# SC proposes that banks compensate digital arrest victims if they skip due diligence

URL: https://upsc.help/current-affairs/2026-10-30/sc-digital-arrest-bank-liability/
Date: 30 October 2026 (2026-10-30)
Source: The Hindu, Page 1
UPSC papers: GS3, GS2
Publisher: upsc.help (Pratidin), free and open-source UPSC Civil Services current affairs. Not affiliated with UPSC. Every fact was checked against the source reports by a separate review before publishing.

**In one line:** The Supreme Court is weighing whether banks that fail to stop abnormal transfers should repay victims of digital arrest scams.

On 29 October 2026, a three-judge Bench of Chief Justice of India Surya Kant, Justice Joymalya Bagchi and Justice V. Mohana, hearing the Supreme Court's suo motu case on "digital arrest" scams, said it was proposing to direct that banks and other financial institutions compensate victims, and face prosecution, wherever a failure of due diligence on their part is proven. In a digital arrest, fraudsters pose as police or investigating officers on phone or video calls, tell victims they are under investigation and frighten them into transferring money. The idea has no legal basis: no law enforcement agency arrests anyone over a video call. The CJI asked why banks could not flag transactions that depart sharply from a customer's usual pattern and hold them until verified, remarking that a report filed after the fraud "will only be post-mortem". Amicus curiae N.S. Nappinai cited a recent case in which one woman lost ₹2.5 crore, and about ₹800 crore was cited as lost to such scams this year.

Attorney General R. Venkataramani opposed the Court imposing penalties on banks, arguing that deciding bank liability and framing the rules is the job of the Reserve Bank of India (RBI). He said the proposed Reserve Bank of India (Know Your Customer) Amendment Directions, 2026 were expected to be notified by 30 November 2026 and to be operational by 31 December 2026. The proposed safeguards include monitoring transactions against an account's established history, temporary suspension of unusual transactions, automated alerts to the police and physical verification. The Bench asked the RBI to explore a mechanism under which victims are compensated when a fraud results from a financial institution's negligence and to give a list of all authorised financial institutions, and directed States to file details of FIRs in digital arrest cases with the status of investigation and prosecution. WhatsApp told the Court it had banned about 9,400 suspicious accounts.

The case, In Re: Victims of Digital Arrest Related to Forged Documents (SMW (Crl.) 3/2025), is a suo motu writ that the Court has been monitoring for months. In February 2026 the Court called the siphoning of more than ₹54,000 crore through digital frauds "robbery or dacoity". On 4 August 2026 it gave the RBI four weeks to adopt a standard operating procedure (SOP) for banks to place temporary debit holds on accounts linked to cyber fraud, asked States to operationalise State Cyber Crime Coordination Centres and the e-Zero FIR system with the Indian Cyber Crime Coordination Centre (I4C), and asked an inter-departmental committee to examine a shared-liability compensation framework. The legal gap is real: the RBI's 2017 customer-protection circular limits customer liability only for "unauthorised" electronic transactions, while a digital arrest victim is pressured into making the transfer. The Court's view is that banks are best placed to stop abnormal transfers; the Centre's view is that the regulator, not the Court, should set liability rules.

## Prelims facts

- On 29 October 2026, a Bench led by CJI Surya Kant proposed that banks compensate digital arrest victims and face prosecution where their failure of due diligence is proven.
- The Attorney General said the RBI (Know Your Customer) Amendment Directions, 2026 should be notified by 30 November and operational by 31 December 2026.
- The case is a suo motu writ, In Re: Victims of Digital Arrest Related to Forged Documents (SMW (Crl.) 3/2025).
- The RBI's circular of 6 July 2017 gives customers zero liability for unauthorised electronic transactions caused by the bank's fraud, negligence or deficiency.
- In August 2026 the Court gave the RBI four weeks to adopt an SOP for temporary debit holds on accounts linked to cyber fraud.

## Quick recall

- **Which Bench heard the digital arrest case on 29 October 2026?** CJI Surya Kant, Justice Joymalya Bagchi and Justice V. Mohana.
- **What did the Court propose for banks?** That banks compensate victims and face prosecution where a failure of due diligence is proven.
- **Name of the RBI directions the Attorney General cited** Reserve Bank of India (Know Your Customer) Amendment Directions, 2026.
- **When are the KYC Amendment Directions expected to be operational?** By 31 December 2026 (to be notified by 30 November 2026).
- **Date of the RBI circular on limiting customer liability in unauthorised electronic transactions** 6 July 2017.
- **Within how many working days must a bank credit a disputed unauthorised amount after notice?** 10 working days.
- **How many suspicious accounts did WhatsApp say it had banned?** About 9,400.
- **Who is the amicus curiae in the digital arrest case?** Senior Advocate N.S. Nappinai.

## Prelims practice question

With reference to the RBI's 2017 framework on limiting customers' liability in unauthorised electronic banking transactions, consider the following statements:
1. A customer has zero liability when the unauthorised transaction results from contributory fraud, negligence or deficiency on the part of the bank.
2. Where the loss is due to the customer's negligence, such as sharing payment credentials, the customer bears the entire loss until the transaction is reported to the bank.
3. The burden of proving customer liability lies on the customer.
Which of the statements given above are correct?

(a) 1 and 2 only
(b) 2 and 3 only
(c) 1 and 3 only
(d) 1, 2 and 3

Answer: (a) 1 and 2 only. Statement 1 is correct: the 6 July 2017 circular gives zero liability where the bank's own fraud, negligence or deficiency caused the loss, whether or not the customer reports it. Statement 2 is correct: if the customer shared credentials, the customer bears the loss until reporting, and the bank bears losses after that. Statement 3 is incorrect: the circular puts the burden of proving customer liability on the bank.

## UPSC previous-year questions this connects to

- UPSC Mains 2022, GS3: What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy. (https://upsc.help/pyq/q343-different-elements-cyber-security-keeping-view-challenges/)
  How to use this story in the answer: Use digital arrest scams to show that a cyber security strategy must cover financial fraud, bank safeguards and coordination, not only networks and infrastructure.
- UPSC Mains 2021, GS3: Discuss how emerging technologies and globalisation contribute to money laundering. Elaborate measures to tackle the problem of money laundering both at national and international levels. (https://upsc.help/pyq/q046-emerging-technologies-globalisation-contribute-money-laundering-elaborate/)
  How to use this story in the answer: Cite digital arrest scams as a case where emerging technology speeds the movement of illicit money, and tighter KYC and debit holds are the domestic response.
- UPSC Mains 2026, GS3: Explain how fake news and disinformation pose threat to Internal Security and Public Order in Indian context? In this regard, discuss salient features of amendments in respect of Information Technology (Intermediatory Guidelines and Digital Media Ethics Code) Rules 2021. (https://upsc.help/pyq/q080-fake-news-disinformation-pose-threat-internal-security/)

## Mains practice question

Digital arrest scams exploit fear rather than technology. Discuss whether banks should be held liable to compensate victims of such frauds, and suggest a framework for shared liability. (250 words)

### Model answer

In a digital arrest scam, fraudsters posing as officials frighten victims into transferring money. On 29 October 2026 the Supreme Court proposed that banks compensate victims where their failure of due diligence is proven.

## Why banks can be held liable
- **Best placed to stop the money:** banks see transfers that depart sharply from an account's history; the CJI said a report after the fraud "will only be post-mortem".
- **Scale of loss:** the Court described the siphoning of over ₹54,000 crore through digital frauds as "robbery or dacoity" (February 2026).
- **Gap in current rules:** the RBI's 2017 circular protects customers only in *unauthorised* transactions; coerced victims authorise the transfer themselves.

## Concerns
- **Regulatory domain:** the Attorney General argued liability rules belong to the RBI, not the Court.
- **Moral hazard:** blanket compensation may weaken customer caution.
- **Cost and friction:** holding transactions may delay genuine payments.

## A shared-liability framework
- **Bank:** monitor transactions against account history, hold unusual transfers, alert police, as proposed in the RBI (KYC) Amendment Directions, 2026 (due by 31 December 2026).
- **Telecom and platforms:** act on fraudulent accounts; WhatsApp reported banning about 9,400 suspicious accounts.
- **State:** State Cyber Crime Coordination Centres, e-Zero FIRs with I4C, and quick debit holds under the RBI SOP ordered in August 2026.
- **Compensation:** liability graded by fault, as with the 2017 circular's zero and limited liability tiers.
- **Awareness:** no agency arrests anyone over a video call; Legal Services bodies are to spread this message.

Liability should follow fault: banks that ignore red flags should pay, while prevention rests with every link in the chain.

## The basics

## Why this matters

Digital arrest scams turn a phone into a weapon of fear. The victim is told, often on a video call, that they are under investigation and must transfer money to "clear" their name. The Supreme Court is now asking a hard question: when a bank lets an obviously abnormal transfer go through, who should bear the loss?

## How the scam works

The trick is not technical hacking. It is social engineering: persuading a person to act against their own interest. The fraudster creates urgency and isolation and directs the victim to move money into accounts controlled by the gang, often "mule" accounts opened in other people's names.

## Why existing rules fall short

The RBI's circular of 6 July 2017 protects customers in *unauthorised* electronic transactions: zero liability if the bank was at fault, or if a third-party breach is reported within three working days. But a digital arrest victim usually makes the transfer personally, under pressure. That is why the Court is looking at the bank's duty of care, not just the customer's consent. See RBI's limited liability framework and Know Your Customer norms.

## The institutional response

The Court is using its Suo motu jurisdiction of the Supreme Court to coordinate the RBI, the Department of Telecommunications, the Ministry of Electronics and IT, the CBI and the States. The Indian Cyber Crime Coordination Centre (I4C) runs the national system for reporting cyber fraud and freezing funds.

## Sources

- https://www.theweek.in/news/india/2026/10/29/supreme-court-mulls-new-crackdown-on-digital-arrest-banks-to-compensate-victim-and.html
- https://www.indiatvnews.com/news/india/digital-arrest-sc-says-it-will-examine-rbi-s-kyc-amendment-directions-to-be-operationalised-by-december-31-2026-10-29-1058215
- https://vajiramandravi.com/current-affairs/digital-arrest-scams-upsc/
- https://www.livelaw.in/top-stories/digital-arrest-scams-supreme-court-issues-directions-for-prevention-compensation-greivance-redressal-544292
- https://www.verdictum.in/app-lite/court-updates/supreme-court/supreme-court-terms-siphoning-of-over-rs-54000-crores-by-digital-fraud-as-absolute-robbery-dacoity-asks-centre-to-frame-sop-1606983
- https://www.rbi.org.in/scripts/FS_Notification.aspx?Id=11040