The first thirty minutes
- Call the bank on the number printed on your card, not a number from an email or text. Ask them to freeze the account and recall the transfer.
- Call the national fraud line straight after (in India, 1930). Recalls work in the first hours; after a day the money has usually moved on.
- Change your online-banking password and remove any device you do not recognise from the account.
- If the payment went through a card, ask for a chargeback. If it went through a bank transfer, ask for a recall by reference number.
The next day
- File the formal complaint with the police cybercrime portal and give the bank the reference number.
- Ask the bank in writing what its liability policy is for unauthorised transactions; most regulators cap your loss if you report quickly.
- If the bank stalls beyond its deadline, escalate to the banking ombudsman or regulator listed for your country.
Keep this evidence
- Transaction ids, timestamps and beneficiary account details.
- The message or call that started it, including the sender number.
- Every reference number the bank and police give you.
Do not
- Do not "verify" anything by calling a number in the suspicious message.
- Do not install remote-access apps because "the bank" asked you to.
- Do not move remaining money to a "safe account" on anyone's instruction.
Who to report to
Bank first, fraud hotline second, police portal third, regulator if the bank does not resolve it. Find the numbers and portals for your country in the reporting directory.
General guidance, not legal advice. If someone is in immediate danger, call your police emergency number.