AI has dropped the cost of launching cyberattacks to under $3, leading to a 44% rise in incidents across India. With bank-related fraud crossing ₹360 billion in FY2025, financial institutions and IT firms face growing pressure to increase security spending, which could impact operational costs and profit margins.
Artificial intelligence is fundamentally changing the economics of digital crime, creating new challenges for the Indian financial and technology sectors. According to a recent report, the cost for attackers to replicate a functional cyber exploit has dropped to approximately $2.77. This decline is fueled by AI models that can identify software weaknesses up to 90 times faster than traditional methods, effectively lowering the barrier for digital espionage and fraud.
The Impact on Indian Financial Systems
India is experiencing a direct impact from these shifts. Data from the Indian Computer Emergency Response Team (CERT-In) shows that the country recorded 2.9 million cyber incidents during 2025, a 44% increase compared to the previous year. The financial consequences are significant, with bank-related fraud losses exceeding ₹360 billion in FY2025. Additionally, the Ministry of Home Affairs has reported cyber fraud cases totaling over ₹190 billion, highlighting the severe risk to the domestic financial system.
Investor Angle: Operational Costs vs. Growth
For investors, the rise of AI-enabled cyber threats creates a complex scenario for both banks and IT services companies. Indian banks are under pressure to increase their spending on cybersecurity and fraud detection to protect customer assets. These necessary investments in technology and staffing often show up as increased operational expenses, which can weigh on profit margins.
Conversely, for major Indian IT services firms like TCS, Infosys, and Wipro, this threat landscape acts as a demand driver. These companies are increasingly tasked with building, managing, and securing the digital infrastructure of their global and domestic clients. However, the speed of these attacks creates a constant challenge; companies must now shorten the time it takes to patch high-risk security weaknesses, which has already dropped from 14 days to just three.
Convergence of Fraud and Security
The nature of the threat is also evolving. Bad actors are now using deepfakes, voice cloning, and synthetic identity generation to bypass traditional security systems. This blurs the line between a technical cyber intrusion and direct financial fraud. For organizations, this means they can no longer treat cybersecurity and fraud prevention as separate departments. The report suggests that firms must shift toward real-time containment strategies, moving away from older, static prevention models.
Going forward, investors may want to monitor quarterly results for specific mentions of increased cybersecurity spending or provisions for fraud losses. For banks, the focus will be on their ability to maintain margins while scaling up defense systems. For the IT sector, the key monitorable will be their success in deploying AI-based security solutions that can keep pace with the rapidly evolving threat landscape.