What Is Credit Card Fraud?
What Is Credit Card Fraud?
How Cards Get Misused and What the Law Says
The Legal Framework
"Whoever, fraudulently or dishonestly makes use of the electronic signature, password or any other unique identification feature of any other person, shall be punished with imprisonment of either description for a term which may extend to three years..." — Section 66C, Information Technology Act, 2000
Credit card fraud means any unauthorised transaction, account takeover, or identity theft carried out with your card or its credentials: the card number, CVV, expiry date, or OTP. There is no single acronym for the crime, but you will hear card-not-present (CNP) fraud for online misuse, point-of-sale (POS) fraud for swipes at compromised terminals, and account takeover (ATO) when a criminal seizes control of your card account.
Several authorities are involved. The Reserve Bank of India (RBI) regulates card issuers and sets the liability rules. The Indian Cyber Crime Coordination Centre (I4C), under the Ministry of Home Affairs (MHA), runs the 1930 helpline and the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS). Police investigate the crime under the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita (BNS).
Timing decides who pays. Report quickly and RBI rules may leave you with little or no liability. Wait, or share an OTP or PIN yourself, and the bank may argue the loss is yours. That is why the first call matters more than the first complaint letter.
Key Terms You Will Hear
These terms appear on bank calls, card statements, and portal forms, so learn them early.
| Term |
Meaning |
| CNP Fraud |
Card-not-present fraud, where card details are used online or by phone without the physical card |
| POS Fraud |
Point-of-sale fraud, where the card is misused or copied at a shop terminal |
| ATO |
Account takeover, where a criminal gains control of your card account |
| CFCFRMS |
Citizen Financial Cyber Fraud Reporting and Management System, behind the 1930 helpline |
| Chargeback |
A reversal of a disputed card payment, raised through the card network |
| Provisional Credit |
Temporary credit of the disputed amount while the bank investigates |
| Nodal Officer |
The bank official who handles escalated customer complaints |
How Fraud Happens
Six Ways Criminals Misuse a Credit Card,
and How Each One Works
Methods keep changing, but most credit card fraud follows these patterns.
Card Skimming and Cloning
Hidden devices at ATMs, fuel pumps, and shops copy your card data, which is then used to make a duplicate card or online purchases.
Phishing and Vishing
Fake links, messages, or calls from "the bank" that trick you into sharing card details or an OTP.
SIM Swap OTP Theft
A criminal gets a duplicate SIM for your number, so OTPs go to them instead of you. Sudden loss of mobile signal can be a warning sign.
Card-Not-Present (CNP) Fraud
Stolen card details used on websites or apps. RBI rules require extra authentication for most online payments, which scammers try to bypass.
Account Takeover
A criminal changes your mobile number, email, or password on the card account, then spends or applies for limit increases.
Fake Offers and Remote Access Apps
"Limit upgrade," "reward points," or "KYC update" offers that push you to install screen-sharing apps and hand over control.
Reporting Channels
Where to Report Credit Card Fraud in India:
Numbers, Portals, and What Each Does
Use more than one channel. Each does a different job.
| Channel |
Contact |
What It Does |
| Card Issuer's 24x7 Helpline |
Number on the back of your card |
Blocks the card and logs your dispute, the main credit card fraud complaint number in India |
| Bank App or Net Banking |
Card controls section |
Locks the card instantly and switches off online, international, and contactless use |
| National Cyber Crime Helpline |
1930 |
Logs a CFCFRMS ticket so the bank can try to hold the money |
| Cyber Crime Reporting Portal |
cybercrime.gov.in |
Records your detailed complaint and routes it to the state cyber cell |
| RBI Integrated Ombudsman |
cms.rbi.org.in |
Hears complaints when the bank does not resolve your dispute |
RBI Liability Rules
How Much Are You Liable For?
RBI Rules on Unauthorised Card Transactions
RBI's customer protection rules link your liability to who was at fault and how fast you reported.
| Situation |
Your Liability |
| Fault lies with the bank or its systems |
Zero, whenever you report |
| Third-party breach, reported within 3 working days |
Zero |
| Third-party breach, reported in 4 to 7 working days |
Limited to ₹10,000 (card limit up to ₹5 lakh) or ₹25,000 (higher limits), or the transaction value if lower |
| Third-party breach, reported after 7 working days |
As per the bank's board-approved policy |
| You shared your OTP, PIN, or card details |
You bear the loss until you report, and the bank bears later losses |
Banks must also credit the disputed amount within 10 working days of your report, pending investigation, and aim to settle the complaint within 90 days.
The Governing Laws
The Governing Laws Behind Your Complaint:
IT Act, BNS, BNSS, and RBI Rules
Three sets of rules shape most credit card fraud cases.
For Offences Committed Through Computers and Phones
Section 66C punishes identity theft, Section 66D punishes cheating by personation, and Section 66 covers dishonest computer-related offences. Section 78 requires an officer of Inspector rank or above to investigate.
- Identity theft (Section 66C)
- Cheating by personation (Section 66D)
- Investigation by Inspector rank or above
For Cheating, FIRs, and Electronic Evidence
Section 318(4) BNS punishes cheating, replacing Section 420 IPC, and Section 319 covers cheating by personation. BNSS Section 173 allows e-FIRs and Zero FIRs, and BSA Section 63 governs electronic evidence.
- Cheating (Section 318(4) BNS)
- e-FIR and Zero FIR (Section 173 BNSS)
- Electronic evidence (Section 63 BSA)
For Bank Liability and Complaints Against Banks
The Payment and Settlement Systems Act, 2007 gives RBI oversight of payment systems. RBI circulars limit customer liability, require extra authentication online, and stop merchants from storing your actual card number, which is replaced by a token. The Ombudsman Scheme handles complaints against banks.
- Limited customer liability
- Card tokenisation
- RBI Ombudsman route
Legal Remedies
Legal Remedies You Can Use After Credit Card Fraud,
From Chargebacks to Court
Depending on your facts, one or more of these routes may fit:
Zero or Limited Liability Claim
Written claim to the bank under RBI's customer protection rules, with proof of the date and time you reported.
Chargeback and Provisional Credit
A dispute through the card network, plus temporary credit of the amount while the bank investigates.
Nodal Officer Escalation
A formal complaint to the bank's Nodal Officer if the first reply is poor or late.
RBI Ombudsman Complaint
Available if the bank does not reply within 30 days or you are unhappy with its reply.
Consumer Complaint for Deficiency in Service
A complaint before the Consumer Commission where the bank's negligence caused the loss.
Criminal Complaint and FIR
Cyber cell or police action against the fraudsters under the IT Act and BNS.
Eligibility
Basic Eligibility Rules
and Who This Is For
Anyone whose card or credentials were misused can complain. These basics apply:
- There is no minimum amount. Even a small test charge deserves a report, because it often signals a larger attempt.
- The transaction must be unauthorised, meaning you did not make it and did not knowingly share the credentials that enabled it.
- Your report date matters. Within three working days gives the strongest protection, but late reports still deserve a complaint.
- A family member or authorised representative can report on behalf of an elderly or incapacitated cardholder.
- A cardholder who sees charges they never made, in India or abroad.
- Someone who lost OTP access after a sudden mobile network failure.
- A person who received a fake bank call and shared details before realising.
- A shopper whose card was cloned at a shop, fuel pump, or ATM.
- A cardholder whose bank has rejected a fraud dispute without a clear reason.
- A victim who is being told the loss is "your negligence" and wants a second opinion.
Why Choose LegalRaahi
Why Choose LegalRaahi
for Credit Card Fraud Cases
Looking for a cyber crime lawyer to handle your credit card fraud complaint? Here is how we work.
We Protect Your Reporting Timeline
We confirm that the bank, 1930, and the portal were all alerted, and we document the exact time, because your liability can depend on it.
Disputes Written Around RBI Rules
Banks respond to specific rules. We cite the customer protection circular, your reporting date, and the transaction details.
Follow-Up That Does Not Stop at Filing
We chase the issuer, the Nodal Officer, and the cyber cell, and keep a written trail of every request and reply.
Evidence Handled the Right Way
Statements, SMS alerts, and screenshots are preserved and certified so they can be used under the Bharatiya Sakshya Adhiniyam.
Honest Talk About Liability
Some cases are clearly zero liability, and some are not. We tell you early where you stand and what the bank may argue.
Our Process
Credit Card Fraud Complaint Procedure
in India, Step by Step
Speed matters at the start, then patience matters. The timelines below are estimates, not promises.
Step 1 · Hour 1
Blocking and Case Assessment
We confirm that the card is blocked, 1930 is called, and your bank has the report in writing. Then we review the transactions and whether the fault looks like the bank's, a third party's, or yours.
Within Hours of Your Call
Step 2 · Day 1
Evidence Collection
We list every disputed transaction with date, time, amount, and merchant, and save SMS alerts, emails, call logs, and screenshots. We also prepare the Section 63 BSA certificate for electronic records.
Same Day to 2 Days
Step 3 · Days 1 to 3
Written Dispute, Portal Complaint, and FIR
We send a detailed written dispute to the card issuer, finalise your portal complaint, and approach the cyber crime police station or cyber cell for an FIR where the facts justify it.
1 to 3 Days
Step 4 · Weeks 1 to 8
Provisional Credit, Chargeback, and Follow-Up
The bank should credit the amount within 10 working days of your report while it investigates, and may raise a chargeback with the card network. We follow up, and escalate delays to the Nodal Officer.
Weeks to a Few Months
Step 5 · Final Stage
Ombudsman, Consumer Commission, and Court Proceedings
If the bank rejects or ignores your claim, we take it to the RBI Ombudsman or the Consumer Commission, depending on the facts. The criminal case against the fraudsters continues separately.
Several Months, Sometimes Longer
Important Note on Safety: Never call a number from a search result or message to dispute a charge. Fake bank helplines target victims, so use only the number on your card and 1930.
What to Include
Filing a Credit Card Fraud Complaint:
What It Should Contain
A complaint with specifics gets acted on faster. Include:
Cardholder Details
Name, contact details, and the card's last four digits and issuer.
Incident Timeline
When you noticed the fraud, when you blocked the card, and when you reported.
Transaction Details
Dates, times, amounts, merchants, and reference numbers for each disputed charge.
Circumstances
Whether the card was with you, where it was last used, and any suspicious calls or links.
Evidence Uploads
Statements, SMS alerts, screenshots, and call logs.
Relief Sought
Reversal of charges, written acknowledgement, FIR registration, and action against the fraudsters.
Master Checklist
Documents You Will Need for
a Credit Card Fraud Complaint
Gather what you can in the first hour. Missing items should never delay your call to the bank.
Essential Paperwork: Identity and Complaint Records
Identity and Card Details
Aadhaar or PAN, plus the card's last four digits and the registered mobile number.
Bank Complaint Copy
Your written complaint, its date, and the bank's acknowledgement or ticket number.
1930 Ticket and Portal Acknowledgement
The reference numbers from your helpline call and portal complaint.
Evidence Documents: Proof of the Fraud
Statements and SMS Alerts
Card statements and every transaction alert, with the disputed charges marked.
Screenshots and Call Logs
Fake links, messages, caller numbers, and call times.
Conditional Documents (Based on Your Specific Case)
FIR Copy and Section 63 BSA Certificate
Needed once an FIR is registered and when electronic records are used as evidence.
Crucial Compliance Note: Report in writing and keep the date and time. Banks can argue delay, and your liability can depend on it. Never delete alerts or reset your phone. File where you live, where the bank branch is, or at any police station for a Zero FIR. Never pay anyone promising guaranteed recovery.
Avoid These
Common Mistakes That
Cost Cardholders Their Money
Panic leads to avoidable errors. Steer clear of these four.
Waiting to See If the Charge Reverses
Delay can cost you the zero-liability window, so report first and wait later.
Reporting Only by Phone
Calls leave no record, so follow up in writing and keep every acknowledgement.
Sharing an OTP With a "Bank Agent"
It can shift the loss onto you, and no real bank asks for it.
Ignoring Small Test Charges
A tiny debit often comes before a larger fraud, so report it at once.
Jurisdiction & Timeline
Jurisdiction of Cyber Crime, Courts,
and Realistic Timeline
Credit card fraud has no single location, so jurisdiction can sit with the place where you live, where your card account is held, or where the fraudster operated. A Zero FIR under Section 173 BNSS lets you start the process at any police station. IT Act offences are investigated by an officer of Inspector rank or above.
If the police do not register your FIR, send the substance of your complaint to the Superintendent of Police under Section 173(4) BNSS, and then apply to the Magistrate under Section 175(3) BNSS. If the bank does not resolve your dispute, you can approach the RBI Ombudsman within one year of the bank's reply.
Provisional credit can arrive within weeks, while chargebacks and bank investigations often take one to three months. Ombudsman cases and criminal trials take longer. Recovery from the fraudsters themselves depends on how fast the money was reported and what the investigation finds. These are ranges based on how cases usually run, not promises.
Why Choose Us
Why Trust LegalRaahi
With This
Our Core Standard
Speed, Evidence, and
Honest Expectations
01
Cyber and Banking Advocates, Not Generalists
Our network advocates handle card disputes, cyber fraud, and bank complaints every week. That shows in how quickly they read a statement.
02
Registered Advocates You Can Verify
Every advocate on your matter is enrolled with a State Bar Council. Ask for the details and check them yourself.
03
Discretion for Sensitive Cases
Your card details, statements, and any embarrassing circumstances stay with the team handling your matter, full stop.
04
Plain Talk About Liability
Nobody can promise a reversal, and we refuse to. You get a candid view of what the bank may argue before you spend on fees.
05
Support After the Complaint
Bank disputes drag. We keep chasing, keep you updated, and help with Ombudsman complaints and appeals.
0
+ Card Fraud Matters Handled
4.8★
Client Rating for Cyber and Banking Law Services
Our Promise
- Free consultation before you commit
- One advocate for your entire case
- Pan-India service, any city
- Urgent and confidential support
Client Stories
People Who Trusted LegalRaahi After
Falling Victim to Credit Card Fraud
Cloned Card · Zero Liability Claimed
★★★★★
"Foreign charges appeared on my card while it was in my wallet. I blocked it, and LegalRaahi sent a written claim citing RBI's rules. The bank credited the amount within two weeks."
AK
Akash
Software Engineer, Bengaluru
SIM Swap · OTP Theft Handled
★★★★★
"My phone lost signal at night, and by morning ₹1.8 lakh was gone from my card. The advocate told me exactly whom to call, filed the complaint, and explained SIM swap evidence."
PR
Priyanka
Interior Designer, Hyderabad
Phishing Call · Dispute Pending
★★★★☆
"I shared an OTP with a fake agent. The advocate was honest that my case was harder, still filed everything properly, and helped me report to 1930. The dispute is ongoing."
Bank Rejected Dispute · Nodal Officer Escalation
★★★★★
"My bank rejected my fraud dispute with a one-line reply. LegalRaahi drafted a detailed escalation to the Nodal Officer, and the decision was reversed after review."
SU
Suchitra
College Lecturer, Mysuru
Skimmed Card · Chargeback Raised
★★★★★
"After a trip, my card was used at stores I never visited. The advocate helped me block it, file the dispute, and report to the cyber cell. The charges were reversed after investigation."
HA
Harpreet
Transporter, Ludhiana
Ombudsman Complaint · Credit Obtained
★★★★★
"The bank ignored me for 40 days. LegalRaahi drafted my complaint to the RBI Ombudsman with a clean timeline, and the bank settled before the hearing."
RE
Revathi
Pharmacist, Chennai
Police Not Registering FIR · Escalated
★★★★★
"The station kept sending me back. LegalRaahi drafted a written complaint to the Superintendent of Police, and my FIR was registered within days."
Honest Advice · Clear Next Steps
★★★★★
"I called in a panic. The first conversation told me what to block, what to save, and what the bank might argue. That clarity alone calmed me down."
FAQs
Frequently Asked
Questions
How to report credit card fraud in India in the first hour?+
Block the card in your bank app or on its 24x7 helpline, then call 1930 and note the ticket number. Report the transaction to your bank in writing, and file a complaint on the cyber crime portal. Save every alert, screenshot, and statement.
What is the credit card fraud complaint number in India?+
There is no single number. Call the 24x7 helpline printed on the back of your card to block the card and log the dispute, and call the National Cyber Crime Helpline 1930 for cyber financial fraud. The cyber crime portal records the formal complaint.
What does RBI zero liability mean for an unauthorised credit card transaction?+
If the fraud happens because of the bank's fault, or a third-party breach that you report within three working days, you are generally not liable. Later reports mean limited liability, and sharing your OTP or PIN yourself can make you bear the loss until you report. Banks must credit the amount within 10 working days.
Credit card money hacked: what to do right now?+
Block the card first. Then call 1930, tell your bank in writing, and save every alert and screenshot. Do not reply to scammers or call numbers from messages. If the bank is slow, escalate to its Nodal Officer, then the RBI Ombudsman.
How do I file a cyber crime portal credit card complaint?+
Go to cybercrime.gov.in, choose the financial fraud option, and fill in your details, the incident, transaction numbers, and suspect information. Upload screenshots and statements, submit, and keep the acknowledgement number. The portal routes your complaint to the concerned state's cyber cell.
Can the bank refuse my fraud dispute, and what can I do then?+
Yes, a bank can reject a dispute, usually arguing that you shared credentials or reported late. You can escalate to its Nodal Officer and then file a complaint with the RBI Ombudsman if there is no reply within 30 days or the reply is unsatisfactory. A consumer complaint for deficiency in service is another option.
Related Legal Services
Explore Additional Support For Your
Cyber & Banking Legal Matters
