Credit Card Fraud: Provisional Credit Reversed by the Bank? How to Fight the Reversal

Reviewed on: 2026-06-12.

Consider how this usually plays out. Sneha in Hyderabad saw a ₹62,000 charge to an overseas online merchant she had never used. She reported it the same evening, both by phone and email, and got ticket reference CCF-2207. The bank posted a provisional credit of ₹62,000 four days later while it investigated. Six weeks on, the credit was reversed and the ₹62,000 re-debited, with one line: “transaction found genuine, OTP-verified”. Sneha never received any OTP on her registered number. That single fact, no OTP reached her, is the heart of her case, and the bank must now prove otherwise.

Quick answer. Provisional credit is a temporary adjustment the bank posts while it investigates, not a final decision. When it reverses and re-debits the amount, you have the right to know exactly why. First, send a written request asking for the precise reversal reason, including any OTP or 3-D Secure authentication log the bank relied on. If you never received or shared an OTP, say so clearly and ask the bank to prove the transaction was authenticated by you. Insist the bank raise or re-raise the chargeback with the card network (Visa, Mastercard or RuPay) and share the result. Cite RBI's principle of limited customer liability for unauthorised electronic transactions, which protects customers where the failure was not on their side and the fraud was reported quickly. If the bank does not resolve your written complaint within 30 days, file free with the RBI Ombudsman at cms.rbi.org.in. RTI helps only with a public sector bank issuer or with the RBI itself.

Reviewed on: 2026-06-12.

The date and time you first report drive how much of the loss you may bear under RBI's limited-liability framework. The faster you report, the more you are protected, and delay can shift more loss onto you. Report immediately, by phone and in writing, get a complaint reference number, and ask the bank to block the card. Follow any call with an email so there is a timestamped record.

Do not accept a vague “transaction found genuine” line. Ask in writing for the precise basis. The common reason is that the transaction was authenticated, often through an OTP or a 3-D Secure step. Ask the bank to share the authentication log, the channel used and the merchant details. If you never received or shared any OTP, state that and ask the bank to prove an OTP was generated, delivered to your registered number, and entered. A transaction that bypassed proper authentication, or where the OTP never reached you, points to a system or third-party failure, not your negligence.

RBI's framework treats three situations differently: fraud caused by a bank or system lapse, fraud caused by your own negligence such as sharing an OTP, and third-party fraud reported quickly. Where the failure was not on your side and you reported promptly, your liability is meant to be limited. So the bank's claim that an OTP “authenticated” the charge is exactly what you contest. A reversed provisional credit is often the result of a lost chargeback you were never shown.

You cannot approach Visa, Mastercard or RuPay directly as a cardholder. The dispute runs through your issuing bank, which raises a chargeback under the network's rules. Ask the bank in writing to raise or, if it closed the case, re-raise the chargeback with the correct reason code for fraud or an unauthorised transaction, and to share the network's response. If the bank says the chargeback “failed” or was “represented” by the merchant, ask for the documents the merchant submitted so you can rebut them.

• The card statement showing the disputed entry and the reversal.
• The exact date and time you first reported the fraud, plus the complaint reference number.
• All OTP and transaction-alert messages, or proof none arrived. Absence of an OTP is itself evidence.
• The bank's reversal communication, showing its stated reason.
• Proof of your location or circumstances at the transaction time.
• Any police or National Cyber Crime Reporting Portal complaint acknowledgement, for larger amounts.
• Your written dispute and every bank reply, which start the 30-day clock.

To: Grievance Redressal / Nodal Officer, [Bank / Card Issuer]
Subject: Reversal of provisional credit on a disputed/fraudulent card
transaction, card ending [last 4 digits], complaint ref [number]

Dear Sir/Madam,

I reported an unauthorised transaction of about Rs [amount] dated
[transaction date and time] on my card ending [last 4 digits]. I first
reported this fraud on [date and time] and received reference
[number]. A provisional credit was posted on [date] and has now been
reversed and re-debited on [date].

I did not authorise this transaction. I [did not receive any OTP / did
not share any OTP, PIN or card details with anyone]. At the time I was
[location / circumstances].

I request in writing:
1. The exact reason for reversing the provisional credit.
2. A copy of the authentication / 3-D Secure / OTP log, showing the
   OTP generation, delivery to my registered number, and entry.
3. The outcome and reason code of the chargeback raised with the card
   network (Visa / Mastercard / RuPay), and the merchant's documents.
4. The specific clause of your board-approved customer liability
   policy applied to my case.

Under RBI's framework limiting customer liability for unauthorised
electronic transactions, where the loss is not due to my negligence
and was reported promptly, my liability is intended to be limited. I
request that the disputed amount be re-credited.

If not resolved within 30 days, I will approach the RBI Ombudsman at
cms.rbi.org.in.

Yours sincerely,
[Name] | [Registered mobile and email] | [Date]
Enclosures: statement; record of first-report date and reference; OTP
/ alert messages or proof none arrived; cybercrime complaint if filed.

The RTI Act applies to public authorities. Public sector banks such as SBI, PNB, Bank of Baroda, Canara Bank and Union Bank of India are public authorities, so you can RTI the bank's Public Information Officer for the authentication log relied on in your case, the chargeback correspondence and reason code, the basis and policy clause used for the reversal, and the movement of your complaint file. The RBI is a public authority too; you can RTI it to confirm your Ombudsman complaint was received and ask about action taken.

RTI does not reach private card issuers such as HDFC Bank, ICICI Bank, Axis Bank, Kotak Mahindra Bank, IndusInd Bank, or card-issuing companies such as SBI Cards. Nor can you RTI the card networks or approach them directly; the dispute must run through your issuing bank. And RTI gives information; it does not order a re-credit. The records you obtain become evidence in your Ombudsman complaint, a consumer commission, or court.

• Treating the reversal as final. It is a finding you can contest with fresh evidence. Ask for the reason in writing and answer it point by point.
• Reporting late or only by phone. The first-report date drives your protection. Report at once and confirm in writing.
• Accepting a vague “found genuine”. Demand the authentication log. If no OTP reached you, that absence is your strongest point.
• Not asking for the chargeback outcome. A reversed credit often follows a lost chargeback you were never shown. Ask for the reason code and merchant documents.
• Going to the wrong forum. You cannot RTI a private bank or contact Visa or Mastercard directly. Use the grievance cell and the RBI Ombudsman.
• Claiming you never shared an OTP if you did. RBI's framework treats negligence differently. Be accurate about what happened.

• RBI Complaint Management System, cms.rbi.org.in
• RBI, how to lodge a complaint
• National Cyber Crime Reporting Portal (helpline 1930)
• RTI Online (PSU bank applications)

• Chargeback rejected on a failed booking
• Failed POS payment but account debited
• Card shown "written off" after payment
• Score dropped from a reporting error
• Practical Guides hub
• How to file an RTI online

Provisional credit is an interim adjustment posted while the bank investigates. It is not a final decision. If the bank's investigation, or the card network's response, concludes the transaction was authenticated, the bank reverses the credit and re-debits the amount. The reversal is a finding, not the end. You can ask for it in writing, contest it with fresh evidence, and escalate to the RBI Ombudsman.

Yes, it is central. Banks often reverse provisional credit by arguing the transaction was OTP-authenticated, so you must have shared or approved it. If you never received or shared any OTP, say so in writing and ask the bank to produce the authentication log. RBI's framework distinguishes a bank or system lapse, your own negligence, and quickly-reported third-party fraud. Where the failure was not yours and you reported promptly, liability is meant to be limited.

As fast as possible, ideally the moment you spot it. Under RBI's limited-liability framework, the sooner you report, the more protection you generally get, and delay can increase what you bear. The exact day-counts and liability slabs are set by RBI and your bank's board-approved policy, so check the current rule. Note the date and time you first reported, get a reference number, and put it in writing.

A single file with the statement entry; the exact first-report date and reference number; proof you did not authorise it, such as your location or the absence of any OTP message; all bank SMS and email alerts around the transaction; your written dispute and the bank's replies; and any police or cybercrime complaint. If the charge is for goods you never received, add that. Clear, dated evidence moves both the network dispute and the Ombudsman complaint.

Yes. If you complained in writing and the bank rejected it or did not resolve it within 30 days, file free at cms.rbi.org.in under the Integrated Ombudsman Scheme, which covers credit cards from banks and many NBFCs. Upload your statement, the fraud report with its reference, the reversal message and all evidence. You do not need a lawyer.

No. RTI applies only to public authorities, which include public sector banks such as SBI, PNB and Bank of Baroda. Private issuers such as HDFC Bank, ICICI Bank, Axis Bank and SBI Cards as a company are outside RTI. For a private issuer, use the grievance cell and then the RBI Ombudsman. You can still RTI the RBI to learn whether your Ombudsman complaint was received.

Send a written request to the grievance cell for the specific basis: the authentication log, the merchant details, the chargeback outcome and the policy clause relied on. If the bank still refuses, treat that refusal as a deficiency and escalate to the RBI Ombudsman, attaching your request and the non-reply. For a PSU issuer, you can also RTI the bank's Public Information Officer for the records on your own dispute.

Download the provisional-credit reversal fight-back checklist (PDF) and pin your first-report date before you write to the bank.