RBI’s Fraud Numbers Just Flipped: Fewer Cases, Much Bigger Losses

The Reserve Bank of India Annual Report 2025-26 shows an unmistakable divergence between incident volume and balance-sheet impact across scheduled commercial banks.

Case volumes peaked in FY24 before declining steadily. Conversely, total value rose from ₹13,930 crore to ₹32,803 crore in FY25, and expanded again to reach ₹48,021 crore in FY26.

A major factor behind the FY26 total is a formal re-reporting wave.

The official data reveals that 314 legacy cases amounting to ₹30,199 crorepertained to previous financial years and were recorded afresh in FY2025-26. These 314 cases alone represent approximately 62.9% of the year’s total reported fraud value.

This backlog cleared following the Supreme Court judgment dated March 27, 2023 (State Bank of India & Ors. v. Rajesh Agarwal & Ors.). The Court established that banks must comply with the principles of natural justice (audi alteram partem) by providing borrowers an opportunity to be heard before classifying their borrowing accounts as fraudulent. As lenders completed these mandatory hearings and re-examined contested historical accounts, dozens of large-ticket corporate exposures were classified and reported during FY26.

Examining the operational categories demonstrates where financial exposure actually settles:

• Advances (Lending Operations): Frauds in credit and loan accounts accounted for ₹40,774 crore across 8,640 cases. This single category generated 84.9% of all banking fraud value reported during the year.
• Card and Digital Payments: In sharp contrast, reported card, internet, and digital payment frauds collapsed to 293 cases totaling ₹29 crore. For perspective, this category recorded 13,332 cases and ₹517 crore in FY25, after standing at 28,836 cases and ₹1,452 crore in FY24.

Public Sector Banks (PSBs) reported ₹35,709 crore in fraud exposure, representing 74.4% of total banking losses and a 51.2% rise year-on-year. Private sector lenders reported ₹11,399 crore (23.7% of the total), with foreign banks and smaller specialized institutions making up the rest.

Compliance and risk teams evaluating external reports should note that public discussions cite three separate fraud statistics that reflect distinct scopes and measurement periods:

Conflating these distinct data sets produces misleading assessments. The ₹48,021 crore figure represents institutional credit and balance-sheet risk across commercial lenders, whereas the cyber-fraud metrics reflect retail transaction disputes across wider payment networks.

Historically, loan-related frauds take years to surface. Supervisory findings published by the Reserve Bank have shown that the average time lag between the date of occurrence and detection was 24 months across all bank frauds, reaching 63 months for large-value exposures of ₹100 crore and above.

Commercial bank loan frauds frequently involve fabricated customer identity documentation, shell-company structures, circular fund routing, and inflated collateral valuations. When these schemes occur during initial underwriting, standard periodic audits and sample checks fail to catch them until the borrower defaults years later.

To address this systemic delay, the regulator’s Fraud Risk Management Directions mandate that regulated lenders install Early Warning Signal (EWS) mechanisms. When potential warning signals emerge, the Red Flagged Account (RFA) framework requires financial institutions to initiate forensic reviews and reach conclusive fraud classifications within specified timeframes to prevent exposure from compounding across multiple quarters.

Reading these metrics together highlights a fundamental operational reality:

The headline drop in case counts can give financial institutions a false sense of security. Public discourse often focuses on retail payment scams, yet the economic damage to banks sits overwhelmingly in loan origination. Digital payments fraud fell to ₹29 crore across the entire banking system in FY26, while advances fraud reached ₹40,774 crore.

This comparison suggests that institutions misallocate resources when fraud prevention investments focus exclusively on post-disbursal transaction monitoring. Because the average detection lag for large corporate exposures historically stretched to 63 months, loan frauds booked today often remain invisible until multiple financial years pass.

The practical implication for risk committees is that the primary defense line belongs at the underwriting gateway. Verifying corporate identities, confirming beneficial ownership, tracing related-party shell entities, and authenticating source documents prior to sanctioning credit provides far higher loss protection than monitoring outbound payments after loan proceeds are already disbursed.