Skip to main content

Who bears the loss of fraudulent financial transactions?

We carry out various financial transactions through bank accounts, debit cards, credit cards, prepaid payment instruments (PPIs), e-wallets, etc. But what if there is an unauthorised / fraudulent financial transaction from the account / card / PPI? Who will bear the loss of unauthorised financial transactions? 

What if unauthorised transaction is due to customer’s negligence?

When the unauthorized financial transaction is due to the negligence of the customer (for eg. sharing password, PIN, OTP, etc), the customer is liable to bear the entire loss until he / she reports the unauthorized transaction to the bank / non-bank PPI issuer. At its discretion, bank / non-bank PPI issuer may waive off customer liability for the unauthorized transactions even in cases of customer negligence. 

Any loss occurring after the reporting of the unauthorized transaction must be borne by the bank / non-bank PPI issuer.

What if unauthorised transaction is due to bank’s / non-bank PPI issuer’s fault?

When the unauthorized financial transaction is due to the contributory fraud / negligence / deficiency on the part of the bank / non-bank PPI issuer (irrespective of whether the transaction is reported by the customer), there is zero liability of the customer, and the loss has to be borne by the bank / non-bank PPI issuer.

What if unauthorised transaction is due to third party breach?

When neither the customer nor the bank / non-bank PPI issuer is at fault and the unauthorized financial transaction is due to third party breach because of deficiency elsewhere in the system, the liability of the customer depends upon the time taken by him / her to report the unauthorized transaction to the bank / non-bank PPI issuer.

  • If the customer notifies the bank / non-bank PPI issuer within 3 working days of receiving the communication from the bank / non-bank PPI issuer regarding the unauthorized transaction, the liability of the customer is zero.
  • If there is a delay of 4 - 7 working days in notifying the bank / non-bank PPI issuer of such transaction, the per transaction liability of the customer is limited to the transaction value or the amount mentioned below, whichever is lower.
Type of Account Maximum liability (Rs.)
Basic Savings Bank Deposit Accounts (BSBDA) 5,000
All other savings bank accounts
Prepaid Payment Instruments and Gift Cards
Current / Cash Credit / Overdraft accounts of MSMEs
Current accounts / Cash Credit / Overdraft accounts of individuals with annual average balance (during 365 days preceding the incidence of fraud) / limit up to Rs.25 lakh
Credit cards with limit up to Rs.5 lakh
10,000
All other Current / Cash Credit / Overdraft accounts
Credit cards with limit above Rs.5 lakh
25,000

  • If the delay in reporting is beyond 7 working days, the customer liability is determined as per the bank’s / non-bank PPI issuer’s Board approved policy. 

What is bank’s / non-bank PPI issuer’s role after receiving report of unauthorized transaction?

On receiving a report / complaint from the customer regarding the unauthorized transaction, the bank / non-bank PPI issuer shall credit (notional reversal / shadow reversal) the amount involved in the unauthorized transaction to the customer’s account / PPI within 10 working days from the date of receipt of the complaint.

The bank / non-bank PPI issuer shall resolve the complaint and establish the liability of the customer, if any, within 90 days from the date of receipt of the complaint.

Where the bank / non-bank PPI issuer is unable to resolve the complaint or determine the customer liability, if any, within 90 days, the customer needs to be compensated. The final credit is to be given as on the date of the unauthorized transaction to ensure that there is no loss of interest for the customer in case of debit card / bank account, and the customer does not bear any additional burden of interest in case of credit card.

The burden of proving the customer liability in case of unauthorized transactions lies on the bank / non-bank PPI issuer.


References

Reserve Bank of India. (2017, July 06). 'Customer Protection – Limiting Liability of Customers in Unauthorised Electronic Banking Transactions'. Retrieved from https://rbi.org.in/Scripts/BS_CircularIndexDisplay.aspx?Id=11040

Reserve Bank of India. (2021, August 27). 'Master Directions on Prepaid Payment Instruments (PPIs) (Updated as on November 12, 2021)'. Retrieved from https://www.rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=12156


Follow at - Telegram   Instagram   LinkedIn   Twitter

Comments

Popular Posts

FEMA - Borrowing and Lending [including External Commercial Borrowing (ECB) and Trade Credit (TC)]

Reserve Bank of India (RBI) has amended the regulations for borrowing and lending under the Foreign Exchange Management Act, 1999 (FEMA). What are the regulations for External Commercial Borrowing (ECB)? External Commercial Borrowing (ECB) means borrowing by an eligible borrower from a recognised lender. Eligible borrowers – Any person resident in India (other than an individual) that is incorporated, established or registered under a Central or State Act is an eligible borrower, provided such person is permitted for ECB in terms of applicable Acts. An eligible borrower that is under a restructuring scheme or corporate insolvency resolution process may raise ECB only if specifically permitted under the restructuring or resolution plan. An eligible borrower against whom any investigation, adjudication or appeal by a law enforcement agency for contravention of any rule, regulation or direction issued under FEMA is pending, may raise ECB notwithstanding the pending investigation or adjudi...

Continuous Clearing and Settlement on Realisation in Cheque Truncation System (CTS) (Updated as on December 24, 2025)

Reserve Bank of India (RBI) has issued direction on continuous clearing and settlement on realisation in Cheque Truncation System (CTS). What is Cheque Truncation System (CTS)? Cheque Truncation System (CTS) involves halting the physical movement of the cheque and its replacement by images of the instrument and the corresponding data contained in the MICR line.  In CTS, 3 images are taken of each cheque – front Gray Scale, front Black & White and back Black & White. MICR (Magnetic Ink Character Recognition) is a 9-digit code printed at the bottom of cheques using magnetic ink – first 3 digits indicate City Code, middle 3 digits indicate Bank Code and the last 3 digits indicate Bank Branch Code. Only CTS-2010 standards compliant instruments can be presented for clearing through CTS. The presenting banks which truncates the cheques need to preserve the physical instruments for 10 years. From when will the continuous clearing and settlement on realisation in CTS be implemented...

Unique Transaction Identifier (UTI) for OTC Derivative Transactions

Reserve Bank of India (RBI) has issued directions on Unique Transaction Identifier (UTI) for over-the-counter (OTC) derivative transactions. What are the existing norms for reporting of OTC derivative transactions? At present, all transactions in OTC markets for rupee interest rate derivatives, forward contracts in Government securities, foreign currency derivatives, foreign currency interest rate derivatives, and credit derivatives are reported to the Trade Repository managed by Clearing Corporation of India Limited (CCIL-TR).  What are the directions on Unique Transaction Identifier (UTI) for OTC derivative transactions? Unique Transaction Identifier (UTI), a unique identifier assigned to an OTC derivative transaction, shall be generated / reported for all transactions in OTC derivatives market.  The directions shall be applicable to OTC derivative transactions entered into on or after January 01, 2027. UTI shall be generated in accordance with the UTI Technical Guidanc...

FEMA - Regulations on Guarantees

Reserve Bank of India (RBI) had issued regulations governing guarantees under the Foreign Exchange Management Act, 1999 (FEMA). What is a guarantee? A guarantee, including a counter-guarantee, means a contract, by whatever name called, to perform the promise, or discharge a debt, obligation or other liability (including a portfolio of debts, obligations or other liabilities), in the event of default by the principal debtor. Who are the participants in a guarantee transaction? Principal debtor – a person in respect of whose default the guarantee is given. Surety – a person who gives a guarantee. Creditor – a person to whom the guarantee is given. When can a person resident in India act as surety / principal debtor? A person resident in India may act as a surety / principal debtor for a guarantee, subject to conditions that – The underlying transaction for which the guarantee is being given or arranged is not prohibited under FEMA guidelines. The surety and the principal debtor are eligi...

Lending to Micro, Small & Medium Enterprises (MSMEs) Sector

Reserve Bank of India (RBI) has amended the directions on lending to Micro, Small & Medium Enterprises (MSMEs) sector. To whom shall the directions be applicable? The directions shall apply to Scheduled Commercial Banks (excluding Regional Rural Banks). Which enterprises are classified as Micro, Small or Medium? An enterprise shall be classified as a micro, small or medium enterprise based on the following criteria – Classification Maximum investment in plant and machinery or equipment And Maximum turnover Micro enterprise ₹2.5 crore ₹10 crore Small enterprise ₹25 crore ₹100 crore Medium enterprise ₹125 crore ₹500 crore What registrations are required to be made by MSMEs? MSMEs are required to register online on the Udyam Registration portal and obtain ‘Udyam Registration Certificate (URC)’. For priority sector lending purposes, banks shall be guided by the clas...