Should the HDFC Bank App keep its 72-hour, ₹50,000 cooling limit on new beneficiaries after a device change?

Introduction

On the new HDFC Bank App, when a customer registers a new device or re-registers an existing one, transfers to newly added beneficiaries are capped at ₹50,000 in total for the first 72 hours. This cooling period is designed to stop a common fraud pattern: a fraudster takes over an account through SIM swap or social engineering, binds a new device, adds a mule beneficiary and drains the account. But the same rule frustrates genuine customers who change phones and need to pay a new landlord, supplier or hospital. The prompt asks: should HDFC Bank keep, tighten or relax this cooling limit? This is a classic security versus convenience trade-off. I'll clarify, classify the trade-off, understand the product, form a hypothesis, choose metrics, design an experiment, plan the analysis, set a decision framework and recommend a path.

Step 1

Clarifying Questions (3 minutes)

• Context: How much fraud does the cooling period actually prevent today?

Why it matters: We need to know the size of the benefit. Expected answer: Account-takeover fraud attempts via new devices have dropped sharply since the rule, with most blocked attempts targeting amounts above ₹50,000. Impact on approach: The rule has real value; we should refine, not remove.

• Business: What is the customer cost: complaints, branch visits, lost transactions?

Why it matters: Quantifies the friction side. Expected answer: A noticeable share of app-related complaints in the first week after device change mention the limit. Impact on approach: The friction is significant for specific segments.

• User impact: Which customers hit the limit most often?

Why it matters: A blanket rule may be wrong for some segments. Expected answer: Small-business owners and NRIs, plus customers making one-off large payments (rent deposits, medical bills). Impact on approach: Consider segment-specific or risk-based limits.

• Technical: Do we have device, behavioural and SIM-swap signals that can score risk in real time?

Why it matters: Enables a risk-based alternative. Expected answer: Yes: device fingerprinting, telecom SIM-swap checks and the bank's AI-based fraud monitoring. Impact on approach: A dynamic limit is feasible.

• Regulatory: Does RBI guidance or the bank's fraud policy require a minimum cooling period?

Why it matters: Some controls are non-negotiable. Expected answer: There's no fixed mandated number, but regulators expect strong controls for new devices and beneficiaries. Impact on approach: Any relaxation needs compensating controls.