Whalesbook
India's banks are at a critical moment as advanced AI fuels sophisticated fraud and regulators demand better defenses. With fraud losses climbing and new AI threats emerging, the sector must quickly upgrade its security, rethinking the balance between easy digital access and crucial financial protection.
AI Fuels Sophisticated Fraud
India's rapid digital banking growth, with fast UPI payments and easy account opening, has unfortunately become an ideal environment for complex fraud. The Reserve Bank of India (RBI) reports a clear trend: while fraud numbers can vary, the cost of each incident is rising sharply. For 2024-25, fraud values hit ₹34,771 crore. In the first half of FY26 (April-September 2025), banks reported ₹21,515 crore in fraud, a 30% jump from the previous year, even as the number of cases dropped. This shift is driven by AI. Scammers use AI to create realistic deepfakes for voice and video impersonation, leading to advanced social engineering. Generative AI produces more believable phishing emails, and fake identities are used to trick verification systems and get fraudulent loans. Cyberattacks are now automated, scalable, and harder to detect than before. The arrival of AI models like Anthropic's 'Mythos', which can find and exploit weaknesses at scale, is a major concern, pushing Finance Minister Nirmala Sitharaman to urge extreme caution.
Courts and Regulators Demand Action
The massive scale and changing methods of digital fraud have caught the attention of India's top institutions. The Supreme Court has strongly condemned the theft of over ₹54,000 crore via digital fraud, calling it "absolute robbery". The court questioned why suspicious transactions aren't flagged faster and why vulnerable customers are unprotected, stressing that banks hold public money in trust. This judicial pressure has prompted immediate action calls for the RBI and banks to enhance oversight and protect customers. In response, the RBI proposed new safeguards. A discussion paper suggested a possible one-hour "cooling-off period" for digital transactions over ₹10,000. This proposal, though debated for its effect on convenience, aims to give customers a chance to check and possibly cancel suspicious payments. These RBI moves, along with parliamentary figures showing about 2.4 million digital fraud cases totaling over ₹4,200 crore in the first ten months of 2025, highlight a proactive regulatory approach to cut losses that have particularly hit older people.
Banks Face Tough Fight Against Evolving Threats
Even with heavy investment in fraud monitoring and cybersecurity, Indian banks struggle to keep up with AI-driven threats. The digital progress that offers convenience and financial inclusion also speeds up the movement of stolen money and creates paths for advanced criminals. Experts note that while AI can detect fraud, it's complex and expensive to implement. The "black box" nature of some AI raises questions about fairness and who is responsible. Also, regulations can sometimes lag behind the fast-changing technology used by fraudsters. Scams like "digital arrests," where fake officials pressure victims to send money, have cost billions. The shift to fewer, but larger, fraud cases means criminals are being smarter, making detection harder. AI models that can find vulnerabilities, like Anthropic's 'Mythos', pose an "unprecedented" threat, requiring a move beyond standard security. Banks must also avoid over-relying on AI, as it can make mistakes or be bypassed if not updated and combined with human checks. Proposed cooling-off periods, while for security, could cause delays or be misused if not carefully planned, potentially disrupting the smooth digital payment experience.
An Ongoing AI Arms Race
Looking ahead, Indian banks must continually strengthen their defenses, with AI playing a central role. Spending on cybersecurity in the BFSI sector is growing, with more investment expected in AI for real-time fraud detection, behavior analysis, and better identity checks. The industry is adopting a "Unified Risk View" to combine fraud and anti-money laundering efforts. There's also a growing understanding that human investigators are crucial alongside automated systems. The RBI's proposed rules, though potentially inconvenient, show regulators are leaning towards security over speed for large transactions. This debate highlights the constant tug-of-war between making digital services easy and reducing risk in India's fast-growing digital economy. Banks must use AI and advanced tech not just to find fraud, but to predict and stop threats instantly, safeguarding the financial system from increasingly clever cybercrime.