How to recover money lost to an AI voice cloning scam

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 4 Nov 2026 · Online fraud

Money lost to an AI voice cloning scam is recovered by acting on the transaction, not by chasing the caller. Report on 1930 and cybercrime.gov.in, serve your bank a written unauthorised-transaction notice under the RBI limited-liability framework, and pursue a cheating complaint under section 318 of the BNS, 2023 with the IT Act, 2000.

A voice that sounds exactly like your son, your colleague or a bank officer is now the most convincing tool a fraudster has, and the money it pulls out of your account usually leaves within minutes. The reassuring part for a victim in India is that recovery does not depend on catching the caller. It depends on what you do with the transaction, the bank and the complaint in the days that follow. Nearly every rupee that comes back in a voice cloning case comes back because the victim worked three tracks at once and worked them fast: the bank, the police complaint, and the money trail.

This page sets out those tracks in the order they should be worked. It explains which sections of law a cloned-voice complaint actually invokes, the steps that genuinely freeze or claw back money, and the factors that decide whether a bank refunds a disputed debit or leaves the loss with you. It promises no particular sum. What it does is tell you what is worth doing in the first two days and what is a waste of them.

What the law says about a voice cloning scam

A cloned-voice fraud is treated in Indian law as an aggravated form of cheating, not as a separate offence. The caller who imitates a relative or an officer and induces a transfer commits cheating under section 318 of the Bharatiya Nyaya Sanhita, 2023, and where the imitation is a deliberate impersonation it is cheating by personation under the same Code. Where the cloned voice carries a threat or a demand, section 351 of the BNS, 2023 (criminal intimidation) is added, and where the caller extracts property he was already trusted with, section 316 (criminal breach of trust) may apply. Where a forged document or a forged electronic record is used to dress up the demand, section 336 (forgery) is relevant.

The technical side is governed by the Information Technology Act, 2000. Generating and delivering cloned audio through a computer resource, using another person's electronic identity, and obtaining a communication device or its credentials all fall within the Act, including the identity-related offences under sections 66C and 66D. The point to remember is that you do not have to decide the correct section. You have to describe what happened truthfully and let the investigating officer frame it; police and courts apply these provisions, not the complainant.

On the money side the transaction is governed by the Reserve Bank of India's directions on customer protection and limited liability for unauthorised electronic transactions. Those directions require a bank to investigate a reported unauthorised transaction and to fix liability within the framework they set, with the customer's share depending on whether the loss flowed from the customer's own negligence and on how promptly the bank was told. Electronic evidence you rely on — call recordings, chat forwards, UPI screenshots, statements — is proved under section 63 of the Bharatiya Sakshya Adhiniyam, 2023.

How the cloned-voice fraud actually runs

The mechanics matter, because understanding them tells you where the money can still be stopped. A voice cloning fraud has four moving parts. First, the caller harvests a short voice sample, often from a social media clip, a voicemail greeting or an earlier call answered in a hurry, and runs it through a synthesis tool that reproduces the tone and cadence of someone you trust. Second, the call is placed from a spoofed or prepaid number and timed for a moment when the person being imitated is genuinely unreachable. Third, the urgency is manufactured: an accident, an arrest, a customs detention, or a business payment that must be made within ten minutes.

Fourth, and most importantly, the money is moved instantly. The caller never asks for a cheque or a transfer that takes a day; he asks for a UPI transfer, an IMPS push or an immediate payment into a beneficiary account opened in someone else's name. That last step is where recovery is won or lost. If the beneficiary account is still holding your money when the bank flags it, a lien can hold the balance. Once the fraudster layers the funds through two or three further accounts, the trace becomes a police exercise rather than a banking one.

Recovery in practice: three tracks, worked at the same time

Victims lose money by working one track and waiting for it to finish. The bank, the police and the money trail move at different speeds and feed each other, so run them in parallel.

Call 1930 immediately and file on cybercrime.gov.in. The national cybercrime helpline and portal give you a time-stamped acknowledgement and route the details to the bank's nodal officer for a transaction hold. This is the single most time-sensitive step.
Give your bank a written notice, not a phone call. Email the branch and the nodal officer, keep the acknowledgement, and state plainly that the debit was unauthorised. A dated written notice starts the clock on the RBI limited-liability framework; a phone complaint frequently cannot be proved later.
Ask for a transaction hold and the beneficiary details. Request that the beneficiary account be flagged for lien and, later, ask in writing for the beneficiary bank, account number and the name on it, because that is what the police will need.
File the FIR. A cyber offence can be reported electronically under section 175(3) of the BNSS, 2023, and the police must register it under section 173. If the local station is reluctant, you may approach the Superintendent of Police or, eventually, the magistrate under section 175(3) of the BNSS.
Preserve the recording and the context. Keep the original call recording, the number it came from, the exact time, the bank alert SMS, and any payment request that accompanied the call. Do not delete or re-record anything.
Follow up on paper. Every two weeks, ask the bank and the investigating officer for a written status line. Written follow-ups are what later becomes the record of diligence.
Keep a single chronology. One page, dated, listing who called, what was said, what left the account, when each complaint was made and to whom. Courts and banks both work from chronologies.

Filing the complaint so the police can act on it

An FIR in a cloned-voice case is only as useful as the detail inside it. The complaint should state the exact date and time of the call, the number that appeared, the name the caller used, the words or the specific demand, the amount transferred, the mode of transfer, the beneficiary details if known, and the fact that you were deceived by an imitation of a real person's voice. Attach the call recording, the bank alert, the transaction statement and any screenshots of chat messages that followed the call. The complaint should also record that you reported on 1930 and notified the bank, because a magistrate reading the file later will want to know how promptly the victim moved. Do not editorialise about who the accused is; describe the events and let the investigation identify the accused.

A realistic timeline

What follows is the ordinary shape of a voice cloning recovery, not a guarantee. Individual outcomes vary with the facts and the speed.

When	What happens	Who moves
Hour 0 to 24	Report on 1930; written notice to bank; transaction hold requested	Victim and bank's cyber cell
Day 1 to 3	Bank begins investigation; beneficiary account flagged; money possibly still in transit	Both banks, nodal officers
Day 3 to 30	FIR registered and money trail traced; lien may convert to recovery if funds are intact	Police cyber cell
Week 4 to 12	Bank resolves liability; chargeback or refund decided under the RBI framework	Bank's grievance officer
Beyond that	If the bank refuses, escalation to the RBI ombudsman and, if the accused is traced, prosecution	Ombudsman and court

What decides the outcome

Two questions decide almost every voice cloning case: is the money still somewhere it can be caught, and did you behave reasonably once you knew. Everything else is detail.

Speed of the report. Funds that have been layered away through multiple mule accounts are far harder to recover than funds still sitting in the first beneficiary account.
Whether you authorised the debit. A payment you initiated after being deceived is legally different from a debit you never authorised. Both are fraud, but the refund route differs, and the bank will ask which one this was.
Your own conduct. Sharing an OTP, a UPI PIN or a screen-sharing session weakens the limited-liability argument. Concealing the loss for weeks weakens it further.
The quality of your record. A dated recording, the exact caller number, the bank alert and the written notices together give the investigating officer and the bank something to act on. A vague oral account gives them nothing.
Whether the account holder at the receiving end can be identified. Recovery is fastest when the beneficiary is a real, traceable account, and slowest when the trail ends in a mule layer that has already been emptied.
The bank's own record of your notice. A written, dated notice that the branch acknowledged is the difference between a bank that investigates and a bank that later treats the matter as a disputed transaction only.
Whether the same number has hit other victims. A pattern, if the police notice one, strengthens the case and the tracing, but a victim should never wait to collect it before reporting.

It is honest to say that the law on fully synthetic, non-consensual voice imitation is still developing, and outcomes turn heavily on facts. A lawyer's value is usually in marshalling the timeline and the liability argument, not in reciting a section.

Mistakes that cost voice cloning victims their money

Calling the fraudster back to negotiate. Each call gives him time and a fresh hook.
Waiting for the police to act before telling the bank. The bank's clock starts with your notice, not the FIR.
Contacting only the bank's customer-care line and treating an oral assurance as a complaint.
Deleting the recording to "clean up" the phone, or re-recording it from a speaker.
Paying a second "recovery fee" to someone who promises to retrieve the money. That is a second fraud.
Filing a vague complaint that never states the amount, the time, the beneficiary or the exact words used.

When to involve a lawyer

If the amount is significant, if the bank has refused or delayed a refund, or if the police have not registered an FIR despite a clear complaint, that is the point at which representation earns its place. A brief on the liability framework and the money trail can move a stalled bank far more than another telephone call. Victims in West Bengal often start with a cyber crime lawyer in Kolkata, and where the case is likely to reach a magistrate, a criminal defence consultation is worth having early. To discuss your facts and what to file next, you can also get in touch directly. There is no charge for an initial read of the paperwork, and most cases do not need more than that.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

Can I actually recover money lost to an AI voice cloning scam in India?

Recovery is possible but not guaranteed, and it turns on speed and on whether the funds are still traceable. If you report on 1930 within hours and the money has not yet been layered through multiple accounts, a bank lien can catch it. Where the trail is cold, recovery is much harder and the complaint becomes mainly a prosecution route.

What should I do in the first hour after a voice cloning fraud?

Call 1930 and file on cybercrime.gov.in so a transaction hold is requested, then send your bank a written unauthorised-transaction notice and keep the acknowledgement. Do not call the fraudster back. In the same hour, preserve the original call recording, the caller's number, the time and the bank alert message. Waiting for other victims to come forward is not a reason to delay your own report.

Does the bank have to refund a debit caused by a cloned voice call?

Not automatically. The Reserve Bank of India's directions on unauthorised electronic transactions require the bank to investigate and fix liability within that framework, with a shared-liability idea rather than an automatic refund. A refund is more likely where you never authorised the debit and reported promptly, and less likely where you shared an OTP or concealed the loss.

Is an AI voice cloning scam a separate offence in India?

No. It is prosecuted as cheating under section 318 of the BNS, 2023, often with cheating by personation, and with the technical acts brought in under the Information Technology Act, 2000. Where the call included threats, section 351 of the BNS on criminal intimidation is added. Cloned voice is evidence of deception, not a separate crime.

What evidence matters most in a cloned voice fraud case?

The original call recording with the exact caller number and timestamp, the bank alert and transaction statement, and your written notice to the bank. Together they establish who called, when the money moved and that you reported promptly. Electronic records of this kind are proved under section 63 of the Bharatiya Sakshya Adhiniyam, 2023, so keep the originals intact.

How long does a voice cloning money recovery case usually take?

Bank investigation of a reported unauthorised transaction commonly runs over several weeks, after which liability is fixed and any refund decided. Police tracing of the money trail can take longer if funds were layered through mule accounts. Realistically, expect the bank track to resolve first and the criminal track to run far beyond it.

Can a cyber crime lawyer in Kolkata improve my chances of recovery?

A lawyer helps most by marshalling the chronology, the money trail and the liability argument into a single written record that banks and courts act on. That is often decisive where a bank has stalled or refused. Legal help cannot promise recovery of a specific sum, and no honest practitioner will claim otherwise.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact