Supreme Court: banks must pay fraud victims if checks fail

What the bench said, and what it did not decide

On 29 October, a Supreme Court bench of Chief Justice Surya Kant and Justices Joymalya Bagchi and V Mohana, hearing suo motu proceedings on digital-arrest scams, said it would examine the Reserve Bank of India's proposed anti-cyber-fraud regulations before they are notified. That framing matters: the bench's remarks on compensation were oral observations made while it was considering proposed rules, not a final judgment deciding any victim's claim.

The case arose from a senior citizen couple's complaint of losing ₹1.05 crore to impersonators using forged judicial orders. The bench has been hearing the wider digital-arrest matter, in which victims were contacted by people impersonating CBI officers, ED officials and judicial authorities, and were shown forged court orders over phone and video calls.

The compensation observation

In its oral observations, the bench said the regulatory measures proposed by the RBI must mandate financial institutions to indemnify victims of digital arrest or cyber fraud with suitable compensation, not less than the amount lost by the customer, where the fraud is found to have resulted from a failure of due diligence by the financial institution.

Chief Justice Surya Kant observed that the amount should remain intact and that the bank would have to pay, and stressed that liability could not stop with individual officers. Justice Bagchi questioned why financial institutions should not face strict liability when their failure to provide safeguards enables misuse of banking products. The bench observed that banks must become a protective umbrella for customers, and asked why an unusually large transfer from a pensioner's savings should not trigger intervention.

These are observations about what the rules should contain, made before the bench examines the draft. They are not, on their own, a compensation order for any individual victim, and the final text of the rules has not yet been notified.

The safeguards the bench pointed to

Alongside compensation, the bench's observations pointed to three mandatory safeguards for every financial institution: temporary suspension of an unusual transaction that is inconsistent with an account's past track record, automated reporting of such transactions, and physical verification to ascertain the genuineness of the transaction. The bench also discussed an optional WhatsApp kill switch, prolonged-call warnings and simultaneous cybercrime alerts, and pressed for enforceable accountability over SIM misuse.

Attorney General R. Venkataramani, appearing for the RBI, said bank employees had also prevented fraud and that complaints had fallen by about 50 per cent. He sought time for technical integration, proposing notification by 30 November and operationalisation by 31 December. The bench sought the draft regulations and a list of authorised financial institutions, and directed state police to report on digital-arrest cases and suggest preventive measures, with reports to go to the inter-departmental committee.

Who this could affect, and what it does not yet change

If the final rules follow the bench's observations, the group most directly affected would be victims of digital-arrest or cyber fraud where a bank's due-diligence failure is found to have enabled the fraud. In that situation, the observation points to compensation not less than the amount lost, paid by the institution rather than left to an individual officer.

What it does not yet change is equally important. No final compensation scheme is in force from this hearing alone. Victims still need to report fraud promptly, preserve messages, call records and forged documents, and pursue the complaint and investigation route, because whether due diligence failed in a given case is a finding that would still have to be made. The bench also noted the wider scale of the problem, with the amicus curiae, Senior Advocate N. S. Nappinai, submitting that scams continued despite awareness campaigns, and that a woman had lost ₹2.5 crore in a case mentioned during the hearing.

Stage	Status as of 29 October observations
RBI draft rules	To be examined by the bench before notification; not yet notified
Proposed notification date	30 November, as proposed for technical integration
Proposed operationalisation	31 December, as proposed
Next hearing	30 November
Compensation principle observed	Not less than the amount lost, where due-diligence failure is found

What to watch next

The next hearing is on 30 November, the same date proposed for notification of the RBI's draft directions. Watch for three things: the draft regulations the bench said it will examine, the RBI's list of authorised financial institutions, and whether the final notified text carries the liability clause the bench observed must be included, with the bench having observed that otherwise it would enforce the point through a judicial order. Until the notified text appears, treat the compensation point as a strong judicial observation about proposed rules, not as a settled entitlement in any individual case.

📷 Illustration: AI-generated