Golden-hour UPI fraud across state lines
At 11:05 a 34-year-old school teacher comes to a police station in Nizamabad. At 10:20 she received a call from a man claiming to be a bank officer. He told her that her debit card was blocked and asked her to share an OTP. Within minutes, ₹2,40,000 was debited from her savings account in three UPI transactions to two beneficiary UPI IDs. She has SMS alerts, the beneficiary IDs and the caller's mobile number. The transactions were 45 minutes ago. Her bank branch is in a different district, and the account is with a private bank. She is worried about her salary and asks whether the police can do anything because the money went to another state. The station has one computer with internet; the cyber cell is 40 km away.
1. What should be done in the first 30 minutes, and in what order?
Read the worked answer
First, record the complaint and register an FIR-this is a cognizable offence and the station cannot refuse because the money went to another state. Second, obtain the exact transaction details: amount, time, UPI IDs, bank names and her account number. Third, call the bank's fraud helpline and the national cyber-fraud helpline 1930 immediately; report the transactions and request a freeze or lien on the beneficiary accounts. Fourth, file a complaint on the national cybercrime portal so the request enters the financial-fraud system. Fifth, preserve her phone: do not delete SMS, call logs or the caller's number; take screenshots and note the IMEI. Speed matters because money is often layered within minutes. Give her the FIR copy and a complaint number.
2. How should the constable deal with the jurisdiction issue and the cyber cell 40 km away?
Read the worked answer
Jurisdiction is not a barrier to registration. The information discloses a cognizable offence, so the local station registers a Zero FIR or a regular FIR and forwards it to the cyber cell or the station with territorial jurisdiction. The constable should not send the woman to another district or tell her to come back later. The immediate bank and 1930 action can be taken from the local station while the cyber cell is informed by phone or email. The case diary should record the time of registration, the time of the bank request and the officer who made it. If the cyber cell needs the device, follow the seizure and forwarding procedure rather than informally sending screenshots only.
3. What evidence should be preserved, and what should the constable tell the victim about recovery?
Read the worked answer
Preserve the phone with a seizure memo if it is needed as evidence, or at least photograph the SMS, call log, UPI app screen and the caller's number with timestamps; record the phone's IMEI and the account statement. Obtain a written consent or acknowledgement for the copies. Do not ask her to delete the app or the messages. Tell her honestly that registration and quick reporting improve the chance of freezing funds, but recovery is not guaranteed and depends on how quickly the beneficiary accounts are frozen. Warn her about "recovery agents" who demand money, and tell her not to share fresh OTPs. Give her the FIR copy, the 1930 reference and the cyber cell contact. Do not promise a refund or a timeframe.