Supreme Court Mandates Bank Liability for Digital Arrest Scams
India's Supreme Court has ordered banks to fully compensate victims of digital arrest scams where institutional failure is proven.
The Supreme Court of India has ordered banks to indemnify victims of digital arrest scams with compensation not less than the amount lost, where fraud resulted from the bank's failure to exercise due diligence. The bench, headed by Chief Justice Surya Kant with Justices Joymalya Bagchi and V. Mohana, issued binding directions that shift the burden of victim compensation directly onto financial institutions.
Digital platforms directed to strengthen fraud prevention measures
The Court has mandated WhatsApp and other digital intermediaries to outline concrete measures to prevent digital arrest scams and submit detailed proposals to the Indian Cyber Crime Coordination Centre (I4C). The platforms were directed to inform the Court of their proposed action plans for tackling these cybercrimes. This directive, issued during a hearing on October 29, represents the first time the court has required direct platform action on this specific issue.
WhatsApp has already taken some preventive steps. According to a Ministry of Home Affairs status report filed in April, the platform banned approximately 9,400 accounts linked to digital arrest scams and impersonation of law enforcement agencies over a 12-week period from January. The government had flagged roughly 3,800 accounts for WhatsApp's review, though only 17 were specifically linked to digital arrests. The platform used these flagged accounts as starting points to find related fraudulent accounts, employing tools like logo detection, a large language model, and display-name logging.
Further technical safeguards are being developed. The Centre is creating software to flag accounts impersonating government agencies. A separate deadline from the Department of Telecommunications requires WhatsApp to link each account to the SIM card used for its registration by December 2026, with the rules taking effect on January 1, 2027.
Law enforcement agencies required to report and coordinate on scam cases
All state and Union Territory police forces have been instructed to submit reports on the status of First Information Reports (FIRs) and investigations in digital arrest scam cases. The Court directed the Directors General of Police across all jurisdictions to ensure compliance, requiring them to share information and suggest prevention methods with the I4C for coordinated action. States and Union Territories were also instructed to operationalise their State Cyber Crime Coordination Centres.
The Court's order seeks to strengthen the coordination between digital intermediaries and the I4C, which operates under the Ministry of Home Affairs. The Ministry of Electronics and Information Technology, the Department of Telecommunications, and the I4C were previously asked in August to study potential time limits on audio and video calls as a preventive measure.
RBI to implement temporary debit holds and compensation framework
The Reserve Bank of India must develop a comprehensive regulatory framework for temporary debit restrictions and victim compensation. The central bank was initially directed in August to prepare a Standard Operating Procedure for placing holds on accounts linked to cyber-enabled financial fraud. The draft rules now require banks to place temporary holds of up to 60 days on suspected mule accounts and on flagged transactions of Rs 1,000 or more.
The proposed safeguards for financial institutions include three key actions:
The RBI plans to notify its KYC Amendment Directions, 2026 by November 30, 2023, and bring them into force by December 31, 2023-a timeline significantly earlier than its previous implementation date of April 1, 2027. The Court has mandated that the regulatory framework must include a grievance redressal mechanism and a money restoration module for victims. Justice Bagchi emphasized the strict liability approach, stating, "We will put up a strict liability on the financial institutions."
The Court also asked an inter-departmental committee to examine a shared liability framework for victim compensation, raising questions about whether it will eventually cover platforms or remain focused solely on banks. The RBI must additionally submit a list of all authorised financial institutions for the Court to examine the implementation of the proposed safeguards.
The Court's intervention increases judicial oversight of platform safeguards, cybercrime investigations, and financial-fraud prevention mechanisms. Chief Justice Surya Kant described the phenomenon as "the biggest financial fraud on the economy of the country." The directions were issued during suo motu proceedings titled 'Victims of Digital Arrest Related to Forged Documents.' The Court will consider suggestions from amicus curiae N S Nappinai and Attorney General R Venkataramani at the next hearing, which is scheduled for November 23, 2026.
