Third Party Fraud: How to Detect and Prevent It

Third Party Fraud: How to Detect and Prevent It

Learn how third-party fraud works, identify warning signs and protect your financial accounts from misuse.

FAQ
Find Branch
Reels

Support available Online, on call, or at branches

Get answers instantly without waiting on call:

Enter mobile and OTP · No password needed · No branch visit needed

In Summary

Third-party fraud happens when someone else, not you and not your bank, impersonates a person or institution to access your accounts or trick you into authorising a payment, and it's a different concept from RBI's specific "third-party breach" liability category, so don't assume the two carry the same protections.


  • Fraudsters often already know something about you. This is what makes the call or message feel credible, having your name or partial details doesn't make a request genuine, always verify independently.
  • A fraudulent transaction doesn't cancel your loan obligation. If a fraud disrupts your EMI, the repayment itself still stands separately, you need to report the fraud and separately confirm your loan account is up to date.
  • How fast you report affects your liability. Prompt reporting can limit further unauthorised transactions and may affect how liability is determined under RBI's customer-liability framework.
  • Even a small unauthorised transaction is worth reporting. It can signal broader misuse of your details, not just a one-off, small amounts shouldn't be dismissed as not worth the effort.

If you suspect fraud connected to a Bajaj Finance loan or EMI, report it through My Account or the Bajaj Finance app immediately, and separately confirm your loan account isn't affected, resolving one doesn't automatically resolve the other.

What is third-party fraud?

Third-party fraud involves fraudulent activity carried out by someone other than the legitimate account holder or intended transaction participant. The fraudster may impersonate another person, misuse stolen personal information, manipulate the victim into authorising a payment or obtain unauthorised access to an account.


Third-party fraud can involve:


  • Stolen identity or personal information
  • Impersonation of a financial institution or service provider
  • Unauthorised access to online accounts
  • Fake payment or repayment requests
  • Misuse of card, banking or UPI credentials
  • Fraudulent loan or financial applications using another person's details
  • Social engineering, where a fraudster manipulates someone into revealing information or approving a transaction

The term should not be confused with RBI's specific classification of a third-party breach in its customer-liability framework for unauthorised electronic banking transactions. Under that framework, a third-party breach refers to cases where the deficiency lies neither with the bank nor the customer but elsewhere in the system.

 

 

How does third-party fraud happen?


Third-party fraud commonly occurs when a fraudster obtains personal or financial information and uses it to impersonate the customer or initiate an unauthorised transaction. The approach may begin through a phone call, message, email, social media account, fake website or fraudulent payment request.


Common methods include:

  • Impersonation: A fraudster pretends to be a bank, lender, government authority or service representative.
  • Phishing: A fake link or website collects login or payment information.
  • Social engineering: The fraudster creates urgency or fear to persuade the victim to disclose sensitive information.
  • Identity misuse: A fraudster uses personal documents or information to create or access financial accounts.
  • Unauthorised transactions: A fraudster uses stolen credentials to make payments or transfers.
  • Fake customer support: A fraudster offers to resolve an account problem and requests confidential information.

The fraudster may already possess some information about the victim, which can make the communication appear genuine. Verify requests independently through the organisation's official website, application or customer service channel before taking action.

 

 

How can you report a fraud-related issue through Bajaj Finance?


If suspected third-party fraud involves a Bajaj Finance loan account or repayment transaction, use an official service channel to report the account-related issue. Reporting through the lender does not replace reporting financial cyber fraud to the appropriate authorities.


Follow these steps:


  1. Sign in to the Bajaj Finance App or My Account using your registered mobile number and OTP.
  2. Open My Relations and select the relevant loan account.
  3. Go to Help & Support.
  4. Select Raise Request.
  5. Choose the relevant payment, transaction or account-related category.
  6. Provide the requested information and supporting records, where applicable.
  7. Save the request reference number for future communication.

If money has already been transferred through a bank account, card or digital payment method, contact the relevant financial institution immediately and report the incident through 1930 or the National Cyber Crime Reporting Portal.

What should you do after a third-party fraud?

Report suspected third-party fraud immediately, secure the affected account and preserve transaction evidence. Quick action can help prevent additional unauthorised transactions and provide the relevant institution with information needed to investigate the incident.


Follow these steps:

  1. Stop further payments: Do not respond to additional payment requests from the suspected fraudster.
  2. Contact your bank or financial institution: Report the unauthorised transaction through an official channel.
  3. Secure your accounts: Change compromised passwords and follow the institution's security instructions.
  4. Block affected payment instruments: If a card, account or other payment instrument has been compromised, request the appropriate security action.
  5. Report financial cyber fraud: Call 1930 to report financial cyber fraud immediately, or use the National Cyber Crime Reporting Portal.
  6. Preserve evidence: Keep transaction IDs, screenshots, messages, phone numbers, email addresses, website links and other relevant records.
  7. Follow up using the complaint reference: Keep the acknowledgement or complaint number for future communication.

The National Cyber Crime Reporting Portal specifically provides 1930 for immediate reporting of financial cyber fraud.

 

 

How can you prevent third-party fraud?


Protecting payment credentials, verifying unexpected requests and monitoring financial accounts can reduce the risk of third-party fraud. Security depends on preventing unauthorised access and responding quickly when you detect suspicious activity.


Use these precautions:

  • Never share OTPs, UPI PINs, passwords or card security information.
  • Do not approve a payment you did not initiate.
  • Verify customer-service contacts through official sources.
  • Avoid clicking unfamiliar payment or login links.
  • Do not install applications at the direction of an unknown caller.
  • Keep your phone, applications and security software updated.
  • Review account and transaction alerts regularly.
  • Use strong, unique passwords for important accounts.
  • Report suspicious transactions immediately.
  • Keep records of important financial transactions and communications.

If someone claims to represent a lender regarding an EMI, loan account or repayment, verify the request through the lender's official platform rather than using the contact details supplied in the message.

 

 

What legal protection is available against third-party fraud?


Third-party fraud can attract legal action under Indian laws where the facts establish offences such as cheating, personation, identity theft or misuse of computer resources. The applicable provision depends on how the fraud occurred, the evidence available and the specific conduct involved. The Information Technology Act, 2000 includes provisions on identity theft and cheating by personation using a computer resource under Sections 66C and 66D. The Bharatiya Nyaya Sanhita, 2023 also covers cheating and cheating by personation. Section 319 addresses cheating by personation and may provide for imprisonment of up to five years, a fine, or both, subject to the circumstances and applicable legal requirements. If you become a victim of third-party fraud, report the incident promptly to the relevant authorities and inform the concerned bank or financial institution. Preserve transaction records, messages, emails, documents and other original evidence, as these may support an investigation. Where appropriate, seek independent legal advice. Reporting fraud does not guarantee recovery or a particular legal outcome, as this depends on the evidence, circumstances and investigation.

Which support channel should you choose

Choose the support channel based on your requirement.

RequirementRecommended channel
Check loan detailsCustomer Portal
Make paymentsCustomer Portal or Bajaj Finance App
Raise a service requestRaise a Request
Speak with supportCall Us
Visit in personBranch Locator

 

 

Before contacting Bajaj Finance


Keeping a few details ready can help speed up the verification process.

You may be asked for:

  • Registered mobile number.
  • Customer ID or loan account number.
  • Relevant product details.
  • Supporting documents, if applicable.

Having these details available can help your query be processed more efficiently.

Frequently Asked Questions

Third-Party Fraud

Reporting & Recovery

Who is responsible for losses caused by third-party fraud?

Responsibility for an unauthorised transaction depends on the circumstances, including whether the bank, customer or another party was responsible and how quickly the transaction was reported. The applicable RBI customer-liability framework determines how it is treated.

How quickly should third-party fraud be reported to the bank?

Report a suspected unauthorised transaction to your bank as soon as you notice it. Prompt reporting can help limit further transactions and may affect customer liability under the applicable RBI framework.

What evidence should you keep after third-party fraud?

Keep bank statements, transaction references, SMS or email alerts, screenshots, suspicious messages, phone numbers, website details and complaint acknowledgements. These records can help the bank, cybercrime authorities or other investigating agencies review the incident.

What happens to an EMI after a fraudulent transaction?

A fraudulent transaction does not automatically cancel a separate loan repayment obligation. If an EMI remains unpaid, check the loan account and contact the lender through official channels to understand the amount due and available repayment options.

How should you verify whether a loan communication is genuine?

Verify the communication through the lender's official website, application or customer service channel. Do not use phone numbers, links or payment details provided in an unexpected message until their authenticity has been independently confirmed.

What should you do if a fraudster has your personal information?

Contact the relevant financial institutions, monitor your accounts and credit information, and report suspected misuse promptly. Preserve evidence and follow the security instructions provided by the concerned institution to reduce the risk of further unauthorised activity.

Where should cyber financial fraud be reported in India?

You can report financial cyber fraud through the National Cyber Crime Reporting Portal or by calling 1930. You should also notify the concerned bank or financial institution promptly and retain the complaint reference for future follow-up.

What happens after reporting a third-party fraud complaint?

The concerned institution or authorities may review the transaction, account activity and supporting evidence. They may request additional information during the investigation. Reporting does not guarantee recovery, as the outcome depends on the circumstances and available evidence.

Should you report fraud if the disputed transaction is small?

Report a small unauthorised transaction promptly, as it may indicate misuse of your account or payment information. Early reporting allows the institution to review the activity and take appropriate action, if needed.

Disclaimer

While care is taken to update the information, products, and services included in or available on our website and related platforms/websites, there may be inadvertent inaccuracies or typographical errors or delays in updating the information. The material contained in this site, and on associated web pages, is for reference and general information purpose and the details mentioned in the respective product/service document shall prevail in case of any inconsistency. Subscribers and users should seek professional advice before acting on the basis of the information contained herein. Please take an informed decision with respect to any product or service after going through the relevant product/service document and applicable terms and conditions. In case any inconsistencies observed, please click on reach us.

*Terms and conditions apply.