RBI proposes disputed-amount-only debit holds in cyber-fraud cases
Under draft norms due from April 1, 2027, banks would temporarily freeze only the disputed sum in suspected mule-account or cyber-fraud transfers, rather than blocking an entire account. Customers would get 20 calendar days to explain flagged transactions, while banks would be required to strengthen AI-led monitoring.
What happened
Reserve Bank of India · RBI has proposed targeted temporary debit holds for suspected mule-account or cyber-fraud transfers, freezing only disputed amounts
Key facts
- Rs 1,000
- April 1, 2027
- 20 calendar days
- 10 calendar days
- 30 days
- August 4, 2026
Why this matters
The proposal strengthens the strategic case for acquiring or partnering with fraud-detection, mule-account analytics, and automated dispute-management platforms serving Indian financial institutions.
What to watch
- Final RBI circular, implementation scope, and whether the April 1, 2027 effective date is retained.
- Definition of disputed amount, treatment of jointly held accounts, overdrafts, recurring mandates, and funds already transferred onward.
- Required AI-monitoring standards, reporting obligations, auditability rules, and liability allocation among banks, payment aggregators, and merchants.
- Changes in cyber-fraud complaint volumes, false-positive hold rates, and average resolution time during pilot or phased rollout.
- Whether NPCI, card networks, and major banks introduce common APIs or protocols for fraud alerts and targeted account restrictions.
- Banks and payment firms should map systems capable of placing lien-like holds on a specific disputed amount without freezing the wider account.
- Retailers and marketplaces should update customer-support, refund, and settlement workflows for partially restricted payer accounts and fraud-related payment disputes.
- Payment aggregators should expand transaction-risk data sharing, mule-account indicators, and merchant-level anomaly monitoring.
- Merchants with high digital-payment exposure should prepare for a short-term rise in step-up authentication and payment-retry rates as banks recalibrate fraud models.