Credit Card Fraud in India: How to Protect Yourself

If you spot a credit card transaction you did not make, the most important thing is speed: block the card and report the unauthorised transaction to your bank’s official helpline immediately. Under the Reserve Bank of India’s customer-protection rules, if you report an unauthorised electronic transaction promptly – within three working days of receiving the bank’s communication – your liability can be zero. Keep evidence, get a complaint reference number, and if the fraud involved a scam, also report it on cybercrime.gov.in or by calling 1930.

This article explains the basics of protecting your card and disputing a wrong or fraudulent charge in India. It is general awareness information, not personalised financial or legal advice; for your specific case, confirm the current rules with your bank or on the RBI website.

How credit card fraud happens

Fraudsters do not need your physical card. Common routes include:

• Phishing and vishing. Fake calls, SMS or emails pretending to be your bank ask you to “verify” details or share an OTP. The OTP is the key that authorises a transaction, which is why no genuine bank employee will ever ask for it.
• Fake payment and reward links. Messages about “KYC expiry”, “reward points about to lapse” or “card blocked” push you to a lookalike website that captures your card number, CVV and OTP.
• Data breaches and skimming. Card details leaked from a compromised merchant, or copied by a tampered card reader, are used for online purchases.
• Unauthorised recurring charges. A free trial quietly converts to a paid subscription, or a merchant keeps charging after you cancelled.

Red flags of a fraud attempt

Why speed matters so much

Card fraud is a race. Once your details are stolen, criminals try to spend fast, often making several transactions in minutes. The sooner you notice and report, the more you limit the damage – and the stronger your position under the customer-protection rules. This is why transaction alerts are so valuable: an SMS or app notification can be the first sign that something is wrong, giving you minutes to block the card before a small test charge becomes a large loss.

It also matters because the protection you enjoy is linked to how promptly you report. Delay can move you from zero liability into a zone where you may bear part of the loss. In practice, the habit that protects you most is simple: read your transaction alerts, and act the instant you see something you did not do.

How to protect yourself

• Never share OTP, CVV or PIN with anyone, including a caller claiming to be from your bank.
• Turn on transaction alerts by SMS and email so you see every charge the moment it happens.
• Use card controls. Most bank apps let you set spending limits, switch off international or online use when not needed, and freeze the card instantly.
• Check statements regularly for charges you do not recognise, including small ones.
• Type the website yourself. Reach your bank through its official app or by typing the address, never by clicking a link in a message.
• Keep your contact details updated with the bank so alerts and verification reach you.

Your protection under RBI rules

The RBI’s framework on limiting customer liability for unauthorised electronic transactions is designed to protect you when you act quickly.

• Zero liability generally applies where the loss is due to the bank’s negligence or a third-party breach that you report within three working days of receiving the bank’s communication about the transaction.
• Limited liability may apply if you report after three working days, with the amount capped depending on your account or card type and the delay.
• Shadow reversal. When you dispute a charge, banks are expected to credit the disputed amount back to your account within a defined timeline while they investigate. This is a provisional credit, not a final decision.

Because these rules are being updated over time, check the exact current window and caps with your bank or on rbi.org.in before relying on specific numbers.

How to dispute a wrong or fraudulent charge

A dispute (sometimes handled as a chargeback through the card network) is your formal route to reverse a charge you did not authorise or that a merchant handled wrongly.

• Block the card first if the charge is fraudulent, then call the bank’s official helpline to report the unauthorised transaction.
• Raise a dispute through the bank’s app, netbanking or dispute form, giving the date, amount, merchant and reason.
• Note the complaint reference number. This service request number is your proof that you reported on time.
• Keep evidence – transaction SMS, screenshots, receipts, emails and cancellation confirmations all strengthen your case.
• Mind the deadline. Card networks allow disputes for a limited period from the transaction date, and your bank may set a shorter internal window, so act early.
• Escalate if needed. If the bank does not resolve your complaint within a reasonable time or you are unsatisfied, you can approach the RBI Integrated Ombudsman.

How to report fraud

• Your bank, immediately. Blocking the card and registering the complaint fast is what protects your liability.
• Call 1930, the national cyber crime helpline, if the fraud involved a scam call, phishing link or OTP theft. Quick reporting can sometimes help freeze funds, though recovery is never guaranteed.
• File at cybercrime.gov.in, the National Cyber Crime Reporting Portal, and keep the acknowledgement number; some banks ask for it with the dispute form.
• RBI Ombudsman through the RBI complaint management system if your bank does not resolve the matter.

Common myths that cost people money

A few widespread misunderstandings make fraud easier. Clearing them up is part of protecting yourself.

• “The bank called me, so it must be genuine.” Caller IDs are easily spoofed. A call claiming to be your bank proves nothing; verify by calling the number on your card or the bank’s official website.
• “Sharing an OTP is harmless because it expires quickly.” An OTP is the final key that authorises a payment. Sharing it, even once, can let a transaction go through instantly.
• “Small unknown charges are not worth reporting.” Fraudsters often test a card with a tiny amount first. Reporting it early can stop a far larger charge.
• “A dispute always means a guaranteed refund.” A provisional credit may appear while the bank investigates, but the final outcome depends on the evidence. Keep your records strong.
• “Once I am past the reporting window, nothing can be done.” You should still report; banks handle later reports under their policy, and escalation to the Ombudsman remains open.

Everyday habits that keep your card safe

Good routines quietly prevent most trouble.

• Review every alert and scan your statement at least monthly.
• Keep online and international usage switched off when you do not need it, turning it on only for a specific purchase.
• Shop on trusted, secure websites, and avoid saving card details on sites you rarely use.
• Be wary of public Wi-Fi for payments and of links in SMS or email that push urgency.
• Update your registered mobile number and email so alerts and verification always reach you.
• Destroy old cards securely and never photograph the front and back of your card where it could be stored or shared.

None of this is complicated, and together these habits dramatically shrink the chance that a stolen number ever turns into a real loss.

Fraud protection rewards speed and records. The faster you block the card, the sooner you report, and the better your evidence, the stronger your position. Treat your OTP, CVV and PIN like the keys to your money, because that is exactly what they are, and never hand them to anyone who calls, messages or emails you. This article is general awareness, not personalised financial advice; for your specific situation, rely on your bank’s official guidance and the current RBI rules.