Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (3 items)

1. RBI penalises three cooperative banks for KYC and loan violations

The RBI levied penalties of ₹2 lakh each on Lunavada Peoples Co-operative Bank (Gujarat), Sri Lakshmi Co-operative Bank Ltd (Pune), and Jhalor Central Co-operative Bank Ltd (Rajasthan) for violating KYC norms and loan-related regulations under the Banking Regulation Act, 1949.

Entity involved: Lunavada Peoples Co-operative Bank, Sri Lakshmi Co-operative Bank Ltd, Jhalor Central Co-operative Bank Ltd

2. RBI fines unnamed NBFC for regulatory non-compliance

The RBI took enforcement action against an NBFC on May 28 for breaching compliance obligations, part of a broader enforcement wave in May 2026 targeting smaller financial institutions. The entity's name was not publicly disclosed at the time of reporting.

Entity involved: NBFC (name not publicly disclosed)

3. ED raids former Kerala CM Pinarayi Vijayan's residence in CMRL money laundering case

The Enforcement Directorate conducted simultaneous searches across Thiruvananthapuram, Kannur, Ernakulam, and Bengaluru in the Cochin Minerals and Rutile Limited (CMRL) case, probing fictitious expenses worth ₹182 crore and alleged fund diversion through connected entities, including ₹2.78 crore in consultancy payments to a firm linked to Vijayan's family.

Entity involved: Cochin Minerals and Rutile Limited (CMRL), Exalogic Solutions Pvt Ltd

New Fraud Typologies and Scams (3 items)

1. AI-powered deepfake lender videos and fake police calls fuel digital lending fraud

High risk

Fraudsters use AI-generated voices and deepfake videos impersonating bank officers, police, or RBI officials to pressure victims into paying upfront processing fees or surrendering OTPs via fake loan apps. Apps harvest contact lists and gallery access, using the data for coercive recovery and secondary identity fraud.

2. Digital arrest scam via WhatsApp video: CBI, RBI, and telecom official impersonation

High risk

Victims receive WhatsApp video calls from fraudsters dressed in uniforms, claiming the victim's bank account or SIM card is linked to money laundering, then demanding immediate fund transfers or personal data to avoid arrest. This typology is now among the fastest-growing cyber crimes in India.

3. KYC update scam via fintech employee impersonation targets small business owners

Medium risk

An impostor poses as a fintech employee visiting small business owners and requests access to the victim's mobile under the pretext of updating KYC or app settings, then initiates an unauthorised UPI transfer. Three accused were arrested in Panchkula, Zirakpur (Mohali), and adjoining Haryana and Punjab areas following the complaint from a tea seller.

Institutional Impact (3 items)

1. Cyberabad cybercrime police solve 6 cases, arrest 10, and secure ₹1.39 crore in victim refunds

Legal action was taken against perpetrators of trading fraud, digital arrest fraud, job fraud, and vishing call fraud. Courts approved refund orders worth ₹1.39 crore for 70 cybercrime victims across the cases.

Impact: Court-approved victim restitution of ₹1.39 crore across 70 victims; a notable enforcement outcome that sets a precedent for victim compensation in cybercrime cases.

2. Delhi Police bust interstate cyber fraud syndicate supplying bank account kits and SIM cards

Three arrested in coordinated raids across Haryana and Punjab, dismantling a network that supplied bank account kits, SIM cards, and ATM cards to criminal syndicates, disrupting a critical upstream link in the mule account supply chain.

Impact: Upstream disruption to mule account infrastructure; seizure of account kits, SIM cards, and ATM cards reduces the supply available to active fraud networks.

3. Government crackdown on six illegal loan apps forces Google Play delisting

I4C (Ministry of Home Affairs) directed Google to delist six malicious loan apps from the Play Store within 36 hours. The apps were harvesting sensitive personal data and using coercive recovery tactics including threats and harassment of borrowers.

Impact: Six apps delisted; ongoing reputational and regulatory pressure on unregistered digital lenders; signals continued government-platform coordination on fraud app removal.