Beyond the transaction rails covered in our Digital Banking guide, this page zooms into the physical and card-based channels themselves â ATM types, card technology evolution, and the specific customer-protection rules for unauthorised transactions and failed ATM withdrawals. Covers ATM categories, magnetic stripe/EMV/contactless cards, zero/limited liability, and TAT compensation, with 50 exam-style MCQs with hidden answers.
đ Updated: September 2026 • 32 min read
đ At a Glance
Liability Scenario
Customer Liability
Reported within 3 working days
Zero liability
Reported within 4-7 working days
Limited liability (capped amount)
Reported beyond 7 working days
Per bank's Board-approved policy
1 Alternate Delivery Channels â Overview
Alternate Delivery Channels (ADCs) are the touchpoints through which banks deliver services outside the traditional branch counter â ATMs, cards, internet banking, mobile banking, and call centres. ADCs reduce transaction costs, extend service hours to 24x7, and are central to India's financial inclusion and digital banking strategy.
2 Types of ATMs
đ§
Onsite ATM
Located within/adjacent to a bank branch premises.
đ
Offsite ATM
Standalone, located away from any branch (malls, airports, standalone kiosks) â needs independent security arrangements since no branch staff are nearby.
âĒ
White Label ATM (WLA)
Owned and operated by a non-bank entity (authorised by RBI), but usable by customers of any bank â expands ATM density without individual banks bearing the capex.
đ¤
Brown Label ATM (BLA)
Hardware/premises owned by a service provider, but the sponsor bank owns the cash management and connectivity to the banking network â a hybrid outsourcing model.
đ
Mobile ATM
A vehicle-mounted ATM deployed temporarily at events, fairs, or underserved locations.
đ°
Cash Recycler Machine (Bunch Note Acceptor)
Accepts cash deposits and recycles the same notes for withdrawals by other customers, reducing the bank's cash logistics burden.
3 Electromagnetic Cards
đŧ
Magnetic Stripe Cards
The older technology, storing static data on a magnetic stripe â vulnerable to skimming since the same static data can be copied and replayed.
đŗ
EMV Chip Cards
Embed a microchip generating a unique, dynamic transaction code for each use, making cloned-card fraud far harder â RBI mandated EMV chip+PIN for all cards issued in India.
đļ
Contactless (NFC) Cards
Enable tap-and-pay transactions up to a threshold value without PIN entry, using Near Field Communication â balancing convenience against a capped per-transaction risk exposure.
đĄ
Memory Trick: "Static Stripe, Dynamic Chip"
Magnetic stripe data is static (copyable); EMV chip data is dynamic (unique per transaction) â this is exactly why chip cards resist cloning far better than stripe-only cards.
4 Electronic Banking Channels
Beyond ATMs and cards, internet banking (browser-based, full-service) and mobile banking (app/USSD-based) extend account access, fund transfer, and bill payment to customers' own devices, each requiring multi-factor authentication (login credentials + OTP/biometric) per RBI's security guidelines for electronic banking.
RBI's framework on customer liability for unauthorised electronic banking transactions creates a graduated liability structure based on how quickly the customer reports the unauthorised transaction, and whether the deficiency lies with the bank, a third party, or the customer's own negligence:
â
Zero Liability
Where the unauthorised transaction results from a bank's own contributory fraud/negligence/deficiency (regardless of reporting time), OR where the customer reports within 3 working days of receiving communication of the transaction.
â ī¸
Limited Liability
If reported within 4-7 working days, customer liability is capped at a prescribed amount (varying by account/card type) or the transaction value, whichever is lower.
đ´
Customer's Own Negligence
If the loss is due to the customer's own negligence (e.g., sharing OTP/PIN), the customer bears the entire loss until they report the incident to the bank; loss occurring after reporting is the bank's responsibility.
đ
Beyond 7 Working Days
Customer liability is determined per the bank's own Board-approved policy.
6 TAT & Customer Compensation for Failed Transactions
TAT (Turn-Around-Time) framework: RBI prescribes specific timelines for auto-reversal of failed transactions across channels (ATM cash not dispensed, failed IMPS/UPI/card transactions) â typically within T+1 working day for most electronic modes. Failure to auto-reverse within TAT triggers penal compensation â a fixed amount (e.g., âš100 per day of delay) credited automatically to the customer, without requiring the customer to file a specific complaint.
â Key Takeaways
ATM types span onsite/offsite, White Label (non-bank owned, usable by all), Brown Label (hybrid outsourcing), mobile ATMs, and cash recyclers.
Card technology evolved from vulnerable magnetic stripe (static data) to EMV chip (dynamic, per-transaction data) to contactless/NFC.
RBI's limited liability framework gives zero liability for bank-fault cases or reporting within 3 working days, limited (capped) liability for 4-7 day reporting, and customer-borne loss for own negligence until reported.
Failed transactions must be auto-reversed within TAT, with automatic penal compensation for delay.
đ Top 50 JAIIB-Style MCQs on Alternate Delivery Channels
Test your understanding with these 50 practice MCQs, closely modelled on the JAIIB (PPB) exam pattern. Each question has 5 options â the correct answer is hidden by default; tap "Show Answer" to reveal it along with a short explanation.
đ§ ATM Types
1 A White Label ATM (WLA) is:
A. Owned/operated by a non-bank entity but usable by any bank's customers
B. Owned exclusively by a single bank
C. Usable only by the owning bank's own customers
D. Illegal under RBI rules
E. Identical to a mobile ATM
Answer: A. WLAs are non-bank owned but usable by all banks' customers.
2 A Brown Label ATM (BLA) involves:
A. Service-provider-owned hardware, with the sponsor bank owning cash management/network connectivity
B. No bank involvement of any kind
C. Full ownership by a single non-bank entity with no sponsor bank
D. Usage restricted to only one specific customer
E. A vehicle-mounted temporary structure
Answer: A. BLA is a hybrid: provider hardware, bank-owned cash/connectivity.
3 A cash recycler machine:
A. Accepts deposits and recycles the same notes for other customers' withdrawals
B. Only dispenses cash, never accepts deposits
C. Destroys all deposited currency
D. Is identical to a standard ATM with no recycling function
E. Is used only for foreign currency
Answer: A. Cash recyclers accept and recycle deposited notes.
đŗ Electromagnetic Cards
4 Magnetic stripe cards are vulnerable to skimming because:
A. They store static data that can be copied and replayed
B. They generate a unique code for every transaction
C. They have no data of any kind
D. They are more secure than EMV chip cards
E. They cannot be physically copied under any circumstance
Answer: A. Static magnetic stripe data can be copied/replayed.
5 EMV chip cards generate:
A. A unique, dynamic transaction code for each use
B. Identical static data for every transaction, same as magnetic stripe
C. No transaction code of any kind
D. A code visible only to the merchant
E. A code that never changes across the card's lifetime
Answer: A. EMV chips generate a unique dynamic code per transaction.
Answer: A. Contactless transactions work up to a threshold, without PIN.
đĄī¸ Customer Liability Protection
7 A customer bears zero liability for an unauthorised transaction if:
A. It results from the bank's own contributory fraud/negligence, or is reported within 3 working days
B. They never report it at all
C. They shared their PIN willingly with a stranger
D. They wait 6 months to report it
E. Zero liability never applies under any circumstance
Answer: A. Bank-fault cases or 3-day reporting trigger zero liability.
8 If an unauthorised transaction is reported within 4-7 working days, customer liability is:
A. Limited/capped at a prescribed amount or the transaction value, whichever is lower
B. Always 100% of the loss with no cap
C. Zero, identical to the 3-day window
D. Determined solely by the customer's personal preference
E. Automatically doubled
Answer: A. 4-7 day reporting caps liability at a prescribed limit.
9 If a loss results from the customer's own negligence (e.g., sharing OTP), the customer bears:
A. The entire loss until they report the incident to the bank
B. No liability at all, regardless of negligence
C. Liability only for losses occurring after reporting
D. Zero liability if the amount is small
E. Liability that is always waived by RBI directly
Answer: A. Customer negligence means bearing the loss until reporting occurs.
10 Beyond 7 working days, customer liability for unauthorised transactions is determined by:
A. The bank's own Board-approved policy
B. No policy exists for this scenario
C. Always zero, regardless of delay
D. The customer's own unilateral decision
E. A fixed national law identical for every bank
Answer: A. Beyond 7 days, the bank's Board-approved policy governs liability.
âąī¸ TAT & Compensation
11 RBI's TAT framework prescribes auto-reversal of failed electronic transactions typically within:
A. T+1 working day
B. 1 year
C. No timeframe at all
D. 10 years
E. Immediately, with zero processing time allowed
Answer: A. Auto-reversal is typically prescribed within T+1 working day.
12 Failure to auto-reverse a failed transaction within TAT triggers:
A. Automatic penal compensation credited to the customer
B. No consequence for the bank
C. Permanent account closure
D. A criminal case against the customer
E. Cancellation of the failed transaction's original request only
Answer: A. TAT breach triggers automatic penal compensation.
13 Penal compensation for delayed reversal is credited:
A. Automatically, without requiring the customer to file a specific complaint
B. Only if the customer files a formal court case
C. Never, regardless of delay
D. Only after a 10-year waiting period
E. Only to corporate customers, never individuals
Answer: A. Compensation is automatic, without requiring a separate complaint.
𧊠Mixed / Comprehensive
14 A customer notices an unauthorised debit and reports it to the bank on day 2 after the transaction notification. Under RBI's framework, they would face:
A. Zero liability
B. Full liability, regardless of prompt reporting
C. Automatic criminal prosecution
D. Permanent account freeze with no recourse
E. A doubled transaction charge
Answer: A. Reporting within 3 working days gives zero liability.
15 A customer who unknowingly shares their card PIN with a fraudster posing as bank staff, then promptly reports the resulting unauthorised transaction the same day, would generally:
A. Face limited liability given the prompt reporting, though the initial sharing may complicate the assessment
B. Automatically bear zero liability regardless of any negligence
C. Automatically bear full liability with no protection
D. Face criminal prosecution for sharing the PIN
E. Have no framework applicable to this scenario
Answer: A. Prompt reporting still matters, though negligence circumstances are assessed.
16 Which of the following best explains why RBI's liability framework distinguishes between bank-fault and customer-negligence scenarios?
A. Fairly allocating responsibility based on who actually caused/enabled the fraud incentivises both banks and customers to maintain proper security practices
B. The distinction has no fairness or incentive rationale
C. Banks always bear liability regardless of fault
D. Customers always bear liability regardless of fault
E. Fault allocation is irrelevant to security incentives
Answer: A. Fair fault allocation incentivises proper security practices by both parties.
17 Which of the following would be an appropriate example of a "bank's contributory fraud/negligence/deficiency" triggering zero customer liability regardless of reporting time?
A. A bank employee's insider involvement in fraudulently accessing a customer's account
B. The customer voluntarily sharing their password with a stranger
C. The customer ignoring a phishing warning
D. The customer losing their physical card carelessly
E. No scenario ever qualifies as bank-side negligence
Answer: A. Insider fraud by bank staff is a bank-side deficiency, triggering zero liability.
18 Which of the following best explains why offsite ATMs require independent security arrangements compared to onsite ATMs?
A. No branch staff are physically nearby to respond to security incidents at an offsite location
B. Offsite ATMs carry no security risk at all
C. Onsite ATMs require more security than offsite ones
D. Location has no bearing on ATM security requirements
E. Offsite ATMs are always located inside a bank branch
Answer: A. Absence of nearby branch staff necessitates independent offsite security.
19 Which of the following would be an appropriate reason RBI promoted the shift from magnetic stripe to EMV chip cards nationally?
A. To reduce card-cloning/skimming fraud by replacing static, copyable data with dynamic, per-transaction codes
B. EMV chips are more vulnerable to fraud than magnetic stripes
C. The shift had no fraud-reduction purpose
D. Magnetic stripe cards were already immune to cloning
E. EMV chips generate identical, static data like magnetic stripes
Answer: A. EMV's dynamic codes reduce cloning/skimming fraud compared to static stripe data.
20 Which of the following would be an appropriate reason RBI caps the transaction value for PIN-less contactless payments?
A. To balance the convenience of tap-and-pay against the fraud risk of a lost/stolen card being used without any authentication
B. Contactless payments carry no fraud risk requiring any cap
C. The cap eliminates all convenience benefits of contactless payments
D. Higher-value contactless transactions are always safer than lower-value ones
E. No cap exists on contactless transaction values
Answer: A. The cap balances convenience against lost/stolen-card fraud risk.
21 Which of the following would be an appropriate reason banks favour White Label ATM tie-ups to expand their acceptance network?
A. They expand customer ATM access without each individual bank bearing the full capex of deploying its own additional ATMs
B. WLAs increase each bank's individual ATM deployment costs significantly
C. WLAs are usable only by the bank that installed them
D. WLAs have no cost-sharing benefit for banks
E. Banks are legally barred from any WLA arrangement
Answer: A. WLAs expand access while sharing/reducing individual bank ATM capex.
22 Which of the following would be an appropriate customer-side action to minimise the risk of falling into the "customer's own negligence" liability category?
A. Never sharing PIN/OTP/passwords with anyone, including individuals claiming to be bank representatives
B. Freely sharing OTPs with anyone who calls claiming to be from the bank
C. Writing the PIN on the back of the card for easy reference
D. Sharing login credentials on social media
E. No customer action can affect this liability category
Answer: A. Never sharing PIN/OTP protects against the negligence liability category.
23 Which of the following would be a plausible reason multi-factor authentication (login + OTP) is mandated for internet/mobile banking?
A. A single factor (like a password alone) is more easily compromised than a combination of factors
B. Multi-factor authentication offers no additional security over a single password
C. Single-factor authentication is always more secure than multi-factor
D. MFA has no relevance to electronic banking security
E. RBI has never mandated any authentication standard
Answer: A. Combining authentication factors is more secure than relying on one alone.
24 Which of the following would be an appropriate reason RBI applies the TAT/compensation framework "without requiring a specific complaint"?
A. It removes the burden on customers to actively chase the bank for a fault that was clearly the bank/system's own failure
B. Requiring a complaint would make the process fairer to customers
C. Automatic compensation has no customer-convenience rationale
D. Customers must always file a written complaint for any compensation
E. This framework applies only to complaints filed after one year
Answer: A. Automatic compensation removes the burden of chasing a system-caused failure.
25 Which of the following best explains why a mobile ATM is deployed temporarily rather than permanently?
A. It serves specific, time-bound needs (events, fairs, temporary underserved locations) rather than a permanent branch/ATM presence
B. Mobile ATMs are always permanent fixtures identical to onsite ATMs
C. Mobile ATMs have no practical deployment purpose
D. Temporary deployment eliminates all security requirements
E. Mobile ATMs are banned under RBI rules
Answer: A. Mobile ATMs serve specific, time-bound deployment needs.
26 Which of the following would be an appropriate example of a "third party breach" scenario under the customer liability framework, distinct from bank fault or customer negligence?
A. A merchant's payment system is compromised, leaking card data used for subsequent fraud, with neither the bank nor the customer directly at fault
B. The bank's own systems are breached, making this purely a bank-fault scenario
C. The customer shares their PIN willingly, making this customer negligence
D. No third-party scenario is recognised under RBI's framework
E. Third-party breaches always result in full customer liability with no protection
Answer: A. A merchant-side breach is a third-party scenario distinct from bank/customer fault.
27 Which of the following would be an appropriate reason RBI's liability framework is periodically reviewed/updated?
A. Evolving fraud techniques and growing digital transaction volumes require the framework to stay relevant and effective
B. The framework, once issued, never requires any review
C. Fraud techniques never evolve over time
D. Digital transaction growth has no bearing on liability framework design
E. Reviews occur randomly with no underlying rationale
Answer: A. Evolving fraud and digital growth necessitate periodic framework updates.
28 Which of the following would be an appropriate description of why "prompt communication of transactions" (via SMS/email alerts) is essential to the liability framework's effectiveness?
A. The customer's reporting window (3/7 working days) starts from when they receive transaction communication, so delayed alerts would unfairly shrink their protection window
B. Alerts have no connection to the liability framework's timelines
C. The reporting window is fixed regardless of when the customer is informed
D. Prompt alerts have no bearing on customer protection
E. The liability framework operates independently of any transaction notification
Answer: A. The reporting clock starts from notification, so prompt alerts protect the customer's window.
29 Which of the following would be an appropriate consideration for a bank designing its Board-approved policy for liability beyond 7 working days?
A. Balancing customer protection with reasonable expectations of timely reporting, while remaining consistent with RBI's overall framework intent
B. The policy can be arbitrarily punitive with no fairness consideration
C. RBI mandates zero customer liability regardless of any Board policy
D. Beyond 7 days, banks bear no discretion at all
E. Board policy for this scenario is irrelevant to RBI's overall framework
Answer: A. Board policy should balance protection and reasonable reporting expectations.
30 Which of the following would be an appropriate reason a bank monitors ATM cash-dispense sensor logs closely for TAT compliance?
A. Sensor logs provide objective evidence of whether cash was actually dispensed, supporting accurate auto-reversal decisions
B. Sensor logs have no bearing on TAT compliance
C. TAT compliance is determined solely by customer complaints, never system logs
D. ATMs have no sensors capable of detecting cash dispense failures
E. Auto-reversal decisions are made without any reference to transaction data
Answer: A. Sensor logs provide objective evidence for accurate auto-reversal.
31 Which of the following would be an appropriate distinguishing feature between an "onsite" and "offsite" ATM primarily relevant to security planning?
A. Proximity to branch staff and existing branch-level security infrastructure
B. Onsite and offsite ATMs are functionally and security-wise identical
C. Only offsite ATMs dispense cash; onsite ATMs cannot
D. Security planning is irrelevant to ATM location
E. Onsite ATMs always require more security than offsite ATMs
Answer: A. Branch proximity/existing security infrastructure differ by location.
32 Which of the following best describes the relationship between EMV chip adoption and the reduction in India's card-present fraud rates?
A. Widespread EMV adoption has been associated with a decline in card-cloning-based card-present fraud, given the dynamic transaction authentication
B. EMV adoption increased card-present fraud rates significantly
C. EMV chips have no measurable effect on fraud rates
D. Card-present fraud is entirely unrelated to card technology
E. Magnetic stripe cards have lower fraud rates than EMV chip cards
Answer: A. EMV's dynamic authentication is associated with reduced card-present fraud.
33 Which of the following would be an appropriate reason a bank displays a helpline number prominently at ATM locations?
A. To enable customers to promptly report a suspected fraud/failed transaction, supporting the reporting-window-dependent liability framework
B. Helpline display has no connection to customer protection
C. Reporting mechanisms are irrelevant to the liability framework
D. Prompt reporting has no bearing on customer liability outcomes
E. Helpline numbers are used only for marketing purposes
Answer: A. Visible helpline access supports prompt reporting under the liability framework.
34 Which of the following would be an appropriate reason banks conduct periodic ATM reconciliation between cash loaded and cash dispensed?
A. To detect discrepancies early, whether from technical malfunction, cash-handling error, or fraud
B. Reconciliation serves no fraud/error detection purpose
C. ATM cash levels never need to be verified
D. Discrepancies in ATM cash have no operational significance
E. Reconciliation is performed only once a decade
Answer: A. Reconciliation detects discrepancies from malfunction, error, or fraud early.
35 Which of the following would be an appropriate reason RBI's liability framework applies uniformly across public, private, and foreign banks?
A. Uniform customer protection standards ensure consistent treatment regardless of which bank a customer uses
B. The framework applies only to public sector banks
C. Private banks are entirely exempt from this framework
D. Uniformity has no consumer-protection rationale
E. Foreign banks are excluded from RBI's liability rules
Answer: A. Uniform standards ensure consistent customer protection across bank types.
36 Which of the following would be an appropriate reason a bank's fraud monitoring system flags an unusually large contactless transaction for review?
A. It may exceed the normal contactless threshold or deviate from the customer's typical spending pattern, warranting verification
B. Large contactless transactions are never flagged for any review
C. Fraud monitoring has no relevance to contactless payments
D. Spending pattern deviation is irrelevant to fraud detection
E. Contactless transactions are entirely exempt from any monitoring
Answer: A. Unusual size/pattern deviation warrants fraud-monitoring review.
37 Which of the following would be an appropriate reason a customer disputes a transaction that occurred after they had already reported their card lost?
A. Per the liability framework, losses occurring after proper reporting are generally the bank's responsibility
B. The customer remains liable for all transactions regardless of reporting the card lost
C. Reporting a lost card has no bearing on subsequent transaction liability
D. The bank bears no responsibility once a card is reported lost
E. This scenario is not addressed by any RBI framework
Answer: A. Losses after proper reporting shift responsibility to the bank.
38 Which of the following would be an appropriate description of why ADCs are central to a bank's cost-efficiency strategy?
A. ADC transactions typically cost the bank significantly less to process than an equivalent branch-counter transaction
B. ADCs always cost more to operate than branch counters
C. Cost has no bearing on channel strategy
D. Branch transactions are always cheaper than ADC transactions
E. ADCs have no relevance to a bank's cost structure
Answer: A. ADC transactions are typically cheaper to process than branch transactions.
39 Which of the following would be an appropriate reason RBI expects banks to educate customers about the liability framework rather than leaving it purely as fine print?
A. Customers can only exercise their protections effectively if they understand the reporting windows and their own responsibilities
B. Customer education has no bearing on the framework's effectiveness
C. Fine print alone is always sufficient for full customer awareness
D. Banks have no responsibility to educate customers on this framework
E. Customer awareness is irrelevant to fraud reporting outcomes
Answer: A. Customer awareness is essential to effectively exercising liability protections.
40 Which of the following would be an appropriate reason a bank might deploy more cash recycler machines in high-footfall commercial areas?
A. They reduce the bank's cash logistics burden by recirculating deposited cash for withdrawals in high-transaction-volume locations
B. Cash recyclers increase cash logistics costs significantly
C. High-footfall areas have no relevance to cash recycler deployment
D. Cash recyclers are used only in rural, low-transaction areas
E. Cash recyclers cannot accept any deposits
Answer: A. Recyclers reduce cash logistics burden in high-volume locations.
41 Which of the following would be an appropriate reason contactless cards still require occasional PIN entry (e.g., after a certain number of consecutive tap transactions)?
A. Periodic PIN verification adds a security check to confirm the card is still with its legitimate holder, mitigating lost/stolen card risk
B. PIN entry serves no security purpose for contactless cards
C. Contactless cards never require PIN entry under any circumstance
D. PIN checks apply only to magnetic stripe transactions
E. Periodic PIN checks increase fraud risk
Answer: A. Periodic PIN checks mitigate lost/stolen card risk in contactless usage.
42 Which of the following best captures why "Alternate Delivery Channels" is treated as a distinct topic from the broader "Digital Banking" content covered elsewhere?
A. This topic specifically zooms into the physical/card-based channel infrastructure and customer-protection mechanics, complementing the payment-rails focus covered elsewhere
B. The two topics are entirely identical with no distinguishing focus
C. ADCs have no relationship to digital banking whatsoever
D. Customer protection mechanics are covered only in the Digital Banking topic, never here
E. Physical channel infrastructure is irrelevant to banking technology
Answer: A. This topic focuses on channel infrastructure/customer protection, complementing payment-rails coverage.
43 Which of the following would be an appropriate scenario where a bank's compensation obligation under TAT would NOT apply?
A. The transaction failed due to the customer entering an incorrect PIN, not a system/technical failure
B. Cash was debited from the account but never dispensed by the ATM due to a system malfunction
C. An IMPS transfer failed due to a bank-side technical glitch
D. A UPI transaction failed to auto-reverse within the prescribed TAT
E. All ATM technical failures qualify for compensation regardless of cause
Answer: A. A customer-caused failure (wrong PIN) doesn't trigger the bank's TAT compensation obligation.
44 Which of the following would be an appropriate reason a bank's cyber security team monitors for "card-not-present" fraud patterns distinct from ATM/POS fraud?
A. Online/card-not-present transactions rely on different authentication mechanisms (CVV, OTP) than chip/PIN-based physical transactions, requiring distinct monitoring approaches
B. Card-not-present and card-present fraud are identical, requiring no distinct monitoring
C. Online transactions carry no fraud risk requiring monitoring
D. Authentication mechanisms are identical for online and physical transactions
E. Distinct monitoring approaches serve no security purpose
Answer: A. Different authentication mechanisms warrant distinct fraud-monitoring approaches.
45 Which of the following would be an appropriate reason a bank's grievance redressal team prioritises unauthorised-transaction complaints for fast-track handling?
A. The customer's ultimate liability outcome depends on timely investigation aligned with the prescribed reporting-window framework
B. Unauthorised transaction complaints require no urgency at all
C. Liability outcomes have no connection to investigation timing
D. All complaints are handled with identical, non-prioritised timelines
E. Fast-track handling has no bearing on customer outcomes
Answer: A. Timely investigation aligns with the liability framework's reporting-window logic.
46 Which of the following best describes the trade-off inherent in offering a wide network of White Label and Brown Label ATMs?
A. Expanded customer convenience and reach, balanced against the operational/security oversight challenges of a distributed, partly outsourced network
B. There is no trade-off; these models offer only benefits with zero operational complexity
C. WLA/BLA networks reduce customer convenience compared to bank-owned ATMs
D. Outsourced ATM models eliminate all oversight responsibilities for banks
E. Security oversight is simplified, not complicated, by outsourced ATM models
Answer: A. Expanded reach comes with added oversight complexity in outsourced ATM models.
47 Which of the following would be an appropriate reason banks retain ATM CCTV footage for a minimum prescribed period?
A. To support investigation of disputed/unauthorised transactions that may be reported some time after the actual incident
B. Footage retention has no connection to transaction dispute investigation
C. Footage is deleted immediately after each transaction
D. CCTV footage is irrelevant to the liability framework
E. Retention periods have no minimum requirement at all
Answer: A. Retained footage supports investigation of transactions reported after the fact.
48 Which of the following would be an appropriate summary of how EMV, contactless, and the liability framework work together as a layered security approach?
A. Technology (EMV/contactless) reduces the likelihood of fraud, while the liability framework ensures fair loss allocation and prompt remedy when fraud does occur despite these safeguards
B. These elements operate in complete isolation with no complementary relationship
C. The liability framework replaces the need for any card security technology
D. Card technology alone eliminates the need for any liability framework
E. Layered security has no relevance to card/liability design
Answer: A. Prevention (technology) and remedy (liability framework) work together as layered security.
49 Which of the following best summarises why JAIIB tests ATM types, card technology, and liability/TAT rules together under "Alternate Delivery Channels"?
A. All three areas concern the physical/technical delivery of banking services and the specific customer-protection mechanisms tied to their use
B. These three areas have no logical connection to each other
C. ATM types are unrelated to card technology or customer protection
D. Customer protection rules apply only to internet banking, never ATMs/cards
E. This grouping serves no pedagogical or practical purpose
Answer: A. All three areas relate to physical/technical channel delivery and its customer protections.
50 Overall, which statement best summarises this topic?
A. Alternate Delivery Channels span ATM types (onsite/offsite/White Label/Brown Label/mobile/recycler), card technology evolution (magnetic stripe â EMV â contactless), and RBI's customer-protection framework â graduated liability by reporting speed, plus mandatory TAT-based auto-reversal with penal compensation for failed transactions
B. All ATMs are identical in ownership and operation with no distinguishing types
C. Magnetic stripe cards are more secure than EMV chip cards
D. Customer liability is always 100% regardless of reporting time
E. TAT compensation requires a formal written complaint in every case
Answer: A. This correctly captures the full Alternate Delivery Channels framework.
Disclaimer: This article is prepared for educational and exam-preparation purposes only, summarising alternate delivery channel practices as of September 2026. Candidates should cross-check the latest official IIBF syllabus and RBI guidelines before the exam.