How to recover money lost to insurance fraud in India

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 2 Nov 2026 · Online fraud

Money lost to insurance fraud is recoverable through three routes: an immediate report to 1930 so the beneficiary account can be frozen, a written dispute with your bank if the payment was unauthorised or obtained by deception, and a criminal complaint under section 318 of the BNS 2023 read with section 66D of the IT Act 2000. The recovery rate depends almost entirely on how fast the first two happen.

Insurance fraud in the cyber-fraud sense is not the insurer cheating the policyholder. It is a third party using the language and paperwork of insurance to take money from someone who believes they are buying cover, reviving a lapsed policy or claiming a payout. It works because insurance is one of the few purchases where the buyer expects to hand over documents, personal data and money to a stranger, and expects a delay before anything is confirmed.

Recovery is not one action. It is a sequence that must start within hours: stop further payments, get the beneficiary account frozen, create a written record with the bank and the police, and then decide whether a civil claim is worth pursuing. The legal basis for each step differs, and mixing them up is the most common reason people lose the money they could have recovered.

The three shapes insurance fraud takes online

Before you can recover, you need to know which shape you are dealing with, because the evidence and the remedy change.

Fake policy sale. A caller, website or social media advertisement offers motor, health, travel or term cover at a discount. A policy schedule is sent as a PDF with a logo copied from a real insurer. The premium is collected to a personal account or an unregistered UPI handle. The policy does not exist, and when a claim is made the insurer has no record of it.
Fake claim or refund processing. The victim is told a claim is approved, or a lapsed policy has a maturity amount, and must pay a processing fee, tax, or a verification deposit to release it. The fee is the fraud. This variant is often run on people who have genuinely held policies, using data bought from leaks.
Insurance-linked investment. A product is dressed as a guaranteed-return insurance plan, usually with an endowment or pension wrapper, and the money is collected and never invested. The pitch borrows the credibility of the insurance sector while the entity holds no licence to sell insurance at all.

Each of these has a different paper trail. The fake policy leaves a policy document and a premium receipt. The fake claim leaves a claim number and a fee demand. The investment variant leaves a brochure and a payment schedule. In all three, the strongest evidence is the written or recorded representation that induced the payment, not the payment itself.

What the law says

The core criminal provision is section 318 of the Bharatiya Nyaya Sanhita 2023. Section 318(4), cheating and dishonestly inducing delivery of property, covers the whole structure: a false representation about cover or a claim, reliance on it, and delivery of money. It carries up to seven years and a fine. Section 316 covers criminal breach of trust where money was entrusted for a stated purpose and used for another.

Documentary forgery is the second layer. Section 336 covers forgery and section 340 covers using a forged document. A fabricated policy schedule, an invented claim approval letter, a copied insurer seal or a fake registration number all fall within those sections. Where the fraudster used another person's identity, documents or credentials, section 66C of the Information Technology Act 2000 applies, and where the deception was carried out through a computer resource or communication device, section 66D applies with up to three years and a fine up to one lakh rupees.

Section 66 of the IT Act covers unauthorised access to a computer resource. That is relevant where the fraud began with data taken from an insurer's system, a broker's database or a policyholder's email account. Section 66E covers capture or transmission of private images, which occasionally appears where KYC documents were obtained under false pretences.

On the banking side, the RBI circular of 6 July 2017 on customer protection and limitation of liability in unauthorised electronic banking transactions governs your claim against your own bank. The circular distinguishes third-party breach from customer negligence and grades liability by how quickly the customer reports. Where the payment was induced by deception and you reported within three working days, the bank's obligation to investigate and resolve is engaged even though the payment was technically authorised.

For data, the Digital Personal Data Protection Act 2023 applies where your KYC documents, policy numbers or contact details were collected without valid consent or retained after the purpose ended. That is a separate complaint before the Data Protection Board and a separate leverage point against an entity that is otherwise hard to pursue.

Procedurally, section 173 of the Bharatiya Nagarik Suraksha Sanhita 2023 requires an FIR for a cognisable offence. Section 175(3) lets you go to the magistrate when the police refuse. Section 35 deals with arrest and section 187 with remand. Section 63 of the Bharatiya Sakshya Adhiniyam 2023 governs proof of the emails, messages and recordings that carry the representation.

Step-by-step: the first week

Stop paying immediately. Every further payment is a fresh voluntary transfer and it weakens both the bank dispute and the criminal case. If a claim is being held hostage for a fee, the fee is the fraud.
Call 1930 and file on cybercrime.gov.in the same day. Give the beneficiary account number, the UPI ID, the amount, the date and the name the fraudster used. Note the complaint number; it is the reference every other forum will ask for.
Send a written dispute to your bank. State that the payment was obtained by deception about a policy or claim that does not exist. Quote the 1930 reference. Ask for the transaction to be flagged, for the beneficiary account to be reported, and for a written acknowledgement. Do this by email to the branch and the nodal officer, not by phone.
Cancel every mandate and autopay. Premiums are often set up as recurring mandates. Cancel them in the bank or UPI app and confirm cancellation in writing, because a cancelled mandate that still debits is a separate dispute.
Preserve the documents. The policy schedule PDF, the premium receipt, the claim letter, the emails and WhatsApp messages, the caller numbers and the bank statement export. Keep the original files and take screenshots with the sender details visible.
Verify the policy directly with the insurer. Write to the insurer named on the document, quote the policy number, and ask for written confirmation whether the policy exists. A written denial from the insurer is the single most useful document you can obtain, because it establishes that the representation was false without needing to prove who made it.
File the FIR. Attach the insurer's denial, the payment proof, the representation and the 1930 reference. Ask for the FIR copy. If the station declines, send the complaint by registered post and then move under section 175(3) BNSS.
Report the impersonation to the insurer and the sector regulator. Insurers maintain fraud monitoring units and are required to act on reports of impersonation of their brand. A report to the regulator creates a record that the entity is not a licensed intermediary.
Escalate to the banking ombudsman if the bank rejects the dispute or does not decide it within thirty days. Attach the written dispute and its acknowledgement.
Decide on a civil suit. If the amount is significant and a defendant can be identified, a suit for recovery, declaration and injunction is the only route to an executable decree. It can be filed after the investigation identifies the entity behind the account.

Fraud type, warning sign and the remedy that fits

Fraud type	What the victim sees	Primary remedy	Hardest part
Fake policy sale	Discounted premium, PDF schedule, payment to a personal account	Insurer verification and FIR under BNS 318 and 336	Proving the document is forged rather than merely disputed
Fake claim fee	Approved claim, fee demanded before release, repeated demands	1930 freeze and bank dispute, FIR under BNS 318(4)	Showing the payment was induced, not volunteered
Insurance investment	Guaranteed returns, unlicensed entity, brochure instead of a policy	Regulator complaint and civil suit; FIR for cheating	Identifying a solvent defendant and the money trail
Policy data misuse	Unsolicited calls quoting real policy numbers	DPDP Act 2023 complaint and insurer fraud unit report	Tracing the source of the leak

The table matters because victims often pursue the wrong remedy. A fake policy sale is not primarily a banking dispute, because the bank will say you authorised the premium. A fake claim fee is often both, because the payment page may have imitated an insurer's collection account. An investment variant is usually a civil and regulatory matter first, because no single criminal act is identifiable until the money trail is traced.

What decides whether you get money back

The first factor is the speed of the freeze. Money that is still in the first beneficiary account when the 1930 complaint lands can be held. Money withdrawn in cash across ATMs in another state usually cannot be recovered, whatever the merits of the case.

The second is whether the payment went to an account in the fraudster's own name or to a mule. A mule account holder is often a student or a small trader who rented the account, and the account can be frozen quickly. An account opened with synthetic KYC is harder to trace and the holder is usually untraceable.

The third is the quality of the representation evidence. A recorded call in which the fraudster claims to be an insurer's officer, or a WhatsApp message with a policy number and a payment demand, is what establishes cheating. A bare bank statement shows only that money moved.

The fourth is the bank's characterisation. If the payment page was a lookalike of a real insurer's collection page, the argument that the customer was deceived is strong. If the customer willingly transferred to a personal UPI handle after being told to do so, the bank will argue contributory negligence and the liability cap will apply.

The fifth is whether a regulated entity can be complained against. Where a real insurer's brand was impersonated, its fraud unit and the regulator have an interest in acting. Where the entity is fictitious, the only lever is the criminal investigation.

Mistakes that reduce recovery

Paying the release fee a second time because the first payment was said to have failed. It did not fail; it was the object of the fraud.
Complaining to the insurer's call centre and treating that as a legal complaint. A call centre log is not a written dispute and does not start any clock.
Assuming a real-looking policy PDF means a real policy. Verify the policy number directly with the insurer before paying anything more.
Filing the FIR weeks later, after the beneficiary account has been closed. The freeze window is measured in hours and days.
Suing an unlicensed entity in a forum that has no jurisdiction over it, instead of using the criminal investigation to identify the actual account holder.
Ignoring the recurring mandate. Even after the fraud is reported, an uncancelled autopay keeps paying the fraudster every month.

If you are on the other side of an insurance fraud allegation, the position needs different handling and should be reviewed before you answer any notice. Our criminal defence practice covers that, and the cyber crime lawyer in Kolkata page explains how the investigation is structured.

When to involve a lawyer

Small losses are usually handled through 1930, the bank and the insurer's fraud unit. A lawyer becomes useful when the insurer denies the policy and the denial needs to be converted into evidence, when the bank rejects the dispute on an authorisation argument, when the police refuse to register the FIR, when the amount justifies a civil suit against an identified entity, or when you are accused of insurance fraud and need to respond to a notice or a claim. The decision is really about the size of the loss against the cost of each route, and that calculation should be made early rather than after the trail has gone cold.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

Can I recover money paid to a fake insurance agent in India?

Yes, if you act fast. Report to 1930 the same day so the beneficiary account can be frozen, send a written dispute to your bank, and file an FIR under section 318 BNS read with section 66D of the IT Act 2000. Recovery is realistic while the money stays in the first account and unlikely once withdrawn in cash.

How do I check whether an insurance policy is genuine?

Write to the insurer named on the document, quote the policy number and ask for written confirmation that the policy exists and that the person who sold it is an authorised intermediary. Do this before paying any further premium or fee. A written denial from the insurer is also the strongest evidence you can hand to the police.

Is paying a claim processing fee before payout always a fraud sign?

In legitimate insurance, the insurer does not ask the claimant to pay a fee to release an approved claim. A demand for processing fee, tax or verification deposit before payout, especially to a personal account or UPI handle, is a strong indication of fraud. Stop paying and verify directly with the insurer's official channel.

What sections apply to insurance fraud in the BNS 2023?

Section 318(4) BNS covers cheating and dishonestly inducing delivery of property. Section 316 BNS covers criminal breach of trust where money was entrusted for a stated purpose. Sections 336 and 340 BNS cover forgery and the use of a forged document such as a fabricated policy schedule or claim approval letter. Section 351 BNS covers the threats that often follow.

Can the bank refund a payment made to a fraudulent insurance seller?

It can, but not automatically. The RBI 2017 framework grades liability by speed of reporting and by whether the customer was negligent. Where the payment page impersonated a real insurer's collection account, the argument that you were deceived is strong. Where you transferred to a personal UPI handle on instruction, the bank will argue you authorised it.

What can I do if my policy data was leaked and I keep getting fraud calls?

Report the calls to 1930 and the insurer's fraud unit, and note each number. If an entity collected or retained your data without valid consent, complain under the DPDP Act 2023. Ask the insurer in writing how your data was accessed. Repeated calls quoting real policy numbers suggest a leak the insurer must investigate.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact