MRM Portal for Cyber Fraud: How to Recover Money Lost to Online Scams in India

Developed under the Indian Cyber Crime Coordination Centre (I4C) of the Ministry of Home Affairs (MHA), the MRM works within India's cybercrime response system to facilitate the restoration of defrauded money to legitimate victims. The Government of India says the MRM and Grievance Redressal Module (GRM) became functional from April 2026. If you have been a victim of a UPI scam, online banking fraud, phishing scam, investment scam, OTP fraud, credit/debit card fraud, or another form of cyber financial fraud, knowing how to report the incident quickly can make a significant difference.

**What Is the Money Restoration Module (MRM)? ** The Money Restoration Module (MRM) is a digital mechanism introduced by the Indian Cyber Crime Coordination Centre (I4C) to help facilitate the restoration of money defrauded through cybercrime. The system connects the cybercrime complaint and financial transaction trail with the relevant law-enforcement agencies, banks and financial institutions, helping authorities process cases where fraudulent funds have been identified and frozen or placed on hold. In simple terms: Cyber fraud → Report the fraud → Money is traced/frozen → Authorities verify the claim → Eligible funds can be restored The important point is that MRM is a recovery mechanism, not a guarantee that every stolen amount will automatically be refunded. Recovery depends on whether the money can be traced, frozen or secured and whether the case meets the applicable requirements.

**Can You Recover Money Lost in a Cyber Fraud? ** Yes, recovery may be possible if the defrauded money is successfully traced and frozen or otherwise secured. The Government's cyber-fraud response framework is designed to enable rapid coordination between law enforcement agencies and financial institutions. The Ministry of Home Affairs has also stated that real-time action is supported through API integration between the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) and financial institutions to help block fraudulent funds. However, there is no guaranteed refund. If the scammer has already withdrawn, transferred or layered the money through several accounts, recovery can become significantly more difficult. This is why **reporting a cyber fraud immediately is one of the most important steps a victim can take.

How to Report Cyber Fraud in India** If money has been stolen through an online scam, don't wait for the bank statement or try to negotiate with the scammer.** Step 1: Call 1930 Immediately** The national Cyber Crime Helpline number is 1930. Use it as soon as you realise that you have been the victim of financial cyber fraud. The faster the transaction is reported, the sooner the relevant financial and law-enforcement systems can begin responding.** Step 2: File a Complaint on the National Cyber Crime Reporting Portal** You can also report the incident through the Government of India's National Cyber Crime Reporting Portal (NCRP) at cybercrime.gov.in. For financial fraud, provide as much information as possible, including:

• Bank account details
• UPI transaction ID
• Transaction date and time
• Amount lost
• Beneficiary account or UPI ID
• Mobile number used by the fraudster
• Screenshots of conversations
• SMS or email received from the scammer
• Website or suspicious link involved
• Payment receipts
• Any other evidence connected with the fraud Your complaint generates an acknowledgement/reference number, which can be important for tracking and processing the case.** Step 3: Contact Your Bank or Payment Provider** Immediately inform your bank or relevant payment provider about the fraudulent transaction. Ask them to register the transaction as a cyber-fraud incident and take appropriate action under their fraud-response procedures.** Step 4: Cooperate With the Police and Bank** If the money has been frozen or placed on hold, the concerned authorities may require verification and supporting documentation before the amount can be restored. The exact procedure can vary depending on the case, amount, bank, state and circumstances of the fraud.** How Does the MRM Cyber Fraud Recovery Process Work?** The process can broadly be understood in the following stages:**

1. Cyber Fraud Is Reported** The victim reports the financial fraud through 1930 and/or the National Cyber Crime Reporting Portal.**
2. The Financial Trail Is Investigated** The complaint enters the cyber-fraud response system, where the transaction trail can be examined and coordinated with relevant financial institutions.**
3. Fraudulent Funds May Be Frozen or Secured** If the money is still traceable within the financial system, appropriate action may be taken to block or place a lien/hold on the suspected fraudulent funds.**
4. The Case Is Processed for Restoration** Where funds have been secured and the victim's claim is verified, the case can move through the Money Restoration Module.**
5. Verification and Documentation** Depending on the circumstances and applicable procedure, the victim may be contacted for verification and supporting documents.**
6. Eligible Funds Are Restored** Once the relevant authorities complete the required process and approvals, eligible funds can be restored to the rightful victim. The MHA has described the MRM as a mechanism for the expeditious restoration of defrauded money to victims, while the related GRM addresses grievances concerning frozen accounts and lien markings.** What Happens if Your Money Has Been Frozen?** This is an important distinction. A frozen or lien-marked amount is not necessarily the same as money that has already been recovered and returned to you. In a cyber-fraud case, money may be identified and secured within the banking system but still require verification and the appropriate restoration process before it reaches the victim. For example, Delhi Police reported restoring ₹3.59 lakh to victims across 34 cyber-fraud cases through the MRM after verification and documentation. The Government of India has also reported that approximately one lakh citizens had benefited from the Money Restoration and Grievance Redressal mechanisms as of its June 2026 review.** How Long Does Cyber Fraud Money Recovery Take?** There is no single fixed recovery timeline for every cyber-fraud complaint. The time required can depend on:

• How quickly the fraud was reported
• Whether the money is still available in the banking system
• How many accounts the money has passed through
• Whether multiple victims are claiming funds from the same account
• Bank and law-enforcement verification
• Required documentation
• State-specific procedures
• Whether further investigation is necessary Therefore, victims should not assume that reporting a fraud automatically means the money will be returned within a specific number of days.** Does Reporting Within the "Golden Hour" Matter?** Absolutely. The faster a cyber financial fraud is reported, the greater the opportunity for authorities and financial institutions to identify and potentially block the transferred funds before they are withdrawn or moved further. This is particularly important for:
• UPI fraud
• Online banking fraud
• Fake investment scams
• Phishing attacks
• OTP scams
• Digital payment fraud
• Fake customer-care scams
• Impersonation scams Think of it this way: The longer you wait, the more time the fraudster has to move the money. That is why 1930 should be treated as an emergency cyber-fraud number when money has just been stolen.** Is the MRM Portal Free?** The Government's MRM mechanism is intended to facilitate the restoration process for eligible victims; victims should be extremely cautious if anyone claims that they must pay a "release fee," "processing fee," "GST," "security deposit," or "verification charge" to recover their cyber-fraud money. A person claiming to be an MRM agent, police officer, bank officer or government refund officer should not be trusted simply because they know details about your original complaint. Never share:
• OTPs
• UPI PIN
• ATM PIN
• Internet banking password
• Card CVV
• Login credentials
• Remote-access permissions with someone who contacts you claiming they can release your recovered money.** Beware of Fake Cyber-Fraud Recovery Scams** Unfortunately, victims of cybercrime can become targets for a second scam. A fraudster may contact you and say:"Your stolen money has been recovered." They may then demand money to "release" the refund or ask you to install an application, share an OTP or transfer a small amount for verification. This is a major red flag. A genuine cyber-fraud recovery process should never require you to hand over sensitive banking credentials to an unknown caller. If someone approaches you claiming to be from I4C, MHA, NCRP, the police, a bank or the MRM, verify the communication independently through official channels.** MRM Portal vs Cybercrime Reporting Portal: What's the Difference?** These terms are often confused.Platform / SystemMain Purpose1930 Cyber Crime HelplineImmediate reporting of financial cyber fraudNational Cyber Crime Reporting Portal (NCRP)Online reporting of cybercrime complaintsCFCFRMSCoordinates financial cyber-fraud reporting and responseMoney Restoration Module (MRM)Facilitates restoration of eligible defrauded fundsGrievance Redressal Module (GRM)Addresses grievances relating to frozen accounts/lien markings The MRM should therefore be understood as one part of India's larger cyber-fraud response ecosystem, rather than a replacement for reporting the crime. What Documents Should Cyber-Fraud Victims Keep Ready? Keep all evidence related to the incident. Depending on your case, this may include:
• NCRP complaint acknowledgement/reference number
• Bank statement
• Transaction receipt
• UPI transaction ID
• Screenshots
• Fraudster's phone number
• Email address
• WhatsApp or SMS conversations
• Website URLs
• Payment links
• Bank account details
• Screenshots of investment platforms or applications
• Identity documents requested during official verification Do not delete conversations or transaction evidence, even if you have already reported the fraud.** Can UPI Scam Money Be Recovered?** UPI scam money can potentially be recovered if the transaction is reported quickly and the funds can be traced and secured. There is no automatic guarantee that a UPI transaction can be reversed. If you have been affected by:
• Fake UPI payment requests
• QR-code scams
• Fake customer-care scams
• UPI collect-request fraud
• Investment scams
• Phishing links
• Impersonation scams report the incident immediately through 1930 and the National Cyber Crime Reporting Portal. The earlier the complaint reaches the financial cyber-fraud response system, the greater the opportunity for intervention.** What Should You Do Immediately After an Online Scam?** If you have just lost money to a cyber scam, follow this order: 1. Call 1930 immediately. 2. Report the fraud on cybercrime.gov.in. 3. Notify your bank/payment provider. 4. Save transaction IDs and screenshots. 5. Preserve all conversations and evidence. 6. Follow up using your complaint/reference number. 7. Cooperate with verification requests from the appropriate authorities. 8. Ignore anyone asking for OTPs, PINs or money to "release" your refund. Frequently Asked Questions About the MRM Portal What is MRM in cyber crime? MRM stands for Money Restoration Module. It is a mechanism developed under I4C and the Ministry of Home Affairs to facilitate the restoration of defrauded funds to eligible cyber-fraud victims after the money has been identified and secured.** How do I apply for MRM?** MRM operates within India's cyber-fraud response framework. Victims should first report financial cyber fraud through 1930 and/or the National Cyber Crime Reporting Portal and retain their complaint acknowledgement/reference details. The subsequent restoration process depends on the case and verification requirements.** Can I recover money after a UPI scam?** Potentially, yes. Recovery is more likely when the fraudulent transaction is reported quickly and the money can still be traced and secured. However, UPI fraud recovery is not guaranteed.** Is the MRM Portal genuine?** Yes. The Money Restoration Module is a Government of India initiative associated with the Ministry of Home Affairs and I4C and is part of the country's cyber-fraud response framework.** Is MRM available in India?** Yes. The MRM became functional from April 2026 as part of the NCRP-CFCFRMS framework.** What is the 1930 cybercrime number?** 1930 is India's national cybercrime helpline for reporting financial cyber fraud. Victims should report fraudulent transactions as quickly as possible.** Will MRM guarantee my refund?** No. MRM facilitates the restoration of eligible defrauded funds, but recovery depends on whether the money can be traced and secured and whether the claim satisfies the applicable verification and legal requirements.** What if someone asks me to pay money to recover my cyber-fraud funds?** Treat it as a potential scam. Do not share OTPs, UPI PINs, passwords or banking credentials, and independently verify any communication claiming to be from a government agency, police department or bank.** The Best Cyber-Fraud Strategy Is Prevention** The Money Restoration Module gives cyber-fraud victims another route toward recovering funds that have been successfully secured. But recovery should always be the second line of defence. The first line is prevention. Today's scams increasingly rely on:
• Fake bank messages
• Phishing websites
• AI-generated messages
• Fake customer-care numbers
• Investment scams
• UPI payment requests
• QR-code fraud
• Impersonation
• Malicious links
• Fake government notices
• Social-engineering attacks This is where Arjuna – The Cyber Shield can play a preventive role. Instead of waiting until money has been stolen and then beginning the recovery process, the goal is to identify suspicious senders, links and digital sources before you interact with them. Because the best cyber-fraud recovery is the fraud you never have to recover from. Final Takeaway If you have lost money to an online scam in India, act immediately. Call 1930 → Report on cybercrime.gov.in → Notify your bank → Preserve evidence → Follow the official recovery process. The Money Restoration Module (MRM) represents an important development in India's cyber-fraud response system because it creates a more structured digital mechanism for restoring funds that have been successfully frozen or secured. But MRM is not a substitute for fast reporting. Every minute matters when money is moving through a fraud network. Important Disclaimer This article is intended for general cyber-safety awareness and does not constitute legal, banking or financial advice. Cyber-fraud recovery procedures may vary depending on the circumstances of the case, applicable law, financial institution and instructions of the relevant law-enforcement authorities. Always verify information through official Government of India, police, bank or cybercrime channels.