Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
You’ve spotted a beneficiary/payee in your net banking that you never added — an unfamiliar name, ready to receive a transfer. If you’ve caught this before any money actually moved, you’re in a genuinely strong position: Indian banks build in a specific safety window for exactly this situation. Here’s how to use it.
RBI mandates a cooling period — commonly ranging from 30 minutes to 24 hours, depending on the bank and the transfer amount — between when a new beneficiary is added and when the full transaction limit becomes available to that beneficiary. This exists specifically because, before this rule, compromised accounts would have a beneficiary added late at night and funds transferred before the account holder woke up. Spotting an unfamiliar beneficiary during this window is your best chance to stop a fraud before any money actually moves.
Go into your net banking or app’s beneficiary management section and delete it right away — this is the single most time-sensitive action if the cooling period hasn’t fully elapsed yet.
Change your net banking password and transaction PIN immediately — a beneficiary being added at all means someone had (or still has) access to your login credentials.
Review your recent transaction history specifically for any transfer to the beneficiary you just removed — smaller initial transfers are sometimes allowed even during a cooling period, depending on your bank’s specific limits.
Even if you caught this in time and no money moved, report it — this creates a record of the attempted compromise and prompts your bank to review your account’s security.
If a transfer did complete to the unknown beneficiary, report immediately at cybercrime.gov.in or call 1930, and follow the same reporting process as any unauthorized transaction.
A genuinely useful habit worth adopting after this experience: enable SMS/email/app alerts specifically for beneficiary additions, not just for transactions — many banks send a notification the moment a new payee is added, which is exactly the alert that would let you catch this within minutes rather than by chance while browsing your account.
If you never received an alert about the beneficiary being added in the first place, ask your bank specifically why — this could mean your registered contact details were also changed as part of the compromise, which is a more serious situation requiring immediate, direct escalation with your bank’s fraud team.
Since adding a beneficiary requires your login credentials, this incident is really a symptom of a broader compromise (phishing, vishing, malware) — treat the underlying cause with the same seriousness as a full account compromise, not just this one isolated warning sign.
| What Happened | What to Do |
|---|---|
| Spotted before the cooling period ended | Remove immediately — this is a genuine save |
| No transfer occurred, but you're reporting anyway | Still report — creates a record and prompts a security review |
| A transfer did complete to the beneficiary | Treat as unauthorized transaction — report to bank + cybercrime portal |
| No alert was ever received about the addition | Ask your bank directly — may indicate broader compromise |
Report to your bank immediately through its app, net banking, or helpline. If any transfer completed, also file on cybercrime.gov.in or via 1930.
Removing the beneficiary, reporting to your bank, and filing on the cybercrime portal are all free.
If caught within the cooling period with no money moved, this is entirely self-manageable. If a transfer did complete, follow the same process as any unauthorized transaction dispute — a lawyer becomes useful only if your bank denies a legitimate liability claim.
Need professional legal help with this?
Find a Lawyer on VidyodaySince a beneficiary addition means your login was compromised, our guide on internet banking fraud covers securing your account against the underlying cause. If money did transfer to the unknown beneficiary, see our guide on net banking fraud money recovery for your full recovery options.
Many banks allow a limited amount (a small transfer limit) to a newly added beneficiary even during the cooling period, with the full limit unlocking only after it ends — check your specific bank’s policy on this.
This happens — check your own recent activity and confirm with anyone else who might have access to your account before assuming it’s fraud, though it’s still worth being cautious and verifying.
Some banks offer enhanced security options like this — ask your bank specifically about additional controls on beneficiary management if you want extra protection going forward.
This doesn’t make it legitimate — verify independently rather than assuming a business-sounding name is safe; fraudulent beneficiary names are often deliberately unremarkable or business-like to avoid suspicion.
Removing the beneficiary prevents future transfers, but doesn’t reverse a transfer that’s already completed — check your transaction history separately to confirm nothing already went through.
Report it the same way, and clarify with the other joint holder whether they added the beneficiary — but don’t delay removal and reporting while you’re confirming this.
Yes — your net banking or app’s beneficiary management section typically shows the addition date and time, which is useful information to include in your report.
It’s not mandatory if genuinely nothing was lost, but reporting to your bank at minimum is still worthwhile — if you’re at all unsure whether something moved, filing on the cybercrime portal as a precaution doesn’t hurt.
This article is for general information only and does not constitute legal advice. Cooling period durations and beneficiary limits vary by bank — consult a cyber law lawyer or your bank for guidance specific to your situation.
