Civil suit for credit card fraud: recovery and damages

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 3 Nov 2026 · Cyber law

A civil suit for credit card fraud lets a cardholder recover the amount wrongly debited and claim damages, separately from any criminal case. The usual routes are a consumer complaint against the bank under the RBI limited liability directions, a summary suit under Order XXXVII of the CPC, or an ordinary civil suit for damages for deceit.

Two things are often confused in a credit card fraud case: getting the money back, and getting the offender punished. The criminal complaint under the BNS and the IT Act deals with punishment. Recovery of the amount debited, and compensation for the harm caused, is a civil question, pursued against the parties who are legally answerable — most often the bank that issued the card, and separately the person who committed the fraud. Working out which civil remedy fits which wrong is the first practical step.

An aggrieved cardholder generally has three civil options. First, a claim that the bank wrongly made or retained a debit, governed by the RBI directions on unauthorised electronic transactions and enforceable before a consumer commission. Second, a suit against the fraudster for recovery of the money and damages for deceit. Third, where a body corporate has failed to protect sensitive personal data, compensation under section 43A of the Information Technology Act, 2000. The three can run in parallel, and none of them requires the criminal case to be over first.

Civil and criminal remedies run on separate tracks

A criminal case punishes; it does not, by itself, credit the account. A conviction under section 318(4) of the BNS or under section 66C or 66D of the IT Act may produce a sentence and a fine, but the fine is paid to the State, and restitution to the victim is discretionary rather than automatic. That is why the civil side matters even where a criminal case is vigorous. The civil claim also has its own standard of proof: a court decides on the balance of probabilities, not on proof beyond reasonable doubt, which in practice makes recovery easier to establish than guilt.

The two tracks are not wholly independent. The facts of the transaction — who used the card, where, and with what authorisation — are common to both. A well-drafted civil plaint, filed early, fixes the account of the dispute and forces the parties to take positions. A late or careless civil claim, on the other hand, can be contradicted by the cardholder's own conduct in the criminal case, which is why the two should be coordinated rather than run at cross-purposes.

The bank route: statutory protection before any suit

Before suing anyone, a cardholder should exhaust the statutory protection that the RBI has already created. Banks in India must reverse unauthorised electronic transactions according to the RBI directions of 6 July 2017 on limiting customer liability, and the reversal must follow a defined timeline. Where the bank refuses or delays, the refusal is itself a deficiency in service that can be taken to a consumer commission, and the bank cannot contract out of the RBI directions. The Financial Ombudsman route under the RBI Integrated Ombudsman Scheme is a further step, and it is free of cost. Only if those routes fail, or if the loss is unrecoverable from the bank, does a civil suit against the fraudster become the main lever.

Suing the wrongdoer: what a civil court can award

A suit against the person who committed the fraud is founded on the tort of deceit and on the recovery of money had and received. Where the fraudster obtained the cardholder's money by a false representation, the cardholder can claim the principal sum, interest for the period of detention of the money, and damages for consequential loss — for example, a higher rate of interest paid to another lender, or charges incurred because the account was frozen. Punitive damages are exceptional in Indian civil practice and should not be assumed. Costs follow the outcome and are awarded at the court's discretion.

The summary suit under Order XXXVII of the CPC

Where the claim is for a definite sum recorded in a written instrument, the faster route is the summary suit under Order XXXVII of the Code of Civil Procedure, 1908. The Order applies to suits on bills of exchange, hundies and promissory notes, and to suits to recover a debt or liquidated demand in money arising on a written contract, on an enactment, or on a guarantee. Its advantage is procedural: the defendant may defend only after entering an appearance and obtaining the court's leave, which shifts the burden of showing a defence onto the defendant. Its limit is equally important. A claim for unliquidated damages is outside the Order, so a case that seeks compensation at large for deceit must proceed as an ordinary suit. Choosing the summary route on the wrong kind of claim only invites an objection that converts the suit into an ordinary one.

Choosing the forum

Claim	Forum	Typical relief
Refusal or delay by the bank to reverse an unauthorised debit	District Consumer Commission where the consideration does not exceed fifty lakh rupees; State Commission between fifty lakh and two crore rupees; National Commission above two crore rupees	Refund, compensation, costs
Recovery of a fixed sum on a written instrument or written contract	Order XXXVII summary suit before the competent civil court	Decree for the sum with interest
Damages for deceit and consequential loss	Ordinary civil suit	Damages, interest and costs
Failure by a body corporate to protect sensitive personal data	Claim under section 43A of the Information Technology Act, 2000	Compensation for the loss suffered

The pecuniary limits for the consumer commissions follow the Consumer Protection (Jurisdiction of the District Commission, the State Commission and the National Commission) Rules, 2021. A consumer complaint must also be filed within the period prescribed by the Consumer Protection Act, 2019, which is two years from the date on which the cause of action arises.

Limitation

Limitation is governed by the Limitation Act, 1963, and the ordinary period for a money claim is three years from the date on which the right to sue accrues. The precise period depends on the cause of action pleaded, so a plaint should identify the date on which the cardholder first knew of the fraudulent debit and explain why the suit is within time. Delay does not merely weaken the claim; once limitation expires, the remedy is lost even if the fraud is proved. For an NRI cardholder discovering the debit while abroad, the date of knowledge and the date of the bank's refusal are both material to limitation.

Evidence for a civil claim

Card and account statements for the period covering the disputed transaction, with the disputed entry highlighted.
Transaction alerts and bank communications, including SMS or email alerts, the complaint reference number, and every reply received.
The chargeback request and its outcome, where one was raised.
A copy of the FIR and the cyber crime complaint reference, which tie the civil claim to the criminal complaint.
Evidence of the loss, such as interest paid, penal charges, or a loan taken because the funds were missing.
Proof of the cardholder's own conduct, showing that the credentials were not shared and that the transaction was reported promptly.

What decides the outcome

Courts in card fraud matters ask a small number of questions, and the answers usually settle the case.

Was the transaction authorised? If the cardholder authorised it, no civil claim against the bank survives.
Did the customer share credentials or act negligently? Negligence changes the liability position and can reduce recovery.
How quickly was the transaction reported? Prompt reporting is decisive under the RBI directions.
Whose systems failed? Contributory fraud or a deficiency on the bank's side supports the customer.
Who holds the burden? Once an unauthorised transaction is shown, the burden of proving the customer's liability lies on the bank.
Is the claim within limitation and before the right forum? A strong claim filed in the wrong forum or too late still fails.

Interim protection before the final decree

A civil suit is slow, and a fraudster who moves assets out of reach during the litigation can leave the cardholder with a decree that is worth nothing. The law therefore allows interim protection. A plaintiff may seek attachment before judgment where there is material to show that the defendant is about to dispose of or remove property to defeat a decree, and a court may also grant a temporary injunction restraining the defendant from dealing with identified assets. For a claim against a bank, interim relief usually takes a different form: an application pressing the bank to comply with the RBI directions pending the final decision, so that the loss does not compound while the case is heard. Interim orders are discretionary and depend on showing urgency and a prima facie case, which is why the first documents filed matter as much as the final ones.

Freezing a transaction, preserving a device, or obtaining a bank's internal record before it is overwritten all fall into this category of protective steps. In card fraud the digital trail is fragile. Merchant logs, internet protocol records and device fingerprints are retained by third parties for limited periods, and once they are gone they cannot be recreated.

None of this replaces early action. A cardholder who reports the transaction within hours and preserves the alerts, the merchant details and the bank's replies is in a far stronger position than one who reconstructs the events months later from memory.

The sequence: bank, ombudsman, then court

The practical order of remedies matters, because a consumer commission or a court will expect the cardholder to have first placed the dispute before the bank in writing. The normal sequence is a written complaint to the bank, escalation to the bank's nodal or grievance officer, and then, if the refusal stands, either the RBI Integrated Ombudsman Scheme or a consumer complaint. Both the Ombudsman and the consumer commission can award a refund and compensation, and a complaint dismissed by one does not bar a fresh claim on a distinct cause of action before a civil court. Pursuing the tiers in order builds a record and often resolves modest claims before a suit becomes necessary.

Common mistakes

Waiting for the criminal case to end. The civil claim has an independent limitation clock and can be filed without the criminal outcome.
Not reporting to the bank at once. Delay pushes liability onto the customer and weakens the civil claim.
Discarding the device, sim or emails. These often carry the only proof of how the fraud was worked.
Claiming unliquidated damages under Order XXXVII. The wrong procedural route turns a fast suit into a slow one.
Suing the wrong party. The bank and the fraudster are answerable on different causes of action and should be pleaded distinctly.
Ignoring the consumer route. For a modest loss, a consumer commission is often cheaper and quicker than a civil suit.

When to involve a lawyer

Recovery litigation is a question of choosing the right forum, the right cause of action and the right procedural route, and a mistake at the start can cost both time and the claim itself. Where the loss is significant, or the bank has refused a reversal, take advice on whether the claim belongs before a consumer commission, in a summary suit, or in an ordinary civil suit, and on how it should be coordinated with the criminal complaint. For civil recovery work in Kolkata and West Bengal, see our civil litigation practice, and for the criminal side see the cyber crime material.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

Can I file a civil suit for credit card fraud in India?

Yes. A civil claim for credit card fraud is separate from the criminal complaint. You can claim the amount wrongly debited, interest, and consequential loss caused by the fraud. The claim is usually brought against the bank for refusing to reverse an unauthorised transaction, and separately against the person who committed the fraud. The civil case can proceed even while the criminal case is pending.

Is a consumer complaint better than a civil suit for card fraud?

For a modest loss, a consumer complaint is often cheaper and quicker. The bank's refusal to reverse an unauthorised debit is a deficiency in service, and a consumer commission can order a refund and compensation. A civil suit is appropriate where the loss is large, where you seek damages from the fraudster, or where the claim is outside the consumer commission's pecuniary jurisdiction.

What is a summary suit under Order XXXVII of the CPC?

Order XXXVII of the Code of Civil Procedure, 1908 provides a faster procedure for suits on bills of exchange, hundies and promissory notes, and for suits to recover a debt or liquidated demand in money on a written contract, an enactment or a guarantee. The defendant may defend only after entering an appearance and obtaining the court's permission, which puts the burden on the defendant to show a defence.

Can I claim damages for mental agony in a card fraud case?

Compensation for mental agony and harassment is available in principle, particularly before a consumer commission where the bank's conduct caused avoidable distress and litigation. Courts are conservative and require the distress to be shown through conduct, such as repeated unjustified refusals to reverse the debit. Punitive damages are exceptional in Indian civil practice and are not assumed merely because a fraud occurred.

How long do I have to file a civil suit for credit card fraud?

Limitation under the Limitation Act, 1963 for a money claim is ordinarily three years from the date the right to sue accrues. A consumer complaint must be filed within two years of the cause of action under the Consumer Protection Act, 2019. The exact starting point depends on when you learned of the debit and when the bank refused to reverse it, so the plaint must plead those dates clearly.

What documents do I need for a civil recovery claim?

You need the card and account statements covering the disputed transaction, transaction alerts, the complaint reference number and all bank replies, the chargeback request and its outcome, a copy of the FIR or cyber crime complaint, and evidence of the loss such as interest or penal charges. Proof that you did not share the credentials and reported the transaction promptly is equally important for the claim against the bank.

Can I sue the bank and the fraudster in the same case?

The causes of action are different and should be pleaded distinctly. A claim against the bank is for a deficiency in service or a wrongful debit under the RBI directions, while the claim against the fraudster is for deceit and money had and received. They can be pursued at the same time in different forums, but a single plaint that mixes them without separating the causes of action invites objections.

Does a criminal conviction help my civil case?

It helps but is not required. A civil court decides on the balance of probabilities, not proof beyond reasonable doubt, so the civil claim can succeed even where the criminal case ends in acquittal. A conviction is strong supporting evidence, yet the civil court reaches its own conclusion. Filing the civil claim early, rather than waiting for the criminal outcome, protects the limitation period and the recoverable sum.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact