← Your rights

Your rights

What if money is deducted from my bank without permission?

Short answer

Report to bank within 3 working days for zero liability. Bank must credit the amount within 10 days while investigating.

Understanding the issue

Under the RBI Circular on Unauthorized Electronic Banking Transactions (2017), your liability depends on how quickly you report the unauthorized transaction. If you report within 3 working days, you have zero liability — the bank bears the entire loss. If reported between 4-7 working days, your maximum liability is Rs. 25,000. Beyond 7 days, your liability depends on the bank's board-approved policy. The bank must reverse the unauthorized amount within 10 working days of receiving your complaint. Important steps: (1) Immediately notify the bank through customer care, app, or branch, (2) File a written complaint with transaction details, (3) File cybercrime complaint at cybercrime.gov.in or call 1930, (4) If bank doesn't resolve within 30 days, escalate to RBI Ombudsman at cms.rbi.org.in.

Laws that apply

  • RBI Circular on Unauthorized Electronic Banking Transactions (2017)
  • IT Act — Section 66C (Identity theft)
  • Consumer Protection Act 2019