As online banking and digital payments continue to expand, cyber fraud cases are rising at an alarming pace. However, becoming a victim of an online scam does not necessarily mean the lost money is gone forever. In many cases, if the victim acts immediately and reports the fraud without delay, the funds can be frozen and there is a possibility of recovery. Experts say the speed of reporting is often the deciding factor, as money becomes increasingly difficult to trace once it is transferred through multiple bank accounts or withdrawn in cash.
The Reserve Bank of India (RBI) has established a clear framework governing customer liability in cases of unauthorised electronic transactions. However, there is no RBI rule that guarantees a full refund to every cyber fraud victim. Whether the bank or the customer bears the financial loss depends on the circumstances of the fraud, the bank’s role, and how quickly the customer reports the incident.
Under RBI guidelines, banks are required to provide customers with round-the-clock channels to report unauthorised transactions. Cybersecurity experts note that many victims lose valuable time by first contacting family members or searching for information online instead of reporting the fraud immediately. Such delays can significantly reduce the chances of recovering the stolen funds.
The first step after discovering a fraudulent transaction should be to immediately notify the concerned bank through its helpline, mobile application, or branch. Victims should also report the incident to the National Cyber Crime Helpline (1930) and file a complaint on the National Cyber Crime Reporting Portal. Prompt reporting enables authorities to freeze suspicious accounts before the money is moved further.
Banks cannot simply reverse every fraudulent transaction. If the stolen funds are still available in the recipient’s account and are frozen in time, the chances of recovery are considerably higher. However, if the money has already been transferred through multiple accounts or withdrawn, the recovery process becomes far more difficult and time-consuming. This is why two victims of similar cyber frauds may experience very different outcomes.
The RBI also considers customer responsibility while determining liability. If a customer voluntarily shares sensitive banking information such as one-time passwords (OTPs), PINs, passwords, or other confidential credentials with fraudsters, the case may be treated differently from incidents involving a compromise of the bank’s systems.
Investigating agencies also advise victims not to delete suspicious messages, emails, or fraudulent mobile applications immediately after the fraud. Screenshots, transaction IDs, SMS alerts, emails, call records, and other digital evidence play a crucial role in both the investigation and the recovery process. Such records help banks and law enforcement agencies trace the movement of stolen funds and reconstruct the sequence of events.
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said cybercriminals are increasingly using sophisticated social engineering techniques, fake payment links, investment scams, and banking impersonation to deceive victims. He advised people to verify unfamiliar links before clicking, never share OTPs, PINs, passwords, or banking credentials with anyone, and remain cautious of calls or messages that create a false sense of urgency. According to him, if a fraud does occur, reporting it to the bank and the National Cyber Crime Helpline (1930) within the “golden hour” is the most critical step. A prompt complaint can significantly improve the chances of freezing the stolen funds and recovering the money.
