Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (3 items)

1. RBI fines Union Bank, Central Bank of India, Bank of India, and Pine Labs for KYC and compliance failures

RBI imposed monetary penalties of ₹95.40 lakh (Union Bank — delays in crediting unauthorised transaction reversals), ₹63.60 lakh (Central Bank of India — KYC and financial inclusion deficiencies), ₹58.50 lakh (Bank of India — priority sector lending lapses), and ₹3.10 lakh (Pine Labs — issuing prepaid payment instruments without proper KYC).

Entity involved: Union Bank of India; Central Bank of India; Bank of India; Pine Labs

2. RBI HaRBInger 2025 hackathon produces tokenised KYC and AI fraud detection tools; 496 teams from 15 countries

RBI unveiled winners of its HaRBInger 2025 hackathon featuring innovations in tokenised KYC, offline CBDC, and AI-driven fraud detection tools. Tokenised KYC targets repeated data-sharing risks in banking onboarding; AI fraud detection tools push toward real-time transaction intervention.

Entity involved: Reserve Bank of India

3. RBI cancels Certificates of Registration of 35 NBFCs for regulatory non-compliance

RBI cancelled the Certificates of Registration of 35 non-banking financial companies for failing to meet regulatory requirements. These entities are no longer permitted to conduct NBFI business.

Entity involved: 35 unnamed NBFCs

New Fraud Typologies and Scams (3 items)

1. I4C orders removal of six named predatory loan apps — Flip Cash, ApnaAroham, CashFish, Kredipe, FlyCash, LoanCube

High risk

I4C directed Google to remove six malicious loan applications from the Play Store. The apps targeted Android users seeking quick loans, harvesting sensitive personal information including contacts, SMS, and gallery access. Promoted aggressively via Facebook, Instagram, and WhatsApp with instant-approval and quick-cash promises.

2. Mule account racket busted in Bhilai: fraudsters extract bank credentials under false loan promises

Medium risk

Fraudsters extracted bank credentials from residents under false loan promises, then used these accounts as mule accounts to route stolen funds from phishing, romance scams, and investment fraud operations. Funds pass through multiple dummy accounts before reaching masterminds. Akash Jaiswal and Javed Akhtar arrested, Bhilai.

3. Mumbai trading scam used 36,000+ mule accounts to launder ₹10.98 crore through 11 primary accounts

High risk

A sophisticated fake investment platform scam in Mumbai laundered ₹10.98 crore through a network of 36,000+ mule accounts, all fanning out from 11 primary accounts — demonstrating the industrial scale of account-abuse infrastructure available to organised cybercrime groups.

Institutional Impact (3 items)

1. Yes Bank forex card fraud: ~5,000 customers hit by ₹2.3 crore in fraudulent transactions

Impact: ~5,000 Yes Bank customers experienced fraudulent transactions totalling $280,000 (approx. ₹2.3 crore). Bank blocked several attempts and initiated chargebacks. Ongoing investigation underway.

2. ED raids Delhi-based payment aggregator linked to cyber fraud across Punjab, Delhi, and UP

Impact: ED searched across Delhi-NCR, Ludhiana, Mandi Gobindgarh, and Agra targeting a Delhi-based payment aggregator implicated in cyber fraud facilitation. Multiple premises searched; legal proceedings initiated.

3. Cumulative cyber fraud losses cross ₹52,000 crore over 5 years; I4C and telecom authorities intensify enforcement

Impact: India's cumulative cyber fraud losses over five years have crossed ₹52,000 crore. Key fraud vectors: UPI fraud, fake investment schemes, digital arrest scams, OTP fraud, phishing, fake customer care, and social media-based financial scams.