Lost Money In Online Fraud? How RBI’s New Rule Could Help You Recover Up To ₹25,000

A fake customer-care call, a hurried OTP request or a payment link that looks genuine can empty a bank account within minutes. Recovering that money has usually been uncertain, especially when the customer unknowingly helped the fraudster complete the transaction.

The RBI Online Fraud Compensation Rule may offer some relief. Under the final framework announced on June 24, 2026, eligible victims of small-value digital banking fraud can receive 85% of their net loss or ₹25,000, whichever is lower. It will cover qualifying fraudulent transactions involving losses of up to ₹50,000.

However, the payment is not automatic. Customers must report the fraud to their bank and the National Cyber Crime Reporting Portal or Helpline 1930 within five calendar days. The framework begins on January 1, 2027, and initially covers fraudulent electronic banking transactions occurring during its first year.

Who Can Claim Compensation Under RBI’s New Fraud Rule?

The protection is available to individual bank customers and sole proprietors who suffer losses through qualifying fraudulent electronic banking transactions. These could include certain unauthorised transactions involving internet banking, mobile banking, debit cards, credit cards or other electronic banking channels.

The compensation equals 85% of the victim’s net loss, subject to a maximum payout of ₹25,000. The framework applies only where the fraud-related loss does not exceed ₹50,000.

For example, someone losing ₹10,000 could receive ₹8,500. A loss of ₹20,000 could attract compensation of ₹17,000. Once the loss reaches approximately ₹29,412, the 85% calculation touches the ₹25,000 ceiling. Therefore, a qualifying loss of ₹40,000 or ₹50,000 would still produce a maximum compensation of ₹25,000.

The benefit is available only once during a customer’s lifetime. A person cannot repeatedly claim ₹25,000 for separate fraud incidents. Customers should also note that the framework does not announce compensation for losses above ₹50,000.

The Reserve Bank of India has divided the cost between itself and the banks involved. For smaller eligible losses, RBI will bear 65% of the net loss, while the customer’s bank and beneficiary bank will generally contribute 10% each. The customer bears the remaining 15%.

What Must A Fraud Victim Do Within Five Days?

Speed will decide whether many claims succeed. Under the RBI Online Fraud Compensation Rule, the customer must report the incident through two separate channels within five calendar days of the fraudulent transaction.

The victim should take these steps immediately:

• Call the bank’s official fraud helpline and block the affected card, account or digital banking access.
• Report the incident through Cyber Crime Helpline 1930 or file it at the national cybercrime portal.
• Save the bank complaint number, cybercrime acknowledgement and transaction reference number.
• Preserve screenshots, call records, SMS alerts, payment links and conversations with the suspected fraudster.
• Change internet banking, email, UPI and card passwords without using links received through messages.
• Submit any additional form or declaration requested by the bank without delaying the complaint.

Calling only the bank may not be enough for this compensation. Similarly, filing a cybercrime complaint without notifying the bank could leave the claim incomplete. Both reports must be made within the five-day window.

Customers should use official numbers shown on their bank’s website, mobile application or card. Searching for a customer-care number through an advertisement can create another risk, since fraudsters often publish fake helplines online.

How Will Banks Handle Fraud Complaints From January 2027?

Banks will have greater responsibility after receiving a complaint. They must provide 24-hour channels for reporting fraudulent transactions and lost debit or credit cards. Transaction alerts must also help customers spot suspicious activity quickly.

For electronic banking transactions above ₹500, banks will have to send an instant SMS alert. An email alert must also be sent when the customer has registered an email address.

Banks will examine the complaint, decide liability and provide a response within 45 calendar days for domestic transactions. Cross-border cases can take up to 60 calendar days. The burden of proving that the customer is liable will rest with the bank.

Credit card users receive another useful safeguard. When a complaint concerns a fraudulent credit card transaction, the bank must provide a “shadow reversal” equal to the disputed amount within five calendar days of receiving the notification. This provisional adjustment prevents extra interest or charges from building up while the investigation continues.

A shadow reversal is not the same as a final refund. The bank can still investigate the transaction and decide liability later. Yet it can stop a disputed purchase from increasing the customer’s credit card bill during that period.

The final RBI Online Fraud Compensation Rule takes effect on January 1, 2027. RBI moved the date from the earlier planned implementation of July 1, 2026, giving banks another six months to update reporting systems and complaint procedures.

When Could A Customer Receive More Than ₹25,000?

The ₹25,000 scheme is an additional compensation mechanism, not a replacement for existing zero-liability protections. A customer may recover the entire unauthorised amount in some cases.

Zero liability can apply when the loss occurred because of negligence, security failure or a service deficiency at the bank. This could include missing transaction alerts, failure to maintain prescribed security controls, unavailable reporting channels, internal fraud, system malfunction or delayed action after receiving the complaint.

Zero liability may also apply where a third-party breach caused the transaction and the customer reported it within five calendar days. In such situations, the normal liability framework could produce a full reversal rather than limiting relief to ₹25,000.

The result may differ when a person knowingly transferred money to a fraudster. Scams involving fake investment plans, digital arrest threats, impersonation calls or online shopping deals can involve customer-authorised payments. Eligibility will depend on whether the transaction falls within RBI’s definition of a fraudulent electronic banking transaction and how the bank assesses the facts.

Stay Updated, Stay Protected — Read These Must-Know Updates Before You Miss Out!

1. Got a Wrong Traffic Challan?
Explore how to file an online grievance and cancel your fine without visiting court.

2. Are Your Apps Risking Your Money?
Discover the dangerous apps you should delete now to protect your bank account from cyber fraud.

3. Made a Tax Challan Mistake?
Check how to correct your assessment year and tax head online in 2026.

4. Ready for ITR Filing 2026?
Explore the important documents salaried employees should prepare before the July 31 deadline.

5. Planning a Tatkal Passport?
Discover the new ₹5,000 fee update and important booking details before applying.

What Should Customers Remember Before Filing A Claim?

The compensation is not fraud insurance for every online loss. It carries a five-day reporting deadline, a ₹50,000 loss ceiling and a once-in-a-lifetime restriction. Customers should submit complete records rather than relying only on a telephone complaint.

The most useful response remains immediate action. Call the bank, dial 1930, preserve evidence and avoid further contact with the fraudster. The RBI Online Fraud Compensation Rule creates a financial safety net, but quick reporting will remain the strongest step after money disappears.

FAQs