RBI's ₹25,000 digital fraud compensation rule pushed to January 2027 — what changed

The Reserve Bank of India has finalised its long-awaited digital banking fraud compensation framework — the Third Amendment Directions, 2026 — but pushed back the go-live date by six months, from 1 July 2026 to 1 January 2027, giving banks more time to build the required systems.

What the rule does

If you lose money to a digital fraud — UPI, internet banking, mobile banking, debit/credit card, or ATM — and the loss is up to ₹50,000, you can claim compensation of 85% of the net loss, capped at ₹25,000, once in your lifetime. Banks currently offer no standard compensation for cases involving customer negligence (e.g., sharing an OTP under deception); this framework creates one for the first time.

The catch: you must report fast

• Report the fraud to your bank and the National Cyber Crime Reporting Portal (cybercrime.gov.in) or helpline 1930 within 5 calendar days of discovering it.
• Miss the 5-day window on a third-party system breach, and the zero-liability/compensation protection falls away — your bank’s own policy decides the outcome instead.
• If the fraud is due to the bank’s own negligence (weak security, no transaction alerts, delayed fraud reporting channels), you get zero liability regardless of when you report it.

Resolution timelines

Once you complain, banks must examine the case and give you a decision within 45 calendar days for domestic transactions and 60 calendar days for cross-border ones. For disputed credit card transactions under investigation, banks must also issue a shadow reversal (a temporary credit) within 5 calendar days.

Why the delay matters now

Several banks and fintechs had already started messaging customers about a 1 July 2026 rollout based on RBI’s earlier draft — that date is no longer correct. The finalised rule only kicks in on 1 January 2027, so any fraud you suffer between now and then falls back on your bank’s existing grievance process and the RBI Integrated Ombudsman Scheme, not this new compensation cap.

What to do in the meantime

Situation	What applies today
Fraud due to bank negligence	Zero liability already applies under RBI’s 2017 circular
Fraud due to your own credential leak	No guaranteed compensation until 1 Jan 2027
Any unresolved bank complaint	File with the RBI Ombudsman via cms.rbi.org.in within 90 days of the bank’s reply

Action point: keep reporting frauds to your bank and cybercrime.gov.in within days of discovery regardless — that habit is what will make you eligible once the ₹25,000 compensation window opens on 1 January 2027.

Source: RBI Third Amendment Directions, 2026 (notified 24 June 2026); Moneylife and Business Standard reporting, June–July 2026.