What Happened
- The Reserve Bank of India (RBI) issued draft amendment directions for reviewing and revising the framework on limiting customer liability in unauthorised electronic banking transactions, replacing the 2017 framework.
- Key proposal: Customers suffering losses up to ₹50,000 from fraud may receive compensation of 85% of net loss or ₹25,000, whichever is lower — but only once in their lifetime.
- Zero liability protection is expanded: where fraud occurs due to bank negligence or deficiency, customers bear no loss irrespective of when they report it; for third-party breaches, zero liability applies if reported within five calendar days of occurrence.
- The revised framework covers internet banking, mobile banking, debit and credit card payments, ATM transactions, and UPI payments.
- Banks must send alerts for all electronic transactions above ₹500 and provide 24/7 channels for reporting fraud or loss of payment instruments.
- Public comments are invited until April 6, 2026; the rules are proposed to take effect from July 1, 2026.
Static Topic Bridges
RBI's Regulatory Authority over Payment Systems
The Reserve Bank of India is India's central bank and the primary regulator of the banking system, exercising authority under the Reserve Bank of India Act, 1934 and the Payment and Settlement Systems Act, 2007 (PSS Act). The PSS Act empowers RBI to regulate and supervise all payment systems in India, including digital payment platforms. RBI issues directions, circulars, and master directions to banks and payment service providers.
- The 2017 RBI circular on customer liability first introduced the concept of zero liability and limited liability for unauthorised transactions — this 2026 draft revises and expands that framework.
- RBI's Payment Vision documents (2019-21, 2021-25) have guided India's digital payment ecosystem expansion.
- The Banking Regulation Act, 1949 gives RBI supervisory authority over commercial banks, including directing them on customer service standards.
- The draft comes amid rapid growth: India processed over 100 billion UPI transactions in FY 2024-25.
Connection to this news: The revised framework is a regulatory update under RBI's PSS Act authority, directly expanding consumer protections as digital payment fraud has increased alongside the explosive growth of UPI and mobile banking.
Digital Payment Ecosystem and Cyber Fraud Landscape
India has one of the world's largest digital payment ecosystems, anchored by the Unified Payments Interface (UPI) — developed by the National Payments Corporation of India (NPCI). Despite its success, the rapid expansion has been accompanied by rising cyber fraud, including phishing, vishing, SIM swapping, and OTP fraud. The Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs coordinates the law enforcement response, while RBI regulates the banking side.
- UPI transactions: Over 100 billion in FY 2024-25, totalling ₹200+ lakh crore in value.
- Cyber fraud complaints: India received over 1.1 million cybercrime complaints in 2023 (NCRB data), with financial fraud being the dominant category.
- The Citizen Financial Cyber Frauds Reporting and Management System (CFCFRMS) allows immediate freezing of fraudulently transferred funds.
- Under the existing 2017 framework, customer liability depends on whether the fault lies with the bank, the customer, or a third party — and on the time taken to report.
Connection to this news: The new framework strengthens the 2017 rules by expanding coverage to more transaction types, introducing a compensation mechanism for small-value frauds, and tightening bank obligations for real-time alerts.
Consumer Protection in Financial Services
The Consumer Protection Act, 2019 and the RBI's internal grievance redressal framework together constitute the primary consumer protection architecture for banking customers. The RBI Integrated Ombudsman Scheme (2021) provides a single-window, cost-free resolution mechanism for unresolved bank complaints. The draft amendment strengthens this ecosystem by placing the initial burden of proof on banks and mandating faster complaint resolution timelines.
- RBI Integrated Ombudsman Scheme (2021): Consolidated three earlier ombudsman schemes (banking, NBFC, digital payments) into one.
- Banks are required to resolve complaints within 30 days; unresolved complaints are escalated to the ombudsman.
- The principle of "zero liability where bank is at fault" already exists in the 2017 framework; the 2026 draft extends this and adds the ₹25,000 small-claim compensation window.
- The draft aligns India closer to global standards: the UK's "no-fault" liability model and Australia's ePayments Code offer similar consumer protections.
Connection to this news: The RBI draft is part of a broader regulatory evolution to ensure that consumer trust keeps pace with India's rapid digital payment adoption.
Key Facts & Data
- India's existing customer liability framework for digital transactions dates to 2017.
- Proposed compensation: 85% of net loss or ₹25,000 (whichever is lower) for losses up to ₹50,000 — available once per lifetime.
- Zero liability applies: (a) for bank negligence/deficiency (any time), (b) for third-party breach if reported within 5 calendar days.
- Mandatory transaction alerts: For all electronic transactions above ₹500.
- Scope: Internet banking, mobile banking, debit/credit cards, ATMs, UPI.
- Comment deadline: April 6, 2026; proposed effective date: July 1, 2026.
- UPI transactions in FY 2024-25: Over 100 billion transactions worth ₹200+ lakh crore.
- Regulatory basis: Payment and Settlement Systems Act, 2007; Banking Regulation Act, 1949.