A clip of a woman crying over a “hacked” Bitcoin wallet went round X this weekend. Commenters quickly worked out what had really happened: she had typed her 12- or 24-word recovery phrase into a chat with someone pretending to be support. Nothing was hacked. She handed over the keys.
Indian crypto holders get the same pitch, usually on WhatsApp, Telegram or a fake “customer care” number found through search. This guide covers what to do in the first hour and why your chances depend on where the stolen money ends up.
No real exchange asks for these
CoinDCX’s help centre says it will never ask for your password, OTP, PIN, 2FA codes, private keys or seed phrase. It also says it will never ask you to move funds to “verify” or “unlock” an account, or to install screen-sharing apps. WazirX’s support page says the same about passwords, OTPs, 2FA codes and recovery phrases.
So anyone asking for one of these is a scammer, whatever logo they use. An exchange account doesn’t have a seed phrase at all. If “support” asks for one, they are after your hardware or app wallet.
The first hour, step by step
- Move what’s left. If the wallet still holds anything, send it right away to an address that was never exposed, such as your exchange deposit address or a new wallet with a new phrase. The scammer has the same keys you do.
- Call 1930. The national helpline is run by state police under the Indian Cybercrime Coordination Centre (I4C). Give your name, mobile number and the transaction details. Its FAQ recommends reporting within 48 hours, and sooner is better.
- File on cybercrime.gov.in within 24 hours. The SMS you receive carries an acknowledgement number. The FAQ asks you to use it to file a formal complaint on the National Cybercrime Reporting Portal within 24 hours.
- Choose the crypto category. The portal’s citizen manual lists “Cryptocurrency Crime”, then “Cryptocurrency Fraud”. It asks for the receiving address, where the contact happened (WhatsApp, Telegram, a website) and screenshots. Don’t delete the chats.
- Tell your exchange. If the scammer’s address has received from or sent to an Indian exchange, raise a ticket inside the official app with the transaction hashes. CoinDCX also takes reports of impersonation at [email protected].
BtcMedia’s numbers: how much money actually comes back
A Ministry of Home Affairs reply in the Rajya Sabha (July 2026) gives national totals for FY2023-24 to FY2025-26. These cover all cyber fraud, not just crypto:
| Stage | Amount | Share of reported |
|---|---|---|
| Reported as defrauded | ₹56,087 crore | 100% |
| Put on lien (held) | ₹9,079 crore | 16.2% |
| Refunded to victims | ₹206 crore | 0.37% |
How we calculated this: the shares are our division of the MHA figures (9,079 ÷ 56,087 and 206 ÷ 56,087). The same reply says more than ₹11,158 crore has been “saved” across 32.80 lakh complaints up to 30 June 2026.
The lesson is that a freeze is far more common than a refund. Of every ₹100 reported, about ₹16 was held and about 37 paise came back.
Why a drained wallet is harder
The 1930 system works because it is connected to banks and payment firms. Police can mark the fraud amount as a lien before it leaves the system. A seed-phrase theft skips banks completely. The coins move from your wallet to the scammer’s in minutes, and no Indian intermediary can freeze a wallet address.
In our reading, the realistic points of interception are later on, when the thief tries to cash out. That happens at an exchange that does KYC, or through a P2P sale where an Indian bank account receives rupees. That is why the transaction hashes and receiving addresses in your complaint matter more than your story. They let investigators follow the coins to a desk that can freeze them. Use our FIU-IND registered exchange checker to see which platforms are in the Indian net. Our guide to frozen accounts after P2P sales shows the same lien system working from the other side.
What it means for Indian investors
- Keep your seed phrase offline and never type it into a chat, a form or a “wallet sync” site.
- Reach exchange support only from inside the official app or website, never through a number found in search results or on social media.
- Expect no tax relief. As we explained in stolen crypto and tax, India allows no loss deduction for crypto lost in a hack or scam. The loss set-off calculator shows why VDA losses don’t reduce other gains either.
BtcMedia verdict: treat a seed-phrase request as theft in progress. If you’ve already shared it, a fast 1930 call and a complaint with every address listed give you the best, though still slim, odds.
FAQ
Does CoinDCX or WazirX ever ask for my seed phrase? No. Both state in their help centres that they never ask for passwords, OTPs, 2FA codes or recovery phrases.
How quickly should I report crypto fraud in India? Call 1930 right away. The official FAQ recommends reporting within 48 hours, then filing on cybercrime.gov.in within 24 hours of getting the SMS acknowledgement.
Can police get back Bitcoin taken from my own wallet? Only if they can trace it to someone who can freeze it, usually an exchange. National data shows refunds are rare: ₹206 crore out of ₹56,087 crore reported over three years.
This article is for information only and is not financial or legal advice.