Payment Fraud & Unauthorized Charges
You did not make the transaction. But the money is gone. How this happens, and how much of it you can get back, depends entirely on which payment method was used.
The Petrol Station Pump
Arjun filled up his car at a petrol station on a Tuesday evening. He tapped his card as usual, waited for the beep, and drove away.
On Thursday, he checked his account and found eleven transactions he had never made: supermarkets, electronics shops, and two international transfers totalling Rs 43,000.
His card had been cloned. The pump had a skimmer - a small device fitted over the card reader that copied his card details and PIN silently as he paid.
His bank reversed most charges through a chargeback. Two international transfers were not recoverable.
The Four Ways Payment Fraud Happens
Credit Card Fraud and Cloned Cards
Card cloning uses skimming devices on ATMs and payment terminals. The device reads your card's magnetic strip while a tiny camera captures your PIN.
Contactless (tap) cards cannot be skimmed this way. The chip generates a unique code per transaction. Magnetic strips do not.
What gets recovered: Card fraud through a legitimate bank is usually reversible within 30-60 days through chargeback. Report within 24 hours for the best outcome.
Payment App Fraud and Unauthorised Transfers
UPI, Venmo, Cash App, and similar apps are targeted through:
- Fake QR codes that redirect payments to attacker accounts
- Screen share scams where you grant access during a "help" call
- Collect request fraud - a payment request disguised as a confirmation screen
Rs 1,087 Cr
lost to UPI fraud in India in 2024, across 1.3 million reported cases.
Payment requests look identical to payment confirmations. That confusion is the exploit.
Source: Reserve Bank of India Annual Report, 2025The critical distinction: Payment apps treat transfers as authorised the moment you confirm. Recovery is nearly impossible unless the recipient's account is frozen within minutes.
Wire Transfer Fraud
Wire transfers are the most targeted payment method because they are the hardest to reverse.
$2.9B Lost in 2023
Business Email Compromise (BEC) - where attackers impersonate suppliers or executives to redirect wire payments - caused $2.9 billion in losses in 2023 in the US alone.
Less Than 4%
Once a wire transfer clears, fewer than 4% of victims recover any funds. International wires are almost never recoverable. Domestic wires have a very short recall window.
Wire transfer red flags:
- Sudden change to bank details you have used before
- Invoice from a supplier with a new account number
- Any request to wire money urgently to a new recipient
Verify every new wire transfer account by phone, using a number from your own records - not the invoice.
Chargeback Fraud: The Victim's Perspective
Chargeback is your right to dispute an unauthorised card transaction with your bank. It is not guaranteed, and it has limits.
| Payment Type | Chargeback Possible? | Time Limit |
|---|---|---|
| Credit card | Yes, usually | 30-120 days |
| Debit card | Often, but slower | 15-60 days |
| UPI / payment app | Very limited | Report within hours |
| Wire transfer | Almost never | Act within minutes |
| Gift cards / crypto | No | - |
What chargebacks cannot fix: If you authorised the transaction - even if you were tricked into doing so - many banks treat this as a legitimate payment. The UK's APP fraud reimbursement rules (October 2024) changed this for UK consumers. Most other countries have not.
Try It: Spot the Fraud
This simulation shows you five payment scenarios. Identify which ones are fraudulent and which are legitimate - and what makes them different.
What That Just Showed You
1. The payment method determines recovery, not the amount. A Rs 500 card fraud can often be reversed. A Rs 5,000 wire transfer usually cannot. Know the difference before you pay.
2. Authorised does not mean consensual. Being tricked into authorising a payment is still fraud. Document everything and report immediately - some banks will investigate even when you confirmed the transaction.
3. Speed is the only recovery window. For payment app and wire fraud, calling your bank within the first hour dramatically improves outcomes. After 24 hours, the window closes.
Three Things Worth Doing
1. Verify any new bank details by phone before transferring. Changed payment details on an invoice or message are the most common wire fraud vector. Call the recipient directly using a number from your own records.
2. Turn on transaction alerts for every account. Real-time SMS or app alerts mean you see unauthorised charges within seconds, not days. Speed is your best recovery tool.
3. Use credit cards for online purchases where possible. Credit cards offer stronger chargeback rights than debit cards or payment apps. The protection is built into the product.
One Question Before You Continue
You receive an invoice from a supplier you have worked with for two years. The bank account details are different from the ones you have on file. The invoice looks genuine. What should you do?