Reporting Cyber Fraud: Timelines and Your Liability: Frequently Asked Questions

This page sets out, in general terms, how common questions on reporting cyber fraud works under Indian law.

Before the frequently asked questions

For transactions before 1 January 2027, RBI's 2017 rules apply: zero liability for the customer if the unauthorised transaction is reported within 3 working days, and limited liability if reported within 4-7 working days.

Typically, for transactions from 1 January 2027, under RBI's Amendment Directions (24 Jun 2026), the customer has zero liability for bank negligence, or for a third-party breach reported within 5 calendar days. The exact treatment of a report made later than 5 days is not clearly specified in the new rules.

Frequently asked questions

How quickly do I need to report an unauthorised transaction to avoid liability?

Under the rules current until 31 December 2026, reporting within 3 working days generally gives zero liability, and 4-7 working days gives limited liability. From 1 January 2027, the window for zero liability (for a third-party breach) is 5 calendar days under RBI's new Amendment Directions.

Is there a government compensation scheme for cyber fraud victims?

RBI introduced a one-year pilot compensating up to 85% of net loss, capped at ₹25,000, for losses up to ₹50,000, where you report to the cyber helpline (1930) and your bank within 5 days and the bank cannot show you were negligent.

For a fuller explanation, see Digital Arrest Scams: How They Work and What the Supreme Court Has Directed and Where to Report Cyber Fraud: Portals, Helplines, and e-Zero FIR.

If you would like this looked at against your own facts, a consultation is a reasonable next step.

This is general, educational information and not legal advice. Specific facts can change the analysis, so a qualified advocate should review your situation before you act.