OTP or credit card fraud

What you need to know

Never share OTP — banks never ask for it. If OTP fraud occurs, immediately call bank's 24x7 helpline to block card/account and file cybercrime complaint. Under RBI guidelines, transactions by deception are covered.

Your rights

Dispute and reverse unauthorized OTP-based transactions

Zero liability if fraud was through bank system error

Reduced liability for uninstructed deception-based transactions

RBI Ombudsman for disputed resolution

What you should do now

Action first

Block and report immediately

Call bank to block card and report fraudulent transaction
File cybercrime complaint at 1930 or cybercrime.gov.in
Reporting within 3 days — zero liability protection applies

If bank denies refund

File RBI Ombudsman complaint — bank must prove you were negligent to deny refund

Acts applicable

IT Act 2000

central

Section 66C — Identity fraud using OTP

RBI Master Directions 2017

central

Customer liability in fraudulent electronic transactions

Where to complain

Cybercrime Portal — 1930 Helpline RBI Banking Ombudsman

Consumer complaint portal: e-jagriti.gov.in (replaced edaakhil.nic.in as of Jan 2025). Labour complaints: col.gujarat.gov.in. All links verified June 2026 via web search against official government sources.