If you have lost money while performing an online transaction or have been a victim of online fraud, you have the right to take measures to recover your money. You can also file a criminal complaint against the offender.
As a customer of a bank, you have the following rights so as to be protected from online bank fraud:
Most banks have staff dedicated to matters like this. The relevant contact details are found on the backside of your card as well as the website of the bank. Telephone numbers of help desks are also displayed at every ATM machine.
If you have suffered a loss you must immediately contact the banks via phone (preferable) or email. Do not forget to note the complaint number and follow up your complaint using the same number. The bank should acknowledge your email.
The Code of Bank’s Commitment to Customers (CBCC) enacted by the Banking Codes and Standards Board of India (BCSBI) mandates each bank branch to display the name of the official at the bank branch responsible for addressing customer grievances.
If your complaint is unresolved at the branch level, you may approach the Regional or Zonal Manager or the Principal Nodal Officer (PNO) at the address displayed at the branch.
Typically, within 30 days of receiving the complaint, the bank will send you a final response or explain why more time is needed to investigate. The Bank will also tell you the process to take the complaint forward in the event you are still unsatisfied after the final response from the bank.
If you are not satisfied with the solution provided by the bank and would like to further enquire the matter, you can approach the Banking Ombudsman established by the Reserve Bank of India under the Banking Ombudsman Scheme, 2006. Each bank is required to display at its branch the details of the Banking Ombudsman under whose jurisdiction the branch falls. Complaints may be lodged with the respective Banking Ombudsman here.
You can only do this once you have tried to settle matters with the bank, and failed. If you file a case in Court, such as the Consumer Court, you cannot approach the Ombudsman while the case is going on.
If you are not satisfied with the decision of the Banking Ombudsman, you may approach the appellate authority against the Ombudsman’s decision – the Deputy Governor, Reserve Bank of India. This appeal must be made within 30 days of the Ombudsman’s decision.
This may either be done in person, or in some states, through an online portal.
The Consumer Forum is present at the District, State and National Levels. You can file a case there depending on 2 factors:
You should approach consumer forums only when you feel that the bank has been negligent, and has not given you proper service. The forum does not prosecute the actual culprit.
Generally, cases cannot be simultaneously filed before the consumer courts as well as the Banking Ombudsman.
Banks must ask their customers to mandatorily register for SMS alerts for electronic banking transactions. Wherever available, they must ask their customers to register for e-mail alerts, for electronic banking transactions.
The SMS alerts shall mandatorily be sent to the customers, while email alerts may be sent, wherever registered in the event of an electronic banking transaction. To facilitate the customers to report any unauthorized use of their electronic banking services, banks must provide customers with 24x7 access through multiple channels (at a minimum, via website, phone banking, SMS, e-mail, Instant Voice Response, a dedicated toll-free helpline, reporting to home branch, etc.) for reporting unauthorised transactions that have taken place and/ or loss or theft of payment instrument such as card, etc. Banks have to also enable customers to instantly respond by 'Reply' to the SMS and e-mail alerts so that the customers are not required to search for a web page or an e-mail address to notify the objection to an electronic transaction.
Banks have to also provide a direct link for lodging the complaints, with specific option to report unauthorised electronic transactions on the home page of their website. The loss/ fraud reporting system should ensure that immediate response (including auto response) is sent to the customers acknowledging the complaint along with the registered complaint number. The banks must record the time and date of delivery of the alerts and receipt of customer’s response, if any.
The banks cannot offer facility of electronic transactions, other than ATM cash withdrawals, to customers who do not provide mobile numbers to the bank. On receipt of report of an unauthorised transaction from the customer, banks must take immediate steps to prevent further unauthorised transactions in the account
The customers must be advised to notify their bank of any unauthorised transaction as soon as they can or at the earliest possible opportunity. The longer the time taken to notify the bank, the higher will be the risk of loss to the bank/ customer.
The Bank will note the time of the sms sent notifying the customer of the electronic banking transaction and the sms/response received by the customer. This is done to ascertain the extent of a customer’s liability.
The customer must not reveal/share payment credentials with any third party. If a customer does this then the customer’s liability will increase because of his or her negligent actions. It is the bank’s responsibility to prove that the customer is liable (to whatever degree) in case of unauthorised electronic banking transactions. At their discretion Banks may also decide to waive off any customer liability in case of unauthorised electronic banking transactions. They can do this even in cases of customer negligence.
The customer will incur zero liability when:
The customer will incur limited liability if there is a delay of four to seven working days after receiving the communication from the bank about the unauthorized transaction, in such a situation the per transaction liability of the customer will be limited to the transaction value or the amount mentioned in this Table below, whichever is lower.
The maximum a customer of a Basic Savings Bank Deposit Account can be liable for is Rs 5,000.
All other Savings Bank Accounts, Pre-paid Payment Instruments and Gift Cards, Current/ Cash Credit/ Overdraft Accounts of Micro, Small and Medium Enterprises, Current Accounts/ Cash Credit/ Overdraft Accounts of Individuals with annual average balance (during 365 days preceding the incidence of fraud)/ limit up to Rs.25 lakh. Credit cards with limit up to Rs.5 lakh, the maximum they are liable for is Rs. 10,000
For all other Current/ Cash Credit/ Overdraft Accounts and credit cards with limit above Rs.5 lakh, they can be liable up to Rs 25,000.
If the delay is for more than seven working days, the customer liability will be determined as per the Bank’s Board Policy:
The Code of Bank’s Commitment to Customers says that you will have to be reimbursed by the bank, if you inform the bank promptly. Your maximum loss should never be more than Rs. 25,000 - for example, for a fraudulent withdrawal of INR 50,000 the bank will make good your loss of INR. 25,000, and you will only have bear the loss of INR 25,000. This limit will NOT apply if you have acted fraudulently or negligently or have contributed to the disclosure of/unauthorized access to information.