Digital Arrest: Supreme Court Asks RBI for Victim Indemnity

🗞️ Why in News Hearing its suo motu case on digital arrest scams on Thursday, 29 October 2026, a three-judge Bench of the Supreme Court called upon the Reserve Bank of India (RBI) to make financial institutions indemnify victims, for no less than the amount lost, where the fraud results from a bank’s failure of due diligence. The Court said it would examine the RBI’s proposed Know Your Customer (KYC) Amendment Directions, 2026 before they are notified.

“Digital arrest” names a scam, not a power: as The Indian Express notes, “there is no legal provision for a digital arrest in India”. The callers impersonate law enforcement agents and frighten victims into transferring money. What is new on 29 October is where the Supreme Court is now pressing hardest: on the banks through whose accounts the money moves, and on the regulator that writes their rules.

The Case: In Re Victims of Digital Arrest

The case is Suo Motu Writ Petition (Criminal) No. 3 of 2025, “In Re: Victims of Digital Arrest Related to Forged Documents”. It is a set of interim hearings in a writ petition the Court started on its own; no judgment has been delivered.

• The 9 February order also recorded that “About 26 out of 53 banks are stated to have also adopted Mule Hunter AI”.
• The 4 August order asked the Ministry of Electronics and Information Technology, the Department of Telecommunications and I4C to examine a time-based “kill switch” for audio and video calls, and the CBI to examine “reduction of the present threshold of Rs. 10 crores”.
• That order was the subject of our 7 August editorial on digital arrest fraud and the limits of domestic enforcement.
• Ms N.S. Nappinai assists the Court as amicus curiae.

What the Bench Wants in the RBI’s Rules

The Bench’s words below are as Bar & Bench quoted them; The Hindu and The Indian Express also reported the hearing.

• Indemnity, with a floor. As quoted by Bar & Bench: “We emphasise that the regulatory measures proposed by the RBI must mandate financial institutions to indemnify victims of digital arrest or cyber fraud through suitable compensation, not less than the amount lost by the customer, where the fraud or crime is found to have resulted from a failure of due diligence by the financial institution.”
• Three safeguards, made mandatory. “Temporary suspension of an unusual transaction inconsistent with an account’s past track record, automated reporting and physical verification to ascertain the genuineness of the transaction, must be mandatory for every financial institution.”
• Compliance. “The reports shall be submitted to the inter-departmental committee. The Directors General of Police of all States and Union Territories are directed to ensure compliance.”
• Data from the States. The Hindu reports that the Bench “directed the States to provide information on FIRs registered in digital arrest cases and the status of their investigation and prosecution.”

The indemnity is something the Court wants the RBI’s rules to contain. It is not yet a binding rule on any bank.

Bench and Regulator: The Exchange in Court

The Court’s impatience. The CJI called digital arrest “the biggest financial fraud in the history of this country”, The Hindu reports. On the RBI’s process, The Indian Express quotes him: “The problem is bank officials are involved in it… There is soft pedalling by the RBI. Unfortunate. Because RBI is consulting the banks when we are asking for action against the banks”. Bar & Bench reports him saying: “The regulation must include a liability clause. Otherwise, we will enforce it through a judicial order”.

The Union’s reply. Attorney-General R. Venkataramani, appearing for the Union and the RBI, “advised against haste”, The Hindu reports, saying counter-measures cannot come with “a wave of the magic wand” but only through consultation between the central bank and stakeholders. He said the proposed RBI (KYC) Amendment Directions, 2026 “would be notified by November 30 and operationalised by December 31”. Bar & Bench reports him as saying that bank employees had also prevented fraud and that complaints had fallen by about 50 per cent.

So the Directions are still a proposal. The notification by 30 November and operation by 31 December are the Attorney-General’s stated plan; neither has happened.

The Scale: What the Court’s Record Shows

For context, the firmest figures are those the Court itself recorded on 4 August 2026, from the Fourth Status Report of I4C dated 3 August 2026:

The Court called the fall in complaints “certainly encouraging” but added that “continued monitoring remains indispensable”. The Indian Express, citing I4C data, puts reported losses at about ₹1,935 crore in 2024 and about ₹1,211 crore in 2025. Set beside those reported losses, the ₹18.05 crore restored is small, and that gap is the case for compensation from the banks.

For background, an earlier official snapshot: in a statement of 12 March 2025, the Ministry of Home Affairs said I4C had blocked more than 3,962 Skype IDs and 83,668 WhatsApp accounts used for digital arrest, and that the Citizen Financial Cyber Fraud Reporting and Management System, launched in 2021, had saved more than ₹4,386 crore in more than 13.36 lakh complaints.

Mains Lens: Who Should Bear the Loss?

• From victim to institution. Treating digital arrest only as a crime against a gullible caller leaves the loss with the victim. The Court’s frame asks whether the bank’s own systems should have flagged a transaction that broke from an account’s history; where diligence failed, the bank pays.
• Diligence as the trigger. The proposed indemnity applies where the fraud “is found to have resulted from a failure of due diligence”. Who makes that finding, by what standard and how fast will decide whether the remedy reaches victims at all.
• Regulation or adjudication. The RBI consults banks before it writes rules; the Bench sees that as delay. A Court that threatens to supply a liability clause by judicial order raises the old question of where judicial direction ends and regulatory design begins, though here the Court is reviewing a draft rather than replacing it.
• Prevention and cost. Mandatory suspension, automated reporting and physical verification add friction for honest customers too. The design question is a hold that is temporary, reasoned and quickly lifted.
• Federal capacity. With only 14 States having notified (as of the 4 August order) their coordination centres and e-Zero FIR in 19, enforcement still depends on States catching up with the national portal.

What comes next: the Attorney-General has said the Directions will be notified by 30 November and operationalised by 31 December 2026. The Court is to take the case up again around 30 November (Bar & Bench reports the next hearing on that date; The Hindu says the case will be listed again before it).

Way Forward

• Write liability into the rule: a clear indemnity clause, a time limit for paying it, and an appeal for the customer.
• Make the three safeguards uniform: suspension of unusual transactions, automated reporting and physical verification, applied by every financial institution.
• Finish the State layer: notified State Cybercrime Coordination Centres and e-Zero FIR everywhere.
• Speed up restoration: money frozen through the 1930 helpline and the NCRP should reach victims quickly.
• Keep awareness going: the 1930 helpline, and the CJI’s plain point that “no one can be arrested over a mobile phone call”.

Background from earlier coverage: the Prime Minister’s call for a global framework against cyber fraud and deepfakes at the India Mobile Congress, in our 9 October roundup.

UPSC Relevance

GS Paper 3: Challenges to internal security through communication networks; basics of cyber security; money laundering and its prevention.

GS Paper 2: Functioning of the judiciary; statutory and regulatory bodies (the RBI); government policies and interventions.

Prelims: BNS sections 318 and 319; IT Act sections 66C and 66D; I4C, the NCRP and the 1930 helpline; e-Zero FIR; temporary debit hold; the Money Restoration Mechanism Portal.

Mains: “Digital arrest scams exploit gaps between the telecom network, the banking system and the police. Should banks bear the loss when their due diligence fails? Discuss with reference to the Supreme Court’s suo motu case.” (250 words)

📌 Facts Corner, Knowledgepedia

Prelims, statement-ready facts:

• Case: Suo Motu Writ Petition (Criminal) No. 3 of 2025, “In Re: Victims of Digital Arrest Related to Forged Documents”
• Suo motu cognisance: 17 October 2025, on a senior citizen couple’s complaint; Justices Surya Kant and Joymalya Bagchi
• 29 October 2026 Bench: CJI Surya Kant, Justices Joymalya Bagchi and V. Mohana (three judges)
• Court’s ask: indemnity “not less than the amount lost” where fraud results from a bank’s failure of due diligence
• Mandatory safeguards sought: suspension of unusual transactions, automated reporting, physical verification
• Proposed rules: RBI (Know Your Customer) Amendment Directions, 2026, a proposal the Court wants to vet before notification
• NCRP digital arrest complaints: 1,23,672 (2024), 58,239 (2025), 16,377 to 30 June 2026 (I4C via SC order)
• Money Restoration Mechanism Portal: 36,290 cases, ₹18.05 crore restored (4 August 2026 order)
• e-Zero FIR operational in 19 States; State Cybercrime Coordination Centres notified by 14 States (4 August 2026)
• CBI threshold for taking up digital arrest cases: losses of ₹10 crore or more (9 February 2026 order)
• BNS section 318(4) cheating: up to 7 years and fine; section 319 cheating by personation: up to 5 years
• IT Act section 66C identity theft and 66D cheating by personation: up to 3 years and fine up to ₹1 lakh
• I4C: attached office of the Ministry of Home Affairs; helpline 1930; CFCFRMS launched in 2021

Prelims, the traps:

• The Court has not ordered banks to pay; it called upon the RBI to put indemnity into its rules
• The KYC Amendment Directions, 2026 are a proposal, not yet notified or in force; the AG’s timeline is a plan, not an event
• “Digital arrest” names a scam, not a legal power: there is no legal provision for a digital arrest in India

Mains, arguments and keywords:

• Keywords: due diligence, indemnity, shared liability, temporary debit hold, money mule accounts, e-Zero FIR
• Frame: prevention (bank safeguards), cure (restoration and compensation), enforcement (State centres, CBI)

Interview, be ready for:

• “Is it fair to make banks pay for a customer’s mistake?” Only where the bank’s own diligence failed; that is the Court’s test.

Sources: Supreme Court of India, orders in Suo Motu Writ Petition (Criminal) No. 3 of 2025 of October 2025, February 2026 and August 2026. Bar & Bench, report on the hearing of 29 October 2026. The Hindu, Krishnadas Rajagopal, 30 October 2026 (print). The Indian Express, Explained, on digital arrests, 30 October 2026. Press Information Bureau, Ministry of Home Affairs, “Steps taken to address the issue of digital arrest scams”, March 2025. Bharatiya Nyaya Sanhita, 2023 (Gazette of India Extraordinary No. 55 of 2023). Information Technology Act, 2000 (India Code).

Cite this page: Digital Arrest: Supreme Court Asks RBI for Victim Indemnity — Ujiyari.com | Free UPSC & State PCS Current Affairs