What You'll Learn
- The 24-hour emergency response plan if you have shared data on a fake Yuva Shakti website
- How to lock your Aadhaar biometrics to prevent unauthorised authentication
- Step-by-step process to file a cyber crime complaint on the national portal and WB Cyber Crime portal
- How to hotlist your bank account and report to NPCI for Aadhaar-enabled payment system fraud protection
Fake Yuva Shakti Bharosa Card websites are collecting Aadhaar numbers, bank account details, mobile numbers, and scanned documents from unsuspecting applicants across West Bengal. According to the Resecurity report on Indian PII data leaks, Aadhaar IDs are being offered for sale on the dark web, and threat actors use stolen identity information to commit online banking theft and tax refund fraud. If you have submitted your data to a fraudulent site, time is your most critical resource. The RTI Wiki's AePS fraud recovery guide (May 2026) outlines a clear 24-48 hour action window. Here is exactly what to do, minute by minute.
Hour 1: Dial 1930 — National Cyber Crime Helpline
The first thing you must do is call 1930 — the national cyber crime helpline operated by the Ministry of Home Affairs' Indian Cyber Crime Coordination Centre (I4C). This helpline is toll-free and available 24x7. Tell the operator that you have shared your Aadhaar and bank details on a fraudulent website. They will register a preliminary complaint and provide a reference number. This initial call creates a timestamped record that is crucial for any subsequent bank dispute or insurance claim. Do not skip this step even if you think no financial loss has occurred yet — fraudsters often wait weeks before using stolen data.
Hour 2: Lock Your Aadhaar Biometrics
After calling 1930, immediately lock your Aadhaar biometrics through the UIDAI portal. According to the Paytm guide on Aadhaar data misuse (2026), if you suspect unauthorised use of your Aadhaar biometrics, you should take immediate action by visiting the UIDAI website or mAadhaar app to check your authentication history and lock biometrics. Here is the step-by-step process:
- Visit myaadhaar.uidai.gov.in and log in with your 12-digit Aadhaar number and OTP
- Go to "Lock/Unlock Biometrics" under the Security section
- Click "Lock Biometrics" — this immediately disables fingerprint and iris authentication against your Aadhaar
- Once locked, no one can use your biometrics for authentication without you explicitly unlocking them first
- Download the Lock Acknowledgement for your records
An important note from the RTI Wiki's AePS fraud recovery guide: after locking biometrics, check your Aadhaar authentication history on the same portal to see if any unauthorised authentication attempts have already been made. If you find unrecognised entries, screenshot them — they are evidence for your cyber crime complaint.
Hour 3: File Online Cyber Crime Complaint
After locking biometrics, file a detailed online complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. The portal is the official platform of the Ministry of Home Affairs for reporting all types of cyber crimes. Select "Report Cyber Crime" under the "Citizen" section. Choose the category "Financial Fraud" or "Identity Theft." Provide the following details:
- The fake website URL (if still accessible) or any communication you received
- Your Aadhaar number, bank account number, and mobile number (the ones you shared)
- Date and time when you submitted the data
- Any payment proof if you were charged illegally
- The 1930 complaint reference number
Hour 4: Contact Your Bank and NPCI
Inform your bank immediately about the potential data breach. Ask them to place a temporary freeze or additional verification requirement on your account. The bank can also flag your account for monitoring and block any Aadhaar-enabled Payment System (AePS) transactions — these are the most common way fraudsters drain accounts using stolen Aadhaar biometrics. You can also report the fraud to NPCI through their AePS fraud reporting system at npci.org.in/register-a-complaint.
Within 48 Hours: File an FIR at Your Local Police Station
If you discover that actual financial loss has occurred — money debited from your account without authorisation — file a First Information Report (FIR) at your local police station under Section 420 of the Indian Penal Code (cheating) and relevant sections of the Information Technology Act, 2000. The FIR is essential for any subsequent insurance claim or bank reversal. Carry printouts of your online cyber crime complaint, your Aadhaar authentication history, and your bank statement showing the fraudulent transactions.
| Action | Timeline | Where | Reference |
|---|---|---|---|
| Call 1930 | 1st hour | National helpline | MHA I4C |
| Lock Aadhaar biometrics | 1st hour | myaadhaar.uidai.gov.in | UIDAI |
| Cyber crime complaint | Within 24 hours | cybercrime.gov.in | MHA portal |
| Inform bank + NPCI | Within 24 hours | Branch + npci.org.in | NPCI AePS |
| File FIR | Within 48 hours | Local police station | IPC 420 + IT Act |
How to Check If Your Data Has Already Been Misused
Even if you acted quickly, check for signs that your data may have been compromised. Check your Aadhaar authentication log at myaadhaar.uidai.gov.in for any unrecognised authentication attempts. Monitor your bank account and UPI transactions daily for the next 30 days for any unauthorised debits. Also check your credit score at free platforms like CRIF or Experian — if you see loan inquiries you didn't make, someone may be trying to use your identity for credit fraud. The fastest way fraudsters exploit stolen Aadhaar-bank data is through AePS transactions.
What NOT to Do
- Do not panic — locking biometrics and reporting immediately prevents most damage
- Do not delete any messages, emails, or screenshots from the fake website — they are evidence
- Do not change your mobile number immediately — banks and cyber crime authorities need your current number to contact you
- Do not make any large transactions from the compromised account until the bank confirms the freeze
- Do not share OTPs or UPI PINs with anyone claiming to help you recover from this fraud
Conclusion
Falling for a fake Yuva Shakti website is not the end of the world — but the next 24 hours determine whether the damage stays limited or spirals into identity theft and financial loss. Call 1930 immediately, lock your Aadhaar biometrics on the UIDAI portal, file a detailed complaint on cybercrime.gov.in, and inform your bank and NPCI. These four actions, executed in order within the first 24 hours, can prevent most types of fraud. The cyber crime reporting infrastructure in India — 1930 helpline, NCRP portal, UIDAI biometric lock — is designed for exactly this scenario. Use it promptly and you will likely emerge with no financial loss.
Last Updated: May 21, 2026 | Source: National Cyber Crime Reporting Portal, UIDAI, NPCI AePS Fraud Recovery, RTI Wiki