Multiple UPI lite and hdfc4u debits amounting to a total of 30000 rupees have been made in my HDFC account in last month. I don't have any UPI lite account and I have never shared any OTP or any bank details with anybody. For these particular transactions, I did not receive any alert while at the same time, I received alerts for other legitimate transactions. First I reported this to (HDFC) bank and they blocked debits in my bank account. They also told me they would make an investigation about it. Following this, I lodged a complaint to cybercrime (1930) who told me they have never seen such a scam before. I also made a GD at local police station, who told me it may be the bank who did this.
It has been a few weeks since then. There is no update from cybercrime. An HDFC bank employee contacted me a few times, asking the same question if I shared OTP or clicked in any link which I denied repeatedly as I never did so. While conducting their own investigation, they credited around 15000 rupees to a transient account but it was not actually credited to my account. They also asked me details of the cybercrime complaints but I didn't provide it to them. But recently they reverted back the amount which they had credited, stating that they have closed the case, without giving me any resolution.
What are my options now? How should I proceed further? My guess is that the bank did it (given the multiple complaints about HDFC in recent times and also from their premature closure of the investigation).