SC seeks compensation for Digital Arrest Scam Victims

Why in News?

The Supreme Court of India ruled during suo motu proceedings that the Reserve Bank of India’s (RBI)  proposed regulatory framework must indemnify cyberfraud victims to the full extent of their losses if an investigation establishes that the crime resulted from a failure of institutional due diligence.

The Court also mandated all State governments to submit exhaustive information on First Information Reports (FIRs), current investigation timelines, and prosecution metrics related to digital-arrest cases.

What is Digital Arrest?

A digital arrest is a highly coercive, impersonation-based cyber-psychological crime where syndicates manipulate victims through real-time communication channels.

• State-Sanctioned Persona: Fraudsters pose as federal or state law enforcement authorities (E.g., CBI, ED, Narcotics Control Bureau, or Police officials).
• Fabricated Legal Liability: Victims are falsely informed that their national identifiers (Aadhaar, passport) or financial accounts have been implicated in severe transnational crimes like drug trafficking or money laundering.
• Psychological Confinement: Using authority bias and fear, criminals enforce strict isolation, ordering victims to remain on an uninterrupted video or audio loop under pseudo “digital custody”.
• Financial Extraction: Under the guise of official asset verification, security deposits, or legal clearance, victims are pressured to transfer their life savings into designated bank accounts.

Indian criminal jurisprudence recognises no statutory or procedural concept known as a “digital arrest.” Law enforcement agencies are legally barred from executing custodial detentions, summonses, or formal interrogations over virtual communication portals or telephone lines.

Key Legal & Regulatory Directives Issued by the Supreme Court:

• Hard-Coding Institutional Liability: The SC emphasised that general security advisories issued by banks are legally insufficient. The court ordered that the RBI’s regulatory codes must carry explicit, enforceable penal consequences for banks failing to prevent fraudulent fund exfiltration due to relaxed internal safeguards.
• Mandatory Financial Circuit Breakers: The SC mandated that banking networks deploy advanced technological solutions (including Artificial Intelligence) to establish automated transaction shields:
  • Anomaly Detection: Systems must automatically detect and temporarily freeze transfers that sharply deviate from an individual account holder’s historical profile.
  • Systemic Interdiction: Banks must immediately relay automated security alerts to the nearest law enforcement authority when high-value, uncharacteristic transactions occur.
  • Physical Verification: Banks are expected to institute protocols to confirm the absolute genuineness of a transaction before releasing high-risk held funds.
• Vetting of the RBI KYC Amendment Directions, 2026: The SC announced it will independently vet and examine the proposed RBI (Know Your Customer) Amendment Directions, 2026 before they are finalised, ensuring they contain strong consumer protection mechanisms.  The Attorney-General stated that these specific directions are scheduled to be notified by November 30, 2026, and fully operationalised across banking institutions by December 31, 2026.

Existing RBI Protection and the Remaining Gap: 

The RBI’s 2017 framework for unauthorised electronic banking transactions provides:

• Zero customer liability where contributory fraud, negligence or deficiency lies with the bank.
• Zero liability for specified third-party breaches when reported within three working days of receiving the bank’s communication.
• Where customer negligence causes the loss, the customer generally bears losses until reporting; subsequent losses fall on the bank.

The gap: The fundamental issue is that the 2017 framework was built for unauthorised transactions (e.g., SIM swapping, database hacks, card cloning). Digital-arrest victims may themselves authenticate transfers under deception or coercion. Such cases cannot automatically be treated as identical to unauthorised account debits. 

This makes clear rules on institutional diligence, causation and compensation especially important. 

Digital Arrest Scam: Associated Laws and Remedies 

India does not have a specific, standalone law explicitly named for “digital arrest” scams. Criminals orchestrating digital arrest scams are prosecuted under the following specific legal provisions:

The proposed KYC amendments, 2026 must move financial institutions beyond procedural compliance towards proactive fraud detection and timely intervention. Linking compensation to proven failures of due diligence, alongside AI-assisted monitoring, swift police coordination and victim-sensitive redress, can make citizen protection central to India’s digital financial architecture. 

Prelims Practice MCQ: 

Q. Consider the following statements:

1. Indian criminal procedure under the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023 provides statutory recognition to virtual detentions or digital arrests conducted by federal investigative agencies during preliminary inquiries.

2. Under the existing Reserve Bank of India (RBI) liability framework, a customer is entitled to absolute zero liability for transactions self-authenticated under psychological coercion.

Which of the statements given above is/are correct?

(a) 1 only

(b) 2 only

(c) Both 1 and 2

(d) Neither 1 nor 2 

Answer: (d)

Explanation:

• Statement 1 is incorrect: Indian criminal jurisprudence does not recognise any concept called a “digital arrest.” Law enforcement agencies are legally barred from executing custodial detentions, summonses, or formal interrogations over virtual communication portals or telephone lines.
• Statement 2 is incorrect: The existing 2017 RBI framework applies strictly to unauthorised electronic transactions (where the attacker breaches a network without the user’s involvement). In a digital arrest scam, the victim is coerced into self-authenticating the transfer. Under current rules, this does not grant automatic zero liability, which is why the Supreme Court is intervening to push for new rules.

PDF