India
Court reviews RBI fraud rules, demands bank repayment and transaction safeguards
Digital fraud victims gain stronger protection against institutional failures.
Digital fraud victims gain stronger protection against institutional failures.
The Supreme Court is asking the to require banks to repay victims of and cyber fraud when poor checks by the bank helped cause the loss. The payment would be at least the amount stolen. This would distinguish cases caused only by criminals from cases in which banks missed warning signs.
The court will review the ’s proposed changes. The changes are expected by November 30 and should take effect by December 31. The court also wants the full list of financial institutions covered. Proposed safeguards include alerts for unusual transactions, on suspicious transfers, and checks in person. Victims may need alerts, account records, bank messages, complaint details and proof that they reported the fraud. The court’s direction is temporary, the proposal is not final, and later hearings must decide how to prove bank negligence and its role in the loss.
The court's latest position combines preventive controls, a proposed minimum compensation requirement and system-wide implementation through authorised financial institutions. The matter remains ongoing, so an , a final RBI regulation and a case-specific finding of remain legally distinct stages.
The Court said RBI regulations should require financial institutions to compensate digital-fraud victims by at least the amount lost when an investigation finds that the fraud resulted from the institution's failure of . It also called for stronger safeguards against suspicious transactions.
The bench said the RBI's , were expected to be notified by November 30 and operationalised by December 31. Those dates describe the anticipated regulatory timetable under examination and do not themselves confirm that the amendments had been finally issued or implemented.
The court directed the RBI to submit a list of all that would be covered by the proposed safeguards. It indicated that individual banks need not be separately if directions can be issued for implementation across the regulated system.
The court also referred to to establish whether a suspicious transaction was genuine. In a future , evidence could include the customer's account activity, alerts, bank communications, complaint records and proof of reporting to show whether verification was requested or carried out.
The suggested framework includes temporarily suspending unusual transactions and automatically sending information about to the relevant authorities. These measures are intended to create time for verification and investigation, but the court was examining proposed safeguards rather than announcing a completed rule.
The court highlighted safeguards requiring banks to identify transactions that are unusual compared with a customer's . Relevant alerts could help show what the institution knew or should have detected before money moved, while victims would need transaction records and bank notifications to establish the sequence.
The bench said compensation should be not less than the amount lost by the customer where caused or contributed to the fraud. The statement establishes the court's requested minimum for the proposed framework, but it does not yet create a final, universally applicable liability rule.
The court said the proposed regulatory measures must require financial institutions to provide suitable compensation when an investigation finds that a failure of contributed to digital arrest or cyber fraud. This distinguishes criminal conduct by fraudsters alone from losses linked to an institution's failure to detect or respond to warning signs.
A bench led by Chief Justice Surya Kant said it would examine the RBI's proposed , in proceedings concerning and related cyber fraud. The court connected preventive banking safeguards with the question of who should bear losses when fraud passes through regulated financial institutions.
The RBI issued draft amendment directions for public comments, responding to the Supreme Court's August order. The draft addresses temporary debit holds on amounts or accounts linked to money-mule activity and cyber-enabled financial fraud. The draft remained a regulatory proposal, not a final rule or a final finding of bank liability.
The court directed the Reserve Bank of India to adopt and circulate a for banks handling and cyber-enabled fraud. The proposed process would allow on linked amounts or accounts while suspicious activity is examined. Victims and banks would need records of transaction timing, account activity, complaints and reporting to show whether intervention was possible.