If money has just left your account, stop reading and call 1930. The national cyber-crime financial-fraud helpline works across India, and the first hour — the so-called golden hour — is when a transfer can still be frozen at the receiving bank. Everything else in this article can wait until after that call.
What is actually happening in Mumbai
Mumbai Police cyber records put credit and debit card fraud at the top of registered cases, followed by share-market and online investment fraud and fake social-media profile or morphed-content complaints. Digital-arrest impersonation calls, mule-account networks and malicious APK links round out the pattern. It is a fraud-led, finance-led threat picture rather than a purely technical one.
Notice what is missing from that list: almost none of it is technical. These are social-engineering attacks. The software defence is straightforward; the human defence is what fails.
How to report, in order
- Call 1930 immediately for any financial fraud. Do this before you tell anyone else, before you post about it, before you try to negotiate with the caller.
- File at cybercrime.gov.in. You get an acknowledgement number — keep it. Non-financial crimes such as harassment, account takeover and sextortion are filed on the same portal, and certain categories can be filed anonymously.
- Go to your local cyber police station. Mumbai has a dedicated cyber crime unit that handles the follow-up.
- Preserve everything. SMS, UPI transaction IDs, the caller's number, screenshots, the app you were asked to install. Do not factory-reset the phone — that destroys the evidence.
The same city, very different scams
Fraud follows the local economy. A wholesale market, a corporate park, a student rental belt and a retirement colony each get a different script, which is why generic "cyber safety tips" fail so many people. Across Mumbai:
- Powai: Startup teams shipping fast with public cloud misconfiguration, exposed API keys in repositories, and third-party SaaS integrations granted more access than the product needs.
- Kandivali: Manufacturing and supplier networks here run legacy Windows and flat plant networks, where a single ransomware infection stops production rather than just email.
- Kurla: High-volume retail and transit fraud: UPI collect-request tricks, fake refund calls after online orders, and card skimming risk around crowded ATM clusters near the terminus.
- Vashi: Trade-payment fraud in the APMC ecosystem, where deals close on messaging apps and payment instructions are altered on forged letterheads before transfer.
- Dadar: Small traders here run business on personal UPI handles and shared devices, exposing them to fake payment-confirmation screenshots and refund-reversal scams.
- Churchgate: Commerce and law students are prime targets for scholarship, visa and study-abroad fee scams, while cafe and campus Wi-Fi is routinely used for unprotected account access.
The three habits that prevent most of it
Never install a screen-sharing app because a caller asked you to. No bank, no police force and no government department will ever require it. Remote-access apps are the single most common tool in Mumbai fraud calls.
Treat urgency as the warning sign. Digital-arrest and KYC-expiry scams work by removing your time to think. Any caller creating a deadline is running a script.
Verify bank-detail changes out of band. If a supplier emails new account details, phone them on a number you already had. That one habit stops most business email compromise.
Learning the defensive side properly
If you want to understand these attacks rather than just avoid them, the cyber security course in Mumbai covers SIEM, log analysis, incident response and digital forensics basics. Learners join live online from Malad, Vile Parle, Kurla, Thane, Belapur and across the rest of the city.
FAQ
How do I report cyber crime in Mumbai?
Call 1930 immediately for financial fraud — the first hour is when a transfer can still be frozen. File the complaint at cybercrime.gov.in and keep the acknowledgement number, then follow up at your local cyber police station. Preserve the SMS, UPI reference numbers, caller ID and screenshots.
Can I get my money back after a cyber fraud?
Sometimes, and speed decides it. Reporting to 1930 within the first hour gives the best chance of the receiving bank freezing the funds before they are withdrawn or layered through mule accounts. Delay of even a day makes recovery substantially harder.
What is a digital arrest scam?
A caller impersonating police, CBI or a courier company claims a parcel or bank account is linked to a crime, then keeps the victim on a video call under fake "custody" until money is transferred. No Indian law enforcement agency conducts arrests over video calls or demands transfers to clear your name.
Mumbai me cyber fraud ho jaye to kya karein?
Turant 1930 par call karo — pehla ghanta sabse zaroori hai, usi me transfer freeze ho sakta hai. Phir cybercrime.gov.in par complaint file karo aur acknowledgement number sambhal ke rakho. SMS, UPI reference, caller number aur screenshots delete mat karo, aur phone reset bilkul mat karo.
Talk to the trainer before you pay anyone
Cyber Defence teaches Mumbai learners live online from its Hisar campus — we have no branch in Mumbai and we will not pretend otherwise. The counselling call is free and if the course is not right for you, we will say so. Call or WhatsApp +91-75175-72000, or read the full cyber security course in Mumbai and ethical hacking course in Mumbai pages.