Knowing how to protect bank account after fraud strikes can save your money and your peace of mind. Whether a scammer got your OTP, you tapped a fake link, or you simply spotted a transaction you did not make, the first hours matter most. This guide gives you a clear, ordered set of actions to protect your bank account after a fraud attempt and stop further damage.
Stay calm and work through the steps in order. Speed matters more than anything, because the sooner you act, the better your chances of freezing the money before it disappears.
Why acting fast helps you protect bank account after fraud
Fraudulent transfers move quickly. Once money leaves your account, scammers often shift it through several accounts or withdraw it within hours, which makes recovery far harder. This is why every step below is ordered by urgency. The goal in the first hour is to stop more money leaving and to alert the people who can freeze the fraudulent funds.
There is also a legal reason to be quick. India’s banking rules tie your liability for unauthorised transactions partly to how fast you report. Acting within hours, rather than days, can be the difference between a full refund and a painful loss. So treat any sign of fraud as urgent, even if you are not yet sure money has actually gone.
First steps to take in the first few minutes
The moment you suspect fraud, your goal is to cut off access:
- Block your cards and freeze access. Use your banking app or call the official helpline to block your debit and credit cards immediately. Many apps have an instant “freeze card” button.
- Disable UPI and net banking if you think your login or UPI PIN is compromised. You can block UPI or deregister it through your payment app or by calling the bank.
- Do not share anything more. If a caller pressured you, hang up. Banks never ask for your OTP, PIN or full card number.
- Note the time and details of the suspicious transaction or call. You will need this for your complaint.
Freezing access quickly is the single most effective way to protect your bank account after a fraud attempt.
Report the fraud to your bank and to 1930
Reporting fast can help reverse or hold the money. Do both of these without delay:
- Call your bank’s official helpline (printed on your card and the bank’s website) and report unauthorised activity. Ask them to block the account or card and raise a fraud dispute. Note the complaint or reference number.
- Report on the national cybercrime helpline 1930 or file a complaint at cybercrime.gov.in. India’s framework can freeze funds in the fraudster’s account if you report within the golden hours, so do this immediately.
Under RBI rules on limited customer liability, if you report unauthorised electronic transactions promptly, your liability can be reduced or zero, depending on how quickly you act and where the fault lies. You can read the official guidance on the Reserve Bank of India site, rbi.org.in. For a detailed walkthrough of the recovery process, see our guide on how to recover money after online payment fraud in India.
Reset your credentials and devices
Once access is frozen, close the door the scammer came through:
- Change your net banking password and your UPI PIN. Use a fresh, unique password you have not used elsewhere.
- Reset your card PIN.
- Check for unknown devices or beneficiaries. Remove any payee or registered device you do not recognise.
- Scan your phone for screen-sharing, remote-access or unknown apps that a scammer may have asked you to install, and delete them.
- Update your email password too, since your email often controls password resets for banking.
Watch your account closely for the next weeks
Fraudsters sometimes return or test the account again. Stay alert:
- Turn on transaction alerts so you see every debit instantly. Our guide on how to set bank spending alerts shows how to enable SMS, email and app notifications.
- Check your statement line by line for small “test” debits.
- Keep your fraud complaint reference handy and follow up with the bank until it is resolved in writing.
- If a new card is issued, treat its details as private and do not reuse the old PIN.
Keeping a simple written record helps too. Note the date and time you first noticed the problem, every call you made, the complaint and reference numbers, and the names of the bank staff you spoke to. If a dispute drags on, this timeline is strong evidence that you acted quickly, which directly supports your claim to a refund.
Keep your savings out of reach during the cleanup
While you work to protect bank account after fraud has been attempted, it is wise to keep your savings somewhere the scammer cannot touch. If you run a separate savings account, make sure it is not linked to the same compromised UPI app or card. Moving your main balance to an account with limited digital access buys you time to secure everything else calmly. This is one practical benefit of keeping spending and savings apart in the first place.
Strengthen your defences to prevent it happening again
After the immediate crisis, harden your account so the next attempt fails:
- Set sensible limits so no single fraud can drain everything. See how to set UPI transaction limits.
- Learn the patterns. Most fraud starts with a fake call, SMS or link. Our guide on UPI frauds and how to stay safe covers the common tricks.
- Be cautious with loan and reward offers, a frequent route for scams. Read how to avoid loan app scams in India.
- Never install apps a stranger on a call asks you to, and never share OTPs.
Know the RBI liability timeline
How much of an unauthorised transaction you have to bear depends largely on how fast you report it. RBI’s customer-protection framework links your liability to that delay, which is why speed matters so much:
| When you report | Your likely liability |
|---|---|
| Within 3 working days of the unauthorised transaction | Zero, where the fault is not yours |
| Within 4 to 7 working days | Limited, capped per RBI’s slab for the account type |
| After 7 working days | Depends on your bank’s board-approved policy |
The exact clock and amounts depend on the transaction type and where the fault lies, so confirm the current rules with your bank and on rbi.org.in. The lesson is simple: report the same day if you possibly can.
Collect the evidence your claim depends on
A fraud dispute is far stronger when you can back it with details. As soon as you have frozen access, gather and keep safe:
- Transaction specifics: the date, time, amount, and any reference, UTR or transaction ID from your statement or alert.
- Screenshots of the suspicious SMS, call log, email or app screen.
- Your written complaint to the bank, sent by email so it is time-stamped, in addition to the phone call.
- Acknowledgement numbers from the bank and from your 1930 or cybercrime.gov.in complaint.
Submit a written, dated complaint to the bank, not just a phone call, ideally within three days. A clear paper trail showing you reported promptly is often what secures a refund under the liability rules.
If your bank does not resolve it, escalate
If the bank fails to resolve your complaint or you are unhappy with the outcome, you have a free escalation path. First, give the bank its chance: lodge a written complaint and wait for its response, usually up to 30 days. If there is no reply or you are not satisfied, you can approach the RBI Ombudsman under the Integrated Ombudsman Scheme.
You can file an Ombudsman complaint online through the RBI’s complaint management system at cms.rbi.org.in, at no cost and without a lawyer. Keep your complaint reference numbers and a timeline of events ready, as they form the basis of your case. This route exists precisely for disputes the bank does not settle fairly.
Frequently asked questions
What is the very first thing I should do after a fraud attempt?
Block your cards and freeze account access immediately, using your banking app or the official helpline. Cutting off access stops further transactions. Then report to your bank and the 1930 cybercrime helpline as fast as possible, ideally within the first hour.
Will I get my money back after bank fraud?
It depends on how quickly you report and the cause. Under RBI’s limited-liability rules, prompt reporting of unauthorised transactions can reduce your liability to zero in many cases. Outcomes vary by bank and situation, so report fast and follow up in writing.
What is the 1930 helpline and how does it help?
1930 is India’s national cybercrime helpline for financial fraud. When you report quickly, authorities can try to freeze the money in the fraudster’s account before it is withdrawn. You can also file a complaint online at cybercrime.gov.in with the transaction details.
Do I need to close my account completely?
Not always. Often, blocking the card, resetting credentials and removing unknown payees is enough. The bank will advise whether a new account number or card is needed. Procedures vary by bank, so follow your bank’s specific guidance.
How long does a bank take to resolve a fraud complaint?
Banks are expected to resolve unauthorised-transaction complaints within a defined period, often around 90 days, and to credit a provisional amount in eligible cases sooner. Timelines vary by bank and case, so ask for the expected date in writing and follow up using your complaint reference.
Should I file a police complaint as well as reporting to 1930?
Yes, for larger or persistent fraud it is wise. Reporting on 1930 or cybercrime.gov.in registers the cyber complaint, but a police or cyber-cell FIR can strengthen your case and is sometimes needed for the bank’s process. Carry your evidence and complaint numbers when you go.
Conclusion
To protect your bank account after a fraud attempt, move fast: freeze access, report to your bank and to 1930 or cybercrime.gov.in, reset every credential, and watch your account closely afterward. Then strengthen your defences with alerts, limits and a sharper eye for scams. Acting in the first hour gives you the best chance of recovering your money. Procedures and timelines vary by bank, so confirm the details with your bank. This article is general information, not financial advice.
