Skip to content

Lost money to a cyber fraud? Call 1930 now and file at cybercrime.gov.in. The first hour matters.

What to do, step by step →
Cyber Crime Help Desk An initiative from Kramate for Society

Regulators (India)

Reserve Bank of India (RBI)

Regulates banks, NBFCs and payment systems; sets the rules on customer liability for unauthorised transactions and runs the Ombudsman and Sachet portals.

Established
1935
Official site
rbi.org.in
Phone
14448

Three RBI mechanisms matter to a fraud victim. The 2017 circular on limited liability sets when a customer is liable for an unauthorised electronic transaction (zero if reported within three working days of a third-party fraud). The Integrated Ombudsman (cms.rbi.org.in) hears complaints a bank has not resolved in 30 days. Sachet (sachet.rbi.org.in) takes reports of illegal deposit schemes and unregulated lenders, including loan apps. RBI's Digital Lending Guidelines also decide which loan apps are legal.

What it can do for you

  • Direct a bank to refund an unauthorised transaction through the Ombudsman.
  • Act against unregulated lenders and loan apps reported on Sachet.
  • Publish the list of regulated entities so you can verify a lender or payment operator.

What it cannot do

  • Freeze or trace money in a fraud (that happens through 1930 and the banks).
  • Act on a complaint you have not first made to the bank.

How to use it

  1. Complain to the bank first

    In writing, with the 1930 acknowledgement. Keep the reference number.

  2. After 30 days, file on cms.rbi.org.in

    Attach the bank complaint and its response or lack of one.

Frequently asked questions

What are the RBI zero-liability rules?

If the fraud is due to the bank’s negligence, or a third-party breach reported within three working days, the customer’s liability is zero. Between four and seven days it is capped (₹5,000 to ₹25,000 depending on account type). After seven days the bank’s board policy applies.