Skip to playerSkip to main content
  • 14 hours ago
A customer lost money in a phishing scam and never shared his one-time password (OTP). The Delhi High Court still refused to automatically hold the bank responsible. Here’s what you should know.

Category

🗞
News
Transcript
00:00Your bank may not be responsible if you lose money in an OTP scam. At least that's what the
00:05Delhi High Court just ruled. A customer lost 2,60,000 rupees after clicking a fake SMS link.
00:10He argued that he's never shared his OTP or one-time password, so the bank should refund
00:15the money. But the court disagreed. According to the judges, clicking a suspicious link can
00:19itself count as negligence even if you never directly give anyone your OTP. Because there
00:24was no evidence that the bank's security had failed, the court refused to automatically hold
00:29the bank responsible. This decision is based on India's 2017 RBI liability rules which split
00:34fraud cases into three categories. First, zero liability. If the bank is at fault, you pay
00:40nothing. Second, limited liability. If you're not at fault, your losses may be capped. And third,
00:47full liability. If your own actions contributed to the fraud, you can be held responsible for the
00:51loss. So what's the takeaway for you? If you fall for a phishing link, simply saying I never shared
00:56my OTP may not be enough. In practice, the ruling may force customers to prove that the bank's
01:02security failed. Basically, if you're ever targeted by a scam, report it immediately. Under RBI rules,
01:08timing can affect liability.
Comments

Recommended