Fell for an OTP Scam? Act Now: Where to Complain and How to Recover Your Money Immediately

Discovering that you have been defrauded through a mobile One-Time Password (OTP) scam is a stressful experience. Cybercriminals frequently use these temporary codes to drain bank accounts, hijack digital wallets, and compromise personal identities. If you just realized you fell victim to an OTP scam, you must act fast. Taking immediate, structured steps can contain the financial damage and help you recover your losses.

1. Freeze Your Financial Accounts Instantly

Your immediate priority is to cut off the attacker's access to your money.

• Call your bank: Contact your bank's emergency helpline to freeze your accounts, debit cards, and credit cards.
• Block digital wallets: Deactivate linked UPI applications, mobile wallets, and net banking access.
• Request a token reset: Ask your financial institution to revoke all active digital sessions associated with your profile.

2. Where to File an Immediate Official Complaint

Documenting the fraud officially is required for insurance claims, liability waivers, and legal protection. Depending on your location, you must contact these specific authorities immediately:

If you are in India:

• Call the National Cyber Crime Helpline: Dial 1930 immediately. This is a dedicated helpline to report financial cyber fraud and freeze stolen funds in real-time before scammers can withdraw them.
• File an online complaint: Visit the official portal at cybercrime.gov.in to log the incident.
• Visit local police: File a First Information Report (FIR) at your nearest cyber police station. Save copies of the official complaint receipt, as banks require this paperwork to process fraud disputes.

If you are in the United States:

• Report to the FBI: File a complaint with the Internet Crime Complaint Center (IC3) at ic3.gov.
• Notify the FTC: Report the identity theft and fraud to the Federal Trade Commission at reportfraud.ftc.gov.

If you are in the United Kingdom:

• Contact Action Fraud: Report the scam online at actionfraud.police.uk or call 0300 123 2040.

3. Secure Your Mobile Network and Device

Attackers sometimes use SIM-swapping or malicious apps to steal OTPs directly from your network.

• Contact your carrier: Call your mobile network provider to check if any unauthorized SIM duplication or call-forwarding requests were made.
• Update account PINs: Change the password or PIN of your cellular network account to prevent hackers from porting your number.
• Scan for malware: Run a reputable antivirus scan on your phone to ensure a malicious app isn't silently reading your incoming SMS messages.

4. Change All Security Credentials

An OTP compromise often indicates that hackers already have your primary passwords.

• Update master passwords: Change passwords for your email accounts, banking portals, and social media profiles immediately.
• Switch your MFA method: Move your two-factor authentication (2FA) away from SMS-based OTPs. Instead, use secure authenticator apps like Google Authenticator or Microsoft Authenticator, which cannot be intercepted via SMS.