Investment scam: how to recover money you have lost

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Online fraud

Recovery in an investment scam begins with a report to the 1930 helpline and the cybercrime.gov.in portal within hours, because the only realistic chance of getting money back lies in the interval before the beneficiary account is emptied and abandoned. Everything after that window is slower, more expensive and less certain. There are three further routes — the bank's liability framework, a civil claim against persons you can identify, and compensation or restitution through the criminal case — and they are complementary rather than alternative. Starting with an honest statement of limits helps: where money has already been withdrawn in cash, transferred to accounts that have since been closed, or converted out of the country, recovery is unlikely, and no route changes that.

What recovery actually depends on is not the size of the loss but its destination. Where a payment settled into a named account within India that still holds funds, there is something to freeze and someone to sue. Where it went into a chain of mule accounts that emptied within hours, there is a criminal case but often nothing to recover. The practical work of the first days is therefore to find out which of those two situations you are in, and to make the finding part of the record.

Route one: the freeze, and how the timing works

The 1930 helpline and the national portal are not merely complaint counters. Reporting on them initiates a request to the banks concerned to place a hold on the beneficiary account while the transaction is verified. That is why the transaction details matter far more than the narrative: the unique transaction reference of each payment allows the receiving bank to be identified precisely, and a payment described only as a loss cannot be acted upon at all.

Two realities temper the benefit. First, in a large share of cases the beneficiary account belongs to a mule — a person who rented out or lost control of an account — and the operator behind the scheme has already moved the funds onward. The freeze can capture whatever remains, which may be a fraction of what you sent, or a sum pooled from several victims. Second, freeze requests compete with a large volume of similar frauds, so a report that omits reference numbers can quietly fall to the end of a queue. It follows that the report should be complete on the first attempt rather than corrected over a fortnight.

The investigating officer can request the bank for account-opening particulars and transaction records, and can seek to freeze accounts as part of the investigation. A victim can help by keeping every reference number in one place and by responding immediately to any follow-up request for a statement. In most cases the money that is eventually returned to victims is money that was still sitting in a beneficiary account when the freeze landed.

Route two: what the bank owes you, and what it does not

The framework most often invoked is the RBI's circular of 6 July 2017 on customer protection and limiting liability in unauthorised electronic banking transactions. Its structure is worth understanding because it is frequently misread in both directions. Where the unauthorised transaction results from contributory fraud, negligence or deficiency on the part of the bank, the customer's entitlement is to zero liability. Where the responsibility lies neither with the bank nor with the customer but elsewhere in the system, the customer has zero liability if the bank is notified within three working days of receiving the bank's communication about the transaction. If the notification comes between four and seven working days later, liability is capped, with the ceiling depending on the type of account and card. Beyond seven working days, liability is determined by the bank's Board-approved policy. The bank must credit the amount of an unauthorised transaction to the account within ten working days of being notified, without waiting for any insurance settlement, and must resolve the complaint and establish liability within ninety days.

The essential caveat is that this framework addresses unauthorised transactions. In a typical investment scam the payments were authorised by the customer, who entered the amount and pressed the button after being deceived. Banks argue, with some force, that the framework does not apply on its own terms, and the dispute shifts to allegations of the bank's own negligence — weak fraud-detection systems, an account flagged by other complaints, a beneficiary that no diligence would have cleared. The law on where that argument lands is unsettled and fact-specific, and there is no rule that automatically returns deceived customers their money. The practical consequence is that a written bank complaint, sent immediately and retaining a reference number, remains the single most useful step, because it fixes the date from which the bank's own obligations were engaged.

Two smaller routes are worth knowing. Where the payment moved through a card or a payment system that supports chargebacks, the issuer's dispute process may be available; it is governed by the network's rules rather than by statute, and a written complaint is the trigger. And where a bank fails to act on a valid complaint, the ombudsman mechanism operated by the RBI exists precisely for such grievances.

Route three: suing the people you can identify

A criminal case punishes; it does not always pay. A civil claim for recovery of money is directed at the person who holds your money — a mule account holder, a merchant, a company that collected subscriptions, an individual who signed the paperwork as an adviser. Its value depends on two things: whether the defendant can be identified and served, and whether the defendant has assets.

Where a claim is filed, an application for interim protection against disposal of assets matters more than the plaint itself. A decree obtained after the defendant has moved everything is an expensive piece of paper. Where several people were victimised by the same scheme, each claim stands on its own facts, but the identification of the recipients is often shared. Against a mule account holder, the honest assessment is usually that the person is both judgment-proof and, quite often, a victim of the same syndicate; the real value of naming them is to trace who controlled the account. Against a company or an incorporated intermediary that collected the money, a civil claim can be genuinely effective, and it can run in parallel with the criminal case.

Route four: compensation and the return of recovered money

The criminal process has its own restorative tools, which are frequently overlooked. Where property connected with the offence is before the court, the court has power under section 498 of the Bharatiya Nagarik Suraksha Sanhita, 2023 to dispose of it at the conclusion of the trial, and that includes delivering it to the person entitled to possession. Where money is recovered from the accused, or where the fine imposed is directed towards the victim, this is how funds find their way back.

A second route exists even where no one is convicted. Under section 396 of the BNSS 2023, every State Government prepares a scheme for compensation to victims of crime who have suffered loss and require rehabilitation. Where the offender has not been traced or identified but the victim is identified, the victim may apply to the State or the District Legal Services Authority, which must complete the enquiry within two months before awarding compensation. That route does not depend on a conviction.

One discipline applies to all of the above: a victim cannot recover the same loss twice. A civil decree, a bank credit, a compensation order and a returned sum from a frozen account all address the same loss, and the position must be disclosed in each forum. Concealing a recovery to obtain a second one damages credibility at the moment it matters most.

The four routes compared

What really moves the needle

Four factors decide most recovery attempts. The first is the age of the complaint: a week of delay routinely converts a traceable account into an abandoned one. The second is the quality of the transaction record; you cannot recover a payment you cannot identify. The third is whether any recipient is both identifiable and solvent. The fourth is whether the victim has kept the criminal and civil tracks separate but coordinated, so that a settlement discussion does not undermine the investigation and an aggressive civil notice does not warn the operators away.

Mistakes that destroy recovery

The most costly mistake is paying anything further. Release fees, tax, conversion charges, insurance deposits and compliance bonds exist only to extract more money, and every payment deepens the loss without bringing a withdrawal closer. The second is delay, usually in the hope that the operator is simply slow. The third is engaging a self-styled recovery agent who demands an advance fee; these approaches are aimed at people whose details already circulate among fraud networks, and the "agent" is frequently a second-stage fraud. The fourth is accepting an instalment offer from the operator without any written and verifiable commitment; a promise of future payment is worth nothing without identification and enforceability, and it can be used to argue that the dispute is civil and ethical rather than criminal. The fifth is suing only the mule account holder while never asking who controlled the account. The sixth is writing to the bank verbally and never obtaining a complaint reference, which leaves the date of notification in dispute.

When to involve a lawyer

Legal help pays for itself in recovery work at three points: when the bank denies liability, when an identifiable recipient with assets can be sued quickly, and when the criminal case produces a recovery that must be claimed before the court. Before those points, the useful work is administrative — filings, references, chronology — and a victim can do much of it alone. Beyond them, the sequencing of remedies decides the outcome as much as the strength of any one claim, which is why a cyber crime lawyer in Kolkata normally maps the civil and criminal tracks together, and a civil litigation practice handles the money claim itself. Recovery is not a promise anyone can make. Setting up the four routes properly is the only part that is within your control.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• Investment scam: what it is and how it works in India
• Investment scam evidence to preserve in the first 48 hours
• Investment scam legal remedies: criminal and civil
• Investment scam complaint process: steps and timeline
• Work from home scam how to recover money in India
• How to recover money lost to a trading app scam in India

Cyber crime lawyer in your city · Bank account freeze help · Contact