I clicked a phishing link and entered bank details — what now?

Immediately call your bank to block your card/account, change all passwords, and report to 1930 (Cyber Crime Helpline) within the golden hour.

Time is critical — the first hour after a phishing attack is the 'golden hour' for recovery. Step 1: Call your bank's 24/7 helpline immediately to block your card and freeze your account. Step 2: Call 1930 (National Cyber Crime Helpline) to report the fraud — they can initiate a hold on the fraudulent transaction if done quickly. Step 3: Change passwords of your email, banking apps, and UPI apps from a different device. Step 4: File a complaint at cybercrime.gov.in with screenshots of the phishing message/link. Step 5: File an FIR at the nearest police station. Under RBI guidelines, if you report unauthorized transactions within 3 working days, your liability is limited — zero liability if reported within 3 days and the bank can see it was not your negligence. Do NOT click any more links or respond to follow-up messages from the scammer.

• IT Act Section 66D — Cheating by personation using computer resource
• BNS Section 318 — Cheating
• RBI Circular on Limiting Liability of Customers in Unauthorized Electronic Transactions
• IT Act Section 43 — Penalty and compensation for damage to computer