Someone used your OTP to drain your account
OTP / Account Takeover
You did not knowingly authorise this. Report within 3 days, that is your strongest lever.
What you should know
You have a strong claim
You did not knowingly authorise a transfer to the fraudster. Report within 3 working days and press the bank to accept the loss under RBI/2017-18/15. Banks sometimes argue that you shared the OTP, so be ready to escalate to the Ombudsman.
Block account nowReport in 3 days
Why you can claim it
You were deceived, so you did not knowingly authorise the transfer. RBI/2017-18/15 protects against unauthorised transactions. If the bank blames you for sharing the OTP, the Ombudsman is your next step.
The clock starts from the SMS
Check your inbox for the bank's transaction alert. The 3-day window runs from that timestamp.
Full refund possible
Do NOT do these
- Pay any "recovery" fee or middleman
- Share OTP, PIN, or CVV with anyone
- Delete messages, calls, or screenshots