The Supreme Court of India has ordered the Reserve Bank of India to establish regulatory rules that require banks to fully compensate customers who fall victim to digital arrest scams when banks fail to exercise proper due diligence. This judicial intervention aims to hold financial institutions accountable and introduce stronger safeguards against cyber fraud.
- SC orders RBI to require full customer compensation for failures in bank due diligence
- New rules must impose strict liability on banks, not just individual officers
- Proposed RBI measures include AI monitoring and restrictions on mule accounts
What happened
The Supreme Court of India, in a bench led by Chief Justice Surya Kant, directed the Reserve Bank of India (RBI) to ensure banks fully compensate victims of digital arrest scams whenever fraud occurs due to the bank's failure in exercising due diligence. Digital arrest scams use coercion via false police impersonation to pressure victims into authorizing transfers themselves, a scenario not fully covered by existing RBI rules.
The court emphasized the need for financial institutions to bear strict liability, mandating zero loss for victims, and criticized the RBI for consulting banks without taking stronger enforcement action. It insisted that such compensation should be no less than the amount lost by the customer and stressed that liability should rest with the bank itself, not just individual officials.
Why it matters
This ruling addresses a major gap in consumer protection under India’s current digital banking regulatory framework. The RBI’s 2017 circular grants zero liability only for unauthorized transactions caused by bank faults, but does not cover customer-authorized transfers made under duress, leaving victims vulnerable.
By imposing strict liability and compelling banks to employ advanced tools like AI to detect suspicious transactions, the court’s intervention seeks to deter negligent banking practices and reduce financial fraud risks. The ruling also highlights the importance of timely enforcement mechanisms beyond mere policy directions, aiming to impose real accountability.
What to watch next
The Supreme Court awaits the RBI’s proposed Know Your Customer (KYC) Amendment Directions, 2026 to clarify how new rules will operationalize indemnification and fraud prevention. The RBI must notify these directions by November 30 and enforce them from December 31. Additionally, the National Cybercrime Reporting Portal is expected to be completed by year-end to assist victims in reporting fraud.
Further steps include implementation of safeguards from the RBI’s digital payments discussion paper, such as payment delays above certain thresholds and a universal digital payments kill switch. The effectiveness of these measures and the government’s enforcement will be closely monitored to determine whether they significantly reduce losses from digital arrest and cyber fraud scams.