Just file a CyberCrime complaint, contact your bank for the fraudulent transaction (works for UPI as well - and is very effective). Many UPI apps allow to raise a dispute right from the app itself (Phonepe, PayTM, GPay etc). Most likely his bank account will get suspended, less likely (but ideally) but police will fetch his KYC details from his bank and pay him a visit (a guy got pretty roughed up by UP police for a case of mere Rs 2100 - in a case I closely followed).
In any case, at least he will have to open another bank account to scam someone else.