SC Says RBI Rules Must Make Banks Fully Compensate Digital Arrest Victims If Banks Fail Due Diligence

Key Takeaways

• The Supreme Court has said RBI’s proposed regulatory measures must require banks and other financial institutions to compensate digital-arrest and cyber-fraud victims when institutional failure or lack of due diligence contributes to the fraud.
• Compensation should be no less than the amount lost by the customer, according to the Court’s recorded position.
• The Court also wants banks to suspend suspicious transactions until verification is completed.
• Bank officials found to have colluded with fraudsters could face prosecution and accountability.
• The RBI was finalising revised regulatory measures, with the Centre telling the Court that the framework was expected to become operational around December 2026.
• The proposed framework is not the same as a blanket guarantee that every digital-arrest victim will automatically receive a full refund.

Supreme Court Wants Banks to Bear Responsibility for Digital Arrest Losses

The Supreme Court of India has called for stronger financial accountability from banks in cases involving digital-arrest scams. On October 29, 2026, a three-judge bench said regulatory measures being prepared by the Reserve Bank of India must require financial institutions to compensate victims when a fraud occurs because the institution failed to exercise due diligence.

The bench, led by Chief Justice of India Surya Kant and comprising Justices Joymalya Bagchi and V. Mohana, was hearing a suo motu case concerning digital-arrest frauds. The Court’s position was that compensation should be no less than the amount lost by the customer where institutional negligence is established.

The order recorded that RBI’s proposed measures must mandate financial institutions to indemnify victims if the fraud resulted from a failure of due diligence. This is an important distinction: the Court is demanding a strong regulatory framework, but the proposed RBI rules were still being finalised. The observations do not mean that every victim is already entitled to an automatic refund.

What the Supreme Court Wants RBI to Include

The bench expressed concern that banks could allow suspicious transfers to proceed even when the transaction patterns appear inconsistent with a customer’s normal banking activity.

It questioned why banks, which maintain detailed records of customer accounts and transaction histories, could not identify unusual transfers and intervene before money leaves an account.

The Court wants the RBI framework to establish clear responsibilities for financial institutions. These include:

• Compensation for victims: Banks should indemnify customers for losses where a failure of institutional due diligence contributed to the fraud.
• Suspension of suspicious transfers: Unusual transactions should be withheld until the required verification protocol is completed.
• Stronger transaction monitoring: Banks should identify transfers that are inconsistent with a customer’s normal account activity.
• Accountability for employees: Officials found to have colluded with cybercriminals should face appropriate action, including prosecution.
• Clear regulatory enforcement: The RBI’s measures should contain enforceable obligations rather than relying only on voluntary guidance.

The bench also discussed the possibility of banks contacting local police or other authorities to verify unusual transactions with customers before releasing the funds.

Why the Court Is Questioning Banks and the RBI

The Supreme Court expressed frustration that digital-arrest scams continue despite public awareness campaigns and repeated warnings.

The bench questioned why the RBI was still consulting banks on the proposed safeguards when the banking sector itself was expected to play a central role in preventing fraudulent transfers.

The Attorney General, R. Venkataramani, told the Court that the RBI was working on regulatory measures and that several departments, including the Ministry of Electronics and Information Technology and the Department of Telecommunications, were involved in addressing the problem.

He said banks had begun flagging suspicious transactions and that the government was working towards putting the broader framework into operation around December.

However, the Court wanted more than general assurances. It questioned whether the proposed measures would contain meaningful penalties and compensation provisions.

The bench also raised concerns about cases in which bank employees may be involved in facilitating fraudulent transfers. It said institutions should not escape responsibility where their own failures or employees’ conduct contribute to the loss.

Digital Arrest Scams Are Costing Indians Hundreds of Crores

Digital-arrest scams involve criminals impersonating police officers, CBI officials, customs authorities or other government agencies. They contact victims through phone calls or video calls and falsely claim that the person is linked to a criminal investigation.

Fraudsters may use fabricated documents, forged arrest warrants and fake legal notices to make their claims appear genuine. Victims are often threatened with arrest, prosecution or damage to their reputation unless they follow instructions.

In many cases, scammers keep victims on continuous video calls, restrict their communication with family members and pressure them to transfer money into accounts described as safe or verified accounts.

According to figures cited in the Supreme Court proceedings and reported by the media, India recorded 21,928 digital-arrest complaints involving losses of more than ₹647 crore on the National Cybercrime Reporting Portal during the first eight months of 2026.

The figures show why the Court is treating the issue as a major financial and law-enforcement challenge. The actual scale may also be affected by under-reporting, as not every victim necessarily files a complaint.

RBI’s Proposed Rules Could Change Banking Fraud Liability

The RBI’s existing framework for unauthorised electronic banking transactions already provides a mechanism for determining customer liability in certain situations. The outcome can depend on factors such as whether the transaction was unauthorised, how quickly the customer reported it and whether the bank or customer was responsible for the security failure.

However, digital-arrest frauds can involve customers being manipulated into personally authorising transfers. This creates a complicated question: the payment may have been approved by the account holder, but the approval was obtained through deception, intimidation and impersonation.

The Supreme Court’s intervention seeks to address the role of banks in these cases. If a financial institution fails to identify suspicious activity or does not follow appropriate due-diligence procedures, the Court wants the regulatory framework to provide for compensation.

This could create a stronger incentive for banks to improve transaction monitoring, fraud detection and customer verification systems.

It is important to distinguish the proposed approach from a rule that makes banks responsible for every scam. The Court’s recorded position links compensation to a finding that the fraud occurred because of a failure of due diligence by the financial institution.

Court Also Wants Banks to Stop Suspicious Transactions

A major part of the Court’s concern is prevention. Recovering money after it has passed through multiple accounts can be difficult, particularly when fraudsters use mule accounts to move funds quickly.

The bench suggested that banks should classify accounts and identify unusual transaction patterns. For example, a sudden high-value transfer from an account that normally handles small payments could trigger additional checks.

The Court discussed temporarily withholding such transactions and involving local police to verify whether the customer was making the transfer voluntarily.

Such safeguards would need to balance fraud prevention with legitimate banking activity. Banks would have to develop verification systems that identify genuine threats without unnecessarily blocking ordinary customer payments.

WhatsApp and Other Platforms Also Face Questions

The Court’s scrutiny is not limited to banks. Digital-arrest fraudsters frequently use messaging applications and video calls to impersonate government officials and maintain pressure on victims.

During the proceedings, the bench asked WhatsApp to suggest preventive measures that could help tackle these scams. The platform was asked to consider whether technology could help interrupt suspicious or prolonged video calls.

WhatsApp’s counsel indicated that some interventions could affect legitimate calls, including business meetings and medical consultations. This illustrates the difficulty of designing safeguards that disrupt criminal activity without interfering with normal communication.

The broader response will therefore require coordination between banks, digital platforms, telecom operators, law-enforcement agencies and regulators.

The Bigger Picture

The Supreme Court’s intervention could reshape how responsibility for digital financial fraud is distributed in India. Until now, victims have often faced considerable difficulty recovering money after voluntarily transferring it under pressure from fraudsters. The Court is asking regulators to look beyond the customer’s final action and examine whether financial institutions failed to identify or prevent suspicious activity.

For banks, the proposed framework could mean higher compliance obligations, more sophisticated transaction monitoring and greater exposure to financial liability when due diligence is inadequate. For customers, stronger safeguards could offer a better chance of preventing large losses before funds are transferred or moved through multiple accounts.

Looking Ahead

The next important step is the RBI’s final regulatory framework. The Attorney General told the Supreme Court that the measures were expected to be operational around December 2026. The Court has indicated that it wants to examine the proposed provisions, particularly the compensation and accountability requirements, before the framework is finalised.

The practical impact will depend on how the RBI defines bank due diligence, what triggers mandatory compensation, how suspicious transactions are verified and how disputes are resolved. Until those rules are formally issued, customers should not assume that every digital-arrest loss will automatically be reimbursed by a bank.

Frequently Asked Questions

1. What did the Supreme Court say about digital-arrest victims?

The Supreme Court said the RBI’s proposed regulatory measures must require financial institutions to compensate victims when digital-arrest or cyber fraud occurs because of a failure of due diligence by the institution.

2. Will banks have to refund the entire amount lost?

The Court’s recorded position says compensation should be no less than the amount lost by the customer where the fraud is found to have resulted from the financial institution’s failure of due diligence. This is not an automatic refund guarantee for every fraud.

3. Has RBI already implemented the new compensation rules?

No. At the time of the October 29 hearing, the proposed regulatory measures were still being finalised. The government told the Court that the framework was expected to become operational around December 2026.

4. What happens if a bank employee helps cybercriminals?

The Supreme Court has called for accountability and prosecution of bank officials found to have colluded with fraudsters.

5. What is a digital-arrest scam?

It is a type of cyber fraud in which criminals impersonate police officers or government agencies and threaten victims with arrest or legal action to force them to transfer money.

6. Can banks stop suspicious transactions?

The Supreme Court wants banks to temporarily suspend unusual transactions until appropriate verification is completed. The final RBI framework will determine the detailed procedures and obligations.

7. What should someone do after losing money in a digital-arrest scam?

Immediately contact the bank to report the fraudulent transfer, call India’s cybercrime helpline at 1930 and file a complaint through the National Cyber Crime Reporting Portal at cybercrime.gov.in. Preserve call records, messages, transaction details and other evidence.