Debit Card Skimming or ATM Fraud: Evidence Before Complaint

A failed ATM transaction and an unauthorised cash withdrawal are different disputes with different evidence and liability analysis.

What the customer or business should understand

• If the account is debited but cash is not dispensed, RBI’s failed-transaction framework requires reversal within T+5 days and ₹100 per day compensation beyond that timeline.
• An unauthorised withdrawal should be reported immediately under RBI’s unauthorised-transaction framework.
• Skimming can involve copied card data, PIN compromise, tampered devices or card-not-present misuse after compromise.
• The customer should record the ATM ID, location, time, amount, SMS alert and whether the card remained in possession.
• Do not revisit a suspicious ATM alone to confront anyone or insert the card again.

For the connected rule, example or next step, see Loan Recovery Harassment: Evidence and Complaint Route.

The five-point review

Practical example

How to apply the framework

Photograph the ATM ID and error screen only if safe. Do not photograph or expose the PIN.

Review nearby transactions because a compromised card can be used across channels.

Dispute workflow

Classify the problem before choosing the remedy

Identify the regulated entity, transaction or loan account, date, amount, contractual document and exact failure. Review incident, atm and card together. A failed transaction, authorised mistake, unauthorised fraud, merchant dispute, credit-report error and lawful account freeze require different remedies.

Create one written chronology

Record the event, alert, discovery, first report, complaint number, response and financial impact in date order. Attach only the documents that prove each step. Phone calls can stop urgent harm, but a written acknowledgement creates the escalation record.

Escalate to the correct authority

Start with the bank, card issuer, lender, credit institution, app or other regulated entity responsible for the service. Use cybercrime or law-enforcement channels for suspected fraud. Use RBI CMS only after the regulated entity process satisfies the Scheme’s timing or rejection condition and the issue is within Ombudsman scope.

Implementation checkpoint

Before treating the case as closed, verify the actual bank statement, loan ledger, credit report, account status or merchant refund rather than relying only on a ticket message. Record who confirmed the financial outcome, the date, remaining open amount and the next escalation deadline. This final check prevents a complaint from being marked resolved while the money, lien, overdue status or credit record remains unchanged.

Action checklist

• Block the card if compromise is suspected.
• Record ATM ID and exact time.
• Raise a bank complaint immediately.
• Preserve statement and SMS.
• Report unauthorised withdrawals as fraud.
• Track T+5 reversal and compensation for cash-not-dispensed cases.

Evidence to keep

• ATM receipt/error screen
• ATM ID/location
• Statement and alerts
• Card-block timestamp
• Bank complaint and reversal

Warning signs

Finin2min takeaway