Fraud Briefing

The RBI imposed monetary penalties on five NBFCs - Shri Ram Finance (Rs 8.10 lakh), Progfin (Rs 2.70 lakh), Fusion Finance (Rs 2.70 lakh), Northern Arc Capital (Rs 6.20 lakh), and Muthoot MCred (Rs 3.10 lakh) - for violations spanning KYC risk categorisation, CKYC upload timelines, governance failures, disclosure deficiencies, and incorrect asset classification. Shri Ram Finance failed to seek prior RBI approval for a director appointment and to upload KYC records to the CKYC Registry within prescribed timelines; Progfin and Fusion Finance failed to run periodic risk re-categorisation of accounts at least once every six months; Northern Arc Capital disclosed incorrect complaint data in its FY2024-25 annual financial statements and failed to auto-escalate rejected complaints to the Internal Ombudsman; Muthoot MCred upgraded NPA accounts to 'Standard' without full repayment of arrears.

Fraudsters impersonate law enforcement officers and send forged ED warrants, fake Bombay HC orders, and fabricated RBI directives via messaging apps, placing victims under continuous video surveillance ('digital arrest') and coercing them into transferring funds as 'verification deposits.' The syndicate runs a structured supply chain for mule bank accounts: account holders sell current accounts to intermediaries, who use Telegram channels to route them to overseas fraud operators in Cambodia and Dubai/UAE, while bank insiders help process the account transfers. Case trigger: a retired Indian Army Colonel in Delhi's Munirka Enclave was extorted for Rs 15.5 lakh after being falsely linked to money laundering and terror financing via a fabricated Mumbai bank account. Arrests: Sarbjit (account holder, Ludhiana), Suraj (intermediary), Sandeep (bank employee who enabled the transfers), Naresh alias Lucky (Telegram-channel distributor, Jaipur); 4 smartphones and 6 SIM cards were recovered.

The penalties signal active RBI supervisory scrutiny of NBFC KYC compliance following CKYC 2.0 rollout preparations, with repeated KYC risk-categorisation failures across multiple entities.