UPI Fraud Reported After 72 Hours With a Missing UTR
A 62-year-old retired teacher reports at a rural police station that Rs 4.8 lakh was debited from her savings account in three UPI transactions over 72 hours. She has screenshots for two transactions, no UTR for the third, and the bank branch 40 km away says it cannot act without an FIR. The beneficiary accounts are in two other states; one is already frozen after another complaint. The victim's phone is a basic Android with no banking app; she says her grandson installed an app. The station has one cyber-trained constable, no dedicated cyber cell, and the district cyber cell is 90 minutes away. The inspector asks you to decide jurisdiction, the first-hour action, and what to tell the victim about recovery chances.
1. What is the first-hour action plan? Identify three actions that cannot wait.
Read the worked answer
(1) Record a written complaint and get the three transaction details, including the missing UTR from the bank app or SMS; do not wait for a perfect complaint. (2) Call the bank's fraud helpline and the district cyber cell immediately; request hotlist or freeze of the two beneficiary accounts, especially the one not yet frozen. (3) Preserve the phone: do not factory reset, do not delete the grandson's app, and note the app name, install time, and SMS alerts. (4) Register an FIR if the facts disclose a cognizable offence; if there is doubt, register a CSR and escalate. The 72-hour delay and the 90-minute distance to the cyber cell mean phone and bank action must run in parallel, not in sequence.
2. Which police station has jurisdiction, and does it matter for freezing the beneficiary accounts?
Read the worked answer
Register at the local station where the victim reports; that is the station with the complaint and the victim. Jurisdiction for investigation can be transferred or shared with the cyber cell, but freezing is a bank or NPCI action and should not wait for a jurisdiction decision. Inform the two other-state police through the cyber cell. Do not send the victim 40 km to the bank branch without a police acknowledgement; give her a receipt and a case number. The legal question of jurisdiction is secondary to preserving the money trail. If the local station refuses, the refusal itself becomes a delay that the victim can complain about.
3. What should the victim be told about recovery, and in what language?
Read the worked answer
Tell her honestly: early freeze improves the chance, but recovery is not guaranteed; the money may have moved through multiple accounts. Explain in simple Tamil: what has been done, what she must bring (bank statement, SMS, phone), and the next date. Avoid saying 'we will definitely recover'. Give her the station number and the cyber cell contact. A written acknowledgement in Tamil reduces fear and prevents her from approaching unauthorised 'recovery agents'. Also warn her not to share OTP or install remote-access apps. The tone should be respectful: she is a victim, not a suspect, and her delay in reporting is common.