Can I claim cyber insurance for a financial loss due to online fraud?

Question

I have a cyber insurance policy and suffered a financial loss due to online fraud; I want to know how to make a claim. I have been reading conflicting things online and I would like to understand what Indian law actually says about this, which Act and Section applies, what the realistic timelines and costs are, and what I should be doing right now to protect my position. If the matter can be resolved without litigation I would prefer that route, but I want to know what my rights are before I agree to anything or sign any document.

MyVakeel Legal Desk · Accepted Answer

Can I claim cyber insurance for a financial loss due to online fraud? is governed in India primarily by Insurance Act, 1938, Information Technology Act, 2000 (as underlying loss basis) and Consumer Protection Act, 2019. The short answer is set out below, followed by the practical steps most people in this situation need to take. Read it alongside the specific provisions named, because the exact relief available to you turns on the facts you can prove on paper.

Cyber insurance policies in India (personal cyber insurance add-ons or standalone corporate cyber policies) typically cover losses from identity theft, phishing, unauthorised online transactions, and sometimes data breach liability, subject to policy-specific terms, sub-limits and exclusions.

Most policies require you to file a police complaint/FIR or a cybercrime.gov.in complaint as a mandatory condition for claim processing — do this immediately, since delay in reporting can itself be a ground for claim rejection under most policy wordings.

Notify the insurer within the time period specified in the policy (often 48-72 hours or 'immediately' for cyber claims) and preserve all evidence — bank statements, screenshots, the cybercrime complaint acknowledgment — since insurers will require documentary proof of the loss and the fraud.

If the insurer wrongfully repudiates (rejects) your claim, you can approach the Insurance Ombudsman (free of cost, for claims up to Rs 50 lakh) or file a consumer complaint under the Consumer Protection Act, 2019 for deficiency in service.

Read the policy's exclusions carefully — many cyber insurance policies exclude losses arising from your own gross negligence (like voluntarily sharing OTP/PIN), so the facts of how the fraud occurred matter significantly to whether the claim will be honoured.

What to do next: 1) File a police/cybercrime.gov.in complaint immediately as most policies require this; 2) Notify your insurer within the policy's specified timeline with all evidence; 3) Follow up in writing if the claim is delayed or under-assessed; 4) Approach the Insurance Ombudsman or file a consumer complaint if wrongfully denied.

If the other side has already issued a notice, filed a case or set a deadline, treat the matter as time-sensitive — most remedies under Insurance Act, 1938 carry limitation periods, and a delay you cannot explain weakens an otherwise strong case. You can post the details on the MyVakeel forum for a practising advocate to review, or book a paid consultation with a Bar Council verified lawyer in this practice area.