RBI’s new fraud compensation mechanism: What’s different, who pays, how to claim compensation

This policy intervention highlights the RBI's dual role as both a regulator of the banking sector and a protector of consumer interests. The mechanism introduces a shared liability model, where the cost of compensation is distributed among the RBI, the victim's bank, and the beneficiary bank (the bank where fraudulent funds are transferred). By committing to bear the largest portion of the compensation (up to 76.5%), the RBI is absorbing a significant fiscal risk to bolster confidence in digital payments. This is crucial for advancing India's financial inclusion agenda and maintaining the momentum of its digital economy. The framework also penalizes banks for institutional negligence, defined as inadequate security protocols or failure to address grievances promptly. By forcing banks to contribute to the compensation pool, the RBI creates a strong economic incentive for financial institutions to invest in robust cybersecurity infrastructure and fraud detection systems.

The new guidelines represent a proactive approach to financial consumer protection, shifting the burden of proof from the customer to the bank. Previously, recovering funds lost to digital fraud was a protracted and often unsuccessful process for consumers. Now, once a complaint is lodged within the mandated five-day window, banks must prove that the fraud was not due to their own systemic failures. This reversal of the burden of proof is a significant governance reform, enhancing accountability within the financial ecosystem. Furthermore, the mandatory resolution timelines (45 days for domestic, 60 days for cross-border frauds) and the requirement for a 'shadow reversal' (provisional credit) in credit card frauds ensure timely redressal. The integration with the National Cyber Crime Reporting Portal (NCRP) also streamlines the grievance redressal mechanism, fostering better coordination between financial institutions and law enforcement agencies.

The sharp increase in the financial value of digital frauds underscores the growing sophistication of cyber threats targeting India's financial sector. While the total number of reported cases halved, the 46% increase in the amount involved (Rs 48,021 crore) indicates that cybercriminals are executing higher-value, more targeted attacks. This trend elevates cyber fraud from a consumer grievance issue to a significant internal security challenge, threatening the stability of the financial system. The RBI's framework addresses this by mandating that banks prevent further unauthorized transactions upon receiving a complaint, thereby mitigating cascading systemic risks. The policy's focus on cross-border fraudulent EBTs also highlights the transnational nature of modern cybercrime, necessitating robust international cooperation and stronger cybersecurity protocols at the institutional level to secure India's digital financial infrastructure.