How to Spot Unauthorised Transactions on Your Bank Statement

 When people think of fraud, they often imagine large, eye-popping sums being wiped out of accounts in one stroke. But in reality, unauthorized transactions usually start much smaller. A debit of ₹2 here, ₹5 there, or even a mysterious ₹99 auto-charge can be the earliest warning sign of something much bigger. Many cybercriminals rely on the fact that people rarely notice or dispute small amounts. By quietly chipping away at thousands of accounts, fraudsters can pocket crores without triggering alarms. This is what is often called “salami slicing fraud”. The process is slicing off tiny amounts from many customers in a way that looks almost harmless individually, but adds up to a massive collective theft.

 

The danger lies not just in the money lost but in the complacency it feeds. If a suspicious debit goes unnoticed, it signals to the fraudster that your account is unmonitored, opening the door to larger debits later.

 

With digital payments, UPI, and card swipes happening at lightning speed, it’s easier than ever for small anomalies to slip under the radar. That’s why regular checks of your bank statement are a frontline defense against fraud.

 

 

Why Checking Your Bank Statements Regularly Matters

 

Think of your bank statement as your financial health report. Just as ignoring a recurring ache could let a bigger health issue spiral, overlooking odd charges in your statement can expose you to bigger financial trouble. A large number of reported banking frauds in India begin with low-value transactions, sometimes under ₹100, made deliberately to test whether customers are paying attention.

 

The RBI itself has cautioned that fraudsters often begin with trial charges. If these go undetected, they feel confident enough to attempt higher-value debits. To put the scale in perspective, cyber fraud in India accounted for ₹22,846 crore in 2024 alone — a 206% increase compared to 2023. Among these, unauthorized transactions formed a significant portion, with nearly 30% of digital fraud cases linked directly to debit customers who hadn’t approved. (RMAINDIA. org)

 

By checking your bank statement at least once every month and ideally, every week through mobile banking apps, you increase your odds of spotting suspicious transactions while they are still reversible. Remember, the RBI’s zero liability policy ensures that if you report an unauthorized debit within three working days, you are not held financially responsible. But this protection only works if you notice the debit in time.

 

 

The Red Flags You Should Look For

 

Not every odd-looking entry is a fraud — but certain patterns should make you stop and investigate. Here are some of the most common red flags:

 

●       Small, unexplained debits: Repeated debits of ₹1, ₹2, or ₹5, especially from unknown merchants, are a hallmark of salami slicing fraud.

●       Duplicate transactions: Two charges of the same amount at the same merchant within minutes should raise suspicion.

●       Unfamiliar merchant names: Fraudulent debits often come from vague entities like “XYZ Services” or abbreviated codes that don’t match any purchase you made.

●       International charges: If you haven’t traveled or shopped overseas, foreign currency transactions on your statement are a clear sign of compromise.

●       Auto-renewals you never signed up for: Many subscription scams sneak in by billing you monthly for services you never authorized.

●       Odd ATM withdrawals: If your account shows cash withdrawals in a city you haven’t visited, it could be a cloned card in use.

 

Each of these, on its own, may look small or even harmless, but they’re red flags that point to bigger fraud schemes at play. The key is to never ignore them — always investigate, no matter how small the amount.

 

Common Sources of Unauthorized Transactions

 

Understanding where these unauthorized transactions come from helps in preventing them. Some of the most common sources include:

 

●       Skimming at ATMs and POS terminals: Fraudsters install hidden devices that copy card details and use them to clone debit or credit cards.

●       Phishing and fake apps: Clicking on fraudulent links or downloading malicious apps can leak your banking details.

●       UPI/auto-debit misuse: Fraudsters trick users into approving “collect requests” or set up unauthorized mandates for recurring payments.

●       Insider fraud: Sometimes, unauthorized debits are initiated by individuals with access to banking systems. These cases are rare but can cause widespread impact.

●       Subscription scams: Free trial offers often hide conditions where your card is auto-charged unless you explicitly cancel.

 

The worrying part is that many of these frauds are designed to blend in with legitimate transactions.

 

For example, a skimming-related debit might look like a regular POS purchase, or a fraudulent auto-debit might resemble a subscription you forgot about. That’s why the human eye is still the best fraud-detection tool when reviewing your statement.

 

 

Immediate Steps to Take When You Spot an Unauthorized Transaction

 

The first rule of dealing with unauthorized debits is speed. The faster you act, the better your chances of recovering money and preventing more losses. If you notice any suspicious entries in your statement:

 

1. Block access immediately. Use your bank’s mobile app or helpline to block your card, UPI ID, or net banking before further misuse.
2. Raise a complaint with your bank. Most banks have a dedicated fraud helpline or “report unauthorized transaction” option in their apps.
3. Record the details. Take screenshots of the transaction, note the time, and keep email/SMS alerts handy. Documentation strengthens your case.
4. Escalate quickly if needed. If your bank doesn’t respond within 7 working days, escalate to the RBI Ombudsman.
5. Update your credentials. Change PINs, passwords, and disable features you don’t need (e.g., international transactions, auto-debit).

 

Remember, under the RBI’s zero liability rule, if you report within three working days, you are not held financially responsible for the loss. Even if you miss that window, your liability is capped, provided you act quickly.

 

How Banks and RBI Safeguard Customers

 

While it may feel like customers are on their own, there are strong frameworks designed to protect you. RBI’s guidelines require:

 

●       Mandatory transaction alerts: Banks must send SMS/email for every debit, regardless of amount.

●       Two-factor authentication: UPI and card payments require PIN/OTP, making unauthorized use harder.

●       Fraud detection systems: Banks monitor unusual patterns, such as bulk micro-debits, and often freeze suspicious accounts.

●       Zero liability protection: If you report promptly, the bank must reverse fraudulent transactions.

●       RBI Ombudsman: If unresolved, customers can approach the Ombudsman online — a free service that often results in swift resolutions.

 

Additionally, tools like tokenization and card masking ensure your actual card number isn’t exposed during transactions, reducing skimming risk.

 

Case in Point: The “Salami Slicing” Method

 

To understand how important small debits are, let’s look at the classic fraud technique called salami slicing. Imagine a fraudster targets 10 lakh customer accounts in a bank. Instead of stealing ₹10,000 from a few accounts, which would be quickly noticed, they deduct ₹2 from every account each week. Individually, customers may dismiss it as a bank fee or minor glitch. Collectively, the fraudster walks away with ₹20 lakh every week — over ₹10 crore a year.

 

This method is dangerous because it hides in plain sight. Customers rarely question ₹2 or ₹5 charges, especially if disguised under vague merchant names or “service charges.” Banks globally have faced such attempts, and the RBI has flagged them in cyber advisories.

 

This example shows why line-by-line checks of your bank statement are non-negotiable. If you ignore small anomalies, you’re leaving the door wide open for systematic theft.

 

Final Thoughts

 

Bank fraud no longer happens only in dramatic heists — today, it often starts with a debit so small you could buy a candy with it. That’s why vigilance is your best protection. Check your bank statement regularly, question every transaction you don’t recognize, and act quickly if something feels off.

 

Technology is on your side, too: transaction alerts, EMI and financial calculators, and zero liability rules exist to help customers, but only if you use them wisely.

 

 

 

FAQs

 

1. What is salami slicing fraud?

It’s a method where fraudsters deduct very small amounts from many accounts, adding up to huge sums collectively.

 

2. How often should I check my bank statement?

At least once a month, but ideally every week, using online/mobile banking.

 

3. What is RBI’s zero liability rule?

If you report unauthorized transactions within 3 working days, the bank must refund the amount, and you bear no financial loss.

 

4. Can small debits like ₹1–₹2 really be dangerous?

Yes. They are often test debits or part of salami slicing schemes that target millions of accounts.

 

5. What if my bank doesn’t respond to my complaint?

You can escalate to the RBI Ombudsman online. It’s free and has legal weight.