It’s one of those moments that hits hard. You open your account and notice a trade you never placed, or shares missing from your holdings. In that instant, confusion turns into panic.
But here’s the thing—speed matters more than anything else. If you act quickly, especially within the first few hours, you can limit damage and even recover your assets. Let’s walk through what you should do, step by step.
1. Immediate Lockdown (First 30 Minutes)
This is your most critical window. Don’t wait. Act right away.
Freeze Your Account
Contact your broker or Depository Participant immediately. Ask them to freeze your account so no further transactions can happen.
Many apps now have a built-in “Freeze” or “Kill Switch” option—use it instantly if available.
Change All Passwords
Don’t just change your trading password.
Also update:
- Email password
- Bank login credentials
- Trading app password
Hackers often enter through your email first, then access everything else.
Switch to Stronger Authentication
If you’re still using SMS OTP, upgrade.
Use apps like:
- Google Authenticator
- Microsoft Authenticator
These generate time-based OTPs and protect against SIM swap fraud.
2. Report the Incident (Same Day)
Once your account is secured, start documenting everything.
Inform Your Broker
Write a detailed email to your broker’s compliance team:
- Date and time of suspicious activity
- Stock name (scrip)
- Quantity
- Screenshots if possible
This creates an official record.
File a Cybercrime Complaint
Report the incident immediately on:
- National Cyber Crime Portal (India)
- Or call helpline 1930
A formal complaint helps in investigation and recovery.
Inform Your Bank
If money has been transferred out:
- Call your bank’s fraud department
- Request them to freeze suspicious transactions
Quick action can sometimes stop funds before they move further.
3. Escalate If Needed
If your broker is slow or unresponsive, don’t sit back.
You have proper channels.
Raise Complaint with SEBI
Use the SCORES platform to file a complaint. It ensures your issue is tracked officially.
Contact Depositories
Reach out to:
- NSDL
- CDSL
They maintain your actual share records and can track unauthorized transfers.
4. Can You Recover Your Money or Shares?
Yes—sometimes.
Recent rules have made things clearer for investors.
Zero Liability Rule
If you report fraud quickly (usually within 3 days):
- Your liability may be zero
- Provided you didn’t share your OTP or password
Investor Protection Fund (IPF)
If the issue is due to broker failure or system-level fraud:
- You can claim compensation
- Managed through exchanges like
-
- NSE
- BSE
5. Warning Signs You Should Never Ignore
Most hacks don’t happen suddenly. There are early signals.
Watch for:
- OTPs you didn’t request
- Password reset emails you didn’t initiate
- Login alerts from unknown locations
- Sudden account changes (email/mobile update)
If you notice any of these, act immediately—even before a transaction happens.
Quick Emergency Checklist
- Freeze account instantly
- Change all passwords
- Enable secure authentication
- Inform broker
- File cyber complaint
- Notify bank
- Escalate if needed
Final Thought
A hacked Demat account feels scary, no doubt. But the system today is designed to protect investors—if you respond quickly.
The difference between a small issue and a major loss often comes down to how fast you act. Stay alert, use strong security, and never ignore unusual activity.
In trading, timing matters. And in situations like this, it matters even more.
