How to Recover a Hacked eSewa or Khalti Account Safely
Immediate action steps, official helplines, cyber bureau reporting, money recovery chances, and how to permanently protect your digital wallet from future fraud in Nepal.
1) Open eSewa/Khalti app → change your MPIN and password immediately. 2) Screenshot all unauthorized transactions with transaction IDs. 3) Call eSewa (01-5970016) or Khalti (01-5970003) — report fraud with transaction IDs and request account freeze. 4) Call Nepal Police Cyber Bureau (9851286770) to file a complaint. 5) Report to Nepal Rastra Bank (01-4410158). Speed is everything — the sooner you act, the higher the chance of recovery.
- Signs your eSewa or Khalti account has been hacked
- Immediate steps to take in the first 30 minutes
- How to recover a hacked eSewa account
- How to recover a hacked Khalti account
- How to report to Nepal Police Cyber Bureau
- Will you get your money back? Recovery chances
- How eSewa and Khalti accounts get hacked in Nepal
- Legal rights and ETA 2063 protection
- How to permanently secure your digital wallet
- Frequently asked questions
๐ Signs your eSewa or Khalti account has been hacked
Many users don't realize their digital wallet has been compromised until significant damage is done. Knowing the warning signs can help you act immediately — before the attacker drains your balance or uses your identity for further fraud.
| Warning Sign | What It Means | Urgency |
|---|---|---|
| Unexpected SMS OTP you didn't request | Someone is trying to log into your account right now | ๐ด Act immediately |
| Unknown transactions in your statement | Money has already been moved — account is compromised | ๐ด Act immediately |
| Cannot log in with your password | Hacker has already changed your credentials | ๐ด Use "Forgot Password" now |
| Balance is lower than expected | Unauthorized transfers may have occurred | ๐ด Check statement, call helpline |
| Your registered mobile gets logged out | Account accessed from another device | ๐ Change password immediately |
| Friends receive payment requests from "you" | Your account is being used to scam your contacts | ๐ Freeze account, warn contacts |
| Email notification of password change you didn't do | Hacker has taken over your linked email too | ๐ด Recover email first, then wallet |
| Unfamiliar linked bank account in settings | Attacker added their own account for withdrawals | ๐ด Call helpline, request account review |
⚡ Immediate steps to take in the first 30 minutes
The first 30 minutes after you discover your account has been hacked are the most critical. Digital transactions can be temporarily frozen before they are fully settled — but only if you act fast. Here is exactly what to do, in order:
Change your MPIN and password immediately
If you can still log in: open the eSewa or Khalti app → go to Profile → Change MPIN and also Change Password. Use a completely new PIN that you have never used elsewhere. Do not use your birth year, phone number, or 123456. Do this before calling anyone.
Screenshot every suspicious transaction
Go to your app's Statement / Transaction History. Take screenshots of every transaction you did not authorize. Note down: the transaction ID, amount, date, time, and recipient number. This evidence is critical for both the helpline and the Cyber Bureau complaint.
Call the wallet helpline immediately — request account freeze
Call eSewa: 01-5970016 or Khalti: 01-5970003. Tell them your account was compromised. Provide your registered phone number, the unauthorized transaction IDs, and ask them to: (a) freeze further outgoing transactions, (b) flag the recipient account, and (c) open a fraud investigation ticket.
Call Nepal Police Cyber Bureau
Call 9851286770 or 01-5319044. Report the incident. They can coordinate with payment companies to freeze recipient accounts faster than going through civilian channels alone. If you cannot call, email cyberbureau@nepalpolice.gov.np with your screenshots and all details.
Secure your linked phone number and email
Your digital wallet is linked to your phone number and email. If your email was also compromised, recover it immediately (Gmail/Yahoo account recovery) and change the email password. If your SIM was swapped, visit your telecom provider (Ncell or NTC) with your citizenship to recover it. An unsecured linked email means the hacker can reset your wallet password repeatedly.
Do NOT try to contact the scammer directly
Never call back the number that scammed you, reply to their messages, or transfer any money to "get your money back." These are secondary scams where fraudsters call victims again pretending to be "recovery agents" and steal even more money. Only communicate with official helplines and the Cyber Bureau.
๐ข How to recover a hacked eSewa account
eSewa (esewa.com.np) is operated by F1Soft International and has an active fraud response team. Here is the specific recovery process for eSewa accounts:
Try "Forgot Password" to regain access
If you cannot log in, use the Forgot Password option on the app or esewa.com.np. This sends an OTP to your registered mobile number. If you receive the OTP successfully, create a new strong password immediately.
If your registered number was also changed — call support
If the hacker changed your registered mobile number too, you cannot use Forgot Password. Call 01-5970016 immediately. eSewa support can verify your identity through your KYC details (citizenship number, full name, date of birth) and restore your account access.
Visit eSewa's office with KYC documents (if needed)
For severe compromises, eSewa may require you to visit their office in person with: your citizenship ID, the phone number registered to the account, and a written complaint. eSewa's corporate office is in Kathmandu. Their fraud team will conduct an internal investigation and reset your account securely.
Request transaction reversal with evidence
Provide eSewa support with all transaction IDs of unauthorized transfers. eSewa investigates fraud cases and may reverse unauthorized transactions if reported quickly. They can flag the recipient account and work with Cyber Bureau to trace the funds. Reversal is not guaranteed but is possible when reported fast.
Email eSewa with a formal fraud complaint
Send a written complaint to support@esewa.com.np with: your full name, registered phone number, citizenship number, screenshots of all unauthorized transactions, a description of how the fraud occurred, and your police/Cyber Bureau complaint reference number.
๐ฃ How to recover a hacked Khalti account
Khalti (khalti.com) is operated by Sparrow Pay Private Limited. The recovery process is similar to eSewa but has some differences in contact points and verification procedures:
Use "Forgot PIN" in the Khalti app
Open the Khalti app → on the login screen, tap Forgot PIN. An OTP will be sent to your registered mobile. Enter it and set a new 6-digit PIN. If successful, also change your password under Settings → Change Password.
Call Khalti support with transaction evidence
Call 01-5970003 and provide: your Khalti registered mobile number, full name, the unauthorized transaction IDs and amounts. Request an immediate account hold on outgoing transactions while the investigation is open. Also request that the recipient account be flagged.
Submit a support ticket at khalti.com/contact
Visit khalti.com/contact and submit a detailed support request with all evidence attached. Email: support@khalti.com. Include: your name, registered number, incident description, transaction screenshots, and if available, the phone number or eSewa/Khalti ID of the scammer who received your money.
Provide your Cyber Bureau case number to Khalti
Once you have filed a complaint with the Cyber Bureau and received a case/reference number, provide it to Khalti support. A formal police complaint significantly strengthens your case for transaction reversal and increases the urgency of Khalti's internal investigation.
๐ How to report to Nepal Police Cyber Bureau
Filing a complaint with Nepal Police's Cyber Bureau is essential for any significant digital wallet fraud. The Cyber Bureau has legal authority to freeze accounts, trace funds, and prosecute offenders under the Electronic Transactions Act 2063.
Option 1: File online (fastest if you cannot travel)
Visit the Cyber Bureau portal
Go to cyberbureau.nepalpolice.gov.np/report-cyber-crime/ and select the category: "Computer-Related Fraud" for eSewa/Khalti wallet fraud.
Fill in the complaint form
Fill the form in English, Nepali, or both. Include: your full name, citizenship number, incident date and time, description of how the fraud occurred, amount lost, transaction IDs, and the recipient phone number/wallet ID if known.
Attach evidence and submit
Upload: screenshots of unauthorized transactions, any suspicious messages/calls you received, and your citizenship copy. If you cannot upload, email everything to cyberbureau@nepalpolice.gov.np.
Option 2: Visit Cyber Bureau in person (for large fraud cases)
For cases involving significant amounts, visiting in person is recommended. Bring: a written complaint (in Nepali or English), printed screenshots of all transactions, your citizenship ID, and if available, a printout of the suspicious messages you received.
๐ฐ Will you get your money back? Recovery chances
This is the most important question for every victim. The honest answer is: it depends heavily on how quickly you act.
| Time Since Fraud | Recovery Chance | Why | What to Do |
|---|---|---|---|
| Within 30 minutes | ๐ข HIGH | Funds may still be in transaction pipeline; recipient account can be frozen before withdrawal | Call helpline + Cyber Bureau simultaneously |
| 30 minutes – 2 hours | ๐ก MEDIUM-HIGH | Transaction settled but recipient may not have withdrawn yet | Urgent call to helpline, request recipient account freeze |
| 2 – 12 hours | ๐ก MEDIUM | Depends on whether scammer cashed out; most professional scammers withdraw fast | File Cyber Bureau complaint immediately |
| 12 – 24 hours | ๐ LOW-MEDIUM | Likely withdrawn; Cyber Bureau can still trace and prosecute | Focus on police case and legal process |
| After 24+ hours | ๐ด LOW | Funds almost certainly withdrawn and converted; prosecution possible but money recovery unlikely | File police case for legal record; focus on prevention |
Beware of "money recovery" scammers — a secondary fraud
After being scammed, many victims in Nepal are targeted by a second wave of fraudsters who pose as "recovery agents" or "wallet investigators" claiming they can get your money back for a fee. This is always a scam. No legitimate recovery agent charges upfront fees. The only legitimate recovery channels are eSewa/Khalti support and the Nepal Police Cyber Bureau — both of which are free.
๐ฏ How eSewa and Khalti accounts get hacked in Nepal
The golden rule that prevents all of these scams
eSewa, Khalti, Nepal Rastra Bank, and all legitimate financial institutions will never call you to ask for your OTP, MPIN, or password. No exception. Ever. The moment anyone on a call, SMS, or WhatsApp asks for your OTP or PIN — hang up or delete the message. It is always a scam.
⚖️ Legal rights and ETA 2063 protection
As a victim of digital wallet fraud in Nepal, you have legal protection under the Electronic Transactions Act (ETA) 2063. Filing a formal complaint is not just about recovering money — it creates a legal record that can lead to the prosecution of the scammer and protection of other potential victims.
| Crime | ETA 2063 Section | Maximum Punishment |
|---|---|---|
| Hacking / Unauthorized Account Access | Section 45 | Up to 3 years imprisonment + NPR 2,00,000 fine |
| Computer / Digital Payment Fraud (OTP scams) | Section 51 | Up to 2 years imprisonment + NPR 1,00,000 fine |
| Identity Theft / Impersonation | Section 47 | Up to 5 years imprisonment + NPR 1,00,000 fine |
| Abetment of cyber crime | Section 52 | NPR 50,000 fine |
| Data theft / unauthorized disclosure | Section 48 | Up to 2 years + NPR 1,00,000 fine |
Filing a complaint is free and important
Filing a Cyber Bureau complaint costs nothing. Even if your money cannot be recovered, your complaint contributes to Nepal's cybercrime database, helps police identify repeat offenders, and creates accountability for digital payment providers to improve their fraud prevention systems. Every reported case matters.
๐ How to permanently secure your digital wallet
After recovering your account — or even if you have never been hacked — these steps will dramatically reduce your risk of future fraud:
- ✓Use a unique, hard-to-guess 6-digit MPIN — not your birth year, phone number, or sequential numbers (123456, 654321). Change it every 6 months.
- ✓Never share your OTP with anyone — this is the most important rule. Not with "support agents", not with friends, not with family. OTPs are for your eyes only.
- ✓Use the official app only — download eSewa and Khalti exclusively from Google Play Store or Apple App Store. Never install from third-party links or APK files.
- ✓Check your transaction statement weekly — regular monitoring catches unauthorized transactions early, giving you the best chance of recovery.
- ✓Enable screen lock on your phone — use fingerprint, face ID, or a strong PIN. Anyone with physical access to an unlocked phone can drain your wallet in minutes.
- ✓Never use public WiFi for wallet transactions — open WiFi networks can be intercepted. Use your mobile data for any eSewa/Khalti payment.
- ✓Keep the app updated — updates include critical security patches. Enable auto-update for eSewa and Khalti apps.
- ✓Verify URLs carefully — the only legitimate websites are esewa.com.np and khalti.com. Any variation (esewa-support.com, khaltiapp.net, etc.) is a phishing site.
- ✗Don't log in on shared or borrowed phones — if you must, log out completely and clear the browser cache immediately after.
- ✗Don't keep large balances in your wallet — only maintain what you need for daily use. Transfer excess to your bank account. Smaller balances mean less to lose if compromised.
❓ Frequently asked questions
๐ Key Takeaways — Recover Hacked eSewa / Khalti Account
- Speed is everything: the first 30 minutes after discovering the hack give you the highest chance of freezing funds and initiating recovery.
- Call eSewa: 01-5970016 or Khalti: 01-5970003 immediately with unauthorized transaction IDs. Request account freeze and fraud investigation.
- File a complaint with Nepal Police Cyber Bureau (9851286770) — this is legally required for prosecution and strengthens your recovery case with the wallet company.
- The most common scam vectors are: fake support calls asking for OTP, phishing SMS links, reward/lucky draw messages, and fake KYC drives. All are preventable by never sharing OTPs.
- eSewa, Khalti, banks, and Nepal Rastra Bank will NEVER ask for your OTP or PIN. If anyone asks for it, it is always a scam — regardless of how official they sound.
- Digital wallet fraud is a crime under ETA 2063 Section 51 — punishable by up to 2 years imprisonment + NPR 1,00,000 fine. Hacking under Section 45 carries up to 3 years + NPR 2,00,000 fine.
- Beware of secondary "recovery" scammers who target fraud victims — they charge fees to "recover" your money and steal more. Only use official helplines and the Cyber Bureau.
- Prevent future hacks by: using unique MPINs, enabling phone screen lock, checking statements weekly, only using the official app, and never logging in on public WiFi.
Discussion