Lost money to a UPI scam? Don't miss these 3 days

If money has been fraudulently debited from your UPI account, immediate action is crucial. The Reserve Bank of India (RBI) provides protection against unauthorized electronic banking transactions, but customer liability depends on the circumstances of the fraud. If the bank's negligence, fraud, or deficiency caused the unauthorized transaction, the customer has zero liability, regardless of when the issue is reported.

Similarly, if no fault lies with the bank or customer, and the transaction is reported within three working days of being informed by the bank, the customer may also have zero liability.

However, if the loss results from the customer's negligence, such as sharing their UPI PIN, OTP, or approving a fraudulent payment request, they will generally bear the loss until the fraud is reported to the bank. In such cases, the bank may not compensate the customer. The three-day rule applies: reporting within three working days may limit liability to zero, while delays can shift part of the loss to the customer.

The maximum liability depends on the type of bank account, ranging from ₹5,000 for basic savings accounts to ₹25,000 for other specified accounts.

To protect yourself from UPI scams, never share your UPI PIN, OTP, or approve any payment request initiated by an unknown or suspicious source. If you suspect a scam, contact your bank's official helpline, report the fraud to the cybercrime helpline (1930), and file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) as soon as possible. The sooner you report the fraud, the better your chances of preventing further unauthorized debits.