If money left your account, act before troubleshooting the phone. In India, call 1930 or file a report through the National Cybercrime Reporting Portal immediately, then contact your bank through a verified channel and ask it to disable UPI or affected mobile-banking access. After the financial response is underway, remove any suspicious remote-access app, restart the phone, and change credentials used on that device. A remote-access incident without an unauthorized transaction is serious, but it is not proof that money was stolen.
Do these things in order
- Report an actual financial cyber-fraud immediately. Call 1930 or use the National Cybercrime Reporting Portal. The Government of India’s Press Information Bureau said on September 8, 2026: “In case of a financial cyber fraud, call 1930 or report on the National Cybercrime Reporting Portal immediately – the first hour matters most.”
- Call the bank using a verified number or channel. Use the number on the bank’s official website, its official app, your passbook, or a statement—not a number sent by the caller. Ask the bank to restrict UPI and any affected mobile-banking access.
- Raise the unauthorized UPI transaction with the bank. The bank is the institution that handles the transaction complaint and redressal process.
- Stop communicating with the alleged helper. Never disclose a UPI PIN, one-time password, card PIN, CVV, password, remote-access code, or screen-sharing permission.
- Secure the handset. If an unknown or rogue app was installed, remove it, restart the phone, and change the passwords and other credentials used on that device. Check permissions and unused apps afterward.
These actions serve different purposes. The 1930 service and the cybercrime portal create an urgent fraud report; the bank can restrict payment access and investigate a transaction; phone cleanup reduces continuing access. None of them guarantees that funds will be recovered.
As an Amazon Associate I earn from qualifying purchases.
When money moved: the first-hour response
Make the fraud report before investigating the app
If you see an unauthorized UPI debit, an unfamiliar bank transfer, or any other payment you did not approve, treat it as a financial cyber-fraud even if a remote-access app is not visible. Call 1930 or submit the report through the National Cybercrime Reporting Portal without waiting to identify the scammer or finish a phone reset. Early reporting gives the relevant institutions a chance to act while the transaction trail is still fresh.
Have the following information ready, but do not delay the call while collecting a perfect file:
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
- Transaction date and time, amount, UPI transaction ID or reference number, and the account or card involved.
- The bank’s SMS or app notification, the recipient’s UPI ID or name, and screenshots of the transaction.
- The caller’s number, messages, email address, WhatsApp conversation, QR code, collect request, or remote-support instructions.
- The number used for 1930 or the portal acknowledgement, once issued, for later follow-up.
Keep the original messages and screenshots. Do not edit evidence to make it easier to read, and do not continue chatting with the fraudster to obtain more details.
Ask the bank to block the payment routes
Use only a verified bank contact
Find the bank’s contact details in its official app, on its official website, in a passbook, or on a statement. Social-media search results and numbers sent by an unsolicited “fraud department” are not safe sources. Tell the bank that the transaction was unauthorized and request an immediate restriction on UPI and any mobile-banking channel that may have been exposed.
State clearly whether you still control the phone, the SIM, the bank account, and the email address used for banking. If any of those are compromised, say so at the beginning of the call. Ask for a complaint or service-request number and write down the time, channel, and employee reference. The bank’s complaint process is separate from the 1930 report: NPCI’s complaint guidance directs fraudulent, unidentified, or unauthorized UPI transaction complaints to the customer’s bank, and the bank is responsible for resolving the case.
Free tools Windows power users keep installed
One-click scans. No signup required.
What “disable UPI” means
Disabling UPI prevents new UPI transactions from being initiated through the affected account or profile while the bank investigates. It does not erase a completed debit and does not clean a compromised phone. SBI’s security guidance specifically tells customers to disable UPI immediately when a transaction occurred without their authorization. Ask whether the bank also needs to suspend mobile banking, internet banking, cards, or beneficiary additions; the correct scope depends on what was exposed.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Keep a remote-access suspicion separate from a confirmed debit
A caller may persuade you to install a legitimate remote-support or screen-sharing application, provide an access code, and grant permissions. ICICI Bank warns that this arrangement can expose information and permit access to device functions. The danger comes from how the app is used and what access you grant; the app’s presence alone does not prove that money was taken.
If no unauthorized transaction appears, still contact the bank through a verified channel and explain that a third party may have viewed or controlled the device. Ask what monitoring or temporary restrictions it recommends. Then follow the handset-cleanup sequence below. If money did move, do not downgrade the incident to a “phone problem”: complete the 1930 or portal report and the bank complaint as well.
Remove a suspicious app and reduce continuing access
Use the published minimum cleanup sequence
- Stop the session. End the call, disconnect any active screen-sharing session, and do not grant another permission to the person who requested it.
- Remove the suspicious or rogue app. Uninstall the app you were told to install or any application you cannot identify and did not intentionally need. If the phone will not let you remove it, do not keep experimenting while the suspected operator is connected.
- Restart the phone. ICICI Bank’s published guidance places a restart after removal and before changing credentials.
- Change credentials used on that phone. Start with online banking and email, then change shopping accounts, device-authentication credentials, and folder-lock or private-storage account credentials used on the handset. Use a different trusted device if you are unsure that the phone is under your control.
- Review permissions and installed apps. SBI advises checking permissions on critical apps and tracking unnecessary or unused apps. Remove anything you cannot explain, and note any app that requested accessibility, screen capture, notification reading, or device-control privileges.
Uninstalling an app is a containment step, not proof that every credential or session is safe. A person who saw your screen may already know passwords, recovery codes, account numbers, or one-time codes displayed during the session. Changing credentials from a trusted device limits the value of that knowledge.
If you cannot regain control
If an unknown person can still operate the phone, the app cannot be removed, or you cannot safely open the bank’s app, use another trusted device to contact the bank and the mobile operator. Ask the phone manufacturer or a qualified service provider for device-specific assistance. Official guidance reviewed for this article does not define a universal point at which every user should perform a factory reset, and Android and iPhone controls differ; do not invent a reset threshold or follow a caller’s improvised menu instructions. Preserve evidence before professional servicing when possible.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Change the UPI PIN only through an official flow
The UPI PIN authorizes a transaction. It is not a code for receiving money, verifying a refund, or unlocking a support case. NPCI says bank customer support will never ask for the UPI PIN, and the PIN must not be shared with a caller or a supposed helper.
After you have secured access to the phone or switched to a trusted device, change the UPI PIN through the official UPI or bank application’s own change or recovery function. Do not use a link sent by SMS, email, WhatsApp, or a caller. Do not confuse a bank-issued MPIN with the UPI PIN; they are different credentials and may protect different functions.
Changing the PIN does not reverse a completed payment. It protects future transactions after the bank has addressed the incident. If you change your SIM, phone, or payment-service-provider app, NPCI notes that UPI registration must be completed again; follow the official re-registration process rather than accepting assistance from an unsolicited contact.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesRecognize the payment tricks that follow a scam
A UPI PIN is for sending, not receiving
SBI states that a PIN is needed to transfer an amount, not to receive one. Anyone who says you must enter your PIN to accept a refund, prize, salary, or “verification credit” is asking you to authorize a payment.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Do not scan a QR code to collect money
ICICI Bank warns that QR codes are for making payments, not receiving them. A QR code or collect request can open an authorization screen that debits your account. Decline it unless you independently initiated and verified the payment.
Ignore “recovery” callers
After a report, criminals may pose as police, bank staff, cybercrime officers, or recovery agents. They may request an OTP, card details, CVV, UPI PIN, remote-access code, or screen sharing. End the call and contact the institution yourself through a verified channel. No legitimate investigation requires you to reveal a secret authentication value.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What each reporting channel does
| Channel | Use it for | What it does not replace |
|---|---|---|
| 1930 | Immediate reporting of a financial cyber-fraud in India. | The bank’s transaction complaint or phone cleanup. |
| National Cybercrime Reporting Portal | Submitting a financial cyber-fraud report and preserving the incident details for the cybercrime process. | Calling the bank to restrict UPI or mobile banking. |
| Your bank | Disabling UPI or affected banking access and handling an unauthorized-transaction complaint. | The separate cybercrime report or a device-security assessment. |
| Chakshu on Sanchar Saathi | Reporting suspicious calls, SMS messages, and WhatsApp communications. | 1930 or the National Cybercrime Reporting Portal when money has already moved. |
| Mobile operator | Acting when the phone or SIM is lost or the number may be misused. | Bank restrictions and transaction redressal. |
Chakshu is therefore a suspicious-communication reporting route, not a substitute for an urgent financial-fraud report. The Department of Telecommunications’ September 8, 2026 release said its Digital Intelligence Platform supported collaboration among more than 1,600 stakeholders and that the Financial Fraud Risk Indicator had prevented ₹5,043.73 crore by August 2026. Those are government-reported prevention figures, not a promise that an individual payment will be recovered.
If the phone or SIM is lost
Contact the bank promptly and tell it that the device or number used for UPI is no longer in your possession. Ask what restrictions it will place on UPI and mobile banking. Contact the mobile operator to block the SIM and replace it through the operator’s official process. NPCI advises contacting the bank when a phone is lost, and SBI advises blocking the SIM through the service provider.
Do not wait for a replacement handset before reporting the loss. A thief with the unlocked phone, an active SIM, or access to notifications may be able to attempt account recovery even without knowing your UPI PIN.
After the immediate response: monitor and document
Keep one incident record
Store the bank complaint number, 1930 or portal acknowledgement, transaction references, dates, screenshots, and the names or departments you contacted in one secure record. Add each follow-up conversation and the action promised. This prevents conflicting explanations and gives the bank or investigators a precise timeline.
Watch for new signs of compromise
- Unexpected debit alerts, collect requests, beneficiary additions, password-reset messages, or SIM-change notifications.
- New apps, changed permissions, unfamiliar device sessions, or email-forwarding rules you did not create.
- Friends or contacts receiving messages from your number that you did not send.
Report any new unauthorized transaction to the bank as a new event while referring to the original complaint. Keep the phone’s operating system and apps updated through their official update mechanisms, but do not install a “security” tool recommended by an unsolicited caller.
Common mistakes that make the loss worse
- Waiting to see whether the debit reverses. The government’s instruction is to report immediately; delay can reduce the chance of timely intervention.
- Calling a number supplied by the scammer. Verify the bank’s contact details independently.
- Resetting the UPI PIN while the attacker still controls the screen. Use a trusted device or regain control first.
- Assuming an uninstall proves the phone is clean. Credentials and information displayed during remote access may already be exposed.
- Entering a PIN or scanning a QR code to receive a refund. Those actions can authorize another debit.
- Deleting all messages before saving evidence. Preserve transaction IDs, caller details, and instructions for the bank and investigators.
When you can safely return to normal use
Resume ordinary banking on the phone only after the bank has recorded the incident, UPI or other requested restrictions are in place or formally lifted, the suspicious app is gone, the phone has restarted, and credentials used on the device have been changed from a trusted environment. If any of those conditions cannot be met, continue using a separate trusted device for banking and obtain device-specific help from the manufacturer or a qualified service provider.
The practical distinction is simple: a confirmed unauthorized payment is an urgent financial incident; suspected remote access is a device and credential incident that may or may not include a payment. Handle both when they occur, but use the right channel for each.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
