ACH Fraud Prevention: How to Detect and Report It

ACH Fraud Prevention: How to Detect and Report It

Learn how to identify ACH fraud, protect your loan EMI mandate, and report unauthorised transactions through official channels.

FAQ
Find Branch
Reels

Support available Online, on call, or at branches

Get answers instantly without waiting on call:

Enter mobile and OTP · No password needed · No branch visit needed

In Summary

EMI Bounce: Causes & Solutions
 

EMI Bounce: Causes & Solutions

ACH fraud happens when someone misuses your banking details or mandate information to initiate a debit you never authorised, and since your loan EMI is typically collected the same way, through a NACH mandate, this makes your EMI mandate a genuine target, not just your general bank account.


  • Fraudsters increasingly target the mandate, not just the transaction. Fake "mandate renewal" messages and cloned mandate forms are designed to redirect your EMI to a fraudulent account, not just steal a one-time payment
     
  • How fast you report matters more than almost anything else. Reporting a third-party breach within three working days can mean zero liability, waiting longer can shift some of that loss onto you
     
  • A disputed transaction doesn't pause your loan obligations. Report the fraud to your bank and separately confirm with Bajaj Finance that your EMI still processed correctly, don't assume one automatically resolves the other
     
  • Never verify or update a mandate through a link in a message. Bajaj Finance will not ask you to re-authorise your NACH mandate outside its own official app or portal
     

If you notice an unfamiliar transaction or a change to your EMI mandate, report it to your bank immediately, then check your loan account through My Account or the Bajaj Finance app to confirm your EMI wasn't affected.

What is ACH fraud and how does it happen?

ACH fraud refers to an unauthorised or deceptive transaction carried out through an Automated Clearing House (ACH) payment system. ACH enables electronic transfers between bank accounts and can support recurring payments, including authorised loan repayments. Fraud may occur when someone obtains or misuses sensitive banking or mandate information to initiate an unauthorised debit, alters payment instructions, or impersonates a legitimate financial service provider. Common warning signs include unexpected debits, unfamiliar payment mandates, requests for banking credentials, or messages asking you to verify account details through unknown links. If you notice an unfamiliar ACH transaction, check your bank statement and contact your bank promptly through its official channel. For loan repayments, also verify the payment or mandate details with the lender through its official service platform.

 

 

How ACH fraud can specifically target your loan EMI mandate

 

Since your loan EMI is typically collected through a NACH mandate, a form of ACH-based recurring debit, fraudsters sometimes exploit this specific link between ACH and loan repayment. Common tactics include:


  • Fake mandate renewal requests: Messages claiming your NACH mandate has expired or needs "re-verification," directing you to a fraudulent link to re-enter your bank details
  • Fake EMI collection calls: Callers claiming to represent your lender's recovery team, asking you to authorise an "urgent" debit outside your normal EMI schedule
  • Cloned mandate forms: Fraudulent physical or digital NACH mandate forms that redirect your EMI to an unauthorised account instead of your genuine lender

If you receive any communication asking you to update, re-verify, or re-authorise your NACH mandate outside your lender's official app or portal, do not act on it. Verify directly through Bajaj Finance's official channels before making any change to your mandate.

 

 

How can you detect ACH fraud early?

 

Early detection of ACH fraud depends on regularly monitoring account activity and recognising unexpected payment or mandate changes. Review transactions promptly to identify suspicious activity and contact your bank through an official channel before further unauthorised transactions occur.


Look for these warning signs:


  • Unexpected debits: Check your bank statement for ACH transactions that you do not recognise or did not authorise.
  • Unfamiliar mandates: Review recurring payment instructions and flag any mandate you do not remember setting up, this includes checking that your EMI is being debited by your actual lender, not a similarly named account.
  • Unusual transaction alerts: Pay attention to bank notifications for unexpected debits, payment attempts or changes to payment instructions.
  • Unknown payment details: Verify unfamiliar transaction references, payee details or debit amounts through your bank's official channels.
  • Suspicious messages: Be cautious of emails or messages asking you to confirm banking details, payment information or credentials.
  • Unauthorised account changes: Check for unexpected changes to registered contact details or other banking information.
  • Repeated small debits: Multiple unfamiliar transactions, even for small amounts, may indicate unauthorised activity and should be reviewed promptly.

Regular monitoring is an important first step in identifying ACH fraud. If you notice an unfamiliar transaction, contact your bank promptly through its official website, application, or customer service channel, and keep relevant transaction records for reference.

How to prevent ACH fraud and unauthorised transactions

Protect your banking credentials and regularly check recurring payment mandates to reduce the risk of unauthorised ACH transactions. ACH fraud may involve misuse of confidential information or payment instructions, so following secure banking practices and acting promptly on unfamiliar transactions can help limit potential losses.


Safety measureWhat you should do
Protect banking credentialsNever share OTPs, passwords, PINs or other confidential banking credentials with anyone
Avoid suspicious linksDo not click links in unexpected messages asking you to verify payments or account details
Monitor transactionsCheck your bank statements and transaction alerts regularly for unfamiliar debits
Verify payment instructionsConfirm unfamiliar debits or mandates through your bank's official channels
Keep contact details updatedEnsure your mobile number and email address registered with the bank are current
Use trusted platformsAvoid unknown websites or applications when making financial transactions
Review recurring mandatesCheck recurring payment instructions periodically and report unfamiliar mandates promptly
Verify your NACH mandate periodicallyCheck your loan account in My Account or the app to confirm your registered mandate matches your actual EMI schedule and lender details
Contact official supportUse your bank's official website, application or customer service number instead of contact details provided in suspicious messages

Regular monitoring helps you identify unauthorised activity sooner and take appropriate action. If you find an unfamiliar ACH transaction, contact your bank promptly through an official channel and retain relevant transaction records for reference.

 

 

Steps to raise a payment-related request through Bajaj Finance

 

If you identify a suspicious transaction that appears connected to a Bajaj Finance loan or repayment mandate, use an official Bajaj Finance service channel to raise a request. You should also report the transaction to your bank, as the bank handles unauthorised transactions in the customer's account.


Where the relevant service option is available in your account, you can use the Bajaj Finance App or My Account portal:


  1. Sign in using your registered mobile number and OTP
  2. Open My Relations and select the relevant loan
  3. Go to Help & Support
  4. Select Raise Request
  5. Choose the relevant payment, mandate or transaction-related category
  6. Provide the transaction date, amount, reference details and supporting documents, if requested
  7. Save the request or complaint reference number for follow-up

Do not use an unverified phone number, website or payment link received in a suspicious communication. For a disputed bank debit, keep coordinating with your bank and retain the complaint acknowledgement.

What should you do after an unauthorised ACH transaction?

Report an unauthorised ACH transaction to your bank immediately and take steps to prevent further unauthorised debits. RBI directions state that customers should notify their bank as soon as possible, as delays in reporting an unauthorised transaction can increase the customer's exposure to loss.


Follow these steps:

  1. Contact your bank immediately: Use the bank's official customer service, branch or digital reporting channel to report the transaction
  2. Request transaction protection: Ask the bank to take appropriate steps to prevent further unauthorised transactions
  3. Record the complaint: Keep the complaint or acknowledgement reference number for future follow-up
  4. Preserve evidence: Save transaction details, statements, alerts, screenshots and suspicious messages
  5. Report financial cyber fraud: If the transaction resulted from cyber fraud, report it through the National Cyber Crime Reporting Portal or call 1930, the national cybercrime helpline
  6. Review connected mandates: Check whether an unfamiliar mandate or recurring instruction is linked to the transaction and raise the issue with the relevant bank or institution

NPCI states that complaints relating to fraudulent, unidentified or unauthorised transactions should be raised with the respective bank for redressal.

If the unauthorised transaction affected your EMI payment specifically, check your loan account afterwards to confirm your EMI was correctly processed and your account isn't showing as overdue as a result of the fraud, and raise a service request with Bajaj Finance if it is.

 

 

What are the customer liability rules for ACH fraud?

 

Customer liability for an unauthorised electronic transaction depends on the circumstances of the fraud and how quickly it is reported. Under RBI's customer protection framework for unauthorised electronic banking transactions, liability may be zero, limited or determined under the bank's applicable policy depending on the circumstances.


The broad framework includes:


  • Bank negligence or deficiency: A customer can have zero liability where the unauthorised transaction results from the bank's negligence, fraud or deficiency, subject to the applicable RBI framework
  • Third-party breach: Where neither the bank nor the customer is responsible for the breach, reporting the transaction within three working days of receiving the transaction communication can result in zero liability
  • Delayed reporting: Reporting after three working days may result in limited liability for certain third-party breaches, subject to the applicable conditions
  • Customer negligence: If the loss results from sharing payment credentials, the customer bears the loss until the transaction is reported to the bank. Transactions occurring after reporting are treated differently under the RBI framework

The bank is responsible for establishing customer liability where applicable. RBI also provides for crediting the amount involved in an unauthorised electronic transaction to the customer's account within 10 working days from notification in cases covered by the zero or limited liability framework.

 

 

What legal action is possible in an ACH fraud case?

 

Legal action for ACH fraud depends on the nature of the fraudulent activity, the evidence available and the circumstances of the transaction. In India, the Information Technology Act, 2000 includes provisions relating to computer-related offences, identity theft and cheating by personation using a computer resource. Depending on how the fraud occurred, Sections 66, 66C, and 66D may apply. An affected account holder should report the unauthorised transaction to the bank promptly and report financial cyber fraud through 1930 or the National Cyber Crime Reporting Portal. Keep transaction records, bank statements, messages, emails and other relevant communications as evidence. If requested, provide these records to the investigating authority and follow the bank's complaint and escalation process. Early reporting can support timely investigation and may help the concerned authorities trace the transaction. However, reporting a fraud does not guarantee recovery of the disputed amount or a specific legal outcome. The result depends on the facts, evidence, investigation and applicable rules.

Frequently Asked Questions

Understanding & Identifying ACH Fraud

Prevention, Response & Legal Recourse

How does an ACH mandate differ from an ACH transaction?

An ACH mandate is an instruction that authorises recurring electronic debits from a bank account. An ACH transaction is the debit processed under that instruction. Reviewing both helps identify whether an unfamiliar payment is linked to a valid mandate.

What should you check before approving an ACH mandate?

Verify the organisation requesting the mandate, the payment purpose, the linked bank account, and the recurring payment details. Do not approve a mandate if the request comes through an unverified link or from an unknown source.

How can you verify an unfamiliar ACH debit?

Check your bank statement for the transaction reference, debit date, amount and payee details. Contact your bank through its official channel to confirm the transaction and ask whether it is linked to a mandate you authorised.

Can ACH fraud affect my loan EMI mandate specifically?

Yes, since EMIs are typically collected via a NACH mandate, a form of ACH-based recurring debit, fraudsters may target this specifically through fake renewal requests or cloned mandate forms. Always verify any mandate change directly through your lender's official app or portal.

Will an unauthorised ACH transaction affect my EMI due date or overdue status?

It can, if the fraud disrupted your scheduled EMI collection. Check your loan account after resolving the unauthorised transaction to confirm your EMI was processed correctly and your account isn't incorrectly showing as overdue.

Should you continue loan payments after identifying an ACH fraud?

Report the unauthorised transaction to your bank immediately and separately contact the lender if the debit relates to a loan repayment. Do not assume that disputing one transaction automatically changes your loan repayment obligations or future scheduled payments.

What records should you keep for an ACH fraud complaint?

Keep bank statements, transaction references, account alerts, mandate details, screenshots, emails and suspicious messages related to the incident. These records can help the bank or investigating authority understand what happened and assess the complaint.

Where should a suspected ACH fraud be reported first?

Report the unauthorised transaction to your bank immediately through its official channel. If cyber fraud is involved, also report it through 1930 or the National Cyber Crime Reporting Portal and retain the complaint reference for future follow-up.

Disclaimer

While care is taken to update the information, products, and services included in or available on our website and related platforms/websites, there may be inadvertent inaccuracies or typographical errors or delays in updating the information. The material contained in this site, and on associated web pages, is for reference and general information purpose and the details mentioned in the respective product/service document shall prevail in case of any inconsistency. Subscribers and users should seek professional advice before acting on the basis of the information contained herein. Please take an informed decision with respect to any product or service after going through the relevant product/service document and applicable terms and conditions. In case any inconsistencies observed, please click on reach us.

*Terms and conditions apply.