New FAQ Page 2 - RBI - Reserve Bank of India
Prepaid Payment Instruments (PPIs)
Ans. Bank PPI issuers shall be guided by RBI circulars DBR.No.Leg.BC.78/09.07.005/2017-18 dated July 6, 2017 or DCBR.BPD.(PCB/RCB).Cir.No.06/12.05.001/2017-18 dated December 14, 2017, as applicable on Customer Protection – Limiting Liability of Customers in Unauthorised Electronic Banking Transactions.
Ans. For the purpose of this MD, electronic payment transactions can be–
-
Remote / Online payment transactions: Transactions that do not require physical PPIs to be presented at the point of transactions e.g. wallets, card not present (CNP) transaction, etc.; and
-
Face-to-face / Proximity payment transactions: Transactions that require physical PPIs to be present at the point of transactions e.g. transactions at ATMs, PoS devices, etc.).
Ans. It is mandatory for non-bank PPI issuers to send an SMS alert to the customer for any payment transaction in his / her account. In addition, an e-mail alert may also be sent, wherever registered. The transaction alert should have a contact number and / or e-mail id on which the customer can report unauthorised transactions or notify the objection.
Ans. Non-bank PPI issuers shall provide customers with 24x7 access via website / SMS / e-mail / dedicated toll-free helpline for reporting unauthorised transactions and / or loss or theft of the PPI. Further, a direct link for lodging of complaints, with specific option to report unauthorised electronic payment transactions shall be provided by non-bank PPI issuers on the mobile app / home page of their website / any other evolving acceptance mode.
Ans. The ‘per transaction customer liability’ in such cases will depend on the number of days lapsed between the receipt of transaction communication by the customer from the non-bank PPI issuer and the reporting of unauthorised transaction by the customer to the non-bank PPI issuer. If the issuer is reported within three days’ of receiving of communication, the customer liability will be zero. Similarly, for any such transaction reported between four and seven days of receiving of communication, the customer liability will be limited to a maximum of ₹ 10,000/. Reporting beyond seven days’ time will be dealt in accordance with the Board approved policy of the non-bank PPI issuer.
Ans. The number of days mentioned above shall be counted after excluding the date of receiving the communication from the non-bank PPI issuer.
Ans. In cases where the loss is due to negligence by the customer, such as where he / she has shared the payment credentials, the customer will bear the entire loss until he / she reports the unauthorised transaction to the non-bank PPI issuer.
Ans. Any loss occurring after reporting of the unauthorised transaction shall be borne by the non-bank PPI issuer.
Ans. The non-bank PPI issuer shall credit (notional reversal / shadow reversal) the amount involved in the unauthorised electronic payment transaction to the customer’s PPI within 10 days from the date of such notification by the customer. Such reversal has to be effected even if it breaches the maximum permissible limit applicable to that type / category of PPI. The credit shall be value-dated to be as of the date of the unauthorised transaction.
Ans. The burden of proving the customer liability in case of unauthorised electronic payment transactions lies on the non-bank PPI issuer.
These FAQs are issued by the Reserve Bank of India (hereinafter referred to as “Bank”) for information and general guidance purposes only. The Bank will not be held responsible for actions taken and / or decisions made on the basis of the same. For clarifications or interpretations, if any, one may be guided by the relevant circulars, guidelines and notifications issued from time to time by the Bank.
Page Last Updated on: December 11, 2022