Reporting Cyber Fraud: Timelines and Your Liability: Frequently Asked Questions

Here is a general overview of common questions on reporting cyber fraud under Indian law.

Before the frequently asked questions

For transactions before 1 January 2027, RBI's 2017 rules apply: zero liability for the customer if the unauthorised transaction is reported within 3 working days, and limited liability if reported within 4-7 working days.

Generally speaking, for transactions from 1 January 2027, under RBI's Amendment Directions (24 Jun 2026), the customer has zero liability for bank negligence, or for a third-party breach reported within 5 calendar days. The exact treatment of a report made later than 5 days is not clearly specified in the new rules.

Frequently asked questions

How quickly do I need to report an unauthorised transaction to avoid liability?

Under the rules current until 31 December 2026, reporting within 3 working days generally gives zero liability, and 4-7 working days gives limited liability. From 1 January 2027, the window for zero liability (for a third-party breach) is 5 calendar days under RBI's new Amendment Directions.

Is there a government compensation scheme for cyber fraud victims?

RBI introduced a one-year pilot compensating up to 85% of net loss, capped at ₹25,000, for losses up to ₹50,000, where you report to the cyber helpline (1930) and your bank within 5 days and the bank cannot show you were negligent.

For a fuller explanation, see Digital Arrest Scams: How They Work and What the Supreme Court Has Directed and Where to Report Cyber Fraud: Portals, Helplines, and e-Zero FIR.

If you would like this looked at against your own facts, a consultation is a reasonable next step.

The content above explains how the law generally works; it is not legal advice and should not be treated as a substitute for advice on your particular facts.