Credit Card Lost or Stolen? Block It and Limit Liability

"I can't find my credit card anywhere. My wallet was stolen on the train." If this is you, do one thing before anything else: block the card right now through the bank's app, SMS facility or 24x7 helpline, and note the complaint number and the exact time. Under RBI's rules, the time you report decides how much of any misuse you could have to bear, and anything spent after you report is the issuer's problem, not yours.

This guide covers the lost or stolen card itself: blocking, checking for misuse, replacement and liability. For the detailed liability rules, see our guide to unauthorised transactions and zero liability. If the card is still with you but someone has used its details, see credit card fraud: what to do instead.

Why it happens and why speed matters

Cards go missing in ordinary ways: a wallet pickpocketed in a crowd, left at a restaurant or fuel station, or stolen with a bag. The risk is that a stolen physical card can be used before you notice:

• Contactless taps of up to ₹5,000 per transaction need no PIN under RBI's limit, and a thief can tap several times at different shops.
• Online or international use may work if those channels are switched on and the thief can get past OTP checks, for example if your phone was stolen too.
• PIN-based use becomes easy if the PIN was written down in the wallet, which banks treat as negligence.

RBI has required since 2020 that issuers let you switch card usage (online, international, contactless, ATM, POS) on or off and set limits 24x7 through the app, net banking or IVR. Banks must also provide round-the-clock channels for reporting loss and unauthorised transactions and must give you a complaint number immediately.

Step-by-step fix

In the first 15 minutes

1. Block or hotlist the card. Use the issuer's app (look for "block card" or "card controls"), net banking, the SMS block format published by the issuer, or the 24x7 helpline printed on its website. A temporary "lock" is fine if you think the card is just misplaced at home; if it is stolen, block it permanently.
2. Note the complaint number, date and time. Take a screenshot of the confirmation SMS or email. This timestamp is your evidence for the liability window.
3. Check the last few transactions in the app. Anything after the loss that you did not make should be reported as unauthorised in the same call or chat.

On the first day

4. Report disputed transactions in writing using the template below, listing each one.
5. If your phone was stolen too, block the SIM with the telecom operator first, then change net banking and UPI credentials, since OTPs go to that number. Our SIM swap fraud guide covers the phone side.
6. File a police or lost-article report if there were unauthorised transactions or the issuer asks for one, and report fraud on cybercrime.gov.in or 1930.
7. Request a replacement card. Ask whether a reissue fee applies; some issuers waive it for lost or stolen cards.

Over the next weeks

8. Track the provisional credit. The disputed amount should be reversed (a "shadow reversal") within the timeline in the table below, and you should not be charged interest on it.
9. Update merchants and auto-debits with the new card number: subscriptions, insurance premiums, utility standing instructions and saved cards.
10. Check the next two statements for any late-posting transactions from before the block.

How much could you owe?

The 2027 column is from RBI's Commercial Banks (Responsible Business Conduct) Third Amendment Directions, 2026. Card-issuing NBFCs and other bank types follow their own RBI directions and board-approved customer protection policy, which must be on the issuer's website, so check yours. In every case the burden of proving your negligence is on the issuer.

Worked example

Karan's wallet was stolen on a Friday evening in December 2026. His card has a ₹1,50,000 limit. A thief made three contactless taps of ₹4,800, ₹4,900 and ₹4,300 (₹14,000 in total) and one ₹4,000 online purchase on Saturday: ₹18,000 of misuse.

• He blocks and reports on Monday (working day 1): within 3 working days, so liability is ₹0 and all ₹18,000 is reversed.
• He reports on the Friday of the next week (working day 5): liability is the lower of ₹18,000 and ₹10,000 (limit under ₹5 lakh), so ₹10,000, and ₹8,000 is reversed.

Now suppose the issuer is slow and the ₹18,000 is still on his statement at the due date. He should not pay interest on a disputed amount that is later reversed. But if he simply leaves ₹18,000 unpaid without raising a dispute, the card's interest applies: at 3.6% a month, that is ₹18,000 × 3.6% = ₹648, plus 18% GST of ₹116.64, so ₹764.64 for one month. Raise the dispute in writing before the due date, and pay the undisputed part in full. You can model the cost of any balance in the credit card interest calculator.

Where to complain and timelines

1. Issuer: report through the 24x7 channel and follow up in writing with the complaint number.
2. Grievance or nodal officer: escalate if the reversal is not credited within the timeline or the issuer holds you liable without evidence.
3. RBI Ombudsman: if there is no reply within 30 days or the reply is unsatisfactory, file at cms.rbi.org.in or call 14448, within 90 days under the Integrated Ombudsman Scheme, 2026.

Keep the block timestamp, the police or cyber complaint acknowledgement and all emails. If the card was blocked for other reasons, such as a risk flag, our guide to a blocked credit card explains how to get it working again.

Sample complaint text

Subject: Lost/stolen credit card ending [XXXX] – unauthorised transactions

My credit card ending [XXXX] was lost/stolen on [date] at about [time] at [place]. I blocked it at [time] on [date], complaint no. [ ]. The following transactions were not made or authorised by me: [date, amount, merchant for each]. I have reported the theft on cybercrime.gov.in / 1930, acknowledgement no. [ ].

Under RBI's customer liability framework, please reverse these amounts, ensure no interest or charges are levied on them, and share the outcome in writing. If you propose any customer liability, please share the evidence, as the burden of proof lies with the issuer.

[Name], [registered mobile]

What not to do

• Do not wait to "search properly" for a day. Lock the card now; you can unlock it if you find it.
• Do not search the web for a helpline number. Use the number on the issuer's official website or app.
• Do not share OTPs with anyone claiming to help recover the card.
• Do not ignore the next statement. Late-posting merchant charges can appear days after the theft.
• Do not keep the PIN in your wallet or phone notes. It turns a protected loss into negligence.

Key takeaways

• Block the card immediately and save the complaint number and time; misuse after reporting is the issuer's liability.
• Reported within 3 working days, a stolen-card misuse costs you nothing under the rules until 31 December 2026; commercial banks give 5 calendar days from 1 January 2027.
• Contactless taps up to ₹5,000 need no PIN, so keep unused channels switched off in card controls.
• Dispute in writing before the due date so no interest is charged on reversed amounts.
• Escalate from issuer to nodal officer to cms.rbi.org.in after 30 days.