I shared my OTP with a caller claiming to be from a Gwalior bank verification team and lost ₹40,000. Can I recover it?

Detailed Legal Analysis

Yes, you can take steps to recover your lost ₹40,000 after sharing your OTP with a fraudulent caller, but the success of recovery may depend on various factors including timely reporting and cooperation from authorities.

Here are the steps you should take to pursue recovery:

• Immediate Reporting: Report the incident to your bank immediately. Most banks have a dedicated helpline for reporting fraud. Provide them with all relevant details regarding the transaction and the caller.
• File a Police Complaint: Lodge a formal complaint at your local police station in Gwalior. This is essential for initiating an investigation. Mention specific details such as the time of the call, the amount lost, and the nature of the conversation.
• Cyber Crime Complaint: File a complaint with the Cyber Crime Cell. In Gwalior, you can approach the Cyber Crime Police Station or submit your complaint online through the National Cyber Crime Reporting Portal (cybercrime.gov.in).
• Documentation: Collect and keep all documentation related to the incident, including:
• Transaction details
• Call logs
• Any messages or emails from the bank
• Notify the Reserve Bank of India (RBI): If your bank does not take swift action, you can escalate the issue to the RBI through their complaint management system.
• Legal Action: If you believe your bank has not acted appropriately, you can seek legal recourse under:
• The Information Technology Act, 2000, which governs cybercrimes and electronic commerce.
• Sections pertaining to fraud under the Indian Penal Code (IPC), particularly Section 420 (cheating).
• The Consumer Protection Act, 2019, if you feel that the bank has failed in its duty to protect your financial interests.

It is essential to act quickly, as delays can affect the chances of recovering the money. Additionally, be aware that sharing sensitive information like OTPs is a violation of security protocols, and banks typically advise against it.

Lastly, ensure you educate yourself about cybersecurity practices to prevent future incidents, such as enabling two-factor authentication and being cautious of unsolicited calls.