Electricity Bill Scam Legal Remedies and Civil Recovery

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 3 Nov 2026 · Cyber law

Victims of an electricity bill scam in India can pursue both criminal remedies under the IT Act 2000 and BNS 2023, and civil recovery suits against the perpetrators. The RBI's limited liability framework also allows you to claim reimbursement from your bank if you report the unauthorized transaction promptly.

If you have been targeted by an electricity bill scam, the law provides you with two distinct paths for redress: criminal prosecution of the fraudster and civil recovery of your money. The criminal remedies are rooted in the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita, 2023. The civil remedies involve filing a suit for recovery of the amount lost, and potentially claiming compensation from your bank under the Reserve Bank of India's customer protection directions. Understanding both paths is essential because they serve different purposes and have different procedural requirements.

A criminal complaint punishes the offender and deters future fraud, but it does not automatically return your money. A civil suit focuses on recovering the amount you lost, but it requires you to identify the defendant and prove your claim. The RBI framework adds a third layer by holding banks accountable for unauthorized electronic transactions if the customer reports the fraud within the prescribed timelines. Victims should pursue all three remedies in parallel, using the criminal complaint to establish the fraud and the civil suit to recover the funds.

What the law says

The Information Technology Act, 2000 provides the primary criminal provisions for cyber fraud. Section 66 covers computer-related offences, including unauthorized access to computer resources. Section 66C punishes identity theft, which applies when the fraudster uses stolen credentials to impersonate the victim. Section 66D specifically addresses cheating by personation using a computer resource or communication device. Section 67 and 67B deal with publishing obscene material and may apply in cases involving sextortion linked to the scam.

The Bharatiya Nyaya Sanhita, 2023 contains the general criminal law provisions. Section 318 covers cheating, Section 316 covers criminal breach of trust, Section 336 covers forgery, and Section 351 covers criminal intimidation. These sections apply when the fraudster deceives the victim into transferring money or shares sensitive information. The Bharatiya Nagarik Suraksha Sanhita, 2023 provides the procedural framework for criminal cases. Section 173 allows a police officer to register an FIR. Section 175(3) allows a magistrate to direct an investigation. Section 35 covers arrest procedures. Section 187 deals with bail. Section 480 allows compounding of offences. Section 482 covers appeals. Section 528 grants inherent powers to the High Court.

The Bharatiya Sakshya Adhiniyam, 2023 Section 63 governs the admissibility of electronic records. This provision is critical because electricity bill scams rely on digital communication. Screenshots, call logs, and transaction records must be preserved and authenticated to be admissible in court. The RBI has issued several circulars on unauthorized electronic transactions. The 2017 circular on customer protection establishes a zero-liability framework for victims who report unauthorized transactions within three working days. The 2019 circular on Harmonisation of Turn Around Time sets timelines for banks to resolve failed transactions. These directions create a regulatory obligation for banks to reimburse customers in certain circumstances.

Criminal remedies: prosecuting the fraudster

The criminal process begins with filing an FIR under Section 173 of the BNSS 2023. The police investigate the complaint, trace the funds, and identify the accused. If the investigation establishes the fraud, the police file a charge sheet in the appropriate court. The prosecution proceeds under the relevant sections of the IT Act 2000 and BNS 2023. The penalties for cheating under BNS Section 318 include imprisonment and fines. Section 66D of the IT Act also carries imprisonment and fines. The court can order the fraudster to pay compensation to the victim as part of the sentence.

The criminal case requires proof beyond a reasonable doubt. The prosecution must establish that the accused used a computer resource or communication device to cheat the victim. Electronic evidence under BSA Section 63 plays a central role. The victim's screenshots, call logs, and bank statements help establish the chain of events. The investigating officer must collect the transaction records from the banks and the IP logs from the phishing website. If the fraudster used a mule account, the police can freeze the account and recover the funds. The speed of the investigation depends on the cooperation of the banks and the resources of the cyber crime cell.

Victims should note that the criminal case can take time. The court process involves multiple hearings, and the accused may seek bail under Section 187 of the BNSS 2023. Victims have the right to be heard during the bail proceedings and can oppose bail if there is a risk of the accused fleeing or tampering with evidence.

Civil remedies: recovering your money

A civil suit for recovery of money is the primary remedy for getting your funds back. The suit is filed against the identified fraudster in the appropriate civil court. The cause of action arises from the fraud and the resulting financial loss. The limitation period for filing a civil suit for recovery is three years from the date the cause of action arises. The victim must prove the fraud, the transfer of money, and the loss suffered. The court can order repayment with interest.

If the fraudster cannot be identified, the victim can pursue the bank's liability under the RBI directions. The bank is responsible for unauthorized electronic transactions if it failed to follow the prescribed security protocols. The victim must establish that the bank did not act with due diligence or that the fraud occurred despite the bank's security measures. The RBI circulars provide a framework for determining liability based on the speed of reporting. If the victim reported the fraud within three working days, the liability is zero. If the report was delayed, the liability is capped or determined by the bank's investigation.

Civil recovery can also include a claim for compensation for mental agony and financial hardship. The court may award damages if the fraud caused significant distress. However, the primary objective of the civil suit is to recover the principal amount. Victims should gather all documentary evidence, including bank statements, communication records, and the FIR copy, to support their claim. The civil suit can run parallel to the criminal case, and the findings of the criminal court can be used as evidence in the civil proceedings.

Bank liability under RBI directions

The RBI's customer protection framework is the most important regulatory tool for victims. The 2017 circular on customer protection limits the customer's liability for unauthorized electronic transactions based on the speed of reporting. If the fraud is reported within three working days, the customer has zero liability. If the report is made within four to seven working days, the liability is capped at a specified amount. Beyond seven working days, the liability is determined by the bank's investigation and the customer's negligence.

The RBI's Harmonisation of Turn Around Time circular of 2019 sets timelines for banks to resolve failed transactions. The bank must acknowledge the complaint within a specified period and resolve it within the prescribed timeline. If the bank fails to comply, the customer can approach the RBI's banking ombudsman. The ombudsman can direct the bank to compensate the customer for the loss and the delay. Victims should file a complaint with the bank's nodal officer and escalate the matter to the ombudsman if the bank does not respond within the timeline.

It is important to note that the RBI directions do not automatically guarantee reimbursement. The bank will investigate the case and determine whether the customer was negligent. If the customer shared the OTP or PIN, the bank may argue that the loss was due to the customer's negligence. However, the bank cannot escape liability if it failed to detect a fraudulent transaction despite having the necessary systems in place. The courts have consistently held that banks must act with due diligence and protect customer funds.

Step-by-step procedure for victims

Report to the bank immediately. Call the bank's hotline and request a freeze on the account or card. Ask the bank to initiate a chargeback or transaction reversal. Get a complaint reference number.
Call 1930. Provide the transaction details and the phone number that sent the fraudulent message. The helpline can help freeze the recipient's account.
File a complaint on cybercrime.gov.in. Upload the screenshots and bank statements. Keep the acknowledgement number for tracking.
File an FIR under Section 173 of the BNSS 2023. Visit the local police station with the online complaint, bank statements, and identity proof. Obtain a copy of the FIR.
Submit a written complaint to the bank's nodal officer. Include the transaction IDs and the FIR copy. Request a written response within the RBI timeline.
Approach the magistrate under Section 175(3) if the police refuse to register an FIR. The magistrate can direct the police to investigate.
File a civil suit for recovery. Engage a lawyer to draft the plaint and file it in the appropriate civil court. Attach all documentary evidence.

Criminal versus civil remedies: a comparison

Factor	Criminal remedy	Civil remedy
Purpose	Punish the offender	Recover the money
Forum	Criminal court	Civil court
Standard of proof	Beyond reasonable doubt	Preponderance of probabilities
Initiation	FIR under BNSS Section 173	Plaint filed by the victim
Outcome	Conviction and compensation	Decree for recovery
Timeline	Often lengthy	Depends on court backlog

The table shows that criminal and civil remedies serve different purposes. A criminal case punishes the fraudster but may not return the money quickly. A civil suit focuses on recovery but requires the victim to prove the claim. The RBI framework provides an administrative remedy that can be faster than both. Victims should pursue all available remedies to maximize their chances of recovery.

What decides the outcome

The outcome of an electricity bill scam case depends on several factors. The speed of reporting is the most critical factor. The RBI's zero-liability rule applies only if the victim reports within three working days. The quality of evidence is the second factor. Screenshots, call logs, and bank statements establish the fraud and the flow of money. The third factor is the bank's investigation. If the bank failed to follow the RBI directions, it may be held liable. The fourth factor is the police investigation. If the fraudster is identified and arrested, the criminal case can proceed. The fifth factor is the court's assessment of the victim's negligence. If the victim shared the OTP or PIN, the bank's liability may be reduced.

Courts rely on the RBI circulars and the facts of each case. There is no definitive Supreme Court ruling that applies to all situations.

Common mistakes to avoid

Delaying the report to the bank. The RBI's zero-liability rule depends on prompt reporting.
Not filing an FIR. A criminal complaint is essential for prosecuting the fraudster.
Filing a civil suit without identifying the defendant. The suit may be dismissed if the defendant cannot be served.
Sharing the OTP or PIN. This weakens the victim's case and may be treated as negligence.
Not preserving electronic evidence. Screenshots and call logs must be retained for both criminal and civil proceedings.
Ignoring the RBI's timelines. The bank may reject the claim if the report is delayed.
Failing to follow up with the investigating officer. Regular follow-up ensures the case progresses.

If you need legal assistance, consult a cyber crime lawyer in Kolkata. For victims in West Bengal, our cyber law services in West Bengal provide guidance on filing complaints and pursuing recovery. You can also contact us for a consultation.

When to involve a lawyer

You should involve a lawyer if the bank rejects your liability claim, if the police fail to register an FIR, or if the amount lost is substantial. A lawyer can help you file a writ petition in the High Court under Section 528 of the BNSS 2023, pursue civil recovery, and represent you in criminal proceedings. Legal representation is also advisable if you are accused of committing an electricity bill scam, as the offence carries serious penalties under the IT Act 2000 and BNS 2023. A lawyer can guide you through the complexities of electronic evidence under BSA 2023 Section 63 and ensure your rights are protected throughout the process.

Need help with a cyber crime matter?

Tell me what happened and I will tell you what to file, where, and by when. First conversation is free.

Call +91-9007000603 WhatsApp

Frequently asked questions

What are the criminal remedies for an electricity bill scam?

The criminal remedies include filing an FIR under Section 173 of the BNSS 2023 and prosecuting the fraudster under Section 66D of the IT Act 2000 and Section 318 of the BNS 2023. The court can impose imprisonment and fines, and may order compensation to the victim as part of the sentence.

Can I file a civil suit to recover money lost in an electricity bill scam?

Yes, you can file a civil suit for recovery of money against the identified fraudster in the appropriate civil court. The limitation period is three years from the date the cause of action arises. You must prove the fraud, the transfer of money, and the loss suffered.

What is the RBI's zero-liability framework for unauthorized transactions?

The RBI's 2017 circular on customer protection establishes zero liability for customers who report unauthorized electronic transactions within three working days. If the report is made within four to seven working days, the liability is capped at a specified amount. Beyond seven days, the bank determines liability based on the investigation.

Can I claim compensation from the bank for an electricity bill scam?

You can claim compensation from the bank if it failed to follow the RBI's security protocols or did not act with due diligence. The bank's liability depends on the speed of your reporting and the facts of the case. You should file a complaint with the bank's nodal officer and escalate to the banking ombudsman if needed.

What evidence do I need for a civil recovery suit?

You need the bank statements showing the unauthorised debits, the screenshots of the fraudulent messages and calls, the call detail records, the FIR copy and the acknowledgement from cybercrime.gov.in. Together these establish the fraud and the financial loss. Preserve the original device used for the transaction, because the electronic evidence must carry the certificate under Section 63 of the BSA 2023 to be relied on in the suit.

How long does a criminal case for an electricity bill scam take?

The timeline for a criminal case varies depending on the court's workload and the complexity of the investigation. The process involves filing an FIR, investigation, charge sheet, trial, and judgment. Victims should follow up regularly with the investigating officer and the prosecutor to ensure the case progresses.

What if the police refuse to investigate my electricity bill scam complaint?

If the police refuse to investigate, you can approach the magistrate under Section 175(3) of the BNSS 2023. The magistrate can direct the police to register an FIR and investigate the complaint. You should submit a written application with all supporting documents to the magistrate's court.

Can I pursue criminal and civil remedies at the same time?

Yes, you can pursue criminal and civil remedies simultaneously. The criminal complaint punishes the fraudster, while the civil suit focuses on recovering your money. The findings of the criminal court can be used as evidence in the civil proceedings. However, you should consult a lawyer to coordinate both cases effectively.

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Cyber crime lawyer in your city · Bank account freeze help · Contact