KYCKART Daily Brief — 29 July 2026 | KYC and Fraud Intelligence

Regulatory and Compliance (3 items)

1. Supreme Court directs Centre to criminalise digital arrest as a standalone offence

The Supreme Court on 29 July 2026 directed the Union Government to enact standalone criminal legislation defining 'digital arrest' as a distinct offence, with provisions to freeze assets of accused upon prima facie establishment of guilt; the Centre confirmed a draft bill is in preparation for the ongoing Parliament session.

Entity involved: Union Government (Centre), Solicitor General Tushar Mehta

2. RBI imposes Rs 50,000 penalty on The Citizen Co-operative Bank, Bengaluru for NPA norm violations

RBI imposed a Rs 50,000 monetary penalty on The Citizen Co-operative Bank Limited, Bengaluru, for violating NPA classification norms.

Entity involved: The Citizen Co-operative Bank Limited, Bengaluru

3. RBI defers Digital Fraud Compensation Framework implementation to January 2027

RBI formally notified its Digital Fraud Compensation Framework (issued 24 June 2026) but deferred implementation by six months to 1 January 2027; victims of digital fraud with losses up to Rs 50,000 are entitled to up to Rs 25,000 or 85% of net loss, whichever is lower; banks must provide 'shadow reversal' within five calendar days for disputed credit card transactions.

Entity involved: All Commercial Banks and Cooperative Banks in India

New Fraud Typologies and Scams (3 items)

1. 18-year-old UP school dropout builds 121 AI-generated fake banking APKs, executes Rs 64.38 crore fraud across 21,672 devices

High risk

A UP-based school dropout created 121 malicious fake APK banking apps mimicking PNB and other banks using AI, distributed via WhatsApp and Telegram for Rs 15,000/month to cybercriminal groups; the apps infected 21,672 phones, fully compromised 2,928 devices, and executed 54,094 fraudulent transactions totalling Rs 64.38 crore across India.

2. Supreme Court flags deepfake-enabled digital arrest impersonation as emerging fraud typology

High risk

Cybercriminals use AI-generated deepfake videos and voice cloning to impersonate law enforcement (CBI, ED, police) in digital arrest scams, trapping victims on video calls, threatening arrest, and extorting money; Indians lost nearly Rs 3,000 crore to this typology by late 2025, with scale rising through 2026.

3. Two arrested in Rs 50 crore fraud using fake CSC credentials, phishing sites, and malicious banking apps

Medium risk

Arav Vashishtha (Ghaziabad) and Rajat Ahuja (Rudrapur, Uttarakhand) were arrested for a Rs 50 crore fraud using fake Common Service Centre identities, phishing websites mimicking government portals, and malicious banking apps distributed via social media; the network spanned Haryana, Delhi, and Dubai, with five accomplices still at large.

Institutional Impact (3 items)

1. Delhi Police bust Rs 70 crore mule account syndicate with Dubai and UK links; 10 arrested including bank insiders

Rs 70 crore in illicit funds was routed through 248 fake corporate bank accounts across 19 states; 10 arrested including bank manager Kundan Kumar and 4 private bank officials; Dubai and UK connections are under active probe.

Impact: Private-sector banks implicated in mule account facilitation; Rs 70 crore routed through 248 fake corporate accounts across 19 states, with Dubai and UK links under active probe.

2. India's CKYC 2.0 shared KYC platform to go live in August 2026

CKYC 2.0 will let lenders and insurers share customer verification data, cutting repeated KYC collection and strengthening fraud surveillance; the launch is a structural regulatory response to rising KYC fraud incidents.

Impact: Shared KYC data across lenders and insurers reduces repeated onboarding friction and closes verification gaps exploited by fraud networks.

3. BioCatch India 2026: attempted fraud value up 35%, mobile fraud sessions up 67%

Despite a 12% drop in overall fraud session volume, attempted fraudulent payment value rose 35%, signalling a shift to fewer but larger-value attacks; mobile banking fraud sessions jumped 67% (86% on iOS, 35% on Android); SMS-based scams surged 146%; cyber-fraud complaints totalled Rs 22,496 crore in 2025 with 26.48 lakh mule cases. Domestic mule accounts now serve as the primary fund-routing infrastructure as Southeast Asia scam hubs face crackdowns, with mule-as-a-service networks consolidating stolen funds into crypto before overseas transfer.

Impact: Banks and NBFCs with weaker behavioural analytics are disproportionately exposed as attackers shift to higher-value targets and domestic mule-as-a-service infrastructure.

Fraud Briefing