Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
An NEFT or RTGS transfer you never authorized has moved a significant sum out of your account — and unlike a small UPI scam, these transfers often involve larger amounts, which is exactly why understanding the difference between the two systems matters for how fast you need to act. Here’s exactly what to do.
This distinction matters more than most people realize: RTGS transactions settle individually and in real time, and once settled are treated as final — recovery must go through a bank-led request to the beneficiary bank, not a cancellation. NEFT transactions are processed in batches, and recovery similarly follows a bank-led dispute process using the unique reference number and transaction logs, generally with somewhat more room to intervene before full settlement, depending on timing.
Every NEFT/RTGS transaction has a Unique Transaction Reference number — have this ready when you call, along with the exact amount and time, since it’s what your bank uses to trace and act on the transaction.
Report at cybercrime.gov.in or call 1930 — given NEFT/RTGS transfers often involve larger sums, prompt reporting matters even more for triggering a potential freeze on the receiving end.
Using the UTR and its own transaction logs, your bank formally reaches out to the receiving bank to flag the transaction as unauthorized and request appropriate action.
Your bank assesses whether the unauthorized transaction resulted from its own security lapse, a genuine third-party breach, or negligence on your part — this determines whether you get zero liability, limited liability, or bear the loss.
If your bank rejects a legitimate zero/limited liability claim, escalate through the RBI’s Complaint Management System.
A recent, genuinely useful protection: RBI has directed banks to provide a beneficiary name look-up facility for NEFT and RTGS (mandated from 1 April 2025), letting you verify who actually holds an account before sending money — this doesn’t help after an unauthorized transaction has already happened, but it’s worth knowing about and using going forward, and worth mentioning if your dispute involves a question of whether proper verification occurred on the sending side.
The same RBI zero/limited liability framework that applies to IMPS and UPI applies here too — report within 3 working days of a third-party breach for zero liability, 4-7 days for limited liability, and your bank’s own policy governs beyond that. Given NEFT/RTGS amounts tend to be larger, this timeline is worth treating as genuinely urgent rather than something to get to eventually.
If your unauthorized transaction resulted from your own net banking credentials being compromised (rather than a one-off scam call), address the underlying compromise immediately — a password change alone may not be enough if malware or a persistent access method is involved, and your bank’s fraud team can advise on additional account security steps.
| Aspect | What It Means for You |
|---|---|
| RTGS | Settles in real time, individually — once settled, final; recovery is bank-led only |
| NEFT | Processed in batches — generally somewhat more room depending on timing |
| Both channels | RBI's zero/limited liability framework applies equally |
| Both channels | Recovery from the receiving end always requires the beneficiary bank's cooperation |
Report to your bank directly with the UTR, and file a parallel report on cybercrime.gov.in or via 1930. Escalate liability disputes to the RBI Ombudsman.
All these channels are free — the bank complaint, the cybercrime portal report, and RBI Ombudsman escalation.
Most cases are handled directly with the bank and, if needed, the RBI Ombudsman. Given the typically larger amounts involved in NEFT/RTGS fraud, a lawyer is worth considering sooner here than for smaller UPI disputes, particularly if the bank is slow or unresponsive.
Need professional legal help with this?
Find a Lawyer on VidyodayIf the unauthorized transfer happened via IMPS instead, our guide on unauthorized IMPS transactions covers that channel-specific process. For the full picture of your recovery options, see our guide on net banking fraud money recovery.
It’s shown in your transaction SMS/email alert and in your bank’s app or passbook/statement entry for that specific transfer — your bank can also look it up if you provide the date, time, and amount.
Not through simple cancellation — recovery requires the beneficiary bank’s cooperation in getting the receiving account holder to authorise a return, the same principle as a mistaken transfer, but pursued here as part of a fraud investigation.
RTGS is typically used for larger transfers (traditionally ₹2 lakh and above) while NEFT has no minimum — if your unauthorized transaction was a large sum, it’s more likely to have gone through RTGS.
“Settled” doesn’t mean untraceable — the UTR provides a permanent record, and your bank’s fraud investigation team can and should trace it regardless of settlement status.
It’s a preventive tool used before you send money — after an unauthorized transaction, it doesn’t undo what’s already happened, but it’s worth adopting going forward.
The same reporting principles and RBI liability framework apply regardless of the specific channel (web vs app) used to initiate the transfer.
Yes — most banks allow you to temporarily disable specific transaction types through the app or by request, which can be a sensible precaution during an active investigation.
Report all of them together with their individual UTRs — a pattern of multiple large transfers in quick succession is itself significant evidence for your fraud investigation.
This article is for general information only and does not constitute legal advice. Liability determinations and recovery outcomes depend on the specific facts of each case — consult a cyber law lawyer for guidance specific to your situation.
