Bank Fraud Complaint Letter

About the Bank Fraud Complaint Letter

When money leaves your account through a UPI payment, card transaction or net-banking transfer you did not make, the Reserve Bank’s rules on unauthorised electronic banking transactions decide how much of it you can be made to bear — and that depends mostly on who was at fault and how quickly you told the bank. This tool writes the dispute letter to your bank and, as you fill it in, estimates your liability under those rules.

List each debit with its date, amount, UTR or RRN and where the money went; say when the alert arrived and when you reported it. The tool counts working days by your home branch’s calendar (Sundays, the second and fourth Saturdays and the holidays you add are skipped), applies the zero-liability, limited-liability or bank-policy rule to each transaction, and shows the dates that follow: the shadow credit within 10 working days, the bank’s 90-day limit to resolve the complaint, and when you can go to the RBI Ombudsman. The letter cites the right paragraphs and asks for everything the rules give you.

Common uses

• Disputing UPI debits after a SIM swap, a cloned card or a hacked net-banking login.
• A written record of a phone complaint, with the complaint number and the RBI paragraphs, to start the 30-day clock for the Ombudsman.
• Checking, before you call, which day the zero-liability window closes.
• Helping a parent or relative who lost money in an online fraud put everything in one letter.

How much can you be made to pay?

For commercial banks, the Reserve Bank of India (Commercial Banks – Responsible Business Conduct) Directions, 2025 (paras 64–76) set the rules:

• Zero if the bank was at fault — its fraud, negligence or a deficiency in its systems — however late you reported (para 67(1)).
• Zero for a breach that is neither your fault nor the bank’s (“elsewhere in the system”) if you tell the bank within three working days of receiving its alert (para 67(2)).
• Limited if you tell it within four to seven working days: per transaction, the lower of its value and Rs. 5,000 (BSBD account), Rs. 10,000 (other savings accounts; prepaid instruments and gift cards; current, cash-credit and overdraft accounts of MSMEs, or of individuals with an average balance or limit up to Rs. 25 lakh; credit cards with a limit up to Rs. 5 lakh) or Rs. 25,000 (all other current, cash-credit and overdraft accounts; credit cards above Rs. 5 lakh) (para 68(2), Table 1).
• Bank’s policy after seven working days — the bank must publish its Board-approved policy (para 69).
• Negligence — such as sharing a PIN, OTP or password — makes you bear the loss until you report it; anything after your report is the bank’s (para 68(1)). The bank may still waive your liability (para 72), and it must prove yours (para 75).

Wallets and prepaid cards of non-bank companies follow paragraph 17 of the RBI’s Master Direction on Prepaid Payment Instruments instead: the same steps, but counted in calendar days (weekends and holidays count) and capped at Rs. 10,000 per transaction for every kind of wallet or card (para 17.5), with the shadow credit within 10 days (para 17.7) and resolution within 90 days (para 17.8). A wallet or prepaid card issued by a bank follows the bank rules.

Working days and the dates that follow

Working days are counted by the working schedule of your home branch, excluding the day you received the alert (para 71). Banks in India close on Sundays and the second and fourth Saturdays (RBI holiday list); State holidays differ, so add them. Once you report:

• the bank must credit the disputed amount (shadow reversal) within 10 working days, value-dated to the transaction date, without waiting for any insurance claim (para 72);
• it must resolve the complaint and decide your liability within its policy period, not more than 90 days; if it cannot, it pays you as the rules say (para 73);
• you must not lose interest on a bank account, or pay extra interest on a credit card (para 73(3)).

If the bank does not respond: the RBI Ombudsman

The Reserve Bank – Integrated Ombudsman Scheme, 2026 lets you complain to the RBI Ombudsman when the bank has not replied within 30 days — or within any longer time set by RBI, NPCI or card-network rules — or when its reply does not satisfy you. File within 90 days of the end of that period or of the bank’s last reply, whichever is later, on cms.rbi.org.in, by e-mail to [email protected] or by post to the Centralised Receipt and Processing Centre in Chandigarh. The Ombudsman can award up to Rs. 30 lakh for consequential loss and Rs. 3 lakh for your time, expenses and harassment. The Ombudsman Complaint Generator writes that complaint.

Sources

• Reserve Bank of India (Commercial Banks – Responsible Business Conduct) Directions, 2025 (RBI/DOR/2025-26/170), Chapter IV section D, paras 64–76 — they replaced the circular on limiting customer liability
• Master Direction on Prepaid Payment Instruments (CO.DPSS.POLC.No.S-479/02.14.006/2021-22), para 17 — non-bank wallets and prepaid cards
• RBI holiday matrix — second and fourth Saturdays
• Reserve Bank – Integrated Ombudsman Scheme, 2026, cl. 8(3), 10, 11 · cms.rbi.org.in
• Indian Cybercrime Coordination Centre — report on 1930 or cybercrime.gov.in

Limitations

• An estimate from the Reserve Bank’s rules, not legal advice. The bank investigates and decides who was at fault; the RBI Ombudsman or a court has the final word.
• Paragraph numbers are given for commercial banks and for non-bank wallets and prepaid cards (Master Direction on PPIs). Small finance, payments, regional rural and co-operative banks have their own directions with the same steps — check the bank’s published customer-liability policy.
• State bank holidays are not built in: add the ones that fell between the alert and your report.
• It does not file anything or contact your bank. A letter is not a substitute for reporting at once by phone, SMS or app.

Privacy

Everything happens in your browser. Account numbers, transaction details and the facts you type are not uploaded or stored by MySmartCoPilot. If you tick Keep a draft in this browser, the form is saved in this browser’s local storage until you untick it — leave it off on a shared computer. Never type a PIN, OTP, CVV or password into any form.