The Supreme Court on Thursday asked the Reserve Bank of India to require banks to fully indemnify victims of digital arrest fraud in cases where weak due diligence contributed to the loss. The observation, made during a hearing on the growing menace of online fraud, signals a significant shift in how responsibility for such crimes may be shared between victims, banks and regulators in the years ahead.
Digital arrest fraud has become one of the most damaging forms of cybercrime in India. In a typical case, criminals posing as police officers, customs officials or investigative agency personnel contact a victim by phone or video call, claim the person is linked to a criminal case or a parcel containing contraband, and keep them under psychological pressure for hours or even days. Victims are then coerced into transferring money to so-called safe accounts, often draining life savings before they realise they have been deceived.
The scale of the problem is staggering. Losses from digital arrest fraud have crossed Rs 800 crore so far this year, against around Rs 3,000 crore in the previous year. Behind those figures are thousands of individual tragedies, including elderly citizens, professionals and homemakers who have lost retirement savings and family funds to sophisticated impostors. The fraudsters exploit fear, authority and isolation, often instructing victims not to contact family members or the police.
The court’s intervention focuses on the role of banks. At present, victims who report fraud promptly may recover some or all of their money depending on the circumstances, but the rules leave considerable discretion to banks, and many victims face long disputes and partial settlements. By asking the RBI to mandate full indemnification where due diligence was weak, the court is pushing for a clearer principle: where a bank failed to spot suspicious transactions, flag unusual account activity or verify the destination accounts, it should bear the loss rather than the victim.
The RBI has also been directed to strengthen its regulatory framework. Amendments to the central bank’s know-your-customer norms are to be notified by 30 November and made operational by 31 December. Stronger KYC rules would make it harder for fraudsters to open and operate the mule accounts through which stolen money is routed, and would require banks to monitor accounts more closely for patterns consistent with fraud.
For banks, the direction presents both a challenge and an opportunity. Compliance will require investment in transaction-monitoring systems, staff training and faster response mechanisms when a customer reports fraud. At the same time, a clearer compensation regime could restore trust in digital banking at a moment when fear of fraud is holding back some users, particularly older customers, from embracing online services fully.
For victims and their families, the court’s observations offer hope, but the practical details will matter enormously. Questions remain about how weak due diligence will be defined, what evidence victims will need to produce, and how quickly claims will be settled. Consumer groups are likely to press for simple, time-bound procedures that do not force traumatised victims through another prolonged ordeal.
The hearing also underlines a broader truth about cybercrime in India. Technology has made banking faster and more convenient, but it has also given criminals powerful new tools. Tackling digital arrest fraud will require coordinated action from the police, telecom operators, banks and regulators, alongside public awareness campaigns that teach citizens a simple rule: no genuine law-enforcement agency conducts investigations or demands money over a video call. Until that message reaches every household, the fraudsters will keep finding new victims.
