Mutual fund scam: how to recover money in India
By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Online fraud
To recover money lost to a mutual fund scam in India, report on 1930 or cybercrime.gov.in immediately and notify your bank in writing the same day so the beneficiary account is frozen. Then pursue the criminal track under the IT Act 2000, sections 66C, 66D and 66, read with BNS 2023 sections 318 and 316, and the civil track to recover the sum from the recipient.
If you have lost money to a mutual fund scam, the recovery clock starts the moment you realise the money is gone — not when you find a lawyer. Most losses here are not stock market losses. They are frauds: fake advisors promising fixed monthly returns, cloned apps that mimic a real AMC, WhatsApp or Telegram groups running a "pre-launch SIP", or websites that collect money into a personal account and disappear. In every one of these, the money moved through the banking system, and the banking system leaves a trail.
That trail is your recovery route. The first action is to call the national cybercrime helpline 1930 or file a complaint at cybercrime.gov.in, and to send your bank a written complaint the same day. A bank that is informed in time can flag the beneficiary account and, if funds have not yet been withdrawn, have them frozen. The legal remedies then run on two tracks — criminal prosecution under the IT Act 2000 and BNS 2023, and a civil claim for the money itself.
What the law says
The Information Technology Act, 2000 is the primary criminal statute because the fraud was carried out through a computer resource or a communication device. Section 66 covers computer-related offences where access is unauthorised; section 66C covers identity theft, which fits a scammer who impersonates a real fund house, a real advisor or a real app; and section 66D covers cheating by personation using a computer resource, which is the charge most mutual fund scam complaints attract. Where a fake website or app is involved, section 66D and section 66C are usually charged together.
The Bharatiya Nyaya Sanhita, 2023 supplies the general criminal law. Section 318 punishes cheating, and section 318(4) covers cheating and dishonestly inducing delivery of property — the core of an investment fraud. Section 316 covers criminal breach of trust where the money was entrusted to a person who then misappropriated it. Section 336 covers forgery, relevant where fake statements, fake NAV reports or forged SEBI registration certificates are used. Section 61 covers criminal conspiracy, which allows the police to charge the whole chain of callers, account holders and mule operators, not just the person who took the call.
On the banking side, the RBI circular of 2017 on customer protection and limiting liability in unauthorised electronic banking transactions is the operative direction. It sets who bears the loss when money leaves your account without your authority. Broadly, if the fraud is due to a third-party breach and the bank's systems failed, your liability is zero; if the fault is yours, such as sharing an OTP or a PIN, your liability rises. The circular also fixes a reporting window — report to the bank within three working days and your liability is capped, and the bank must credit the disputed amount provisionally within a set period while it investigates. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 matter where the scam ran through an app, a website or a social platform: the intermediary must act on a grievance and remove unlawful content within the timelines set out in those rules.
Where a company or an unregistered collective investment scheme is used, the DPDP Act, 2023 becomes relevant if your personal data was collected for the fraud, and it gives you rights against the data fiduciary. If a scammer obtained your documents — Aadhaar, PAN, bank statements — the identity theft limb of section 66C is directly in play.
Step-by-step: what you actually do
Follow this sequence. Do not skip step 1 while you look for a lawyer.
- Preserve the evidence first. Before you delete anything, take screenshots with the sender's number or handle visible, save the chat export, save the payment receipts and the UPI or NEFT reference numbers, and save the phone numbers and bank account details you paid into. Evidence that is not preserved in the first hours is often the evidence the police need.
- Call 1930 or file on cybercrime.gov.in. The helpline logs a complaint against the beneficiary account. Give the exact amount, the date and time of each transfer, the beneficiary account number and IFSC, and the UPI ID if the payment was by UPI. You will get an acknowledgement number — keep it, it is cited in every later filing.
- Write to your bank the same day. Mark it to the branch and to the nodal officer for cyber fraud. State that the transaction was unauthorised and made by fraud, quote the RBI 2017 circular, and ask the bank to flag the beneficiary account and raise a chargeback where possible. Send it by email and keep the delivery record.
- File a police complaint. Give a written complaint at the police station with jurisdiction over the place where you were induced to pay — the place where the payment originated is usually enough. Under BNSS 2023 section 173, information relating to a cognizable offence must be recorded, and if the fraud spans several districts or states, a Zero FIR may be registered and transferred to the station with proper jurisdiction.
- If the police do not register the FIR, move the magistrate. Under BNSS 2023 section 175(3), you can apply to the jurisdictional magistrate, who may direct an investigation. This is a written application supported by your complaint, the 1930 acknowledgement and the bank correspondence.
- Build the civil claim. A suit for recovery of the amount, and for a declaration if forged documents were used in your name, lies against the persons who received the money and, where the bank failed its duty, against the bank. This is where you decide, on advice, whether the criminal complaint should be the pressure point and the civil suit the recovery route, or both run together.
- Follow up on the trail. Ask for the written status of the bank's investigation and the police's action. The first beneficiary account is the entry point; if the money was layered onward, ask the investigating officer to seek transaction details of the downstream accounts.
What to do, and by when
| Action | Who to contact | Timeline that matters |
|---|---|---|
| Report the fraud | 1930 helpline or cybercrime.gov.in | Immediately, within hours |
| Notify your bank | Branch and cyber-fraud nodal officer | Within three working days for a capped liability under the RBI 2017 circular |
| File the FIR | Police station with jurisdiction | As soon as the money trail is identified |
| Compel investigation | Jurisdictional magistrate under BNSS 175(3) | If police do not act on the complaint |
| Recover the sum | Civil suit against recipient and bank | Within the limitation period for the claim |
What decides the outcome
Four things move the needle. The first is speed. If the report reaches the bank and 1930 before the money is withdrawn or layered out, freezing is realistic. Once the funds sit in a distant mule account and are withdrawn, recovery shifts from freezing to prosecution and civil enforcement, which is slower and less certain. The second is the quality of the trail — whether you can show the account and IFSC the money went to, the UPI reference, and the identity of the person who induced the payment. The third is the bank's conduct: whether the transaction was authenticated with an OTP, whether your device or credentials were compromised by a third party, and whether the bank acted on your complaint promptly. The fourth is your own conduct — if you shared an OTP, installed a screen-sharing app at a scammer's request, or approved the transfer yourself, the RBI 2017 liability framework shifts part of the loss onto you, and the bank will say so.
Where the scam took the shape of a fake fund house, an important factual question is whether the money went to a genuine AMC or a personal account. Money into a genuine SEBI-registered fund is not fraud; money into a personal account invoked by a fake website is. That distinction decides both the criminal section and the civil defendant.
Common mistakes
- Waiting to "gather everything" before calling 1930. The helpline complaint is itself the fastest freeze mechanism.
- Deleting the chats, blocking the scammer or clearing the call log, which destroys the identity evidence.
- Complaining only to the bank and not to the police, or only to the police and not to the bank. Both tracks are needed.
- Believing that a complaint on a consumer forum replaces a criminal complaint. It does not; they do different work.
- Sharing the scammer's instructions with the bank in a way that admits fault — describe the facts accurately and let the bank apply the RBI framework.
- Sending more money to "release" the earlier investment. That is a second scam layered on the first.
Recovery is a race between your complaint and the money's next hop. File first, refine later.
Filing in Kolkata and West Bengal
If you paid from an account in Kolkata or elsewhere in West Bengal, the local cyber cell and the police station where the payment originated will handle the FIR, and serious cases go before the Bankshall Court or the City Sessions Court, with the Calcutta High Court hearing bail and quashing matters. The physical location matters less than the account trail, but a local cyber crime lawyer in West Bengal can coordinate the police, the bank and, where the accused is arrested, the bail opposition stage. Where the accused seeks bail, the complainant's materials on the trail and the amount are what the court weighs, so the file you build in the first week is the file that speaks for you later.
When to involve a lawyer
Handle steps one to three yourself — they are urgent and cheap. Bring in a cyber crime lawyer in Kolkata when the FIR is not being registered, when the amount is large enough that a civil recovery suit is worth filing, when the bank has rejected or ignored your liability complaint, or when someone is using your identity and documents for further fraud. A lawyer's job at that point is to convert a scattered trail into a charge-sheet-ready file and a recoverable claim, and to keep both moving together.
None of this guarantees a particular outcome. Recovery depends on where the money went, how fast the complaint was filed and what the investigation finds. What a well-built file does is keep every lawful remedy open at once, so that no route closes while you wait on another.
Need help with a cyber crime matter?
Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.
Call +91-9007000603 WhatsAppFrequently asked questions
What is the first thing to do after a mutual fund scam?
Call 1930 or file at cybercrime.gov.in immediately, then send your bank a written complaint the same day. The report flags the beneficiary account for a possible freeze. Preserve all screenshots, receipts and transaction references first, because they are the evidence every later filing depends on.
Can I recover money sent to a fake mutual fund app?
Recovery is possible if the funds are frozen before withdrawal, but it is not guaranteed. Report on 1930 at once, notify your bank under the RBI 2017 circular, and file a police complaint. If the trail is fresh, freezing is realistic; if the money is layered away, recovery shifts to prosecution and a civil suit.
Which sections apply to a mutual fund scam in India?
IT Act 2000 sections 66, 66C and 66D apply to the computer-based cheating and identity theft. BNS 2023 section 318 covers cheating, 316 criminal breach of trust, 336 forgery and 61 conspiracy. The RBI 2017 circular governs how much liability your bank must absorb.
Is a bank liable if I was tricked into transferring money?
It depends on fault. Under the RBI 2017 circular, if a third-party breach caused the loss and the bank failed, your liability can be zero. If you shared an OTP or PIN, approved a screen-sharing app or authorised the transfer, liability shifts to you. Reporting within three working days caps your exposure.
What if the police refuse to register my complaint?
Apply to the jurisdictional magistrate under BNSS 2023 section 175(3), attaching your written complaint, the 1930 acknowledgement and the bank correspondence. The magistrate may direct an investigation. A Zero FIR can also be recorded where the fraud spans districts or states and transferred for investigation.
How long do I have to file a recovery suit?
A civil suit for recovery of money follows the limitation period for the underlying claim, commonly three years from when the fraud became known. Do not wait for the criminal case to finish before starting the civil claim. The two run on different clocks and should be pursued together with legal advice.
Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.
Related articles
Cyber crime lawyer in your city · Bank account freeze help · Contact