Mutual fund scam: legal remedies, complaint and recovery
By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 2 Nov 2026 · Cyber law
The legal remedies for a mutual fund scam in India are three: a criminal complaint under IT Act 2000 sections 66C, 66D and BNS 2023 section 318, a bank liability claim under the RBI 2017 circular, and a civil suit for recovery against the recipient and, where it failed, the bank. The remedy you choose depends on where the money is and who is at fault.
A mutual fund scam is not one wrong but a stack of wrongs, and that is why the remedies are layered rather than single. The person who called you pretending to be an advisor committed one offence; the person who opened the account that received your money committed another; the platform that hosted the fake website may have breached its own duties; and your bank may have failed a regulatory obligation. Each of those has a different forum, a different standard of proof and a different power to actually get the money back.
The practical question a victim asks is not "is this a crime" but "which remedy recovers my money and which one punishes the offender". The criminal complaint punishes and creates pressure; it does not by itself refund. The bank liability claim is fastest when the trail is fresh. The civil suit is the route that ends in a decree you can enforce. Good advice almost always runs more than one at the same time.
What the law says
The Information Technology Act, 2000 is the first statute because the fraud travelled through a computer resource. Section 66 punishes computer-related offences where access is unauthorised. Section 66C punishes identity theft, which covers a scammer who uses another person's identity or impersonates a genuine fund house. Section 66D punishes cheating by personation using a computer resource or communication device — the charge most mutual fund frauds attract. Together, sections 66C and 66D describe a fake app or website that collects money under a false identity.
The Bharatiya Nyaya Sanhita, 2023 generalises the conduct. Section 318 punishes cheating; section 318(4) covers cheating and dishonestly inducing delivery of property. Section 316 covers criminal breach of trust where money was entrusted and then misappropriated. Section 336 punishes forgery, relevant where fake NAV statements or a forged SEBI registration certificate is produced. Section 61 covers criminal conspiracy and lets the investigating agency charge the whole network — the caller, the account holder, the mule operator — rather than only the person at the phone.
On the bank side, the RBI circular of 2017 on limiting the liability of customers in unauthorised electronic banking transactions is the operative direction. It allocates loss between the bank and the customer depending on who was at fault, sets a reporting window — broadly three working days — within which prompt reporting caps the customer's liability, and requires the bank to provisionally credit the disputed amount while it investigates. Failure by the bank to follow the circular is itself a ground of complaint to the bank's grievance redressal and, failing that, to the RBI's ombudsman scheme.
The IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 govern the platform layer. An intermediary — a social platform, a hosting provider, an app store — must observe due diligence, appoint a grievance officer and act on a complaint about unlawful content within the timelines the rules specify. If your money went through a fake app on a large platform, the takedown request under those rules is a separate remedy that stops the next victim.
Two further statutes sit around the edges. Where the scam collected your personal data, the DPDP Act, 2023 gives you rights against the data fiduciary, though its enforcement machinery is still developing. Where the scam was dressed as a collective investment scheme run by a company, the corporate and securities regulators have their own powers; the criminal complaint does not displace them.
The three remedies, step by step
Treat these as three parallel procedures, not a menu of alternatives.
- The emergency step — 1930 and the bank. Before naming any remedy, call 1930 or file at cybercrime.gov.in and write to your bank the same day quoting the RBI 2017 circular. This is a freeze request, not a legal proceeding, and it is the one step where an hour matters.
- The criminal complaint. Lodge a written complaint at the police station where the payment originated. Under BNSS 2023 section 173 the information must be recorded, and a Zero FIR can be registered where the offence spans districts and transferred to the station with jurisdiction. The complaint should name the offence, cite the IT Act and BNS sections, and attach the trail. If the police do not act, apply under BNSS 2023 section 175(3) to the jurisdictional magistrate for a direction to investigate.
- The bank liability claim. If the bank refused or ignored your complaint, escalate in writing to the nodal officer, then to the RBI ombudsman. Carry the 1930 acknowledgement, your reporting date and the evidence of whether any OTP or PIN was shared. The claim is about who bears the loss, not about punishing anyone.
- The civil recovery suit. File a suit for recovery of the sum against the person who received the money and, where the bank breached its duty, against the bank. Plead the fraud, the trail and the loss. A civil decree can be executed against property; a criminal conviction cannot refund you by itself.
- The interim protective step. Depending on the facts, your lawyer may seek an injunction or attachment order so the money or the property of the recipient is not moved while the suit is pending.
- The evidence certificate. Gather your electronic records — chats, emails, screenshots, bank statements — and have them preserved in a form that satisfies BSA 2023 section 63, so the electronic record is admissible without a later dispute about authenticity.
Which remedy for which problem
| Problem | Best remedy | Forum |
|---|---|---|
| Money still in the first account | Freeze request | 1930 and bank nodal officer |
| Scammer's identity and fraud to be established | Criminal complaint | Police station, then magistrate under BNSS 175(3) |
| Bank refusing to absorb the loss | Regulatory complaint | Bank grievance, then RBI ombudsman |
| Money already withdrawn or layered | Recovery suit | Civil court |
| Fake app still live | Intermediary takedown | Platform grievance officer under IT Rules 2021 |
What decides the outcome
The strength of a mutual fund scam case rests on four things a court or bank will weigh. First, causation and inducement: can you show the false representation that made you pay, and the specific words or documents used? Second, the money trail: the beneficiary account, the UPI or NEFT reference, and the layering onward. Third, the authenticity of the electronic record: whether the chats and receipts can be proved and survive the BSA 2023 section 63 requirement. Fourth, the division of fault between you and your bank under the RBI 2017 framework, which decides how much of the loss the bank must bear.
Where the law is unsettled, treat it as unsettled. The interaction between a criminal prosecution and a parallel civil recovery is not always neat, and whether a particular platform is an "intermediary" for a given service depends on the facts. Do not rely on a tidy rule of thumb; plead the facts precisely.
Common mistakes
- Choosing one remedy and abandoning the others. The bank claim, the complaint and the suit do different jobs.
- Filing a civil suit before reporting on 1930, which lets the money move while the suit is admitted.
- Suing the bank when the real loss is the scammer's, or suing only the scammer when the bank's negligence is provable.
- Letting the electronic evidence degrade — phones reset, chats deleted, screenshots without headers.
- Assuming a consumer forum complaint punishes the fraud. It may compensate; it does not prosecute.
Coordination across forums
Because the remedies run in different forums, the same facts must be presented consistently. What you tell the bank, the police and the civil court should not contradict each other. A single chronology — payment dates, amounts, the representation made, the reporting date on 1930, the bank's response — keeps the file coherent. In West Bengal the criminal side usually begins at the local cyber cell and, for serious cases, proceeds before the Courts at Kolkata, with the Calcutta High Court hearing bail and quashing applications. Involving a cyber crime lawyer in Kolkata early keeps the criminal file and the recovery file pointing the same way, and if the accused seeks release, the trail you documented is what the State opposes bail with.
What each remedy can and cannot deliver
It helps to be honest about what each track does. The criminal complaint can freeze an account, set a trace in motion, and end in conviction and fine. It cannot, by itself, put the money back in your account. Restitution in a criminal case depends on the court ordering it and on there being property left to attach. The bank liability claim is the only route that can return money without identifying the offender, because it asks your own bank to answer for a failure in its controls rather than asking the fraudster to pay. The civil suit ends in a decree that you can enforce against named defendants and their assets, but it needs someone solvent to sue and it takes time.
That is why the tracks are run together rather than chosen between. The criminal complaint preserves the trail and creates the pressure that makes a settlement or a freeze possible. The bank claim recovers the portion of loss that a regulator says the bank should bear. The civil suit captures whatever the criminal process cannot return, and it can be filed while the investigation is still open.
| Remedy | Forum | What it can deliver | Main limitation |
|---|---|---|---|
| Criminal complaint | Police station or cybercrime.gov.in | Freeze, investigation, conviction, possible restitution | Does not itself refund the loss |
| Bank liability claim | Bank nodal officer, then RBI ombudsman | Refund of the bank's share of an unauthorised transfer | Depends on fault and on prompt reporting |
| Civil recovery suit | Civil court | Enforceable decree against named defendants | Needs an identifiable, solvent defendant |
Interim protection while the case is pending
A recurring problem is that the victim files, and by the time the matter is heard the account is empty. Where the money is still traceable to a specific account, an application for interim protection can be made so that the balance is not dissipated while the case proceeds. This is a civil step, and it works best when it is supported by the same evidence bundle used for the criminal complaint: the payment reference, the beneficiary account, and the bank's acknowledgement.
Where the funds have already been layered through several accounts, interim protection is harder and the realistic aim shifts to identifying the first recipient. A mule account holder is often traceable even when the organiser is not, and the account holder's own bank records become the evidence that links the chain. Ask the investigating officer for the downstream account details and for the freeze confirmation in writing, because those documents are what a civil court will look at.
Choosing the order of remedies
The order matters more than the number of complaints filed. Report on 1930 first, because the freeze window is measured in hours. Notify the bank the same day, because the liability framework under the RBI 2017 circular is built around how quickly the customer reports. Then lodge the police complaint, and only after that consider the civil suit. Filing the civil suit first is not wrong in law, but it wastes the hours in which an account could have been frozen, and it gives the fraudster notice before the trail is secured.
When to involve a lawyer
You can and should do the 1930 report and the bank complaint yourself. Bring in counsel when the police are slow, when the bank's liability decision is adverse, when the amount justifies a recovery suit, or when the same individuals are continuing to defraud. A lawyer converts three loose remedies into one coordinated strategy, which is what most victims actually lack.
Nothing here promises a result. Whether money returns depends on where it went, how fast you moved and what proof survives. What a structured approach secures is that every lawful route stays open while the others are pursued, so a delay in one does not close another.
Need help with a cyber crime matter?
Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.
Call +91-9007000603 WhatsAppFrequently asked questions
What legal remedies exist for a mutual fund scam?
Three main remedies run in parallel: a criminal complaint under IT Act 2000 sections 66C and 66D with BNS 2023 section 318, a bank liability claim under the RBI 2017 circular, and a civil suit for recovery against the recipient and any negligent bank. Each has its own forum and timeframe.
Is a criminal complaint enough to get my money back?
No. A criminal complaint punishes the offender and creates pressure, but it does not by itself refund you. Recovery comes from a freeze request on 1930, a bank liability claim, or a civil decree you can enforce. The criminal and civil tracks should run together, not one instead of the other.
How do I prove the electronic evidence in a mutual fund scam?
Preserve the chats, emails, screenshots and bank statements in their original form and satisfy BSA 2023 section 63 so the electronic record is admissible. Export the chat with sender details visible, keep the original device and do not delete anything. Original, verifiable records rarely lose admissibility arguments.
Can I sue my bank for a mutual fund scam loss?
Yes, where the bank breached its duty. Under the RBI 2017 circular the bank's share of an unauthorised transaction loss depends on fault, and the bank must provisionally credit disputed amounts during investigation. If it ignored your prompt report, that failure supports a claim before the ombudsman and a civil court.
Where do I file a mutual fund scam complaint in West Bengal?
File at the police station where the payment originated, or on cybercrime.gov.in, which routes it locally. A Zero FIR can be registered and transferred where the fraud crosses districts. Serious matters proceed before the Kolkata courts, with the Calcutta High Court hearing bail and quashing matters.
What if the scammer's account is a mule account?
A mule account is still a lead. The account holder can be charged under BNS 2023 section 318 and IT Act 2000 section 66D, and conspiracy under BNS section 61 covers the wider network. Ask the investigating officer to seek downstream account details, because the mule is usually one link in a longer chain.
Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.
Related articles
Cyber crime lawyer in your city · Bank account freeze help · Contact