Bank Refund Under the RBI Customer-Protection Master Direction — India
Sourced from Indian central (Union) law — Constitution of India, central Acts of Parliament, and Supreme Court decisions. State-level information reflects each state's own Acts and High Court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
RBI's Master Direction on Limiting Liability of Customers in Unauthorised Electronic Banking Transactions (DBR.No.Leg.BC.78/09.07.005/2017-18, 6 July 2017 and amendments) creates a layered liability system that depends entirely on how fast you report.
- Within 3 working days: zero customer liability. Bank must reverse the amount within 10 working days from the date of intimation.
- 4–7 working days: limited liability — capped at ₹5,000 to ₹25,000 depending on account type and balance.
- Beyond 7 working days: bank's own approved policy governs liability (usually full customer liability for negligence-driven cases).
If the bank rejects or delays, escalate to the RBI Integrated Ombudsman Scheme 2021 at cms.rbi.org.in. Filing is free. The revised scheme is in force from 1 July 2026, retaining the "one nation, one ombudsman" design across banks, NBFCs, payment system participants, and credit information companies. Toll-free 14448 (9:30 am – 5:15 pm) in Hindi, English, and ten regional languages.
When does it apply?
Applies to any account holder in a scheduled commercial bank, NBFC, payment system participant, or credit information company.
- Unauthorised electronic transactions — UPI, NEFT, IMPS, RTGS, card-not-present, internet banking, mobile banking.
- Disputes the bank does not resolve within 30 days — file with the RBI Ombudsman.
- Even credit-information / CIBIL grievances are covered.
What to Do to Get a Refund From the Bank After UPI / Card Fraud in India
The order matters here. The bank route comes first, and only after a clean rejection do you go to the ombudsman.
- Notify your bank in writing within 3 working days. Email, branch visit, or net-banking ticket — keep proof.
- Provide the transaction ID, UTR, amount, fraudster's UPI handle / account number, mobile number, and the FIR or cybercrime.gov.in acknowledgement.
- If the bank does not resolve within 30 days or rejects, file the grievance at cms.rbi.org.in — the RBI Integrated Ombudsman portal.
- Attach the bank's reply or proof of 30-day non-response.
- Call 14448 to file by phone in the language of your choice.
- The ombudsman award can be enforced as a civil decree under the Scheme.
What should you NOT do?
- Do not sleep on the 3-working-day window. The difference between Day 3 and Day 4 can be the difference between zero liability and ₹25,000.
- Do not communicate orally only. If the bank's officer says "it's noted", get it in writing or by email — without proof of reporting, the timeline does not count.
- Do not skip the bank step and jump straight to the ombudsman. The Scheme requires you to first take up the matter with the bank and wait 30 days (or get a clear written rejection).
- Do not file in multiple forums simultaneously. The ombudsman declines complaints already pending in a court or other forum.
- Do not pay any "legal fee" to anyone claiming to file the ombudsman case for you. Filing is free at cms.rbi.org.in.
About Scams, Fraud & Money Recovery in India
India's scam-recovery system runs across three institutions. The Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs operates cyber helpline 1930 and the National Cybercrime Reporting Portal at cybercrime.gov.in — the "Citizen Financial Cyber Frauds Reporting and Management System" (CFCFRMS) lets the helpline freeze defrauded funds before they leave the receiving bank, but only if you report within minutes. For bank-channel disputes, the RBI Integrated Ombudsman Scheme 2021 handles consumer grievances against banks, NBFCs, payment system operators, and credit information companies free of cost at cms.rbi.org.in or via toll-free 14448. Under RBI's customer-protection circular on limiting liability of customers in unauthorised electronic banking transactions, zero-liability is preserved if you report within 3 working days. For consumer-product disputes, the National Consumer Helpline (1915) and the Consumer Protection Act 2019 District Commission route apply.
Emergency: 112. Cyber helpline: 1930.
Common Questions
What is the bank refund under the rbi customer-protection master direction right in India?
RBI's Master Direction on Limiting Liability of Customers in Unauthorised Electronic Banking Transactions (DBR.No.Leg.BC.78/09.07.005/2017-18, 6 July 2017 and amendments) creates a layered liability system that depends entirely on how fast you report.Within 3 working days: zero customer liability. Bank must reverse the amount within 10 working days from the date of intimation.4–7 working days: limited liability — capped at ₹5,000 to ₹25,000 depending on account type and balance.Beyond 7 working days: bank's own approved policy governs liability (usually full customer liability for negligence-d...
When does bank refund under the rbi customer-protection master direction apply?
Applies to any account holder in a scheduled commercial bank, NBFC, payment system participant, or credit information company.Unauthorised electronic transactions — UPI, NEFT, IMPS, RTGS, card-not-present, internet banking, mobile banking.Disputes the bank does not resolve within 30 days — file with the RBI Ombudsman.Even credit-information / CIBIL grievances are covered.
How do I get my money back from the bank after an unauthorised online transaction in India?
The order matters here. The bank route comes first, and only after a clean rejection do you go to the ombudsman.Notify your bank in writing within 3 working days. Email, branch visit, or net-banking ticket — keep proof.Provide the transaction ID, UTR, amount, fraudster's UPI handle / account number, mobile number, and the FIR or cybercrime.gov.in acknowledgement.If the bank does not resolve within 30 days or rejects, file the grievance at cms.rbi.org.in — the RBI Integrated Ombudsman portal.Attach the bank's reply or proof of 30-day non-response.Call 14448 to file by phone in the language of y...
What mistakes should I avoid with bank refund under the rbi customer-protection master direction?
Do not sleep on the 3-working-day window. The difference between Day 3 and Day 4 can be the difference between zero liability and ₹25,000.Do not communicate orally only. If the bank's officer says "it's noted", get it in writing or by email — without proof of reporting, the timeline does not count.Do not skip the bank step and jump straight to the ombudsman. The Scheme requires you to first take up the matter with the bank and wait 30 days (or get a clear written rejection).Do not file in multiple forums simultaneously. The ombudsman declines complaints already pending in a court or...