KYC Update Scam Complaint: Process and Documents

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 2 Nov 2026 · Court process

To file a KYC update scam complaint in India, you should immediately call the 1930 cyber helpline, register a formal complaint on cybercrime.gov.in, and submit a written FIR to your local police station under BNSS 2023 Section 173. Gathering your bank statements and communication logs before reporting accelerates the investigation.

If you have been targeted by a KYC update scam, filing a complaint is the most important step to protect your money and your identity. The complaint process involves multiple authorities: your bank, the National Cyber Crime Helpline, the online cyber crime portal, and the local police station. Each authority plays a specific role in freezing the funds, investigating the fraud, and prosecuting the offender. Under Section 66D of the Information Technology Act, 2000 and Section 318 of the Bharatiya Nyaya Sanhita, 2023, the fraudster can be prosecuted for cheating by personation and cheating. The Bharatiya Nagarik Suraksha Sanhita, 2023 provides the procedural framework for filing the FIR and directing the investigation.

The complaint process is time-sensitive. The RBI's zero-liability framework applies only if you report the unauthorized transaction to your bank within three working days. The police investigation is more likely to succeed if the funds are still in the recipient's account. The evidence you provide, including screenshots, call logs, and bank statements, determines the quality of the investigation. This guide explains the step-by-step process, the documents you need, and the expected timelines at each stage. It also covers the remedies available if the police refuse to register your complaint or the bank rejects your claim.

What the law says

The Information Technology Act, 2000 provides the primary criminal provisions for KYC update scams. Section 66 covers computer-related offences, Section 66C punishes identity theft, and Section 66D specifically addresses cheating by personation using a computer resource or communication device. Section 67 and 67B deal with publishing obscene material and may apply in cases involving sextortion. These provisions carry imprisonment and fines.

The Bharatiya Nyaya Sanhita, 2023 contains the general criminal law provisions. Section 318 covers cheating, Section 316 covers criminal breach of trust, Section 336 covers forgery, and Section 351 covers criminal intimidation. The Bharatiya Nagarik Suraksha Sanhita, 2023 provides the procedural framework. Section 173 allows a police officer to register an FIR. Section 175(3) allows a magistrate to direct an investigation. Section 35 covers arrest procedures. Section 187 deals with bail. Section 480 allows compounding of offences. Section 482 covers appeals. Section 528 grants inherent powers to the High Court.

The Bharatiya Sakshya Adhiniyam, 2023 Section 63 governs the admissibility of electronic records. This provision is critical because KYC scams rely on digital communication. Screenshots, call logs, and transaction records must be preserved and authenticated to be admissible in court. The RBI has issued directions on KYC norms and unauthorized electronic transactions. The 2017 circular on customer protection limits customer liability based on the speed of reporting. The 2019 circular on Harmonisation of Turn Around Time sets timelines for resolving failed transactions. The RBI's KYC norms require banks to verify customer identity and periodically update records. The DPDP Act 2023 may also apply if the fraud involves the misuse of personal data, though its enforcement mechanisms are still evolving.

Step-by-step complaint process

Call 1930 immediately. The National Cyber Crime Helpline operates 24 hours a day. Provide the phone number that called you, the link you clicked, and the details you shared. The helpline operator will guide you on filing a formal complaint and may help freeze the recipient's account. Note the complaint reference number.
Contact your bank. Call the bank's 24-hour customer care hotline and report the fraudulent transaction. Request a freeze on your account, card, or UPI ID. Ask the bank to initiate a chargeback or transaction reversal under the RBI's unauthorized transaction guidelines. Get a complaint reference number and note the time of your call.
File a complaint on cybercrime.gov.in. Register your details, upload screenshots of the fraudulent message or call log, bank statements, and any other evidence. Submit the complaint and save the acknowledgement number. The portal forwards the complaint to the appropriate police station and cyber crime cell.
File an FIR under Section 173 of the BNSS 2023. Visit the local police station with a printed copy of the online complaint, bank statements, and identity proof. The police will register the FIR and begin the investigation. Ensure you receive a copy of the FIR for your records.
Submit a written complaint to the bank's nodal officer. Include the transaction IDs and the FIR copy. The bank must respond within the timelines set by the RBI. If the bank rejects the claim, request the rejection in writing along with the reasons.
Approach the magistrate under Section 175(3) of the BNSS 2023 if the police refuse to register an FIR. The magistrate can direct the police to investigate the complaint. Submit a written application with all supporting documents.
Follow up regularly. Contact the investigating officer and the bank's nodal officer to track the progress of the case. Keep copies of all communications.

Documents you need

Document	Purpose	Where to submit
Screenshots of fraudulent message or call log	Establishes the scam and the fraudster's identity	Cyber crime portal and police station
Bank statement showing unauthorized debit	Establishes the financial loss and recipient account	Bank and police station
UPI transaction record	Shows the amount, time, and recipient	Bank and police station
Copy of the online complaint acknowledgement	Proves the complaint was filed	Police station and bank
Identity proof (Aadhaar, PAN, or passport)	Verifies the victim's identity	Police station and bank
Written complaint to the bank's nodal officer	Initiates the bank's investigation	Bank nodal officer

The table lists the documents required at each stage. The screenshots and bank statements are the most important because they establish the fraud and the loss. The online complaint acknowledgement and the FIR copy are required for the bank's reimbursement process. The identity proof verifies that you are the account holder. You should keep copies of all documents for your records and provide the originals only when required.

Timelines at each stage

The timeline for a KYC update scam complaint depends on the authority and the complexity of the case. The bank must acknowledge your complaint within the timelines set by the RBI. Under the 2017 circular, the bank must resolve the complaint within a specified period, typically within 30 days. If the bank fails to respond, you can escalate the matter to the banking ombudsman. The ombudsman can direct the bank to compensate you for the loss and the delay.

The police investigation timeline varies depending on the resources of the cyber crime cell and the cooperation of the banks. The FIR must be registered immediately under Section 173 of the BNSS 2023. The investigating officer will collect the transaction records and trace the funds. If the fraudster is identified, the police will file a charge sheet in the appropriate court. The trial may take several months or years, depending on the court's workload. Victims should follow up regularly to ensure the case progresses.

The civil suit for recovery has a limitation period of three years from the date the cause of action arises. The suit can run parallel to the criminal case. The court may order the fraudster to repay the amount with interest and costs. Victims should consult a lawyer to determine the appropriate forum and the strength of their claim. The cost of litigation and the likelihood of recovering the money from the fraudster should be considered before filing the suit. Victims should also keep a copy of the FIR and the bank's response for future reference.

What decides the outcome

The outcome of a KYC update scam complaint depends on several factors. First, the speed of reporting is critical. The RBI's zero-liability framework applies only if you report within three working days. Second, the quality of evidence matters. Screenshots, call logs, and bank statements establish the scam and the flow of money. Third, the bank's investigation determines whether the bank failed in its duty to protect your account. Fourth, the police investigation's ability to trace the fraudster affects the criminal case. Fifth, the court considers whether you shared the OTP or PIN. If you did, the bank may argue that the loss was due to your negligence.

The law on KYC scam liability is still developing. Courts rely on the RBI circulars and the facts of each case. There is no definitive Supreme Court ruling that applies to all situations. Victims should gather as much evidence as possible and present a clear timeline of events. The stronger the evidence, the better the chances of recovery. Victims should also consider the cost of litigation and the likelihood of recovering the money from the fraudster. In some cases, a settlement with the bank may be the most practical option. Victims should maintain a detailed record of all communications with the bank and the police. The bank's investigation report and the police charge sheet are important documents for the civil suit.

Common mistakes to avoid

Delaying the report to the bank. The RBI's zero-liability rule depends on prompt reporting.
Not filing an FIR. A criminal complaint is essential for prosecuting the fraudster.
Sharing the OTP or PIN. This weakens your case and may be treated as negligence.
Deleting the fraudulent messages or call logs. Preserve all evidence for the investigation.
Not following up with the bank's nodal officer. The bank may delay the investigation without pressure.
Filing a civil suit without identifying the defendant. The suit may be dismissed if the defendant cannot be served.
Ignoring the RBI's timelines. The bank may reject the claim if the report is delayed.

If you need legal assistance, consult a cyber crime lawyer in Kolkata. For victims in West Bengal, our cyber law services in West Bengal provide guidance on filing complaints and pursuing recovery. You can also contact us for a consultation.

When to involve a lawyer

You should involve a lawyer if the bank rejects your claim, if the police fail to register an FIR, or if the amount lost is substantial. A lawyer can help you file a writ petition in the High Court under Section 528 of the BNSS 2023, pursue civil recovery, and represent you in criminal proceedings. Legal representation is also advisable if you are accused of committing a KYC update scam, as the offence carries serious penalties under the IT Act 2000 and BNS 2023. A lawyer can guide you through the complexities of electronic evidence under BSA 2023 Section 63 and ensure your rights are protected throughout the process.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

What is the first step in filing a KYC update scam complaint?

The first step is to call the 1930 National Cyber Crime Helpline immediately. Provide the phone number that called you, the link you clicked, and the details you shared. The helpline will guide you on filing a formal complaint and may help freeze the recipient's account.

What documents are required for a KYC scam complaint?

Attach screenshots of the fraudulent message or call log, the bank statement showing the unauthorised debit, the online complaint acknowledgement and a copy of the FIR, with your identity proof. If you shared identity documents, note exactly which ones and when, since that detail fixes the scope of the identity theft.

How long does the bank take to resolve a KYC scam complaint?

Under the RBI's 2017 circular, the bank must resolve the complaint within a specified period, typically within 30 days. If the bank fails to respond, you can escalate the matter to the banking ombudsman, who can direct the bank to compensate you for the loss and delay.

Can I file a KYC scam complaint online?

Yes. You can file the complaint on cybercrime.gov.in and upload the screenshots, bank statements and other evidence there. After filing online you should also register an FIR under section 173 of the BNSS, 2023 at your local police station, so that the investigation is backed by a formal record. Keep the acknowledgement numbers from both.

What if the police refuse to register my KYC scam FIR?

You can apply to the Magistrate under section 175(3) of the BNSS, 2023, who may direct the police to investigate your complaint. Submit a written application with the portal acknowledgement, the transaction records and a short chronology, because the application shows the police were first approached and declined to act.

Is there a time limit for filing a KYC scam complaint?

You should report the fraud to your bank within three working days to qualify for zero liability under the RBI framework. For the criminal complaint, there is no strict limitation period, but filing promptly improves the chances of tracing the funds. The civil suit for recovery must be filed within three years.

What happens after I file the FIR?

After the FIR is registered, the police investigate, collect the transaction records and attempt to trace the funds. The investigating officer may contact you for more information or documents. If a fraudster is identified and the evidence is sufficient, the police file a charge sheet before the appropriate court, and the electronic records are proved under section 63 of the BSA, 2023.

Can I get compensation for the mental agony caused by the scam?

You can claim compensation for mental agony and financial hardship in a civil suit. The court may award damages if the fraud caused significant distress. However, the primary objective of the civil suit is to recover the principal amount. You should consult a lawyer to determine the strength of your claim.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact