The Reserve Bank of India has issued draft guidelines to standardize how banks handle accounts suspected of cyber fraud. Following a Supreme Court mandate, the new framework introduces AI-based monitoring for transactions over ₹1,000 and sets a 20-day window for customer explanations. The rules, slated for implementation by April 1, 2027, aim to balance security with customer rights while increasing compliance demands for banks.
The Reserve Bank of India (RBI) has released a draft framework to standardize how financial institutions respond to suspected cyber fraud and money mule activity. This initiative is a direct response to a Supreme Court of India order from August 4, 2026, which called for a more consistent approach across the banking sector. The central bank has opened the draft for public feedback until October 2, with full implementation currently scheduled for April 1, 2027.
The new rules require banks to utilize artificial intelligence and machine learning to monitor transactions. Any transaction of ₹1,000 or more that deviates from a customer's typical spending profile or shows patterns associated with known fraud networks will be flagged. When a bank decides to place a debit hold on an account, it must inform the customer immediately and provide clear contact details for the designated bank officer handling the case. Customers will then have a 20-day window to submit a formal defense or explanation for the flagged transactions.
For banks, this framework introduces significant operational changes. While transaction-level holds are common practice, the RBI has clarified that freezing an entire account should be treated as an extreme measure. Institutions are also required to report suspicious activity to the Financial Intelligence Unit and law enforcement. Failure to adhere to these reporting standards could lead to severe regulatory consequences regarding Know Your Customer (KYC) compliance.
The operational shift means banks will likely need to invest more in upgrading their internal monitoring systems and expanding their grievance redressal teams to manage the increased volume of customer disputes and investigations. There is also a reputational risk to consider; if a bank’s AI system incorrectly flags legitimate transactions, it could affect customer trust and satisfaction. Conversely, successful implementation could help banks reduce the financial losses often associated with cyber fraud.
Moving forward, the primary focus for stakeholders will be the finalization of these rules after the feedback period ends. Investors and banking analysts will likely monitor how individual lenders manage the transition to this AI-driven fraud detection model and whether the added compliance requirements lead to higher operational costs in the coming quarters.