Letter to Bank for Fraud Format: Evidence and RBI Escalation

The branch manager listens, nods, and says "write an application". You write it on a plain sheet at the counter, hand it over, and never get a copy. Three weeks later the bank says no such complaint was received, and the CCTV footage has already been overwritten.

This guide gives the letter to bank for fraud format that survives that conversation: what to put in the subject line, the facts to plead in order, the documents to attach, and the escalation ladder that ends at the RBI's Integrated Ombudsman. It covers unauthorised debits, account takeover, fake loan app harassment, KYC update fraud and card skimming. It does not assume you have a lawyer — it assumes you have a bank, a phone and a printer.

The one rule that decides everything: make it written and dated

A bank's liability for a fraudulent transaction turns on when it was informed. An oral complaint at the branch leaves no trace unless the branch records it in the complaint register and gives you a reference. A written complaint creates a timestamp the bank cannot dispute, and it is the document the Ombudsman will ask for first.

So: write it, email it, and post it. Email to the grievance address published on the bank's website gives you an instant delivery record. Registered post or courier to the corporate office gives you proof of receipt that survives an email server failure. Do both for anything above a few thousand rupees.

The letter to bank for fraud format

Keep it to two pages plus annexures. A long emotional letter gets skimmed; a short factual one gets processed.

Heading and subject

Your name, address, mobile, email and the date at the top left. Then the bank's name and the office address. The subject line should carry the account, the amount and the nature of the fraud in one line: "Subject: Complaint of unauthorised debit of ₹1,24,500 from account no. … on 04/03/2026 — request for reversal, freeze and investigation." A subject line like this lets the bank route the letter to the fraud desk without opening it.

Paragraph one: who you are and what the account is

State the account number, the branch, the account type and the date of opening. Confirm that the mobile number and email registered on the account are still yours and are working — this matters because banks often blame the customer for not responding to an alert sent to an old number.

Paragraph two: the transaction, in a table

Do not narrate the fraud in prose first. Put the transactions in a table: date, time, amount, reference number, channel (ATM, net banking, UPI, card, branch), and the beneficiary where known. Then state the total debited. A table removes any argument about which transactions are disputed.

Paragraph three: how it happened

This is where most letters fail. Write a short, chronological, unembellished account. Include what you received (call, SMS, email, WhatsApp), what you were told, what you did in response, what you did not do, and when you noticed the debit. If you shared an OTP, say so — the bank's logs will show it, and an honest account preserves credibility. If you never shared anything and the debit came through a channel you had not enabled, say that explicitly and ask the bank to produce the authentication logs.

Paragraph four: what you did after noticing

List the calls made, the ticket numbers received, the 1930 helpline reference, the cybercrime portal acknowledgement, and the branch visit with the date. Each reference number is a fact the bank must reconcile with its own records.

Paragraph five: the specific requests

Ask for defined things, in numbered points. Broad requests produce broad silence.

• Reverse the debited amount and credit the account.
• Block the affected channel and reissue the card or credentials, at no cost.
• Freeze the beneficiary account pending investigation and confirm the freeze in writing.
• Provide the transaction logs, authentication records, IP address and device details for the disputed transactions.
• Confirm in writing the action taken and the timeline, within the period prescribed by the RBI's customer protection framework.
• Do not report the account as a defaulter or levy charges arising from the fraudulent debit.

The annexure list

Attach only what is relevant, but attach all of it. Name each annexure and mark it.

• Annexure A — account statement extract for the relevant dates, downloaded from net banking.
• Annexure B — screenshots of the fraudulent message, call log or email, with the sender's number and time visible.
• Annexure C — 1930 helpline reference and cybercrime portal acknowledgement.
• Annexure D — copies of earlier complaints and the ticket numbers issued.
• Annexure E — identity proof, and authority letter if the account holder is a company or an elderly person acting through a relative.
• Annexure F — for a fake loan app, screenshots of the app, the loan agreement, the contact list access prompt and the harassment messages.

Sign the letter, give your mobile number at the foot, and keep a stamped received copy or the courier receipt. If you submit at the branch, ask the officer to stamp and date your copy — this is routine and they will do it.

The escalation ladder

If the first letter produces no action within the period stated in the bank's own grievance policy, escalate in writing. Each step should quote the previous reference and the date, and should give a deadline.

Under the Integrated Ombudsman Scheme, 2021, a complaint can be filed after the bank has rejected it or has not responded within the prescribed period. The scheme covers deficiencies in banking services, including unauthorised electronic transactions and failure to follow the customer protection directions. Filing is free, and it is done through the RBI's complaint management system rather than by post.

Special cases and what changes in the letter

Account takeover

Where the fraudster changed the registered mobile number, email or net banking password, the letter must demand restoration of the original credentials and an audit of how the change was authorised. Ask for the request records — which branch, which channel, what identity documents were accepted. Account takeover through a SIM swap or a branch-level KYC change is a bank-side control failure, and the letter should say so without accusing any individual.

Fake loan app harassment

The debit may be small — a "processing fee" — but the harm is the extortion that follows. The letter should identify the app, the loan amount, the fees debited, the permissions the app took, and the harassment. Attach the threatening messages. Ask the bank to block the merchant or payment aggregator receiving the fees, and report the app to the cybercrime portal and to the RBI's list of unauthorised lending apps. Do not repay an unauthorised loan to make the harassment stop; report it.

Card skimming or cloning

State where the card was last used, whether it left your possession, and whether you received an alert at the time of the disputed transaction. Ask for the ATM or POS terminal location and the CCTV preservation request. CCTV is retained for a short period, so the letter should specifically ask the bank to preserve footage for the disputed date — that request has to reach the bank before the retention window closes.

What not to do

• Do not accept a "goodwill" credit without asking what it settles. A credit recorded as full and final closes the dispute.
• Do not close the account in frustration. Closing it destroys the transaction history you need and can be treated as abandoning the complaint.
• Do not sign a blank or undated letter at the branch. Branches sometimes ask for a "declaration" on plain paper; read it before signing and keep a copy.
• Do not delay the police complaint while waiting for the bank. The freeze window closes within hours, not weeks.
• Do not pay a recovery agent. No legitimate process requires an upfront fee to recover a fraudulent debit.

Frequently asked questions

Does the bank have to reverse the amount if I report quickly?

Under the RBI's customer protection framework, a customer who reports an unauthorised electronic transaction within three working days has zero liability, subject to the bank's investigation and the customer not having acted fraudulently or negligently. The bank must still satisfy itself that the transaction was unauthorised, and it must give you a written decision.

What if the bank says I shared my OTP and refuses to pay?

The bank will rely on its authentication logs. Your response is to demand those logs in writing and to explain the circumstances in which the OTP was obtained — for example, through a call from someone impersonating bank staff. Sharing an OTP after being deceived is negligence, but the bank's own failure to warn or to flag an anomalous transaction is also relevant. Take the rejection to the Ombudsman with the logs and the call details.

Can I complain to the RBI directly?

Not as a general complaint. The RBI does not adjudicate individual customer disputes; that is the function of the Integrated Ombudsman under the 2021 scheme. You file through the RBI's complaint management system, which routes the complaint to the Ombudsman for your bank.

How long does a bank fraud complaint take to resolve?

The framework prescribes turnaround times for acknowledging and resolving complaints, and the Ombudsman aims to dispose of matters within a defined period after receiving the complaint. In practice, straightforward unauthorised-transaction cases with complete documents close within weeks to a few months; contested cases where the bank alleges customer negligence take longer.

Should the letter be sent to the branch or the corporate office?

Both. The branch holds the account records and can act immediately on blocking and card reissue; the corporate grievance officer is accountable for the written decision and the timeline. Sending to both with a copy marked to each prevents the "we never received it" response.

Drafting Support

Our drafting team prepares bank fraud letters and Ombudsman complaints — transaction schedules, demand paragraphs, annexure indexes and escalation letters that track the RBI timeline.