Skip to content
Kavach
Start
Money just left your account?1930

For anyone who has just been cheated online

You have sixty minutes.We know exactly what to do with them.

India's cybercrime portal gives you a complaint number and then silence. Kavach gives you a case file, ten legal deadlines counting down, and every letter to the police, your bank and the regulator written for you — in your language.

Independent tool. Not a government website.

  • 01Speak in your language, we file in English
  • 02Ten deadlines tracked, not one
  • 03Works on a slow phone

The gap

Filing the complaint is one percent of the job.

Almost everything written about cyber fraud in India stops at “go to cybercrime.gov.in.” But a complaint number does not freeze your money, does not start the clock on your bank's liability, and is not an FIR. Ten different things have to happen, most of them within days, and nobody hands the victim that list.

22.5 lakh
cybercrime complaints filed in a single year
78%
of them are financial fraud
₹22,800 cr
reported lost in 2024–25
~1 in 8
rupees actually recovered

What filing actually feels like

I tried four times to register a complaint. After five minutes the portal threw me out. No complaint means no fraud, as far as the government is concerned.
Siddhartha M., on LinkedIn
After the first page the site stopped responding. Refreshing asked for OTPs again. Eight attempts, still nothing filed.
Deep D., product manager, on LinkedIn
The status said “disposed”. I thought it was solved. Nobody had even called me.
Paraphrased from RTI replies on NCRP disposal
The OTP does not come and the site freezes in the middle. I have been trying for seven hours.
Reddit, r/india

The core idea

Ten clocks are running. You were told about one.

Every one of these is a real deadline in Indian law or procedure. Miss the three-day one and you personally absorb the loss that the bank was obliged to carry. Kavach starts all ten the moment you describe what happened, and tells you which one is closest to expiring.

Running nowStarts later
  1. Call 1930

    Within the first hour

    This is the only step that can stop the money. The helpline pushes a freeze request to your bank and to the bank that received the money. Every extra minute it sits there is a minute the fraudster has to move it into the next mule account.

  2. File on the NCRP portal

    Within 24 hours

    This creates the formal record and routes your case to the right state cyber unit. Without it, the 1930 call has nothing to attach to and the freeze cannot be converted into a return of funds.

  3. Write to your own bank

    Within 3 working days

    The single most valuable deadline in the whole process. If a third party caused the loss and you notify the bank in writing within three working days, the RBI circular puts your liability at zero. A phone call is not notification — you need something in writing with an acknowledgement.

  4. Get an FIR registered

    As soon as you can

    Your portal complaint is not an FIR. For a cognizable offence the police station is obliged to register one, and any station must register a Zero FIR even if the crime happened elsewhere. It is also what unlocks your money: if more than ₹50,000 of it is being held in any one account, the restoration rules make an FIR mandatory before it can be released back to you.

  5. Report the number on Chakshu

    Any time — do it today

    This is a separate system run by the telecom department. Reporting the calling or messaging number gets the connection disconnected and the handset blacklisted, which protects the next person the same fraudster calls.

  6. Provisional credit from your bank

    10 working days after you notified

    Once you have notified them, the bank is expected to put the disputed amount back into your account within ten working days while it investigates. Most victims never learn this and never ask.

  7. Claim the frozen money back

    After your bank confirms money is held

    A freeze is not a refund. Money stopped in the fraudster's account used to sit there for years waiting on a court, and most victims never found out how to ask for it. The Home Ministry's Money Restoration Module changed that: your bank now has to declare how much is actually recoverable, and the investigating officer can order it released to you. Where the amount held in any single account is under ₹50,000, no FIR and no court order are needed.

  8. Escalate to the RBI Ombudsman

    30 days after you wrote to the bank

    If your bank has gone quiet for thirty days after you complained, you can take it over their head. The Ombudsman scheme is free and complaints are filed online. Banks resolve a lot of cases the moment this is filed.

  9. Your bank's 90-day limit

    90 days after you notified

    The bank must close the dispute and fix your liability within ninety days. If it does not, it owes you compensation for the delay. This is the outer boundary of the whole process, and it is the date to hold them to.

  10. Get a free lawyer

    Any time — at no cost

    In its August 2026 directions on digital arrest scams the Supreme Court told State Legal Services Authorities to provide legal assistance to defrauded victims. Free legal aid is a statutory entitlement, not charity, and it covers being represented in court — which is exactly what you need the moment your case turns on a court order to release held money. Women and members of Scheduled Castes and Scheduled Tribes qualify whatever their income; others qualify below a state income ceiling.

Deadlines are drawn from the RBI customer-protection circular on unauthorised electronic transactions, BNSS provisions on registering an FIR, and the published NCRP and 1930 procedure. Kavach explains them; it does not give legal advice.

How it works

Sixty seconds of talking. A complete case file.

0160 seconds

Say what happened

In Bhojpuri, in Tamil, in whatever you actually speak. Press the microphone and talk, or type. No login, no OTP, no captcha.

025 seconds

We work out what you are owed

The model classifies the fraud against the official NCRP categories, pulls out every UPI ID, UTR number, phone number and amount you mentioned, and starts the ten clocks from your incident time.

0320 seconds

Every document, written

Your NCRP description in clean English within the portal's own character rules. A dispute letter to your bank quoting the circular that makes them liable. An FIR application citing the right sections. A script for the 1930 call.

0490 days

Then we keep counting

The case file stays. It tells you the day your bank crosses ten working days, the day you can escalate to the Ombudsman, and what “disposed” on the portal actually means.

Language

You speak. The police read English.

Eighty-eight percent of Indians online prefer a language other than English, and two in five people in rural India search by voice because typing is not realistic. But a police station wants a typed English narrative, and the NCRP description box rejects most punctuation. Today the victim absorbs that gap. Kavach absorbs it instead: you describe the fraud however you speak, and what reaches the authorities is correct, formal English.

23 languages · Try one

The interface itself is hand-translated into English, Hindi, Marathi and Kannada. The remaining nineteen fall back to English in the interface — they are marked in the picker — while the documents Kavach writes can be translated into any of the 23.

Honesty

What is real here, and what is pretend.

This is a hackathon prototype. It has no relationship with the Government of India, and it cannot submit anything on your behalf. Here is the exact line between the two.

Real and working

  • Voice and text intake in 23 languages
  • AI classification against the official NCRP category tree
  • Extraction of UPI IDs, UTRs, accounts, phones and amounts from pasted evidence
  • All ten deadline clocks, computed from real RBI and BNSS timelines
  • Generated NCRP text, bank dispute letter, FIR application and 1930 script
  • Downloadable PDF case pack, and the case file surviving a closed browser

Mocked on purpose

  • No complaint is submitted to cybercrime.gov.in — you copy the text across yourself
  • Complaint status and police-station routing are simulated, not fetched
  • No OTP, no login, no Aadhaar or PAN is collected or verified
  • Reference numbers are generated locally and are not government numbers
  • The case file lives in your browser only; there is no server database

If this were real

Kavach is deliberately shaped as a layer beside the portal, not a replacement for it. At scale it would submit through an authenticated I4C integration rather than clipboard, keep case files in an encrypted store with the citizen holding the key, run the deadline engine as a scheduled job that sends SMS rather than needing the tab open, and hand police a structured, machine-readable case instead of a paragraph. Nothing about the design assumes the citizen has a fast phone or a stable connection.

Questions

The things people ask at two in the morning.

Is this the government's website?

No. Kavach is an independent tool built for a hackathon. The official portal is cybercrime.gov.in and the official helpline is 1930. We prepare everything you need and then send you to them.

Is a portal complaint the same as an FIR?

No, and this is the single most expensive misunderstanding in Indian cyber fraud. The portal gives you a complaint number. An FIR is registered by a police station, and for a cognizable offence the station is obliged to register one. If your loss is significant you should do both. Kavach writes the FIR application for you.

What does “disposed” mean on the portal?

Usually that the complaint was routed onward to a police unit — not that anyone investigated it or that your money is coming back. Treating it as the end of the matter, and dropping the parallel bank dispute, is the most common way victims lose money they were entitled to recover.

Why does the three-day deadline matter so much?

Under the RBI circular on unauthorised electronic transactions, if a third party caused the loss and you notify your bank in writing within three working days, your liability is zero. Notify later and you start absorbing part of the loss yourself. The clock runs from when you received the bank's message, not from when you noticed.

What happens to what I type here?

The case file is written to your browser's own storage and never leaves your device, except that the text you write is sent once to the language model to classify and draft. Do not enter your Aadhaar number, PAN, passwords or OTPs — Kavach never asks for them and never needs them.

I do not have any evidence. Is it pointless?

No. File anyway. A bank statement line with a date, an amount and a UTR number is often enough to start a freeze. Kavach will tell you what is missing and what you can reconstruct from your bank's app.