Sent money to the wrong UPI ID? Call your bank right now — and if fraud was involved, call 1930 immediately. Every minute counts. For genuine typing mistakes, getting your money back depends on whether the other person agrees to return it. For fraud cases involving OTP theft or phishing, RBI's zero-liability rule protects you fully — but only if you report within three working days. Banks cannot reverse a completed UPI payment on their own without the recipient's consent or a court order.
UPI has changed how India pays. According to NPCI data from February 2026, over 12 billion UPI transactions were processed in a single month — that's an enormous volume, and with it comes a growing number of wrong transfers and fraud cases. Paytm
The real problem with UPI is speed. The money moves in seconds. By the time you realise the mistake, the transfer is already done and sitting in someone else's account. Unlike a cheque you can stop or a NEFT you can cancel midway, a successful UPI payment is final.
That said, the law does give you options. RBI rules, NPCI's dispute system, and courts all provide ways to recover — but how fast you act makes all the difference.
You don't need to know every legal detail, but it helps to know what's on your side:
Payment and Settlement Systems Act, 2007 — This is the main law covering all payment systems in India including UPI. It gives RBI the power to set rules for banks and payment apps.
RBI Circular DBR.No.Leg.BC.78/09.07.005/2017-18 — This is the key rule for unauthorised transactions. It sets out the zero-liability protection, the timelines, and what the bank must do when fraud is reported.
NPCI UPI Dispute Management System (UDGAM) — NPCI runs UPI and has a structured system to handle disputes. Banks are required to resolve these within set timelines.
IT Act, 2000 — Covers cybercrime. OTP theft, phishing, and identity fraud all fall under this law.
Bharatiya Nyaya Sanhita (BNS), 2023 — Applies to fraud cases from July 2024. Cheating, forgery, and breach of trust are covered under Sections 318, 336, and 316.
Consumer Protection Act, 2019 — If your bank ignores your complaint or delays a refund it should have processed, this law lets you go to a consumer forum.
Type
What Happened
Can You Get It Back?
Wrong UPI ID or VPA
Typed the wrong address
Only if recipient agrees
Wrong mobile number
Sent to wrong person
Wrong amount
Right person, wrong figure
Recipient may return extra
Failed transaction
Money left your account, never reached recipient
Yes — bank must reverse within 5 days
Phishing or OTP fraud
Tricked into approving payment
Yes — RBI zero-liability if reported in 3 days
Fake collect request
Approved a scam payment request
Fraud complaint required
SIM swap or UPI hijack
Fraudster took over your UPI
Fraud complaint + telecom action
No matter what caused the wrong transfer, you have clear rights under Indian law:
Step 1 — Call Your Bank Immediately
Don't wait. Call your bank's customer care the moment you spot the wrong transaction. Ask them to flag it and send a recall request to the recipient's bank.
Keep these ready when you call:
Ask for a complaint reference number in writing. This number matters for everything that comes next.
Step 2 — Raise a Dispute on the UPI App
Open the app you used — Google Pay, PhonePe, Paytm, BHIM, or your bank's app. Go to transaction history, find that specific payment, and raise a dispute through the Help or Support section. Most apps resolve simple failures automatically within 24 hours. Note the complaint number the app gives you. UPI Apps
Step 3 — Call 1930 for Fraud Cases
If this was fraud — someone tricked you, stole your OTP, or got you to approve a fake payment — call 1930 right now. This is the National Cyber Crime Financial Fraud Helpline.
The first 6 hours is the highest-success window for freezing the fraudster's account before the money is moved or withdrawn. Every hour you wait makes recovery harder. RTI Wiki
Step 4 — Call NPCI at 1800-120-1740
NPCI's wrong UPI transaction complaint number is 1800-120-1740. Reporting to NPCI alongside your bank complaint creates a system-level record that can speed things up.
Step 5 — Submit a Written Complaint to Your Bank
Call is fine for the start, but follow it up in writing. Send an email or visit the branch. Include:
This written record is what you'll need for every escalation step after this.
Step 6 — File on cybercrime.gov.in for Fraud
For any fraud-related UPI transfer, file a detailed complaint at cybercrime.gov.in. Pick the "Financial Fraud" category and upload your evidence. This creates an official record that supports both the bank investigation and any criminal proceedings.
Step 7 — Keep Following Up
Write down every interaction — complaint reference numbers, call dates, names of bank staff, email replies. Follow up every three to five working days until it's resolved. Banks must log your complaint with a reference number. If they cite technical delays beyond five working days, you are entitled to ₹100 per day compensation under RBI guidelines. UPI Apps
This is the most common situation. You typed one digit wrong or picked the wrong contact, and the money went somewhere it wasn't supposed to.
Here's the honest truth: there is no automatic reversal. Once the payment is credited to someone else's account, it's theirs legally until they agree to return it or a court says otherwise. Your bank can contact the recipient's bank and ask them to pass on the request — but they cannot force anyone to send the money back.
Banks cannot unilaterally debit the recipient's account. NPCI advises raising a complaint through the dispute redressal mechanism.
In many genuine mistake cases, the other person does return the money once the situation is explained. The bank's formal request, combined with a polite message if you can reach them, resolves most cases without going to court.
If the person refuses to return it, you can file a civil recovery suit. A person who keeps money they know was sent by mistake — and that they have no right to — is unjustly enriched. Courts handle these cases regularly and typically rule in favour of the sender when the mistake is clearly documented.
What to keep as evidence:
If fraud was involved — phishing, fake OTP request, a collect scam, SIM swap — your position is much stronger.
RBI's zero-liability rule applies. Under RBI circular DBR.No.Leg.BC.78/09.07.005/2017-18, if an unauthorised transaction happened because of a third-party fraud and you had no part in it, and you report within three working days, you owe nothing. The bank must give you a provisional refund within ten working days of receiving the complaint.
If you report within four to seven days, your liability is capped at a limited amount. After seven days, it depends on your bank's own policy.
File an FIR. For fraud cases, a police complaint under IT Act Sections 66C and 66D and BNS Sections 318 and 336 gives investigators the power to trace where the money went, contact the receiving banks, and freeze accounts through court orders. For any large-amount fraud, an FIR is essential.
File on cybercrime.gov.in. This creates a systemic record and triggers monitoring of the flagged transaction at the NPCI level.
Step 1 — Escalate to the Bank's Grievance Redressal Officer
If front-line customer care isn't moving, ask for the bank's Grievance Redressal Officer (GRO). Their contact must be published on the bank's website per RBI rules. Send a formal written escalation with all your complaint reference numbers and documents.
Step 2 — File With the RBI Integrated Ombudsman
If the bank fails to address your complaint within 30 days, you can approach the Banking Ombudsman, which provides a free and expeditious forum for resolving such complaints, as per RBI guidelines in 2026. File at cms.rbi.org.in. The process is free and most cases get resolved within one to three months. The Ombudsman's decision is binding on the bank. Paytm
Step 3 — Consumer Forum Complaint
If the bank's failure qualifies as a deficiency in service under the Consumer Protection Act 2019, file a complaint at the appropriate consumer forum. You can claim the unreturned amount, interest on the delay, and litigation costs.
Step 4 — FIR With Cybercrime Police
For fraud, file an FIR with the cybercrime cell. Bring your UTR number, bank statements, cybercrime portal reference, and all evidence. Cybercrime police can get court orders to freeze accounts and trace fund movements across multiple accounts.
Step 5 — Civil Recovery Suit
For genuine mistake cases where the recipient won't cooperate, file a civil suit. Attach bank statements, failed voluntary return attempts, and the bank's facilitation request. Courts pass these decrees regularly under summary procedure timelines.
Action
Deadline
What Happens If You Miss It
Call 1930 for fraud
Within hours
Funds may be gone before account can be frozen
Report fraud to bank
Within 3 working days
Zero-liability protection lapses after 7 days
Failed transaction reversal
Bank must do it within 5 working days
File complaint; bank owes ₹100/day penalty
Escalate to RBI Ombudsman
After 30 days without bank resolution
Ombudsman may decline if bank not given fair chance
Consumer forum complaint
Within 2 years
Barred by limitation
Civil recovery suit
Within 3 years
Suit becomes time-barred
1. Not checking the name before paying
After you type a UPI ID or mobile number, the app shows the registered account holder's name. If the name doesn't match who you're paying — stop. Don't press confirm. This one check stops most wrong transfers before they happen.
2. Waiting too long to report
Wrong transfer recovery is mostly a matter of patience — but only if you treat the first 24 hours like a compliance project, not a personal embarrassment. Call your bank and 1930 fast. Don't spend the first few hours trying to sort it out privately.
3. Sharing OTP or UPI PIN with anyone
No bank, no NPCI representative, no government official will ever ask for your OTP or UPI PIN. Anyone who does is a fraudster. Hang up and call 1930.
4. Approving UPI collect requests from strangers
A very common scam — someone sends you a collect request claiming to be a buyer or authority, and tells you to approve it to "receive" money. Approving a collect request sends money out of your account. You never need to approve anything to receive a UPI payment. Remember that clearly.
5. Deleting screenshots or transaction alerts
Take screenshots of everything the moment you realise something went wrong. Don't delete any SMS alerts or UPI notifications. These become your evidence in every forum — bank, NPCI, Ombudsman, court.
6. Not escalating when the bank stalls
Many people wait and wait for bank resolution without pushing it up the chain. You must wait 30 days after filing with your bank before approaching the RBI, so document every delay carefully. Once those 30 days pass without a proper response, go straight to the Ombudsman.
Lalit Kumar Jain v. Union of India — The Supreme Court confirmed that digital payment systems must be regulated to protect customer interests and that banks are responsible for proper security and fraud redressal. This judgment backs the consumer protection framework in UPI disputes.
Regional Director, RBI v. Jayantilal N. Mistry (2016) 9 SCC 463 — The Supreme Court confirmed that RBI's regulatory powers over banks include directing them to compensate customers for service failures. This is the legal foundation for Ombudsman orders directing banks to pay victims of unauthorised transactions.
State Bank of India v. Consumer Forum (multiple NCDRC decisions) — The National Consumer Disputes Redressal Commission has consistently held banks liable for failing to reverse failed UPI transactions within NPCI timelines, not responding to fraud complaints within RBI deadlines, or not having adequate security that could have stopped fraud.
For small amounts — handle it yourself through the bank, NPCI, and RBI Ombudsman. That's completely doable.
For large amounts, fraud cases going to court, or situations where the bank or recipient just won't budge — a lawyer who knows banking and cyber law changes the outcome significantly. A good lawyer frames the complaint correctly for each forum, gets evidence in the right format, and represents you through the whole process.
A: It depends on what went wrong. For a genuine typing mistake, your money comes back only if the recipient agrees to return it — the bank can ask, but cannot force. For failed transactions where the money left your account but never reached anyone, the bank must reverse it automatically within 5 working days. For fraud cases, RBI's zero-liability rule applies if you report within 3 working days.
A: Call your bank immediately and ask them to flag the transaction. For fraud, call 1930 right away — this helpline coordinates with banks to freeze the receiving account before the money moves further. The first 6 hours give you the best chance of recovery. Don't wait to see if the other person returns it on their own.
A: 1930 is the National Cyber Crime Financial Fraud Helpline run by the Indian Cyber Crime Coordination Centre. When you call after a UPI fraud, they coordinate with your bank and the receiving bank to freeze the fraudster's account. It is the single fastest action you can take in a UPI fraud case — but its effectiveness drops with every hour of delay.
A: The NPCI UPI complaint number is 1800-120-1740, available 24x7. You can also raise a complaint directly through your UPI app's Help section or through NPCI's website under the Dispute Redressal Mechanism. Most UPI complaints filed with NPCI are resolved within 3 to 5 working days.
A: Under RBI circular DBR.No.Leg.BC.78/09.07.005/2017-18, if an unauthorised UPI transaction happened due to third-party fraud with no fault on your part, and you report it within 3 working days, you owe nothing and the bank must refund you within 10 working days. Reporting in 4 to 7 days gives limited liability with a capped amount. Beyond 7 days, your bank's own policy applies.
A: No. Once a UPI payment is successfully credited to someone's account, the bank cannot reverse it without that person's consent or a court order. The only exception is failed transactions — where your account was debited but the money never reached the recipient — which the bank must automatically reverse within 5 working days. Delay beyond that entitles you to ₹100 per day compensation.
A: You have two paths. File a complaint with your bank and escalate to NPCI and the RBI Ombudsman. If that doesn't work, file a civil recovery suit in court. A person who keeps money they know was sent by mistake has no legal right to it, and courts regularly pass recovery orders in such cases when the mistake is clearly proven with documents.
A: Escalate in this order — first to the bank's Grievance Redressal Officer, then after 30 days without resolution to the RBI Integrated Ombudsman at cms.rbi.org.in (free of cost, typically resolved in 1 to 3 months), then to the consumer forum under the Consumer Protection Act 2019, and for fraud cases, to the cybercrime police by filing an FIR.
A: NPCI typically resolves UPI complaints within 3 to 5 working days after the complaint is registered. If your bank is involved in the dispute process, resolution through the bank and NPCI together can take 7 to 15 working days. If the case escalates to the RBI Ombudsman, expect 1 to 3 months for final resolution.
A: Keep the UTR number (transaction reference), screenshots of the transaction confirmation, your bank account statement showing the debit, any SMS alerts from your bank, and the written complaint acknowledgment with reference number from your bank. For fraud cases, also save any chat or call records with the fraudster and your cybercrime portal complaint reference number.
Your email address will not be published. Required fields are marked *