RBI Proposes Compensation Framework for Digital Fraud Victims

India's central banking authority is preparing to introduce a compensation system for victims of digital financial fraud, offering reimbursements of up to ₹25,000 for small-value unauthorized transactions. The proposed framework, announced by Reserve Bank of India Governor Sanjay Malhotra, would cover 85% of the lost amount or ₹25,000, whichever is lower, marking a significant shift in consumer protection policy for the world's second-largest internet market.

The one-time compensation would be available to individuals even in cases where they inadvertently shared their one-time passwords with fraudsters, acknowledging the sophisticated methods employed by cybercriminals targeting an increasingly digitized population of over 700 million internet users.

Background and Context

The proposal represents a fundamental reassessment of the RBI's 2017 guidelines that established limited customer liability for unauthorized electronic banking transactions. According to the central bank, this review has become necessary due to the rapid expansion of digital banking infrastructure and payment technologies across India over the past several years, which has created new vulnerabilities for consumers.

Digital payments in India have surged exponentially, with the Unified Payments Interface (UPI) recording over 11 billion transactions monthly in recent months. This unprecedented growth has been accompanied by a corresponding increase in cybercrime incidents, with the National Crime Records Bureau reporting a 63% increase in cyber fraud cases between 2019 and 2022.

Key Figures and Entities

RBI Governor Sanjay Malhotra announced the proposed changes during a recent press conference, emphasizing that while customers should learn from others' mistakes, the central bank recognizes that first-time victims of digital fraud deserve support. "Accordingly, the draft revised instructions, including a framework for compensation in case of small value fraudulent transactions, shall be issued shortly for public consultation," Malhotra stated, indicating that regulatory feedback will be sought before final implementation.

The proposal extends protection to customers of all regulated financial institutions operating under RBI supervision, including commercial banks, payment banks, and select non-banking financial companies engaged in digital payment services.

Legal and Financial Mechanisms

Under the proposed framework, victims would receive compensation covering 70% of their losses in qualifying cases, with the remaining 30% to be shared equally between the concerned financial institution and the customer. This risk-sharing arrangement represents a departure from the previous regulatory approach, which placed greater emphasis on customer responsibility for safeguarding their credentials.

The compensation would be limited to one claim per customer lifetime, specifically targeting small-value fraudulent transactions. This design choice reflects regulatory intent to provide meaningful relief for minor incidents while maintaining deterrence against negligence in larger transactions where customers might exercise greater caution.

International Implications and Policy Response

The RBI's move aligns with global regulatory trends toward strengthening consumer protection in digital financial services. Jurisdictions including the United Kingdom and European Union have implemented similar frameworks requiring financial institutions to bear greater responsibility for unauthorized transactions on their platforms.

Beyond digital fraud compensation, the central bank has announced parallel initiatives addressing the mis-selling of financial products and standardization of loan recovery practices across all regulated entities. Malhotra emphasized that "mis-selling carries significant consequences for both customers as well as the regulated entity," noting that draft instructions governing product suitability and sales practices would also be released for public consultation.

Sources

This report draws on the Trak.in report on RBI's proposed compensation framework, official RBI policy statements, and publicly available data on digital payment adoption and cybercrime statistics in India.