Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
You’ve lost money through some form of net banking fraud, and beyond the immediate panic, the real question is simple: can you actually get it back? The honest answer is — often yes, but it depends heavily on which specific type of fraud happened and how fast you moved. This guide maps the full landscape so you can find your exact situation and the strongest path to recovery.
Every route below sits under the same overarching RBI framework — zero liability if you report within 3 working days of a genuine third-party breach, limited liability for 4-7 days, and your bank’s own policy beyond that — but the practical mechanics of recovery differ meaningfully depending on exactly what happened to you.
A single unauthorized transaction, a fully compromised login, an unknown beneficiary, a cloned card, or a genuine mistaken transfer are all different situations with different best-fit processes — get this right before filing anywhere.
This is the single most important deadline across every fraud type covered here — report to your bank the moment you notice, regardless of which specific situation you’re in.
IMPS and NEFT/RTGS disputes, credential compromise, and card cloning each have their own specific reporting nuances — using the right one, rather than a generic complaint, moves things faster.
Many banks provisionally credit the disputed amount within about 10 working days pending full investigation — know this timeline and follow up if it doesn’t happen.
Where your bank denies a legitimate zero/limited liability claim, the RBI’s Complaint Management System provides an independent, free review.
The clearest pattern across every recovery story that actually works: speed and documentation, consistently, matter more than the specific legal argument you eventually make. A fraud reported within hours, with clean transaction references and a clear account of what happened, resolves far more often and far faster than a technically identical case reported a week later with vague recollection of the details.
It’s worth being realistic about what “recovery” actually depends on: your bank’s liability (governed by the RBI framework, largely within their control to resolve) is distinct from whether the actual money can be traced and recovered from wherever it went (which depends on law enforcement action and how quickly funds were moved onward). A strong liability claim against your bank doesn’t require the money to actually be traced — you can be entitled to compensation from your bank regardless of whether the fraudster’s account is ever recovered.
If your situation genuinely spans more than one category — say, a compromised login that also led to a new beneficiary being added and a subsequent NEFT transfer — pursue this as one coordinated complaint covering the full sequence, rather than three separate, disconnected reports; banks and the cybercrime portal both handle this better when the full picture is presented together.
| What Happened | Best-Fit Guide |
|---|---|
| A specific unauthorized IMPS transfer | Unauthorized IMPS Transaction |
| A specific unauthorized NEFT/RTGS transfer | Unauthorized NEFT/RTGS Transfer |
| Your login credentials were compromised | Internet Banking Fraud |
| An unfamiliar payee appeared in your account | Unknown Beneficiary Added |
| A cloned card was used | Debit Card Cloned |
| You sent money to the wrong account by mistake | Money Transferred to Wrong Account |
Start with your bank directly, and file a parallel report on cybercrime.gov.in or via 1930. Escalate unresolved liability disputes to the RBI Ombudsman.
Every channel described here — your bank complaint, the cybercrime portal, and RBI Ombudsman escalation — is completely free.
Most straightforward cases, reported promptly with clear documentation, are resolved directly with the bank and, if needed, the RBI Ombudsman. A lawyer becomes genuinely valuable where liability is disputed, the amount is substantial, or your bank isn’t engaging seriously with a legitimate claim.
Need professional legal help with this?
Find a Lawyer on VidyodayFor the general signs and immediate response to any compromised account, our guide on bank account hacked is a useful starting point. If your account has also been frozen as part of a related cyber fraud investigation, see our guide on bank account frozen due to cyber fraud.
The National Cybercrime Helpline (1930) handles reporting across fraud types, and it’s a strong starting point alongside your bank’s own fraud helpline number.
Report what you know to your bank and the cybercrime portal — you don’t need a precise technical classification to file a report; the investigation itself will help establish exactly what occurred.
Yes — these proceed independently and often support each other, so there’s no need to wait for one to conclude before starting the other.
Put your complaint in writing (email, not just phone calls) and explicitly request a complaint reference number — this creates a documented trail that strengthens any subsequent RBI Ombudsman escalation.
Yes — the zero-liability principle isn’t capped by transaction amount when the criteria (third-party breach, reported within 3 working days) are met.
Yes, though your position shifts to limited liability (4-7 days) or your bank’s specific policy beyond that — reporting late is still meaningfully better than not reporting at all.
A clear, well-documented case with a responsive bank rarely needs one; consider a lawyer specifically when your bank disputes liability, the amount is significant, or the case has dragged on well past normal resolution timelines.
It’s genuinely free — no fee is charged to file or pursue a complaint through the RBI’s Complaint Management System.
This article is for general information only and does not constitute legal advice. Recovery outcomes depend heavily on the specific facts of each case — consult a cyber law lawyer for guidance specific to your situation.
