The Reserve Bank of India has issued new UCB fraud protection directions effective January 1, 2027. These updated rules strengthen customer rights in fraudulent electronic banking transactions at Urban Co-operative Banks. Additionally, they clearly define liability for banks, customers, and third parties.
Key Changes in UCB Fraud Protection Rules
The new directions introduce important definitions, including fraudulent electronic banking transactions, negligence by customers, and negligence by UCBs. For example, customer negligence now includes sharing OTPs, ignoring scam warnings, or downloading malicious apps. However, if a UCB fails to send mandatory alerts or provide 24×7 reporting channels, the bank bears full liability.
UCBs must now send instant SMS alerts for all transactions above ₹500. They must also provide round-the-clock reporting channels for customers to flag fraud. As a result, customers can report suspicious transactions via phone banking, IVR, toll-free helplines, or directly through the bank’s website or app.
In cases of third-party breaches, customers face zero liability if they report the fraud within five calendar days. Meanwhile, if negligence lies entirely with the UCB, the customer owes nothing regardless of when they report it. UCBs must resolve domestic fraud complaints within 45 days and cross-border cases within 60 days.
What This Means for UCB Customers
The RBI has also introduced a compensation scheme for small-value fraudulent transactions. Therefore, individual victims losing up to ₹50,000 due to their own negligence can receive 85% of net losses, or ₹25,000, whichever is lower. This compensation is available once per lifetime and requires reporting the fraud within five days.
The RBI will fund 65% of eligible compensation amounts. The customer’s bank and beneficiary bank share the remaining cost. Additionally, UCBs must provide a shadow reversal on credit card fraud amounts within five days of receiving a customer complaint.
UCB boards must also review fraud reports periodically. They need to monitor complaint volumes, resolution quality, and system improvements. Furthermore, UCBs cannot charge customers for mandatory SMS alerts or promotional messages. These UCB fraud protection measures take effect for all electronic transactions from January 1, 2027.
Source: RBI Notifications

