Back to statistics
NPCI incident data
< 4 min
↑ Before you notice
Fraudsters drain a compromised account in under 4 minutes
NPCI's incident data shows the median time between the first fraudulent transaction and full account depletion is under 4 minutes — long before most people even realise their card or phone is missing.
What this really means
Fraudsters typically split the amount into 6–8 low-value transactions to evade limits.
Money moves through 3–5 mule accounts within the first 10 minutes.
After 60 minutes, the recovery probability drops below 5%.
The only way to win the race is to block every card the moment you notice the loss.