"According to RBI’s July 2017 notification, a customer can get the full amount back if the fraud occurs due to negligence/deficiency on the part of the bank, or if it is a third-party breach, provided the customer notifies the bank within three working days. In cases where the loss is due to negligence by a customer, the customer will bear the entire loss until he reports the unauthorised transaction to the bank," says Iti Pandey, principal associate, Sarthak Advocates and Solicitors, a Delhi-based law firm.