Net banking fraud how to recover money: legal steps

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Online fraud

Net banking fraud how to recover money depends on where the money went and how fast you acted. The bank's liability process, a freeze or recall request, the criminal complaint and a civil claim are separate routes. They can run together, but each needs its own evidence and its own forum.

Recovery is not the same as punishment. A criminal case may end in a conviction, but the money may already have been withdrawn. The bank's liability decision may return the amount without a prosecution. A civil suit may produce a decree against a merchant or an aggregator. The practical strategy is to pursue the fastest route first while preserving the evidence for the slower routes. The routes rest on the IT Act 2000, the BNS 2023, the BNSS 2023, the BSA 2023 and the RBI's 2017 directions.

Where the money goes

A net banking transfer usually lands in a beneficiary account opened with a bank or a payment bank. The fraudster may withdraw cash at an ATM, transfer the funds through UPI or NEFT to another account, or use the money to buy crypto or prepaid instruments. Each step shortens the window for a freeze. The beneficiary account may be a mule account opened in the name of a person who sold the account or whose identity was stolen.

The trail is traceable because every transfer creates a record. The bank has the account number, the IFSC code, the transaction reference and the time. The police can request the beneficiary bank's customer records, CCTV and transaction log. The customer cannot obtain those records directly, which is why the 1930 report and the FIR matter. The complaint should give the bank and the police the exact reference numbers so that the trail can be followed.

The four recovery routes

The first route is the bank's liability process under the RBI's 2017 directions. The bank investigates whether the transaction was authorised, whether the customer was negligent and whether the loss falls within zero or limited liability. The second route is a freeze or recall request to the beneficiary bank. The third route is the criminal complaint, which can lead to the identification of the accused and, in an appropriate case, an order for restitution. The fourth route is a civil or consumer claim against a liable party.

These routes are not alternatives in every case. A bank may refund the customer and still pursue the fraudster. A police investigation may identify the beneficiary while the bank refuses liability. A civil claim may be needed where the bank's liability is limited and the merchant or aggregator was negligent. The victim should map the routes to the facts before deciding where to spend time and money.

What the law says

The IT Act 2000 provides the computer-crime provisions. Section 66 covers computer-related offences. Section 66C covers identity theft, which applies when a person dishonestly uses another person's electronic signature, password or unique identification feature. Section 66D covers cheating by personation by using a computer resource. A net banking fraud usually involves the use of stolen credentials, so Sections 66C and 66D are commonly invoked along with Section 66.

The BNS 2023 provides the general criminal offences. Section 318 deals with cheating and dishonestly inducing delivery of property. Section 316 deals with criminal breach of trust. Section 336 deals with forgery, which can apply to fake payee records or receipts. Section 351 deals with criminal intimidation. The police may register the case under the BNS provisions and the IT Act provisions together, depending on the facts.

The BNSS 2023 governs the procedure. Section 173 requires the police to record information about a cognizable offence. Section 175(3) allows a magistrate to order an investigation in certain circumstances. Section 35 deals with arrest and its safeguards. Section 187 deals with remand. Sections 480, 482 and 528 deal with the powers of magistrates and higher courts at different stages. The complainant should use Section 173 first and keep Section 175(3) for a refusal to register the case.

The BSA 2023 governs electronic evidence. Section 63 makes electronic records admissible when the statutory certificate and conditions are satisfied. Bank statements, login alerts, SMS messages, email headers, screenshots and call logs are electronic records. The certificate should be prepared early, because the bank's logs and the telecom records may not be retained indefinitely.

The RBI's 2017 directions are the main customer-protection instrument. They require the bank to provide a reporting channel, acknowledge the complaint, investigate and decide liability based on negligence. They also provide for provisional credit in certain cases. The directions do not guarantee a refund, but they impose a process that the bank must follow. A bank's failure to follow the process is a ground for escalation to the RBI grievance mechanism and, in an appropriate case, a consumer or civil claim.

Step-by-step recovery process

Stop further transfers. Call the bank's helpline and ask for net banking to be blocked. Change the password and revoke unfamiliar devices. Check for new payees and linked accounts.
Dispute the transaction in writing. Ask the bank to investigate under the RBI's 2017 directions and to give a complaint number. Provide the transaction reference, amount, time and beneficiary account.
Request a freeze or recall. Ask your bank to contact the beneficiary bank and request a hold. The request should be in writing and should identify the transaction. Follow up with the bank's fraud team.
Report on 1930 and cybercrime.gov.in. Give the beneficiary account, the phone numbers and the fake URL or app. Save the acknowledgement number and the PDF receipt.
File an FIR or a police complaint. Under BNSS Section 173, the police must record the information. Give the bank's complaint number and the 1930 acknowledgement. Ask for a copy of the FIR.
Preserve the evidence. Keep the statement, login alerts, SMS, email headers, screenshots and call log. Prepare a BSA Section 63 certificate when the record is to be produced in court.
Follow the bank's decision. If the bank rejects liability, ask for the reasons in writing. If the bank is silent, escalate to its nodal officer and then to the RBI grievance mechanism.
Assess a civil claim. If the bank's liability is limited and a merchant or aggregator was negligent, a civil or consumer claim may be considered. The limitation period and the correct forum should be checked before filing.

Comparing the recovery routes

Route	Forum	What it can achieve	Main evidence
Bank liability	Bank and RBI grievance mechanism	Refund or provisional credit	Authentication logs and customer statement
Freeze or recall	Your bank and the beneficiary bank	Hold on available funds	Transaction reference and police request
Criminal complaint	Police and magistrate	Identification of accused and possible restitution	FIR, bank records and electronic evidence
Civil claim	Civil or consumer forum	Decree for recovery and damages	Contract, negligence and loss records

The routes can overlap. A bank refund does not stop the police case. A police freeze does not decide the bank's liability. A civil decree may be difficult to execute if the fraudster has no assets. The victim should keep the bank informed of the police progress and keep the police informed of the bank's decision.

What decides how much comes back

The first factor is speed. A report made within minutes gives the bank a chance to freeze the beneficiary account. A report made after several days usually finds the money withdrawn. The time of the first call, the 1930 report and the written dispute are the evidence of speed. The bank's own fraud monitoring may also flag the transaction before the customer calls.

The second factor is negligence. If the customer shared the password or OTP, installed a remote-access app or approved a transfer to a fraudulent merchant, the bank may apply limited liability. The RBI's 2017 directions distinguish between a third-party breach where the customer is not negligent and a case where the customer's own act enabled the fraud. The bank will examine the login and OTP records, not only the customer's account of events.

The third factor is the availability of funds. If the beneficiary account still holds the money, a freeze can preserve it. If the money has moved to several accounts, the police and the banks must trace the chain. The earlier the request, the better the chance. The complaint should identify the first beneficiary and any subsequent transfers shown in the statement.

The fourth factor is the bank's compliance with the RBI directions. A bank that acknowledges the complaint, investigates and gives reasons is easier to challenge if the decision is wrong. A bank that ignores the process gives the customer a separate ground for escalation. The customer should keep a complete record of every call and email.

The fifth factor is the civil route. If the loss is not fully covered by the bank and a merchant or aggregator failed to protect the customer, a civil claim may recover the balance. The claim requires proof of the loss, the duty of care and the breach. The limitation period depends on the facts. A criminal case can support the civil claim but does not replace it.

A sixth factor is the cost and time of each route. A civil suit can take years and may produce a decree that is difficult to enforce. The bank process is cheaper and faster, but it may not cover the full loss. The police route costs little but depends on the investigation. The victim should weigh the amount, the evidence and the defendant's assets before choosing a combination of routes.

Mistakes that reduce recovery

Waiting for the bank to act without asking for a freeze or recall request.
Filing a police complaint without giving the beneficiary account and transaction reference.
Deleting the fake page, SMS or call log before the bank and the police review the evidence.
Sharing the OTP or password again with a caller who claims to be from the bank.
Accepting a partial refund without checking whether the bank's liability decision can be challenged.
Filing a civil suit without the bank's written decision and the police complaint.
Giving different accounts of the fraud to the bank and the police.

When to involve a lawyer

An account holder can usually start the bank and police process without a lawyer. Legal help is useful when the bank denies liability, when the amount is large, when the beneficiary is identified and the police need to be pushed, or when a civil claim is being considered. A cyber crime lawyer in Kolkata can review the bank's decision, draft the escalation and coordinate the criminal complaint. Where the bank's liability is limited and a merchant or aggregator is responsible, the civil litigation route can be assessed on the documents. The strategy should be based on the trail, the bank's written reasons and the recoverable assets, not on a promise of a particular result.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

Can money lost to net banking fraud be recovered?

Recovery is possible if the bank or the police act quickly and the money is still available. The bank's liability process can refund the amount in a zero-liability case. A freeze or recall can hold the beneficiary funds. A civil claim may recover the balance from a liable party, but it takes longer.

What is the fastest way to recover net banking fraud money?

Call the bank's helpline immediately and ask for the channel to be blocked and the transfer to be disputed. Ask for a freeze or recall request to the beneficiary bank. Then report on 1930 and file a police complaint. The first hour gives the best chance of holding the funds.

Does the bank refund net banking fraud if I shared the OTP?

Not automatically. Sharing the OTP is usually treated as negligence, and the bank may apply limited liability under the RBI's 2017 directions. If you were deceived by a fake official, give the caller's number and the time. The bank will check whether the authentication was valid.

How long does it take to recover money after net banking fraud?

The bank is expected to resolve the complaint within ninety days under the RBI's 2017 directions. A provisional credit decision may come sooner in a zero-liability case. A police freeze or a civil recovery can take longer. The timelines run separately, so both should be followed.

Can I file a civil suit for net banking fraud?

Yes, a civil or consumer claim can be filed where a liable party caused or contributed to the loss. The claim may seek recovery, interest and costs. The bank's written decision and the police complaint are useful evidence. The correct forum and limitation period depend on the facts.

What evidence is needed to recover net banking fraud money?

Keep the bank statement, transaction reference, login alerts, SMS and email records, the 1930 acknowledgement, the FIR copy and screenshots of any fake page or chat. Preserve the device and call log. A BSA Section 63 certificate may be needed for the electronic records in court.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact