If you are reading this due to an unfamiliar charge on your statement, please start here: You will almost certainly receive your money back, and the procedures to do so are simple. The most important thing is to act quickly and in the right order; don’t panic and don’t leave it until tomorrow to deal with it.
Understanding Your Protection: RBI’s Zero-Liability Rules
Before going through the action plan, it’s useful to understand the framework that dictates if you’ll be on the hook for the fraudulent charge, as your reporting timeline determines your liability tier.
| Condition | What It Means | Why It Matters |
| Reported within 3 working days of the issuer’s notification (or your own discovery, if sooner) | RBI’s zero-liability window for unauthorised electronic transactions | Report within this window and you generally owe nothing for the fraudulent transaction |
| Reported 4–7 working days after notification | Limited liability window: a capped amount may apply depending on your card type | Still report immediately; the cap is far better than full liability, but smaller than zero |
| Reported after 7 working days | Liability determined by the bank’s board-approved policy | This is the window you want to avoid entirely, report as early as possible regardless of when you notice |
| You did not share OTP, PIN, or card details with anyone | A precondition for zero/limited liability claims under RBI guidelines | If credentials were phished or shared, even unknowingly, liability determination becomes more complex |
The rule that matters most: speed determines liability
Indian banking rules link your financial liability to the speed with which you report an unauthorized transaction, either after the bank informs you or you find out on your own, whichever is earlier. The single most important reason to act in hours, not days, is this: the cost of delay is not just inconvenience; it can be the actual amount of money you are liable for.
The Hour-by-Hour Action Plan
The Hour-by-Hour Action Plan is precisely what you should do, broken down by how long it’s been since you saw the charge. There’s a reason why each step takes place when it does; skipping ahead, or out of order, can leave you less protected.
| Time | Action | Why Now and Not Later |
| 0–15 min | Confirm the charge is genuinely unrecognized; check with family members who may share the card or account | Avoids freezing a card over a legitimate forgotten purchase, which causes its own disruption |
| 15–30 min | Call your issuer’s 24/7 fraud helpline (not the general customer care line) and report the transaction | Fraud lines are built for this exact situation and can freeze the card immediately, unlike general queues |
| 30–45 min | Request the card be blocked or frozen, not just the disputed transaction flagged | An active compromised card can be used for further fraudulent transactions in the time it takes to dispute one |
| 45–60 min | Ask for the fraud reference / complaint number and write it down immediately | This number is required for every subsequent step, including escalation to RBI’s ombudsman if needed |
| 1–3 hours | Change your net banking and card-linked app passwords if you suspect any broader compromise | Prevents a single point of compromise from extending into other linked services |
| 3–6 hours | File the formal dispute in writing, via the bank’s app, secure email, or website form, even after the phone call | A phone report alone is often not sufficient evidence of timely reporting; written confirmation matters |
| 6–24 hours | Review your full statement for any OTHER unrecognised transactions, not just the one you spotted first | Fraud rarely shows up as a single isolated transaction; a thorough check catches related charges early |
What to Say When You Call
The most important part of the whole process is the interaction with the fraud helpline. Be direct and concise:
- Please connect me to the fraud or unauthorized transaction reporting line instead of the general customer service queue, which can cause major delays. Furthermore, please clarify that this call is a fraud report and not a general inquiry.
- On your statement, please note the precise transaction or transactions, the amount, the date, and the merchant’s name.
- Please confirm that you have not authorized this transaction. Also confirm that you have not shared your PIN, OTP, and card details with anyone.
- Please ask to have the card blocked immediately, not just the transaction that is flagged for review.
- Before concluding the call, please request a fraud reference number or complaint ID, and be sure to note it down immediately.
- Ask specifically what happens next and how long you will wait; if you will hear back; and if a provisional credit will be issued while the investigation is ongoing.
Evidence to Collect and Preserve
Effective documentation, obtained within the first 24 hours while information is still current, greatly facilitates the remainder of the process and is important in the event that the dispute is contested or requires escalation.
| What to Save | Where to Find It | Why You’ll Need It |
| Screenshot of the disputed transaction on your statement | Banking app or net banking portal, transaction detail view | Primary evidence for the dispute filing |
| The fraud reference / complaint number from your call | Given verbally by the fraud helpline agent, write it down immediately | Required to track and escalate the complaint |
| Confirmation email or SMS of the dispute being logged | Sent automatically by most issuers within minutes to hours of filing | Proof of the date and time you reported, which determines your liability tier |
| A timeline of your own actions | A simple note: when you saw the charge, when you called, what was said | Useful if the dispute is contested or escalated, since memory fades over weeks |
| Any phishing message, fake link, or suspicious call that may have led to the fraud | Screenshot the message or note down the caller’s number/details immediately | Helps the bank’s investigation and may be needed for a police complaint in serious cases |
What Happens After You Report: The Realistic Timeline
Here is what to reasonably anticipate after the card is blocked and the dispute is submitted, along with the maximum amounts the bank is subject to under the RBI’s framework:
| Stage | Typical Timeframe | What Happens |
| Initial report and card block | Same day | Card is frozen; fraud reference number issued; transaction flagged for investigation |
| Provisional credit (if applicable) | Within 10 working days | Many issuers credit the disputed amount provisionally while investigating, per RBI guidance |
| Investigation and resolution | Up to 90 days | The bank reviews transaction logs, merchant data, and your account activity to determine fraud validity |
| Final resolution | By day 90 at the latest | Provisional credit is confirmed as permanent, or reversed with an explanation if the bank’s investigation finds otherwise |
| Escalation if unresolved or unsatisfactory | After internal resolution | Escalate to the bank’s internal ombudsman first, then RBI’s Banking Ombudsman if still unresolved |
Provisional credit is not the same as final resolution
Many issuers will put a provisional credit on your account for the amount in dispute for 10 working days while the investigation is ongoing; such a credit is a favorable positive sign but provisional, not final. Please continue to monitor your account and respond promptly to any further requests for information from the bank throughout the investigation period, which may be up to a total of 90 days.
Common Fraud Scenarios and How the First Step Differs
Not every scenario is the same; the initial course of action may vary based on the specifics of the fraud:
| Scenario | First Action | Key Difference From Standard Fraud |
| Card physically lost or stolen | Block the card immediately via app or helpline before checking for fraudulent charges | Speed matters more than evidence-gathering here; block first, investigate after |
| Card details used online without the physical card being lost | Block the card and request a replacement with a new number | The physical card itself may still be in your possession and unusable for further fraud, but the number is compromised |
| OTP shared due to a phishing call or fake bank message | Report to the bank AND consider filing a complaint on the national cybercrime portal (cybercrime.gov.in) | Liability determination is more complex when credentials were voluntarily (if unknowingly) shared |
| Recurring/subscription charge you don’t recognise | Verify it’s not a forgotten free-trial-to-paid conversion before disputing as fraud | Misidentified subscriptions are common and resolve faster as a cancellation than a fraud dispute |
| The charge appears to be from a merchant you’ve used before | Contact the merchant directly first to rule out a billing error or duplicate charge | Not all unrecognised charges are fraud; some are legitimate errors resolved faster outside the fraud process |
If the Bank Doesn’t Resolve It Satisfactorily
You have a clear escalation path in case the bank’s internal procedure isn’t able to satisfactorily resolve your dispute:
- Every bank is required to appoint an internal ombudsman or grievance redressal officer, whose contact information is available on their website and your statement. You can file a complaint with them.
- If unresolved after 30 days, or if you’re dissatisfied with the bank’s response, escalate to the RBI Banking Ombudsman; this is a free, regulator-run dispute resolution service specifically for this purpose.
- If the fraud involved phishing, a phony call, or a scam, please file a complaint on the national cybercrime portal (cybercrime.gov.in). In addition to strengthening your case, this step creates an official record that can support a broader fraud investigation.
- Please retain all of your Section 4 documentation during this process. When there is a clear paper trail from the start, escalations move more swiftly and smoothly.
Final Thoughts
Credit card fraud is a hassle, but if you respond quickly, it’s a straightforward, positive outcome. The most important thing is speed. If you report in the zero-liability window and block the card right away, you won’t be on the hook for the stolen amount. In most of the fastest-to-report cases, the process that the documentation, written follow-up, escalation path, and everything else in this guide supports saves cardholders money. The hour after you see the charge is very crucial. Please complete that step promptly, and then proceed with the remaining steps.
