OTP Fraud Lawyer in Odisha
OTP-sharing fraud involves a caller or SMS tricking a victim into revealing an OTP, resulting in unauthorized debits — bank liability is then assessed under RBI's customer-liability circular, which treats third-party system breaches differently from customer-induced OTP disclosure. Advocate Debarchana Samal advises on reporting and escalation in Odisha.
Reviewed by Advocate Debarchana Samal, Bar Council of Odisha · Reg. No. O-1812/2023
Common Situations
How OTP Fraud Typically Happens
OTP fraud follows a few recurring patterns, each raising distinct liability and reporting questions.
Fake Bank/KYC Call Scams
A caller falsely posing as a bank, KYC verification, or card-blocking official pressures the victim into reading out an OTP sent to their phone.
Fake Prize, Refund, or Delivery Scams
SMS or calls about a fake lottery, cashback, refund, or courier delivery that direct the victim to share an OTP to "claim" or "verify" something.
Resulting Unauthorized Debit
Once the OTP is shared, the fraudster completes a transaction — often a card payment, UPI authorization, or fund transfer — debiting the victim's account without their informed consent.
Bank Liability Assessment
Under the RBI's circular on customer liability in unauthorized electronic transactions, liability generally shifts toward the bank for third-party breaches of its systems, but is assessed differently where the customer's own OTP disclosure contributed to the loss.
Reporting to Bank & Cyber Cell
Immediately reporting the transaction to the bank's 24x7 helpline/grievance cell and filing a complaint on the National Cyber Crime Reporting Portal (1930) or with the local cyber police station.
Escalation to RBI Ombudsman
If the bank does not respond satisfactorily within the stipulated period, the matter can generally be escalated to the RBI Integrated Ombudsman Scheme, 2021.
Is This the Right Page?
Related but Distinct Matters
This page covers fraud specifically involving OTP disclosure. A few related fraud and complaint situations are handled differently — follow the right link below.
UPI Fraud
If the fraud occurred through a fake UPI collect request or QR code rather than a caller directly extracting an OTP, the fact pattern and some RBI guidance differ.
Banking Ombudsman Complaints
For broader unresolved bank grievances beyond a specific OTP fraud incident — such as delays in reversal or non-cooperation by the bank's grievance cell — the RBI Ombudsman process applies generally.
Deepfake Defamation
If the scam involved AI-generated audio/video impersonation to build trust before the OTP request, rather than a straightforward phone/SMS scam, additional IT Act remedies may apply.
Frequently Asked Questions
Is the bank liable if I shared my OTP with a fraudulent caller?
This depends on the facts. Under RBI's framework on customer liability for unauthorized electronic banking transactions, liability is generally lower for the customer where the breach originates from the bank's systems or a third party without any customer negligence, but where the customer voluntarily discloses an OTP, the bank may treat it as a customer-induced loss, which affects the extent of liability. Each case is assessed on its own facts and reporting timeline.
What should I do immediately after realizing I shared an OTP and lost money?
Generally, you should immediately call your bank's 24x7 fraud helpline to block the card/account and report the unauthorized transaction, follow up in writing, and file a complaint on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930. Prompt reporting is important because delay can affect the liability assessment.
Does reporting late reduce my chances of recovering the money?
Generally, RBI's framework ties the extent of customer liability to how promptly the unauthorized transaction is reported — delayed reporting beyond the prescribed window can increase the customer's liability. The specific effect depends on the bank's policy and the circumstances of the delay.
Can a legal notice or complaint help recover money lost to OTP fraud?
Depending on the facts, a written complaint to the bank, escalation to the RBI Ombudsman, and a cyber crime complaint can each play a role — sometimes together. Whether a civil recovery claim or consumer complaint is additionally appropriate depends on the bank's response and the specific loss involved.
Will the police register an FIR for OTP fraud?
Generally, OTP-based fraud involving unauthorized debits can be reported to the cyber crime cell or police, who may register a complaint or FIR depending on the facts, amount involved, and evidence available. Registration and investigation outcomes cannot be guaranteed in advance.
Related Legal Services
Fraud & Scam Alerts
Schedule Your Legal Consultation Today
Every legal matter has a time-sensitive dimension — the sooner you seek counsel, the stronger your position.
Serving clients across Cuttack, Bhubaneswar, and all districts of Odisha.