Menu
Omozing Answers › Scams and fraud
Written by the Omozing Credit Team · Reviewed for accuracy by our credit and compliance team · Updated October 2026
Take a breath. Clicking a link is not the same as losing money, and many people who act quickly lose nothing. The order below puts the steps that protect your money first, and the tidying up after.
If no money has moved yet, step two can wait until the bank has blocked your accounts. Report the message itself later on Sanchar Saathi (sancharsaathi.gov.in) under “Chakshu”.
The RBI’s 2017 rules on unauthorised electronic banking transactions set out who carries the loss. The two things that matter are whose fault it was and how fast you reported it after your bank’s alert.
| Situation | Your liability |
|---|---|
| Fraud caused by the bank’s own fault or negligence | Zero, whether or not you reported it |
| Third-party breach (neither you nor the bank at fault), reported within 3 working days of the bank’s alert | Zero |
| Third-party breach, reported in 4–7 working days | Limited: the transaction amount or a cap, whichever is lower (for example ₹10,000 per transaction for most savings accounts, and for credit cards with limits up to ₹5 lakh) |
| You were negligent, for example you shared your OTP or PIN | You bear the loss until you report it to the bank |
Once you report, the bank must provisionally credit the disputed amount within 10 working days and resolve the complaint within 90 days. That is why the written complaint in step four matters: it fixes the date and time you told them.
A phishing link often collects more than a bank login: PAN, Aadhaar, date of birth and selfies are enough to try for a loan in your name. That damage shows up later, on your credit report rather than your bank statement. Read how identity fraud can hurt your score.
Credit bureaus send an SMS or email when your report is accessed. An enquiry you didn’t make is an early warning.
You get one free full report from each bureau every calendar year. How to get it free.
An unknown enquiry or loan should be disputed with the bureau. It must be resolved within 30 days, with ₹100 a day owed if it runs late. What to do about a loan you never took.
Use myAadhaar or mAadhaar from UIDAI if your Aadhaar details were shared. Can someone take a loan on my PAN or Aadhaar?
Corrections are free. Our guide shows how to dispute an enquiry or loan with each bureau, and what proof to attach.
Try our free 2-minute test: 12 real-style messages. How many can you catch?
Usually the risk is low if you typed nothing and installed nothing. Close the page, don’t return to it, and change your passwords if you’re unsure, then watch your bank and bureau alerts for a few weeks.
Sharing an OTP is usually treated as customer negligence, so you bear the loss until you report it. Report at once: the bank carries the risk from that point, and a quick 1930 complaint gives the best chance of freezing the money.
It is the national helpline for reporting financial cyber fraud. You can also file online at cybercrime.gov.in; reporting quickly improves the chance of the money being frozen.
Under RBI rules, the bank must provisionally credit the amount within 10 working days of being told and resolve the complaint within 90 days.
Not directly, but stolen details can be used to apply for loans in your name. Watch for bureau alerts and dispute any enquiry or loan you don’t recognise.
Next questions people ask:
Omozing is the digital lending brand of Aparampaar Finance Private Limited, an RBI-registered non-deposit-taking NBFC. Loans are subject to credit assessment. See our regulatory disclosures and grievance redressal process.