APK files, screen-sharing tools or security applications. Disconnect affected devices where appropriate and obtain qualified technical help rather than following unsolicited instructions.
5. Reusing compromised credentials
Change passwords from a trusted device, enable multi-factor authentication and review recovery email, phone, active sessions and forwarding rules. Do not reuse the new password elsewhere.
6. Sending inconsistent accounts
Prepare a concise chronology before reporting. Distinguish what was personally observed from what is inferred, and correct genuine errors transparently rather than creating multiple conflicting versions.
7. Contacting fake recovery agents
Claims of guaranteed recovery, insider access or advance-fee tracing are warning signs. Verify any police, bank, platform or professional contact independently.
8. Publicly exposing personal evidence
Do not post full bank details, identity documents, intimate material or complaint records on social media. Redact unnecessary personal data when seeking support.
9. Treating a portal complaint as an FIR
An online acknowledgement records the report but is not automatically an FIR. The police assess the facts, jurisdiction and applicable offences under current criminal procedure.
10. Assuming every cyber incident is identical
Financial fraud, stalking, account takeover, data theft, extortion and allegations against an accused person require different preservation and legal strategies. Avoid one-size-fits-all advice.
Evidence checklist
- Complaint acknowledgement
- Transaction and bank records
- Original messages, emails and URLs
- Device and account details
- Call logs and contact identifiers
- Platform or bank correspondence
- A dated chronology
Frequently Asked Questions
Should a victim keep talking to the fraudster?
No. Stop payments, OTP sharing and remote access, then preserve the conversation record without editing it.
Is 1930 useful for all cybercrime?
1930 is especially relevant for financial cyber fraud. Other cyber complaints can also be filed through the official portal or police route, depending on the facts.
Can deleted chats create evidence problems?
Yes. Deleted or altered records may weaken the chronology and make it harder to show what happened.
Should bank details be posted online?
No. Sensitive financial and identity details should not be posted publicly. Use official reporting channels and redact unnecessary personal data when seeking help.
Can recovery agents guarantee return of money?
No. Guaranteed recovery claims, insider-access claims and advance-fee tracing offers should be treated cautiously.
What should an incident chronology include?
Include dates, platforms, transaction IDs, contact identifiers, reports made, bank responses and police or portal acknowledgement details.
Official resources
- National Cyber Crime Reporting Portal
- Information Technology Act, 2000
- Bharatiya Nagarik Suraksha Sanhita, 2023
Related service: cybercrime law services in Kolkata.
Legal review
Increeda Law Firm can review a complaint, transaction record, preservation steps or procedural issue. Share only non-confidential information through the contact page. This page provides general information, not case-specific legal advice.