Jargon busted

Zero liability

Short answer

Zero liability is RBI's rule for unauthorised transactions: if the fraud came from a third-party breach — not your own negligence — and you report it within three working days, your liability can be zero. Wait four to seven days and a capped amount can fall on you; beyond that, the bank's policy decides. The single most valuable habit is therefore reporting fast, in writing.

What it means

RBI's customer-liability framework splits fraud losses by who could have prevented them. Bank's fault (a system breach): zero liability regardless of when you notice. Third-party breach (neither you nor the bank): your liability depends entirely on reporting speed — zero within three working days, a capped slab up to day seven, bank policy after.

Why the clock matters: Same fraud, two customers. One reports the SMS alert the same evening: liability zero. One assumes it is a mistake and calls after a week: the loss lands in policy territory. The transactions were identical; the reporting was not.

The common mistake

Waiting to be sure. People re-check statements, ask the family, email the merchant — and burn the three days doing it. You do not need to prove fraud to report it; you need to report it to stop owning it. A mistaken report costs nothing.

The subtlety worth knowing

The underlying RBI circular also puts the burden of proving customer liability on the bank, not on you. Your job is the prompt report and the reference number; establishing negligence is theirs. Keep every SMS and email — the paper trail is your case.

Chargeback · Transaction controls · Card safety lesson

All figures on this page are indicative and dated. Rates and fees differ by bank and change over time. Always verify with your bank's official schedule of charges.

Frequently asked questions

What counts as my negligence?

Sharing credentials — PIN, OTP, CVV — is the classic case: losses before you report are then yours to bear. Losses after you have reported are the bank's regardless. Even if you were tricked into sharing, report immediately: it caps the damage at that moment.

How do I make the report count?

Use the official app or helpline, block the card, and get a complaint reference number in writing. RBI's framework also expects the bank to credit the disputed amount provisionally within about ten working days of your report, so the reference number is what you hold them to.

Sources

The regulation and official pages this page is checked against. If one of them disagrees with us, it wins.

Customer Liability in Unauthorised Electronic Banking Transactions — Reserve Bank of India
Circular: Limiting Liability of Customers in Unauthorised Electronic Banking Transactions — Reserve Bank of India

Written and checked by the CardSamajh editorial desk · Last reviewed: 24 August 2026 · How we check this