Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (3 items)

1. RBI penalises two cooperative banks: Amaravati Merchants Rs 50,000 and Karnal Central Rs 3 lakh for KYC and loan violations

RBI penalised Amaravati Merchants Cooperative Bank Ltd (Maharashtra) Rs 50,000 and Karnal Central Co-operative Bank Ltd (Haryana) Rs 3 lakh for non-compliance with KYC guidelines and loan and advance regulations under the Banking Regulation Act 1949.

Entity involved: Amaravati Merchants Cooperative Bank Ltd; Karnal Central Co-operative Bank Ltd

2. RBI imposes Rs 41.8 lakh penalty on Canara Bank for KYC registry upload failures and incorrect account classification

RBI fined Canara Bank Rs 41.80 lakh for failing to upload KYC records to the Central KYC Records Registry (CKYCR) within prescribed timelines, and for incorrectly classifying accounts as inoperative despite qualifying transactions. A separate Rs 2.5 lakh penalty was also levied for delayed currency chest reporting (notified June 6, 2026).

Entity involved: Canara Bank

3. ED raids 7 premises in Rajasthan and Punjab over India-Cambodia SIM card cyber fraud network

The Enforcement Directorate raided locations in Kishangarh, Nagaur, Jodhpur, and Ludhiana, identifying 30 domestic bank accounts linked to a syndicate that fraudulently activated Indian SIMs for use from Cambodia, defrauding victims via WhatsApp-based fake banking tech support scams.

Entity involved: POS vendors (unnamed); Malaysian national operative in Cambodia; 30 domestic bank accounts frozen

New Fraud Typologies and Scams (3 items)

1. Fake KYC APK malware scam impersonating Bank of India; Ahmedabad homemaker loses Rs 7.46 lakh

High risk

Fraudsters sent WhatsApp messages impersonating Bank of India officials, directing victims to download a malicious APK ('BOI Pan Card Update.apk'). The app harvested banking credentials, intercepted OTPs, and altered account recovery settings, enabling full account takeover. Fraud initiated May 19, 2026.

2. India-Cambodia SIM box cyber fraud network operates 5,300+ Indian SIMs through hardware arrays in Cambodia

High risk

A transnational syndicate activated 5,300+ Indian SIMs fraudulently via rogue POS agents, then routed them through SIM Box hardware arrays in Cambodia to convert VoIP signals into domestic voice calls, enabling fake banking tech support and investment scams targeting Indian citizens while evading telecom filters.

3. Digital lending advance fee and fake loan apps deploy AI deepfakes; 87 illegal apps blocked in December 2025

High risk

Scammers use AI-generated voices, deepfake videos, and fake police intimidation calls posing as digital lenders, demanding processing fees, insurance fees, or GST payments upfront before disappearing. Fake apps also harvest Aadhaar, PAN, OTPs, and contacts for secondary extortion. Government blocked 87 illegal loan apps in December 2025.

Institutional Impact (3 items)

1. Canara Bank faces Rs 44.29 lakh combined penalty and reputational risk from KYC registry failures

Rs 41.80 lakh penalty plus Rs 2.49 lakh additional fine; public disclosure of systemic KYC upload failures and incorrect account classification raises concerns about compliance controls at the institution.

Impact: Rs 44.29 lakh combined penalty; systemic KYC upload failures disclosed publicly, raising compliance control concerns across the sector.

2. 30 domestic banks have accounts frozen as ED uncovers Cambodia SIM card fraud links

30 bank accounts across multiple institutions were identified and frozen by ED as part of the Cambodia SIM card fraud probe; potential legal and compliance scrutiny on account-opening KYC processes at those institutions.

Impact: Multi-bank KYC exposure across 30 frozen accounts; institutions face scrutiny over POS agent-facilitated SIM activation and account onboarding controls.

3. Vedanta Group faces legal and reputational exposure from ED searches under FEMA

Multi-location ED searches at Vedanta Group offices signal serious regulatory scrutiny of the group's cross-border financial arrangements. Vedanta confirmed cooperation with authorities; potential for financial penalties and restrictions on cross-border transactions if violations are confirmed.

Impact: Ongoing FEMA probe with potential penalties and restrictions on cross-border transactions; Vedanta's debt restructuring and demerger plans face added regulatory uncertainty.