Supreme Court Asks RBI to Make Banks Pay Digital Arrest Victims: What It Means

The Supreme Court has told the Reserve Bank of India to build a rule that makes banks pay back victims of digital arrest and cyber fraud, at least the amount lost, when the bank failed in its due diligence. Many headlines made it sound as if banks must pay from today, but that is not what the order does.

What the Supreme Court actually said

In a hearing reported on 29 October 2026, a bench of Chief Justice Surya Kant, Justice Joymalya Bagchi and Justice V Mohana heard the case it began on its own in October 2025, titled In Re Victims of Digital Arrest Related To Forged Documents. According to news reports of the hearing, the Court directed that the RBI’s proposed rules must require financial institutions to compensate victims where the fraud came from the institution’s failure of due diligence. The compensation should be not less than the amount the customer lost.

The key word is “directs”. The Court is pointing the regulator towards a rule. It is not yet a finished rule that a customer can quote at a bank counter. The Court is also examining the RBI’s draft KYC (Amendment) Directions, 2026 before it issues its own directions.

What the order does not do yet

Reports also record Justice Bagchi speaking of “strict liability” for financial products misused in such frauds. Again, that is a hearing remark. The final wording will matter a great deal, so wait for the RBI’s notified rules.

Other directions in the order

• The RBI’s KYC directions are to be notified by 30 November 2026 and brought into force by 31 December 2026.
• Transactions that look unusual compared with an account’s past activity should be held until they are verified, with alerts to the nearest police station.
• The RBI is to examine mule accounts (accounts used to receive and move stolen money) and give strict instructions on closing new ones.
• The RBI must list all authorised financial institutions, so the directions apply to all of them without each bank being made a party.
• The RBI must report what action has been taken against bank employees involved in digital arrest cases.
• The Union government must file an affidavit on its steps, including blocking 9,400 accounts, and on software to spot accounts that pretend to be law enforcement or government bodies.

The Court’s emphasis, as reported, is on stopping the fraud in the first place rather than only writing reports afterwards.

What it means for you: what to do now

Until the new rules arrive, your protection depends on speed and on the rules that already exist. If you are a victim, or think a payment went wrong, act in this order.

• Call the national cyber fraud helpline 1930 immediately. The first hours matter most for freezing money.
• Call your bank at once, using the number on its official website or your card, and ask them to block or hold the transaction and your account if needed. Get a complaint reference in writing.
• File a complaint on the National Cybercrime Reporting Portal, cybercrime.gov.in. Keep screenshots, phone numbers, UPI IDs, account numbers and call times.
• Do not delete chats or messages. Do not send more money to “recover” what was lost.
• Ask your bank in writing what it has decided about your liability, and follow up if you do not hear back.

The rules that already protect you

RBI’s circular of 6 July 2017, “Customer Protection – Limiting Liability of Customers in Unauthorised Electronic Banking Transactions”, already covers unauthorised electronic transactions. Its main points are below. Banks may have updated their policies since, so check your bank’s current policy.

The circular also says banks should resolve complaints within the time in their policy, not more than 90 days, and should credit the disputed amount provisionally within 10 working days of being notified. An important caution: in a digital arrest scam, victims usually make the payment themselves under pressure. A bank may call that customer-authorised, so these rules may not neatly fit. That gap is exactly what the Supreme Court’s direction is trying to address.

How to spot a digital arrest scam

In this scam, fraudsters phone or video call pretending to be police, customs, a narcotics agency or a court officer. They claim you are under “digital arrest” and must stay on the call while you move money for “verification”. Warning signs include:

• A caller says you are being investigated and orders you to stay on a video call.
• Threats of arrest, account freezing or a case, with a demand to transfer money to a “safe” or “RBI” account.
• Pressure to keep the matter secret from family or bank staff.
• Forged-looking notices, ID cards or documents sent on WhatsApp or email.
• Calls from ordinary mobile numbers or unknown WhatsApp accounts.

The simple rule is that genuine agencies do not hold anyone under “digital arrest” and do not ask you to transfer money to prove innocence. Hang up, speak to someone you trust, and call 1930 if in doubt.

The bottom line

The Supreme Court has set a clear direction: banks should share responsibility when their lapses let scammers through, and compensation should be at least the amount lost. But the details are with the RBI, with the draft directions due to be notified by 30 November and in force by 31 December 2026. Until then, report fast on 1930 and cybercrime.gov.in, tell your bank immediately, and use the protections that already exist.

This article is for information only and is not legal or financial advice.

Sources

• Verdictum: RBI rules must make banks compensate victims, not less than amount lost, where due diligence fails
• MediaNama: Supreme Court on RBI, banks compensating digital arrest victims
• RBI: Customer Protection – Limiting Liability of Customers in Unauthorised Electronic Banking Transactions (6 July 2017)