Credit Card Fraud in India: Your Legal Rights and How to Get Your Money Back
Credit card fraud is one of the most common financial crimes in India. If your card has been used without your consent — whether through an ATM skimmer, phishing email, or OTP scam — the law is on your side. Here is what you need to know.
How Credit Card Fraud Happens
-
Phishing emails or SMS with fake bank links
-
ATM skimming devices capturing card data
-
OTP fraud — callers posing as bank officials
-
Data breaches exposing stored card details
-
Misuse of lost or stolen physical cards
Your Legal Rights as a Cardholder
The RBI's framework on customer liability for unauthorised transactions is clear:
Zero Liability
You owe nothing if the fraud occurred due to bank negligence (e.g., a security failure on their end), or a third-party breach without any fault on your part, provided you report promptly.
Limited Liability
Your liability is capped at ₹5,000–₹25,000 depending on account type if you report within 3–7 working days and the breach is entirely a third-party issue.
Full Liability
You bear the loss only if you shared your OTP, CVV, or PIN with anyone, or if you delayed reporting beyond 7 working days.
What to Do Immediately After Discovering Fraud
Block your card — call your bank's 24/7 helpline or use the mobile app
Call 1930 and report the fraudulent transaction
File a complaint on cybercrime.gov.in
Email your bank with full transaction details and request reversal
Raise a chargeback dispute with your bank — most banks have a formal dispute form
File an FIR at a cyber crime police station for amounts above ₹10,000
Laws That Protect You
IT Act, 2000: Punishes identity theft, phishing, and unauthorised access to financial data.
Bharatiya Nyaya Sanhita, 2023: Covers cheating, forgery, and criminal breach of trust committed digitally.
RBI Master Directions: Mandate banks to resolve unauthorised transaction complaints within 90 days and reverse proven fraud amounts.
If Your Bank Refuses to Reverse the Charge
Do not accept it and do the following-
- Write to the bank's Nodal Officer
-
File with the RBI Banking Ombudsman at cms.rbi.org.in — free, no lawyer needed
-
Approach the Consumer Court for compensation including mental agony
-
Consult a cyber crime lawyer to send a legal notice to the bank
Frequently Asked Questions
I shared my OTP. Can I still file a complaint? Yes, you can still file a police complaint. Criminal liability lies with the fraudster. However, your RBI consumer protection (zero/limited liability) may be reduced.
How long does chargeback resolution take? Banks must acknowledge within 10 working days and resolve within 90 days under RBI guidelines.
Can I claim compensation beyond the fraud amount? Yes. Under Consumer Protection Act, 2019, you can claim compensation for mental agony, financial loss, and deficiency of service.
