Online gaming fraud evidence to preserve in first 48 hours

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 3 Nov 2026 · Digital evidence

If you have lost money in an online game, through a fake skin marketplace, a dishonest top-up site, a rigged trading game or an in-game investment that never paid out, the evidence you save in the first 48 hours will decide whether the case moves at all. The Information Technology Act, 2000, sections 66C and 66D deal with identity theft and with cheating by personation using a computer resource, while the Bharatiya Nyaya Sanhita, 2023, sections 318 and 319 cover cheating and cheating by personation. A gaming-fraud case almost never fails because the police refused to register it. It fails because the victim deleted the chat, wiped the app, or lost the account before the proof was captured.

Speed matters as much as proof. Payment systems can be traced and frozen only within a limited window, and gaming platforms retain their own logs for a fixed period. In the first two days your job is to lock the evidence down, report to the national cyber-crime helpline 1930 and to cybercrime.gov.in, notify your bank in writing, and keep the account frozen but intact so that a lawyer can later certify the records under section 63 of the Bharatiya Sakshya Adhiniyam, 2023.

What the law says

Three streams of law apply to online gaming fraud in India, and they usually operate together rather than as alternatives. The first is the Information Technology Act, 2000. Section 66C punishes identity theft, where a person fraudulently or dishonestly uses another person's electronic signature, password or other unique identification feature. Section 66D punishes cheating by personation by using a computer resource or a communication device. Section 66 generalises computer-related offences, and section 67 covers publishing obscene material in electronic form, which becomes relevant where a scammer also threatens or blackmails the victim after the loss.

The second stream is the Bharatiya Nyaya Sanhita, 2023. Section 318 covers cheating, and section 319 covers cheating by personation. Where a fraudster induces the victim to part with money on a false promise, section 318 is the natural charge. Section 316, criminal breach of trust, applies where money or a game asset was entrusted for a specific purpose, such as a top-up or an escrow for a game-asset trade, and was then misappropriated. Section 336 covers forgery, used where a fake invoice, KYC document or payment screenshot is manufactured to keep the victim paying.

The third stream is procedure. The Bharatiya Nagarik Suraksha Sanhita, 2023, section 173 governs the registration of an FIR and permits it to be filed electronically, with a requirement that it be reduced to writing and signed where the informant appears in person. Section 175(3) relates to the power to require attendance and matters for securing the appearance of an accused, while section 35 allows a police officer to require the attendance of a person acquainted with the facts. For digital material, section 63 of the Bharatiya Sakshya Adhiniyam, 2023, sets out when an electronic record is treated as a document and what the accompanying certificate must contain, which is precisely why raw screenshots are weaker than an exported, hashed record supported by a proper certificate.

The first 48 hours, step by step

1. Do not uninstall, reset or sign out of anything. Keep the phone, the game app and the linked account exactly as they are. A factory reset or a fresh install can wipe locally cached chat and transaction data.
2. Capture while it is live. Take screenshots of the fraudster profile, the username or user ID, the chat thread, the payment request, the UPI or card transaction page and the in-game transaction history, making sure the date and time are visible.
3. Export, do not only screenshot. Where the app or platform allows, export the chat transcript, the transaction statement and the profile page. Download the bank or wallet statement as a PDF the same day.
4. Report to 1930 immediately. Call the national cyber-crime helpline or file on cybercrime.gov.in and note the acknowledgement number. This is what starts the tracing of the transaction.
5. Write to your bank the same day. Send an email and also a written complaint to the branch and to the cyber-fraud nodal officer, asking that the transaction be flagged as disputed and the beneficiary account put on hold.
6. File a police complaint. Approach the cyber cell or the police station with jurisdiction, or file electronically under section 173 of the BNSS, attaching the platform records and the bank statement.
7. Preserve the certificate trail. Ask the platform for a transaction log addressed to the investigating officer, which a lawyer can later support with a section 63 certificate under the Bharatiya Sakshya Adhiniyam.

What to keep, and where it lives

How these scams actually run

Most online gaming fraud follows one of a few shapes. In the fake-marketplace model, a website or social page imitates a legitimate skin or account trading platform and collects payment for an asset that is never delivered. In the top-up model, a page promises a discounted in-game currency and takes UPI or card payment through a page that mimics the official checkout. In the trading-game model, a slick app showing live graphs and a rising balance is really a controlled display: the numbers are entered by the operator, and the victim is encouraged to deposit more before the withdrawal fails. In the betting-gambling model, the platform simply declines to pay winnings and blocks the account.

In every shape, the money leaves through a mule account within minutes. That is why your 1930 report and your bank's freeze request are time-sensitive and why the sequencing in the first 48 hours matters more than the length of your later explanation.

Bank liability and RBI directions

Where the loss moved through a bank account, card or wallet, the liability of the customer is governed by the Reserve Bank of India's directions on customer protection and on limiting liability in unauthorised electronic banking transactions. Broadly, a customer who reports an unauthorised transaction promptly, and whose own negligence did not cause the loss, is placed in a stronger position than one who reports late. The reversal or non-reversal of a transaction depends on the bank's investigation, the point at which the fraud was reported relative to the transaction, and whether the credentials were shared by the customer. Reporting in writing, and keeping proof of the date and time of that report, is therefore essential, because the liability tiers are measured from the moment the customer notifies the bank.

What decides the outcome

Three factors decide whether a gaming-fraud complaint becomes a charge-sheet and a recovery. The first is whether the money can be traced before it is layered away; fraudsters move funds through a chain of accounts within hours, so the timing of the 1930 report and the freeze request outweighs almost anything said later. The second is whether the digital evidence is authentic and complete; a court weighs a chat that shows the entire negotiation differently from a lone screenshot of a payment, and a section 63 certificate describing the device, the extraction process and the hash of the record makes an electronic record far easier to rely on. The third is whether the victim's own conduct contributed to the loss, for example by sharing an OTP or a password, which shifts the analysis toward contributory negligence and weakens both the criminal case and the bank-liability claim.

Common mistakes that destroy a gaming-fraud case

• Deleting the chat or the fraudster's contact after the loss, out of embarrassment or anger.
• Uninstalling and re-installing the game, which can erase locally stored transaction history.
• Reporting only to the game's support desk and treating that as a legal complaint.
• Sharing fresh OTPs with a recovery agent who contacts the victim after the loss, a second fraud layered on the first.
• Waiting weeks to approach the bank, by which time the transaction trail has gone cold.
• Paying the fraudster again on a promise of a refund or a verification deposit.

Reporting channels and escalation

There are four channels, and they are not substitutes for one another. The helpline 1930 and cybercrime.gov.in start the national tracing process. Your bank's nodal officer handles the freeze and the liability question. The local police or cyber cell produces the FIR. A magistrate can be approached under the BNSS where a police station declines to register a complaint. In Kolkata and across West Bengal, complaints may be filed with the cyber cell and, where escalation is needed, before the Bankshall Court or the City Sessions Court, with the Calcutta High Court as the supervisory court for the state. A cyber crime lawyer in Kolkata can coordinate these channels and prepare the electronic-records certificate so that the file is court-ready at the first hearing.

Documents you will need when you file

When you file the complaint, carry a compact set of documents rather than a folder of everything. You will need the bank or wallet statement showing the disputed transaction with its reference number, the exported chat and transaction history from the game, the fraudster's profile details, and the acknowledgement from 1930 or cybercrime.gov.in. If the loss went through a card, keep the card statement and the merchant descriptor exactly as it appears. If it went through UPI, note the UPI ID and the beneficiary name shown. A short written chronology, one page at most, listing what happened and when, helps the officer more than a long narrative, and it gives your lawyer a clean base to work from.

What the platform can and cannot give you

The game or platform can usually provide the transaction history, the account and device details tied to the fraudster's profile, and the chat records held in its own system. It cannot give you bank records or the identity behind a mule account. It may also refuse to share data without a legal request, which is why a written demand from the investigating officer and, where needed, a court order matter. A request routed through the cyber cell, citing the relevant provisions of the IT Act and the BNSS, is treated very differently from a support ticket raised by a victim. Keep a copy of every request you send, because the timeline of those requests becomes part of your file.

When to involve a lawyer

You should involve a lawyer when the amount is significant, when the police have not registered an FIR despite a written complaint, when the bank has rejected a liability claim, or when the fraudster has begun to threaten or blackmail you. A lawyer can file a complaint before the magistrate, seek preservation orders, and build the section 63 certificate that makes the digital trail usable in court. For a first consultation and to understand what your file needs, you can reach out through contact. Quiet, early and correct steps on evidence are worth more than a loud complaint filed late.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• UPI Fraud Evidence: What to Preserve in 48 Hours
• Instant loan app fraud: evidence to preserve in 48 hours
• Business email compromise: evidence to preserve in 48 hours
• Work from home scam evidence to preserve in first 48 hours
• Trading app scam: the evidence to preserve in 48 hours
• Loan app harassment: evidence to preserve in 48 hours

Cyber crime lawyer in your city · Bank account freeze help · Contact