Letter to Bank for Fraud & Unauthorised Transaction

You check your bank app and see money gone: a payment you never made, a transfer to a stranger, a card charge you do not recognise. Panic is natural — but the most valuable thing you can do in the next few hours is put a written complaint on record with your bank, because in Indian banking law your right to a refund is closely tied to how quickly you report the unauthorised transaction. This guide explains the rules, how to write the letter, and what to do when the bank still refuses.

Your Rights Under RBI Guidelines on Unauthorised Transactions

India’s banking regulator, the Reserve Bank of India (RBI), issued binding instructions on electronic banking transactions (bank-to-bank transfers, credit/debit/prepaid cards, ATMs, net and mobile banking) that govern customer liability for unauthorised transactions. The framework is simple in principle:

• If the fraud is caused by the bank’s own negligence — a system failure, a person in the bank’s employment committing fraud, or a third-party breach of the bank’s security — the customer bears zero liability.
• If the customer was not at fault (no sharing of OTP, PIN or card), liability is zero or limited depending on when the unauthorised transaction was notified and reported to the bank.
• The customer is fully liable where the loss is due to the customer’s own negligence, such as voluntarily sharing OTP or PIN, or writing the PIN on the card.

The RBI framework distinguishes cases where the customer reports within three working days of receiving the transaction alert, and cases where reporting is delayed. Reporting promptly (within three working days) significantly strengthens your claim to a zero-liability or limited-liability resolution. This is why the written letter, with its date and reference number, is your single most important piece of evidence.

Before You Write: Secure Your Account

Writing the letter is step two. Step one is damage control, done immediately:

• Block the card or account using the bank’s app, customer care, or debit/credit card hotline.
• Change your passwords/PIN for net banking, mobile banking and email, and log out of all sessions.
• Check for other unauthorised entries — many frauds come in multiples.
• Note the transaction details: amount, date/time, merchant name or transfer reference, and your account/card number (partially masked is enough).
• Collect evidence: screenshots of the transaction alert and app history.

Then immediately report the fraud to the bank — do this through customer care and, critically, in writing by email so you have a timestamped record. Many banks additionally require you to register a formal complaint within their grievance portal.

How a Dispute or Chargeback Works

When you report an unauthorised card transaction, the bank will typically initiate a dispute with the card network (Visa, Mastercard, RuPay), often described as a chargeback. The temporary credit of the amount to your account is common while the network investigates. Banks are expected to follow the timeline prescribed under RBI’s Customer Protection direction and the card scheme rules, and to explain the outcome. If your bank is slow, that inaction is itself something you should put on record in writing, because it may attract compensation.

For UPI or bank-to-bank frauds, the process runs through the relevant payment system (NPCI for UPI) and the bank’s nodal officer. Whichever channel, the written complaint is the trigger for the entire internal and inter-bank investigation.

Writing the Letter: What It Must Contain

1. Date and your account/card details — account number, card number (last four digits), and registered mobile number.
2. Reference number — the bank’s complaint ID or the customer-care ticket number, if any.
3. Full particulars of the unauthorised transaction — date and time, amount, merchant or beneficiary name, and the transaction reference/receipt reference if available.
4. The sequence of events — when you noticed the fraud, what you did (blocking, password change), and the time you reported it.
5. Your assertion of non-involvement — state clearly that you did not authorise the transaction and did not share your OTP, PIN or card with anyone, which is essential to your zero-liability claim.
6. The action you want — reversal/refund of the amount, and a written enquiry report with reasons.
7. A reasonable deadline — request resolution within the time the bank’s policy or RBI instructions allow, and reserve your rights to escalate to the RBI Ombudsman.

Sample Complaint Letter

The Nodal Officer / Grievance Redressal Officer,
[Bank Name], [Branch/Address]

Subject: Complaint regarding unauthorised transaction in account [XXXX] and request for refund

Dear Sir/Madam,
I hold savings account number [XXXX] (and card number [XXXX-XXXX-XXXX-1234]) with your bank. On [date] at [time], I noticed an unauthorised transaction of Rs [amount] to/from [merchant/beneficiary] with reference [number]. I did not authorise this transaction and did not share my OTP, PIN, card or net-banking credentials with anyone.

I immediately blocked the card/account and reported the matter to your customer care on [date] at [time] (reference [number]). I am writing to formally register this complaint and to request that (a) the amount of Rs [amount] be reversed to my account, and (b) the bank conduct an enquiry and furnish a written reply with the reasons and action taken.

I understand that under the RBI’s guidelines on unauthorised electronic banking transactions I have reported within three working days of the transaction alert, and I request resolution without delay. Your early reply is awaited.

Yours faithfully,
[Name], [Registered Mobile], [Email]

Encls.: transaction alert screenshot; account statement extract.

If the Bank Delays or Refuses — Escalate

Banks under RBI instructions must resolve complaints within a defined time and, if unsatisfied, will direct you to their Internal Ombudsman / Nodal Officer. Your escalation ladder, in order, is:

• Internal grievance escalation — write to the Head Office / principal nodal officer with the full history and copies of earlier letters.
• RBI Ombudsman Scheme for Digital Transactions / Banking Ombudsman Scheme, 2021 — you can approach the RBI Ombudsman online for deficiency in service, including failure to reverse unauthorised transactions, when the bank’s internal process fails or is delayed.
• Police/Cyber Cell complaint — file an FIR or a complaint on the national cyber-crime reporting portal (NCRP) at cybercrime.gov.in, and give the bank the complaint reference; this is important for criminal action against the fraudster.

Keep a folder with every email, reference number, message, and the complaint ID from the NCRP. Villagers of evidence win fraud disputes; a single phone call does not.

Frequently Asked Questions

Q: What should I do within the first hour of noticing a fraudulent transaction?

A: Block the card or account, change your net-banking/mobile-banking passwords and PIN, then report the fraud to customer care and send a written email complaint immediately so the date and time are on record.

Q: Am I entitled to a refund of the amount lost in a fraud?

A: Under RBI guidelines, if the loss is due to the bank’s negligence or a system/third-party breach, liability is zero. If you were not negligent, your liability is zero or limited depending on whether you reported within three working days of the alert.

Q: Am I liable if I shared my OTP with a fraudster?

A: Yes, as a general rule. Voluntarily sharing OTP, PIN or card credentials is treated as customer negligence under the RBI framework, and in such cases the customer may be fully liable for the loss.

Q: What is a chargeback, and how long does it take?

A: A chargeback is a claim raised by the bank with the card network to reverse an unauthorised transaction. The bank investigates under RBI and card-scheme timelines; the amount is often temporarily credited while the network review is completed.

Q: Where can I escalate if my bank refuses to help?

A: Escalate to the bank’s nodal officer/Internal Ombudsman, then to the RBI Ombudsman under the Ombudsman Scheme for Digital Transactions, and file a complaint on the national cyber-crime reporting portal so the fraud is also pursued criminally.