Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
You reported the fraud, followed every step, and your bank has still refused to refund the money — or worse, gone quiet after an initial acknowledgment. This is genuinely one of the more frustrating outcomes, but it’s also exactly the situation the RBI built a specific, free escalation system for. Here’s exactly how to push this forward.
Under the RBI’s rules on unauthorized electronic transactions, your bank’s refusal is only valid if it can actually prove negligence on your part — the burden of proof is on the bank, not you. A refusal that doesn’t meet this standard isn’t the end of the process; it’s simply the point where formal escalation becomes necessary.
Insist on the bank’s decision in writing, with specific reasons — this document is what you’ll actually need for every subsequent escalation step, and a bank that won’t put its refusal in writing is itself a red flag worth noting.
Every bank is required to have a designated nodal officer for grievance escalation, one level above regular customer service — address your escalation specifically to them, referencing your original complaint and the refusal you received.
If the bank doesn’t respond to your escalation within 30 days, or gives you a final rejection, you’re now eligible to approach the RBI Ombudsman.
Submit your complaint through the RBI’s Complaint Management System — this is a free, independent review specifically designed for exactly this kind of dispute, and doesn’t require a lawyer.
Where the Ombudsman process doesn’t resolve things satisfactorily, a formal complaint with the Consumer Disputes Redressal Commission remains available as a further option.
Banks sometimes deny claims with reasoning that sounds official but doesn’t actually meet the regulatory bar — a vague reference to “suspicious activity” or “policy” without specific evidence of your negligence isn’t a valid basis for refusal under the RBI framework. When you escalate, explicitly ask the bank to identify exactly what evidence supports its negligence finding, not just the conclusion itself.
Keep your escalation focused and factual: reference your original complaint’s date and reference number, the specific refusal you received and when, and a clear statement of why you believe the RBI framework entitles you to the refund. Escalations that are well-organized and specific tend to move faster than ones that simply express frustration, however justified that frustration is.
If your bank’s nodal officer also denies your escalation, don’t treat this as final either — the RBI Ombudsman exists precisely because bank-internal escalation doesn’t always resolve things fairly, and an independent review is often where a wrongly denied claim actually gets corrected.
| Bank's Stated Reason | Does It Hold Up? |
|---|---|
| Specific evidence you shared your OTP/PIN knowingly | Potentially valid — but the bank must actually prove this |
| Vague reference to 'suspicious activity' or 'policy' | Not a valid basis alone — demand specifics |
| You reported after the 3-day window | May reduce liability, but doesn't automatically mean zero recovery |
| No clear reason given at all | Not defensible — insist on a written, specific explanation |
Escalate within your bank to the nodal officer first, then to the RBI Ombudsman if unresolved.
Both the bank-internal escalation and the RBI Ombudsman process are completely free.
Most escalations, including the RBI Ombudsman process, are designed for self-representation. A lawyer becomes valuable where the bank continues to deny a well-evidenced claim even after Ombudsman involvement, or the amount is substantial.
Need professional legal help with this?
Find a Lawyer on VidyodayFor the complete liability framework this escalation is based on, see our pillar guide on RBI rules on unauthorized electronic transactions. To understand specifically what does and doesn’t count as valid grounds for refusal, our guide on can a bank refuse compensation for cyber fraud covers that directly.
Ongoing, unexplained delay past the 90-day resolution timeline is itself grounds to escalate to the RBI Ombudsman, even without a formal written refusal.
Generally, you should approach the Ombudsman within one year of the bank’s final response (or 30 days after escalating with no response) — don’t let this window lapse.
You can accept a partial settlement or continue to dispute the remainder — accepting a partial refund doesn’t necessarily waive your right to pursue the rest, but clarify this explicitly with the bank in writing before accepting.
No — this is a legitimate regulatory process, and banks are required to engage with it professionally; it shouldn’t affect your other banking services.
Your original complaint, all bank correspondence, the reference numbers, the specific refusal and its stated reasons, and any evidence supporting your account of how the fraud occurred.
Yes — a dispute over the amount, not just an outright refusal, is also something the RBI Ombudsman can review.
Ask for the specific policy basis for this claim — the core framework applies broadly across commercial banks, small finance banks, and payment banks, so a blanket exclusion claim is worth scrutinising carefully.
This varies by case complexity, but it’s generally designed to be considerably faster than civil litigation, with many cases resolved within a few months.
This article is for general information only and does not constitute legal advice. Escalation outcomes depend on the specific facts and evidence of each case — consult a cyber law lawyer for guidance specific to your situation.
