What to Do After Credit Card Fraud: A Step-by-Step Guide

Last reviewed: October 2026

You open your banking app and see a transaction you didn't make. Don't panic, but act fast: the sooner you report it, the better your chances of getting the money back. Here's what to do after credit card fraud in India, step by step.

Want to stop fraud before it happens? Read our guide to protecting yourself from credit card fraud.

Step 1: Block your card immediately

Use your bank's app or net banking to block or freeze the card. Most apps let you do it in a few taps. You can also call the customer care number printed on the back of your card or on the bank's official website. Don't use numbers from search results or messages, as scammers post fake helpline numbers.

Step 2: Report the transaction to your bank

Tell your bank which transactions are unauthorised. Do it in writing too (through the app, email or the bank's complaint form) and save the complaint number.

Why timing matters: under RBI rules, if you report an unauthorised transaction within 3 working days of getting the bank's alert, and it wasn't your fault, your liability is zero. If you report it within 4 to 7 working days, your liability is limited. After 7 days, it depends on the bank's policy. See the RBI circular on customer liability.

Step 3: Call 1930 and report online

For online or phone fraud, call the national cyber fraud helpline 1930 as soon as possible. It's run by the Indian Cyber Crime Coordination Centre under the Ministry of Home Affairs. You can also file a complaint on the National Cyber Crime Reporting Portal. Quick reporting can help freeze the money before it moves further.

Step 4: Secure your accounts

• Change your net banking password, UPI PIN and card PIN.
• Check your phone for unknown apps, especially screen-sharing or remote-access apps a "bank officer" asked you to install, and delete them.
• Check your email for unknown logins and change that password too.

Step 5: Keep records and follow up

Keep a note of:

• the complaint number and date,
• transaction details (amount, date, merchant),
• screenshots of any calls, SMS or links from the scammer.

Under the same RBI rules, the bank should credit the disputed amount (as a shadow credit) within 10 working days of your report, while it investigates.

Step 6: Escalate if needed

If the bank doesn't resolve your complaint within 30 days, or you're unhappy with the reply, you can complain to the RBI Ombudsman through the RBI's complaint portal.

Step 7: File a police complaint if the amount is large

For bigger losses, file a complaint at your local police station or cyber cell as well. Your bank may ask for a copy.

Common ways fraud happens

• Phishing calls and SMS pretending to be your bank, asking for an OTP, CVV or PIN.
• Fake links for KYC updates, reward points or parcel deliveries.
• Screen-sharing apps a caller asks you to install.
• Skimming at ATMs or card machines.
• Lost or stolen cards.

Remember: your bank will never ask for your OTP, CVV or PIN.

The bottom line

Speed is everything after credit card fraud. Block the card, tell your bank in writing, call 1930, and keep a record of everything. Then make it harder for it to happen again by turning off card features you don't use and never sharing an OTP.

Related: Virtual credit cards and how they protect you · Credit card billing cycle explained

Sources

• RBI circular – customer liability for unauthorised transactions (2017)
• RBI complaint portal (Ombudsman)
• National Cyber Crime Reporting Portal (helpline 1930)

Disclaimer: This article is for general information only and is not legal or financial advice. Rules and timelines are based on RBI guidelines as of the review date; check with your bank for its current process.