Online Scam & Fraud Punishment in India 2026 - Laws, Sections & How to Report
Online scams - fake links, UPI fraud, OTP theft, loan-app harassment and investment cheating - are rising fast in India. Many victims do not know that strong laws and punishments exist, or how to report quickly. This 2026 guide explains the punishment for online scamming in India, the laws involved, and the exact steps to report and try to recover your money.
Is Online Scamming a Serious Crime in India?
Yes. Cheating someone online is a criminal offence under multiple laws - the Information Technology (IT) Act, 2000 and the new criminal code, the Bharatiya Nyaya Sanhita (BNS), which replaced the old Indian Penal Code. Punishment can include both jail and a fine.
Punishment for Common Online Frauds
| Type of Offence | Typical Punishment |
|---|---|
| Cheating (online cheating / fake schemes) | Jail up to 7 years + fine |
| Identity theft / using someone else''s password or ID | Jail up to 3 years + fine up to Rs 1 lakh |
| Cheating by personation using a computer (phishing) | Jail up to 3 years + fine up to Rs 1 lakh |
| Sending offensive / fraudulent communication | Punishment as per applicable sections |
| Dishonestly receiving stolen data / money | Jail + fine as per the offence value |
The exact jail term and fine depend on the section applied, the amount involved, and whether the accused is a repeat offender. Courts treat organised fraud and large amounts more seriously.
What Counts as Online Fraud?
- UPI / bank fraud through fake payment requests or QR codes.
- OTP theft and SIM-swap fraud.
- Fake job offers, lottery and prize scams.
- Fraudulent loan apps and harassment.
- Fake investment, trading and crypto schemes.
- Phishing links pretending to be banks or government sites.
How to Report an Online Scam - Step by Step
- Call 1930 immediately - the national cyber-crime financial fraud helpline. The sooner you call, the higher the chance of freezing the fraudster''s account.
- File a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in).
- Inform your bank and ask them to block the transaction and your card/UPI.
- Keep all evidence - screenshots, transaction IDs, phone numbers, messages.
- If needed, file an FIR at your local police station or cyber-crime cell.
How to Protect Yourself
- Never share OTP, UPI PIN, CVV or passwords - no genuine bank ever asks for them.
- Do not click unknown links or scan random QR codes to receive money.
- Verify job offers, prizes and investment schemes independently.
- Download apps only from official stores and check permissions.
- Enable transaction alerts and set daily limits on cards and UPI.
Can You Get Your Money Back?
Yes, in many cases - especially if you report fast. When you call 1930 quickly, the system can flag and freeze the receiving account before the money is withdrawn. Recovery is harder once funds are moved out, which is why immediate reporting is critical.