AI voice cloning scam complaint process and timeline
By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 4 Nov 2026 · Court process
An AI voice cloning scam complaint is filed in a fixed order: the 1930 freeze request first, the written bank claim the same day, the cybercrime portal, and then the FIR. The documents you keep in the first hour decide how far the case can travel after that.
Complaining about an AI voice cloning scam is not a single act. It is a sequence of four filings, each addressed to a different authority, each requiring the same set of records. Done in the right order, the sequence produces a freeze attempt on the receiving account, a liability claim against your bank, a formal record of the offence, and a police investigation. Done out of order, the same facts produce correspondence without a freeze and a case without documentary support.
The sequence matters because the authorities do not share information automatically. The helpline acts on your call and files a request. The bank acts on your written claim and needs a complaint reference. The portal records the offence and issues a number. The police station registers the FIR and can obtain records that you cannot, such as the call detail record and the beneficiary account details. Each step unlocks the next.
What you are actually complaining about
A voice cloning fraud is reported under the same provisions as any case of deception by impersonation using a computer resource. The penal provisions are Section 318 of the Bharatiya Nyaya Sanhita, 2023, for cheating, Section 319 for cheating by personation, and Section 336 for forgery where a false record or document is created. The Information Technology Act, 2000 supplies Section 66D for cheating by personation using a computer resource, and Section 66C for identity theft where credentials are obtained. Where a threat accompanies the demand, Section 351 of the BNS applies. It helps to name these provisions in the complaint, because the police classification determines which wing handles the file.
You should also state the amount, the receiving account or UPI handle, the number that called, the time of the transfer and the UTR or reference number. These are the fields the police use to raise a request with the beneficiary bank. A complaint that omits them may be registered but will sit without action.
Territorial jurisdiction is broader than most complainants assume. The offence is treated as having been committed where the call was received, where the victim's account is held and where the money was credited. A zero FIR under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023, means that even a station without jurisdiction must register the information and forward it. If a station refuses on the ground that the account is in another district, that refusal is contrary to the zero FIR provision and should be recorded in writing.
Documents to keep before you file
| Record | Where it comes from | Why it matters |
|---|---|---|
| Call log entry | Your phone, screenshot with the number and time visible | Links the fraud to a specific call at a specific time |
| Audio of the call, if recorded | Any call recording or screen recording you already hold | The primary evidence of the impersonation |
| Bank statement and UTR | Your bank app or branch | Identifies the receiving account and the amount |
| Chat or message that followed | Messaging app, exported rather than screenshotted | Shows the instruction and the account details given |
| Complaint acknowledgement numbers | 1930 and cybercrime.gov.in | Quoted by the bank and the police in every later step |
Export chats rather than screenshotting them, because an export preserves the sender identifier and the timestamps in a form that survives scrutiny. Keep the original device until the police ask for it, and do not delete the messaging thread. Electronic records are admissible under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023, but that section expects the original record to be produced for verification.
The complaint, step by step
- Call 1930. Give the amount, the receiving account, the time and the reference number. Ask for a freeze request to the beneficiary bank, and write down the acknowledgement number.
- Secure the account. Change the banking password, revoke active sessions, and block any card whose details were shared.
- Write to the bank the same day. Address the email to the nodal officer for electronic-banking fraud, with the transaction reference and the 1930 acknowledgement. Follow it with a signed letter to the branch.
- File on cybercrime.gov.in. Attach the call log, the statement, the receiving account details and a short narrative. Note the complaint number generated.
- File the FIR. Attend the police station or cyber cell with territorial jurisdiction, or any station for a zero FIR, carrying the printed acknowledgements and copies of the records. Ask for a copy of the FIR.
- Give the police the specifics they need. State the number that called, the device used, and whether you can identify the real person whose voice was cloned, since that person's statement may become part of the case.
- Follow up in writing. Keep a dated note of every call, visit and response, so that delay can be shown if it becomes necessary to approach the Magistrate.
- Escalate if nothing moves. Apply to the jurisdictional Magistrate under Section 175(3) of the Bharatiya Nagarik Suraksha Sanhita, 2023, for a direction to investigate.
What happens at the police station
The officer who receives the complaint is required to reduce the information to writing and read it back to you before you sign it. Insist on that. The narrative should be short and factual: the call, the impersonation, the amount, the account, the reference number. Avoid adjectives and avoid speculation about who the fraudster is. A precise first information report is easier to investigate and harder to contradict later.
Ask for the crime number and the name of the investigating officer before you leave. Ask whether the file will be sent to the cyber cell, since many stations forward electronic-fraud cases to a specialised unit. If the station declines to register, request the refusal in writing and note the officer's name and the date. That written refusal is the document that supports a Section 175(3) application and a complaint to the Superintendent of Police.
The escalation ladder
| Level | Forum | When to use it | What it produces |
|---|---|---|---|
| One | 1930 helpline | Immediately, before anything else | Freeze request to the beneficiary bank |
| Two | Bank nodal officer, then the banking ombudsman | Same day, then if the claim is rejected | A decision on customer liability |
| Three | Police station or cyber cell | Within the week | FIR, device seizure, account tracing |
| Four | Superintendent of Police | If the station refuses to register | A written direction to the station |
| Five | Magistrate under BNSS Section 175(3) | If no investigation begins | An order directing investigation |
| Six | Civil court or High Court | For recovery of the amount | A decree and interim relief on assets |
What the timeline looks like
No authority guarantees a fixed timeline, and anyone who promises one is guessing. What can be said honestly is that the stages move at different speeds. The freeze request is an immediate action and the result is usually known within days, because the beneficiary bank either confirms a hold or reports that the balance has moved. The bank's liability decision follows its own internal process and is usually communicated in weeks, after which the ombudsman route opens if the claim is rejected. The police investigation runs on its own schedule and depends on how quickly the accounts are traced and whether the accused can be identified.
Two things the complainant controls are the quality of the initial records and the completeness of the police request. A complaint that supplies the receiving account, the UTR, the calling number and the timestamp gives investigators everything needed to raise a request the same day. A complaint that omits them produces a registration number and correspondence, but little movement. This is why the first hour of record-keeping is the most valuable hour in the entire process.
The bank claim runs in parallel
The bank claim is not a substitute for the police complaint and the police complaint is not a substitute for the bank claim. Under the Reserve Bank of India's directions on limiting customer liability in unauthorised electronic transactions, the bank examines whether the loss arose from its own systems or from the customer's conduct. Where the bank's security failed, the directions support nil liability for the customer. Where the customer's own action caused the debit, liability is apportioned, and prompt written reporting is the factor that most reduces the customer's share.
A voice cloning transfer is a push payment, meaning the customer keyed it in. Banks sometimes treat this as a customer-authorised transaction and close the claim on that basis. The answer is that the authorisation was procured by deception: the customer authorised a payment believing it was going to a family member. The complaint, the call log and the statement together establish that the counterparty was impersonated, which is why the police reference should be quoted in the bank claim.
What decides the outcome
Three factors decide how far the case travels. The first is the speed of the freeze request, because money still in the first account can be held and money already withdrawn must be pursued. The second is the trail: the receiving account, the device and the messaging account used to send instructions. The third is whether the real person whose voice was cloned is willing to state on record that the call was not made by them, because that statement removes any defence that the call was genuine.
There is a fourth factor that complainants rarely consider. It is the consistency of the documents. If the amount stated in the FIR differs from the amount in the bank statement, or the time of the call in the complaint differs from the call detail record, the discrepancy will be used to challenge the whole account. A single set of figures, repeated identically in every filing, is worth more than a longer narrative with small variations.
The weakness of a voice cloning case is the audio. A synthetic voice is not a voiceprint of the accused, so the recording proves the impersonation but not the identity of the impersonator. Investigators therefore work backwards from the money. That is why the account details matter more than the audio in the early stage, and why the freeze request should never be delayed while you try to recover a recording.
Common mistakes
- Waiting to file the bank claim until the police investigation produces a result.
- Filing the FIR without the receiving account number or the transaction reference.
- Reporting only to the messaging platform that carried the instruction.
- Clearing the phone or reinstalling the app before recording the call log and the messages.
- Not informing the real person whose voice was cloned, which weakens the case later.
- Approaching a recovery agent who asks for an advance fee, which is a second fraud on the same victim.
When to involve a lawyer
Steps one to five can be done by the complainant alone. Legal help is worth the cost when the bank rejects the liability claim, when the police do not register the FIR or do not investigate, when the voice owner must be examined and an application filed, or when a recovery suit has to be filed before limitation runs out. A cyber crime lawyer in Kolkata can draft the Section 175(3) application, the bank representation and the recovery plaint together so they present one consistent case, and can appear before the Magistrate and the Calcutta High Court. For related reading, see our criminal defence page and the cyber law blog.
Need help with a cyber crime matter?
Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.
Call +91-9007000603 WhatsAppFrequently asked questions
How do I file a complaint about an AI voice cloning scam in India?
Call 1930 first and ask for a freeze request on the receiving account, then write to your bank's nodal officer the same day, then file a complaint on cybercrime.gov.in, and then file an FIR at the police station or cyber cell. Keep the acknowledgement numbers from each step, because the bank and the police will ask for them.
What documents should I keep for a voice cloning fraud complaint?
Keep the call log showing the number and time, any recording of the call, the bank statement with the UTR or reference number, the exported chat that carried the account details, and the acknowledgement numbers from 1930 and cybercrime.gov.in. Export chats rather than screenshotting them, and do not delete the thread or clear the phone.
Which sections of law are used in an AI voice cloning complaint?
The complaint usually cites Sections 318 and 319 of the Bharatiya Nyaya Sanhita, 2023, for cheating and cheating by personation, Section 336 for forgery where a false record is made, and Sections 66C and 66D of the Information Technology Act, 2000. Where a threat accompanies the demand, Section 351 of the BNS applies as well.
What can I do if the police do not register my voice cloning complaint?
Send a written complaint to the Superintendent of Police and ask for the station's refusal in writing. If no investigation begins, apply to the jurisdictional Magistrate under Section 175(3) of the Bharatiya Nagarik Suraksha Sanhita, 2023, for a direction to investigate. Attach the complaint numbers and the bank records so the application stands on its own.
How long does a voice cloning scam complaint take to move?
There is no fixed timeline. The freeze request is an immediate action with a result usually known within days, the bank's liability decision typically comes within weeks, and the police investigation depends on how fast the accounts are traced. Anyone promising a definite date for recovery is guessing, so rely on the records you control.
Should I file the bank claim before or after the FIR?
File the bank claim the same day as the 1930 call, and file the FIR within the week. The two run in parallel rather than in sequence. The bank claim needs the complaint reference to establish that a fraud occurred, while the FIR gives the police the power to obtain records the bank cannot release to a private person.
Does the bank have to refund a transfer made after a cloned voice call?
Not automatically, because the transfer was keyed in by the customer. Under the RBI directions on unauthorised electronic transactions, the bank examines whether its own systems failed or the customer's conduct caused the loss. Prompt written reporting reduces the customer's share, and the police reference helps establish that the payment was procured by deception.
Can I recover the money through court if the police case stalls?
Yes. A civil suit for recovery can be filed against the account holders once they are identified, seeking the amount with interest and costs, with interim relief against disposal of assets. Limitation runs from the date of the loss, so the suit should not wait for the criminal trial to end, and the two proceedings can run together.
Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.
Related articles
Cyber crime lawyer in your city · Bank account freeze help · Contact