🛡️ The Three Liability Categories

RBI's 2017 Customer Protection Circular establishes three distinct liability categories:

✅

Zero Liability

Customer not at fault — fraud due to bank's negligence or third-party breach

₹0
⚠️

Limited Liability

Neither bank nor customer at fault, or delayed reporting (4-7 days)

₹10K - ₹25K
❌

Full Liability

Customer negligence (sharing OTP) or late reporting (>7 days)

Full Amount

⏱️ The Timeline Matrix

📌 RBI Circular: RBI/2017-18/15
The reporting timeline is the single most critical factor determining liability allocation.
Reporting TimelineCustomer LiabilityBank Liability
≤ 3 DaysZero (if bank/third-party fault)100%
4-7 DaysLimited (₹5K-₹25K based on account)Balance
> 7 DaysBank's Board-approved policyVaries

Limited Liability Caps by Account Type

Account TypeMax Liability (4-7 days)
BSBD/Jan Dhan Accounts₹5,000
Savings/Current (up to ₹5 lakh balance)₹10,000
Savings/Current (₹5-25 lakh balance)₹25,000
Credit Cards (limit up to ₹5 lakh)₹10,000
Credit Cards (limit > ₹5 lakh)₹25,000

📋 Zero Liability Scenarios

💡 Real-World Examples
SIM Swap Fraud
Fraudster obtained duplicate SIM. Bank received OTP on fraudster's device. Customer never received any alert.
ZERO LIABILITY — Bank should verify SIM changes
ATM Skimming
Customer used bank's ATM. Skimmer captured card data. ₹50,000 withdrawn from cloned card elsewhere.
ZERO LIABILITY — Bank responsible for ATM security
Data Breach
Bank's server hacked. Customer credentials stolen from bank's database.
ZERO LIABILITY — Bank's system security failure

❌ Full Customer Liability Scenarios

⚠️ When Customer Bears Full Liability
Customer is 100% liable when fraud occurs due to their negligence — sharing PIN/OTP/passwords, writing credentials on card, or reporting after 7 days.
💡 Full Liability Examples
OTP Sharing
Customer received call from "bank executive" asking for OTP. Customer shared OTP. ₹2 lakh transferred.
FULL LIABILITY — Customer shared OTP despite warnings
Delayed Reporting
Customer noticed fraud on Day 2 but reported on Day 10.
FULL LIABILITY — Reporting beyond 7 days

📊 Bank's 10-Day Refund Obligation

📌 Shadow Credit Rule
Bank MUST credit disputed amount within 10 working days (shadow credit) while investigation continues. Investigation must complete within 90 days.
✅ Practical Tip
If bank fails to provide shadow credit within 10 days, escalate to Banking Ombudsman citing RBI circular violation.

📝 Part 11.2 Quiz

Q1: Zero liability applies when customer reports within:

Q2: Max limited liability for savings account (up to ₹5 lakh balance):

Q3: Bank must provide shadow credit within:

Q4: Customer sharing OTP with fraudster results in:

Q5: ATM skimming where card was in customer's possession:

Q6: Limited liability cap for BSBD/Jan Dhan accounts:

Q7: Bank must complete investigation within:

Q8: SIM swap fraud where customer never received OTP:

Q9: Customer reported fraud on Day 10. What applies?

Q10: Limited liability for credit card (limit > ₹5 lakh):