Credit Card Fraud in India: Common Scams and How to Protect Yourself

Last reviewed: October 2026

Credit card fraud in India rarely looks like fraud. They look like a call from "your bank", a reward-points SMS, or a helpful link to "activate" your new card. This guide covers the most common tricks, how to protect yourself, and exactly what to do in the first 24 hours if your card is misused.

Common credit card scams in India

1. Fake bank calls and card-activation scams

A caller claiming to be from your bank offers to "activate", "upgrade" or "increase the limit" of your card, then asks for an OTP. Your bank will never ask for your OTP, CVV, PIN or full card number.

2. Phishing links and fake reward-point SMS

Messages like "Your reward points expire today, redeem now" link to fake websites that steal your card details and OTP.

3. Malicious apps and screen-sharing

Scammers send an app file (often over WhatsApp) or ask you to install a screen-sharing app "for support". These can read your OTPs and banking apps.

4. Skimming

A hidden device on an ATM or a card machine copies your card details. It's less common with chip cards, but it still happens.

5. Card-not-present fraud

Your card details are used online without the physical card, often after a data leak or phishing.

6. SIM-swap fraud

A fraudster gets a duplicate of your SIM so they receive your OTPs. If your phone suddenly loses signal for a long time, contact your mobile operator immediately.

10 ways to protect your credit card

1. Never share your OTP, CVV, PIN or card number, with anyone, ever.
2. Use your card's controls. Under RBI rules, online, international and contactless use on new cards stays off until you switch it on. Keep international use off unless you're travelling, and set sensible limits in your bank's app.
3. Turn on transaction alerts by SMS, email and app notifications.
4. Check your statement every month, and your app every week.
5. Only type card details on sites you reached yourself, not through links in messages.
6. Don't install apps from links sent by strangers, or screen-sharing apps on request.
7. Use tokenised cards and virtual cards for online shopping. See virtual credit cards.
8. Cover the keypad at ATMs and card machines, and check for loose or bulky parts.
9. Use your bank's official app or website to contact them. Don't use numbers from search results or messages.
10. Keep your phone and apps updated and use a screen lock.

What to do if your credit card is misused: the first 24 hours

1. Block the card immediately in your bank's app or net banking, or by calling the number on the back of your card.
2. Report the transaction to your bank in writing (app, email or official portal) and note the complaint reference number.
3. Report the cyber fraud by calling the national helpline 1930 or filing a complaint at cybercrime.gov.in.
4. Change your passwords and PINs for banking apps and email.
5. Keep evidence: screenshots of messages, call logs and your statement.

Will you get your money back?

Under the RBI's rules on unauthorised electronic transactions, if a fraud isn't your fault and you report it to your bank within 3 working days, you generally have zero liability. Reporting within 4–7 working days can leave you with limited liability, and after that it depends on the bank's policy. Banks are generally required to credit the disputed amount (as a shadow credit) within 10 working days of your report. Read the RBI circular.

If you shared your OTP or PIN, you may be liable for the loss until you report it. That's why speed matters.

If your bank doesn't resolve it within 30 days, you can complain to the RBI Ombudsman at cms.rbi.org.in.

The bottom line

Most credit card fraud starts with someone tricking you into sharing a detail. Keep your OTP to yourself, switch off features you don't use, watch your alerts, and act within hours, not days, if something looks wrong.

Stay informed: Subscribe to the PaisaSimple newsletter → for scam alerts and card tips.

Related reads: How to choose the right credit card · Avoid the minimum due trap

Sources

• RBI circular – customer liability for unauthorised transactions (2017)
• National Cyber Crime Reporting Portal (helpline 1930)

Disclaimer: This article is for general information only and is not legal or financial advice. Rules on customer liability can change. Check the latest RBI guidance and your bank's policy.