A Demat account allows investors to hold shares, bonds, exchange-traded funds, and other securities electronically. Although electronic ownership makes investing convenient, unauthorised transactions can still occur because of compromised login credentials, phishing attacks, impersonation, or other security breaches. An unexpected securities debit, unfamiliar transaction entry, or unauthorised change to account details should never be ignored.
If you notice suspicious activity in your Demat account, acting quickly can help limit further losses and support an investigation. Understanding whom to contact, which documents to preserve, and how to escalate a complaint can make the reporting process more effective.
1. Identify the Unauthorized Transaction
Start by checking your Demat account statements and transaction history. Look for securities debits, unfamiliar transfers, unexpected changes in holdings, or transactions you do not remember authorising.
Compare the entries with your own investment records and any recent instructions submitted through your broker.
Check notifications received from your depository participant, broker, NSDL, or CDSL, as applicable. Record the transaction date, security name, quantity, reference number, and any other available details.
Sometimes an entry may relate to a legitimate transaction that you have overlooked. However, if you cannot identify the activity or believe it was carried out without your permission, report it promptly rather than waiting for the next statement.
2. Contact Your Depository Participant Immediately
Your depository participant (DP) is generally the first point of contact for a Demat account complaint. The DP is the intermediary through which your account is maintained with NSDL or CDSL.
Contact the DP using its official customer-support number, website, email address, or complaint portal. Explain that you suspect an unauthorised transaction and provide the available transaction details.
Ask the DP to investigate the activity and explain which immediate protective measures are available. Depending on the circumstances, you may be able to request restrictions on certain account operations or additional verification for future transactions.
Obtain a complaint or ticket number and save the acknowledgement. This reference can help you follow up if the issue remains unresolved.
Do not share your password, PIN, or OTP with anyone claiming to investigate the transaction.
3. Secure Your Account and Related Credentials
While the complaint is being investigated, take steps to prevent further unauthorised access.
Change your account password if you suspect that it has been compromised. Secure the email account and mobile number associated with your investment account, particularly if you notice unexpected password-reset messages or changes to contact details.
Log out of unfamiliar sessions where the service allows it, review linked devices, and enable available additional authentication measures.
If you suspect malware or unauthorised remote access to your phone or computer, stop using the affected device for financial transactions until it has been checked.
Ask your DP whether your account can be temporarily restricted or whether specific debit instructions can be blocked. The available options depend on the provider and applicable procedures.
4. Notify Your Broker if Trading Activity Is Involved
A Demat account records securities holdings, while a trading account is used to place orders through a stockbroker. Unauthorised activity may involve one or both accounts.
If suspicious activity includes an unfamiliar purchase or sale order, contact your broker immediately in addition to your DP.
Request an investigation into the order history, login records, order placement details, and other relevant information that the broker can provide. Ask whether additional trading restrictions or security checks are available.
Keep the Demat and trading account complaints linked where appropriate. This can help establish whether the issue concerns unauthorised trading, securities transfers, or both.
Remember that reporting a suspicious transaction does not automatically guarantee that it will be reversed. The outcome depends on the facts, applicable rules, and investigation findings.
5. Preserve Evidence and Supporting Documents
Good documentation can make it easier for the relevant institution to investigate your complaint.
Keep copies of the following, where available:
- Demat account statements showing the disputed transaction.
- Transaction alerts, SMS messages, and email notifications.
- Relevant trading statements and order-history records.
- Your complaint acknowledgement and correspondence with the DP or broker.
- Screenshots of suspicious messages, websites, or account activity.
- Dates and approximate times when you discovered the issue and reported it.
Write a brief timeline describing what happened. State which transactions you dispute and explain why you believe they were unauthorised.
Do not edit original messages or delete potentially relevant evidence. Share sensitive documents only through verified reporting channels.
6. Report Suspected Cyber Fraud
If the incident involves phishing, stolen credentials, impersonation, or financial cybercrime, report it through the appropriate official channels.
In India, suspected cybercrime can be reported through the National Cyber Crime Reporting Portal at https://cybercrime.gov.in. For suspected financial cyber fraud requiring urgent reporting, you can also call 1930.
Provide accurate information about the incident, including relevant transaction details and evidence. Follow the instructions given by the official reporting channel.
Cybercrime reporting should complement, not replace, a complaint to your DP or broker. Contacting the financial intermediary promptly remains important because it may be able to take account-specific protective measures.
7. Escalate the Complaint if It Is Not Resolved
If your DP or broker does not resolve the matter satisfactorily, use its formal grievance-redressal process and retain records of each submission.
For complaints involving the Indian securities market, investors may also use the Securities and Exchange Board of India’s SCORES platform, subject to the platform’s applicable complaint requirements and procedures.
Visit https://scores.sebi.gov.in to access the official system and review the process for submitting a complaint.
Depending on the nature of the dispute, the relevant exchange or depository may also provide a grievance mechanism. Check the applicable eligibility, escalation sequence, and documentation requirements before submitting the complaint.
When escalating, include the original complaint number, the response received, supporting evidence, and a concise explanation of what remains unresolved.
8. Follow Up and Monitor Your Holdings
After submitting a complaint, monitor your account for additional suspicious activity. Review updated statements and transaction alerts, and respond promptly if the intermediary requests further information.
Maintain a record of complaint dates, responses, reference numbers, and any protective measures taken.
Avoid paying unknown individuals who promise to recover securities or reverse transactions. Fraudsters sometimes target victims again by posing as recovery agents or officials.
Conclusion
Reporting unauthorised Demat account transactions requires prompt action, careful documentation, and communication with the appropriate institutions. Start by contacting your depository participant and broker, secure your account credentials, preserve evidence, and report suspected cyber fraud through official channels.
If the complaint remains unresolved, use the relevant grievance-redressal and escalation mechanisms. Although recovery cannot be guaranteed, timely reporting and accurate records can support the investigation and help protect your remaining investments.
Make it a habit to review account statements, monitor transaction alerts, and use only verified websites and support channels. These practices can help you detect suspicious activity early and respond more effectively.
