Cyber Fraud in Kolkata: Why the First Hour Decides the Case
Money lost to a cyber fraud is not lost in one transaction. It moves through a chain of accounts — a mule account, then a wallet, then a payment gateway — and each hop takes minutes. The single most useful thing a victim can do is report before the money leaves the second or third layer. Everything in the legal process, from freezing to restitution, depends on that speed.
This guide explains the statutory provisions that apply, the exact sequence for reporting in Kolkata, the evidence that makes a complaint actionable, and the mistakes that let a recoverable fraud become an unrecoverable one. It covers unauthorised electronic transactions, not commercial disputes about goods that were delivered badly or not at all.
The Legal Framework
Cyber offences are prosecuted under two overlapping statutes. The Information Technology Act, 2000 punishes computer-related offences: Section 66 covers dishonest or fraudulent acts done by means of a computer resource, Section 66C covers identity theft through fraudulent use of another’s electronic signature, password or unique identification feature, Section 66D covers cheating by personation using a computer resource, and Section 67 covers publishing obscene material. Section 66F deals with cyber terrorism, and Section 72 with breach of confidentiality by persons holding powers under the Act.
The Bharatiya Nyaya Sanhita, 2023 supplies the general criminal law: cheating under Section 318, cheating by personation under Section 319, forgery under Section 336, and criminal breach of trust where the relationship was fiduciary. In practice a Kolkata FIR will usually cite a BNS cheating section together with the corresponding IT Act provision, because the deception is the essence of the offence and the computer is the instrument.
The procedural side is governed by the BNSS. Section 173 requires registration of an FIR for a cognizable offence, and the BNSS contains specific provisions for electronic evidence and for recording the complaint of a person who is temporarily away from the police station. The Reservation of the 2023 provisions also require audio-video recording of the search and seizure of devices, which matters because a mobile phone is usually the most important exhibit in a cyber case.
Separately, the Reserve Bank of India’s circular on customer protection for unauthorised electronic banking transactions creates a liability ladder. Where the fraud is due to a third-party breach and the customer reports within three working days, the customer’s liability is zero. Reporting within four to seven working days limits liability to the transaction value or the prescribed cap, whichever is lower. Delay beyond that shifts liability substantially, which is why the bank must be informed in writing and not merely by phone.
The Reporting Sequence, Step by Step
- Call 1930 immediately. This is the national cyber-fraud helpline. Give the transaction reference, the amount, the beneficiary account if visible, and the exact time. The call generates a complaint reference that later filings will quote.
- File on the national portal. Lodge the complaint at cybercrime.gov.in, choosing the category that matches the fraud — unauthorised debit, fake investment, fake job, matrimonial, sextortion or social media account takeover. Upload screenshots and the bank statement. The acknowledgement number is your proof of the reporting time.
- Inform the bank in writing the same day. Use the bank’s registered email and its app-based dispute option, then follow up at the branch with a written complaint and a receipt stamp. Ask in terms for a “chargeback” or “dispute” reference, and for the beneficiary account to be marked for lien.
- Preserve evidence before it disappears. Screenshot the chat, the UPI handle, the caller’s number, the fake website, the payment page and the SMS alerts, with timestamps visible. Do not delete the app or the messages, and do not reset the phone.
- Register the FIR. For offences in the Kolkata Police area, the complaint goes to the cyber crime police station or the police station with jurisdiction, which will forward it to the cyber cell. If the police refuse to register, the refusal must be recorded and a complaint can be sent to the Superintendent of Police or, for Kolkata, the Commissioner, and thereafter to the Magistrate.
- Follow the money. Ask the investigating officer, in writing, whether a request has been sent to the beneficiary bank to freeze the account, and whether the transaction has been traced through the payment aggregator. A written query creates a record and usually produces a reply.
- Escalate on the banking side. If the bank rejects the dispute, use its internal ombudsman and then the RBI’s integrated ombudsman scheme. These are free, time-bound processes that run in parallel with the criminal case.
Documents and Evidence to Keep
- Bank statement covering the date of fraud, with the disputed entries marked
- Transaction reference numbers, UTR, UPI reference and beneficiary account details
- Screenshots of the chat, call log, email, fake website or app, with visible timestamps
- Copy of the written complaint to the bank with the acknowledgement stamp
- 1930 complaint number and the portal acknowledgement
- FIR copy and the name and designation of the investigating officer
- Device details: make, model, IMEI, and the number of the SIM used
- Any demand, threat or impersonation message received afterwards
Timelines and Cost Drivers
| Stage | Indicative timeline | What affects it |
|---|---|---|
| Call to 1930 and portal complaint | Same hour | Accuracy of transaction details given |
| Bank lien on beneficiary account | Hours to 2 working days | Whether funds are still in the first layer |
| FIR registration | Same day to 3 days | Jurisdiction and completeness of the complaint |
| Bank dispute decision | Up to 90 days under RBI timelines | Date of reporting and quality of evidence |
| Ombudsman complaint | Weeks to a few months | Whether the bank has already replied in writing |
| Charge-sheet and trial | Months to years | Traceability of the account chain, arrest of mules |
Filing a cyber complaint is free. The cost that matters is professional time where the amount is large, the fraud is a corporate email compromise, or the bank has rejected liability. A civil suit for recovery against the beneficiary is possible but rarely worthwhile against a mule account holder with no assets; the practical money is recovered through the lien and the bank’s dispute process, not the trial.
Common Failures and What the Defence Will Argue
Reporting after the money has moved
Most losses that are never recovered were reported after twenty-four hours. By then the funds have been withdrawn at an ATM or routed through a wallet. A delay is not fatal to the criminal case, but it usually ends the chance of a lien.
Sharing an OTP, PIN or screen
Banks routinely argue that an OTP-authenticated transaction was authorised by the customer. The counter is that consent obtained by impersonation is not consent, and that the bank’s own systems should have flagged an unusual beneficiary or device. Evidence of the impersonation call or message is therefore essential.
“It was a loan app, so it is a civil matter”
Where an app harvested contacts and photographs to extort repayment, the conduct is criminal, not merely a recovery dispute. Extortion, criminal intimidation and voyeurism provisions apply alongside the IT Act.
Assuming the police will trace the phone
Device tracing needs a written request from the investigating officer to the service provider, and it is slow. The complainant should supply the IMEI and the exact number, and follow up rather than wait.
Where Complaints Are Filed in Kolkata
Kolkata Police maintains a dedicated cyber crime police station, and complaints received on the national portal are routed to it or to the police station with territorial jurisdiction. Cases arising in the Bidhannagar commissionerate go to its own cyber cell, and the CID’s cyber crime unit handles inter-district and organised fraud. For offences registered within the Kolkata Police area, the charge-sheet is filed before the Chief Metropolitan Magistrate at Bankshall Court; Bidhannagar and Alipore matters go to the courts serving those jurisdictions.
A practical point about jurisdiction: a fraud committed from another state can still be investigated where the victim suffered the loss, because the offence is complete at the place of the debit. Police sometimes resist this. A written complaint citing the place of the transaction and the bank branch in Kolkata usually settles the question.
Common questions
Frequently asked questions
Q: What is the first thing I should do after cyber fraud?
A: Report to your bank immediately to freeze your account, then call the national cyber crime helpline 1930 and file a complaint on cybercrime.gov.in.
Q: How long does cyber crime investigation take in Kolkata?
A: Simple cases may be resolved within weeks, while complex cases involving international servers may take months. Police must file a charge sheet within 60 to 90 days.
Q: Can I get my money back after reporting cyber fraud?
A: If reported immediately, banks can reverse transactions or freeze recipient accounts. Success depends on speed of reporting and bank cooperation.
Q: Do I need a lawyer to file a cyber fraud complaint?
A: While not mandatory, legal representation helps in complex cases involving significant financial loss or multiple parties.
Frequently asked questions
Q: What is the first thing I should do after cyber fraud?
A: Report to your bank immediately to freeze your account, then call the national cyber crime helpline 1930 and file a complaint on cybercrime.gov.in.
Q: How long does cyber crime investigation take in Kolkata?
A: Simple cases may be resolved within weeks, while complex cases involving international servers may take months. Police must file a charge sheet within 60 to 90 days.
Q: Can I get my money back after reporting cyber fraud?
A: If reported immediately, banks can reverse transactions or freeze recipient accounts. Success depends on speed of reporting and bank cooperation.
Q: Do I need a lawyer to file a cyber fraud complaint?
A: While not mandatory, legal representation helps in complex cases involving significant financial loss or multiple parties.