Nirmion
HelpLog in Find a tool

Banking · THE NO-PANIC PLAN

Block a lost debit card and report an unauthorized bank transaction

Use this guide if your debit card is lost, stolen or copied, or you see an electronic debit you did not authorize. Contact the issuing bank immediately through its official app, website, number printed on the card/account documents or branch; do not wait to finish researching. A card block prevents further card use but does not itself dispute or report a transaction. RBI customer-liability rules depend on what happened, customer/bank responsibility and when the bank was notified, so this guide does not promise a refund. Never share an OTP, PIN, CVV, full card number or remote access with anyone claiming to help.

MISSION Help an Indian bank customer stop further debit-card use, promptly report a lost card or unauthorized electronic transaction, preserve the bank complaint reference, and escalate through official channels.

Contact your bank through its verified fraud-reporting channel

THE REAL-WORLD BIT

What happens outside this browser tab?

Secure the account/card through the bank's independently verified channel; separately report each unauthorized transaction and ask the bank to log a formal dispute; save the dated acknowledgement, ticket and transaction references; provide requested information without sharing authentication secrets; track the bank's written findings and apply RBI rules to the facts; then use the bank's grievance officer, RBI CMS and, for online financial crime, the national cybercrime portal/1930 as applicable.

YOUR CHECKLIST, WITH FEWER DRAMATIC SIGHES

One step at a time.

Follow the order below. If a step names a Nirmion tool, its link is right there with it.

  1. 01

    Stop further card use through the bank's official channel

    If the physical debit card is missing or you suspect it was copied, immediately use the card controls in the bank's official app or call a number verified from the bank's website, account documents or branch to block/hotlist it. Ask the bank to disable replacement-card credentials if needed and confirm the time the block took effect. If you still have access to internet/mobile banking, secure it through the bank's own recovery process and change credentials only on the official site. Do not follow links in an unexpected call, SMS or message, and never give an OTP, PIN, CVV or screen-sharing access. Keep the blocking reference; it is separate from a transaction-dispute complaint.

  2. 02

    Report each unauthorized debit to the bank immediately

    Contact the bank as soon as you see a debit you did not make, even if the card has already been blocked. Use the bank's official 24-hour loss/fraud reporting channel or branch and clearly state that the electronic transaction is unauthorized; list each disputed date, amount and bank transaction reference. Ask the bank to register a formal complaint, take steps to prevent further unauthorized transactions and send an acknowledgement with complaint number and date/time. If you believe an online financial crime is in progress, also report it promptly through India's official cybercrime portal or call 1930; this does not replace notifying the bank.

  3. 03

    Preserve evidence and cooperate without exposing secrets

    Save the bank alerts, statement entries, transaction references, card-block confirmation, complaint number, call timestamps and copies of any written follow-up. Provide the bank only the details and documents it requests through its secure channel; mask card/account numbers in any copy where the bank permits. Explain plainly whether the card was lost, remained in your possession, or whether you received an alert, and state when you first notified the bank. Do not delete messages or alter screenshots. The RBI's customer-liability framework distinguishes bank negligence, customer negligence and third-party breaches, and the timing of notice can matter; do not guess at a legal category or claim that every disputed debit must be reversed.

  4. 04

    Track the investigation and request the bank's written decision

    Use the complaint reference to follow the bank's official dispute channel and respond by its stated deadline to reasonable evidence requests. Ask the bank to confirm the reported transaction(s), the complaint date it recorded, card status and the basis for any provisional or final credit. Keep the bank's response and any liability assessment. RBI directions describe customer protections and require the bank to investigate under its applicable process, but the result turns on the facts, the kind of transaction and the rules for that bank; a provisional credit is not necessarily a final decision. If new unauthorized debits appear, report each one immediately and add its reference to the case.

  5. 05

    Escalate through RBI or cybercrime channels when appropriate

    If the bank rejects the complaint or its response is unsatisfactory, first submit a written grievance to the bank's designated grievance/nodal officer and keep the acknowledgement. Under RBI's current Ombudsman guidance, an eligible complaint may generally be taken to RBI's Complaint Management System if the regulated entity has not replied within 30 days or the reply is unsatisfactory; check the current RBI Integrated Ombudsman Scheme for eligibility, exclusions and filing limits before lodging it. For online financial fraud, keep the national cybercrime acknowledgement and cooperate with the investigating agency. Use only cms.rbi.org.in and cybercrime.gov.in; neither route guarantees recovery.

RECEIPTS, PLEASE

Sources & review notes

Each source is linked to the steps it supports. Open it to check its scope and current guidance.

Source checked 2026-10-05