Money missing that you never spent is stressful, but the right first move depends entirely on where it disappeared from. Here is exactly who to contact, in what order, and what to have ready before you call.
Do this first, regardless of the source: take a screenshot of the deduction (SMS, app history, or statement) immediately, note the exact time and amount, then contact the provider directly - your telecom operator, bank, or wallet - before anyone else. Escalate to Nepal Police's Cyber Bureau only if the provider does not resolve it or if you suspect fraud rather than a billing error.
Two very different situations, two different processes
Not every unexpected deduction is a scam. A large share of complaints in Nepal turn out to be billing or service errors - an unwanted value-added service (VAS) subscription like a game or ringtone pack running silently in the background, or a data charge applied when it should not have been. These are resolved directly with the operator, usually through a refund once the error is confirmed. A smaller but more serious category is genuine fraud - unauthorized access to a wallet or bank account, or a scam that tricked you into approving a payment. That requires the Cyber Bureau, not just the provider's customer service.
Telecom regulators have taken real, documented action on the first category. In 2026, an investigation found customers being billed for mobile data even while their data was switched off; the Nepal Telecommunications Authority (NTA) confirmed it takes such complaints seriously and will act on confirmed violations. That is a useful reminder that provider-side errors are common enough to be worth reporting even when nothing looks like "fraud" in the traditional sense.
Reporting a telecom (NTC or Ncell) deduction
- Check your statement first. On NTC, review your account activity via the NTC Connect app or by dialing *1415# for package details. On Ncell, open the Ncell app, go to Call Details, and download at least one month's statement to review the Internet and VAS sections for charges you do not recognize.
- Identify the type of charge. Recurring small charges are frequently unwanted VAS subscriptions (games, ringtones, content services) rather than fraud, and these can usually be deactivated directly.
- Call customer care with specifics. For NTC, dial 198 for a service complaint or 1498 / 191 for general inquiries. For Ncell, dial 9005 or 900 (free IVR), or reach the call center through the Ncell app or the official Ncell Facebook page. Have the exact date, time, and amount ready.
- Ask for the charge to be reversed and the service deactivated. If the operator confirms an error, refunds are typically credited back to your account balance.
- Escalate to the NTA if unresolved. The Nepal Telecommunications Authority accepts complaints when an operator does not resolve a billing dispute, and has previously acted on confirmed data-billing errors.
Reporting a bank or digital wallet deduction
- Call your bank or wallet immediately - eSewa, Khalti, or your bank's 24-hour helpline - and report the transaction as unauthorized. Speed matters, since a receiving account can only be frozen before funds are further moved or withdrawn.
- Request a formal transaction dispute or freeze on the receiving account if the provider's process allows it.
- Get a written or in-app acknowledgment of your complaint, including a reference or ticket number.
- If the provider cannot resolve it, or if it involves clear deception (a scam, phishing, or unauthorized access), file with the Cyber Bureau as described below.
Important: Nepal does not have an automatic refund guarantee for fraud losses the way some countries do. The gap between noticing the fraud and the bank or wallet acting on your report is the single biggest factor in whether funds can be recovered - do not wait to "gather more evidence" before making the first call.
Filing with Nepal Police Cyber Bureau
The Cyber Bureau is Nepal Police's dedicated unit for offences under the Electronic Transactions Act, 2063, including online financial fraud, wallet and banking scams, and unauthorized account access. Reporting is free.
| Channel | Details |
|---|---|
| Office | Bhotahiti, Kathmandu |
| Phone | 01-4219044 / 01-4214400 / 01-5319044 |
| Hotline | 9851286770 / 9851286771 (for urgent or ongoing fraud) |
| cyberbureau@nepalpolice.gov.np | |
| Online portal | cyberbureau.nepalpolice.gov.np |
| Outside Kathmandu Valley | File at your nearest District Police Office, which forwards to the Cyber Bureau |
Evidence to prepare before you file
- A valid identity document - citizenship certificate, national ID, or passport (original with photocopy in person, or scanned copy by email)
- Screenshots of the deduction, message, or scam interaction, showing the visible timestamp and sender or transaction details clearly - cropped or unreadable screenshots commonly get sent back for resubmission
- Transaction records: bank or wallet statements covering the disputed transaction
- Direct URLs of any related posts, profiles, or messages, copied from the address bar rather than retyped
- A written account of what happened, including date, time, and any details you have about the other party
Find your reporting path
Who should I contact first?
Select where the deduction happened.
Common mistakes when reporting
- Deleting the evidence before reporting - keep every SMS, screenshot, and app notification exactly as received.
- Waiting to "see if it happens again" before reporting - report the first instance immediately, since delay reduces the chance of recovering funds and lets recurring VAS charges continue billing you.
- Only contacting the Cyber Bureau and skipping the provider - the provider can often reverse a billing error directly and faster than a criminal investigation can, so start there for anything that is not clearly a scam.
- Submitting blurry or cropped screenshots - the Cyber Bureau's own guidance notes these are commonly rejected and slow the process down.
Frequently asked questions
Is reporting to the Cyber Bureau free?
Yes, filing a cybercrime complaint with the Cyber Bureau or any Nepal Police office is free of cost.
How long does resolution usually take?
It varies widely by complexity - simple billing-error disputes with a telecom operator can resolve within days once confirmed, while fraud investigations through the Cyber Bureau can take considerably longer depending on the case.
Can I file a complaint without visiting Kathmandu?
Yes. You can file online through the Cyber Bureau's portal, by email, or in person at your nearest District Police Office, which will forward the complaint to the Cyber Bureau.
What if the deduction turns out to be a legitimate charge I forgot about?
Providers will typically explain the charge with a reference to the specific service or transaction. If it turns out to be legitimate, no further action is needed, but it is still worth confirming so you are not left uncertain about your account activity.
Related reading: If the deduction was triggered by trusting a fake payment confirmation, see our guide on spotting fake balance screenshot scams. And for correctly checking your balance in the first place, see our NTC and Ncell balance-check guide.
Conclusion
Most unauthorized deductions fall into one of two clear paths - a billing error your provider can reverse directly, or a fraud case that needs Nepal Police's Cyber Bureau. Acting immediately and keeping clean, uncropped evidence are the two things that consistently make the biggest difference in how quickly either path resolves.
Discussion