Thursday, 12 November 2026
Supreme Court of India
Criminal Law

Digital Arrest Scams: Supreme Court Says RBI Measures Must Make Financial Institutions Compensate Victims Where Due Diligence Fails

In Re: Victims of Digital Arrest Related to Forged Documents Decided 29 October 2026

Published: · NyayVidhan · 3 min read

In Re: Victims of Digital Arrest Related to Forged Documents (Suo Moto Writ Petition (Criminal) No. 3/2025): the Supreme Court said the Reserve Bank of India's proposed regulatory measures must require financial institutions to indemnify victims of digital arrest scams and other cyber frauds, with compensation not less than the amount lost, where the fraud is established to have occurred through their failure to exercise due diligence. It will first examine the RBI's proposed KYC amendment directions, and called for reports from the RBI, police and intermediaries (paras 3-4, 6-8).

Digital Arrest Scams: Supreme Court Says RBI Measures Must Make Financial Institutions Compensate Victims Where Due Diligence Fails

Judgment Intelligence

Interim Order
In Re: Victims of Digital Arrest Related to Forged Documents
Suo Moto Writ Petition (Criminal) No. 3 of 2025 with W.P. (Crl.) No. 15 of 2026, SLP (Crl.) No. 4942 of 2026, Suo Moto Writ Petition (Criminal) No. 3 of 2026 and W.P. (Crl.) No. 276 of 2026
Court
Supreme Court of India
Date of Decision
29 October 2026
Bench
Chief Justice Surya Kant, Justice Joymalya Bagchi and Justice V. Mohana
Final Outcome

Interim order; the matter remains pending and is posted for further consideration on 23.11.2026. The intervention application was allowed; the RBI, the law enforcement agencies of all States and Union Territories, and WhatsApp LLC and other intermediaries are to report to the Court (paras 1, 6-9).

Source Supreme Court of India, api.sci.gov.in — order dated 29 October 2026 · Court's copy

Key holdings

  1. Before issuing directions, the Court will examine the RBI (Know Your Customer) Amendment Directions, 2026, proposed to be notified by 30.11.2026 (para 3).
  2. Where a lapse in due diligence is established, financial institutions must indemnify victims with compensation not less than the amount lost (para 4).
  3. The RBI must submit a list of all the authorized financial institutions on the next date of hearing (para 6).
  4. Law enforcement agencies in all States and Union Territories must report the status of digital arrest FIRs and investigations and suggest measures, under the Directors General of Police (para 7).
  5. WhatsApp LLC and other concerned intermediaries must state their proposed preventive measures, with copies to the I4C (para 8).

Judgment digest by NyayVidhan: a summary of the court's judgment, not its text. The judgment itself is the authoritative version.

Brief Facts

The Supreme Court heard this suo motu writ petition on victims of digital arrest together with four connected matters: two criminal writ petitions, a special leave petition and a second suo motu writ petition (cause title). The Amicus Curiae made various suggestions and proposed consequential directions in her Note dated 14.10.2026. In response, the Attorney General for India placed on record a Note dated 28.10.2026 suggesting certain directions on behalf of the Union of India (para 2). On 29.10.2026 the Court also allowed an application for intervention (para 1). The order does not set out what either Note proposes.

Court's Findings

The Court was inclined to issue appropriate directions on the suggestions of the Amicus Curiae and the Union of India but would, in the first instance, examine the Reserve Bank of India (Know Your Customer) Amendment Directions, 2026, proposed to be notified by 30.11.2026 and operationalized by 31.12.2026 (para 3). It reiterated that the RBI's regulatory measures ‘must mandate and incorporate suitable provisions’ requiring financial institutions to indemnify victims of digital arrest scams and other cyber frauds and to pay compensation ‘not less than the amount lost by the customer’, where the fraud or crime is established to have occurred through the institution's failure to exercise due diligence in preventing or reporting it (para 4). It recalled preventive safeguards it had emphasised in the past, which may include temporarily suspending unusual or suspicious transactions, automatically intimating them to the nearest police station and physically verifying them later (para 5). For effective implementation, the RBI must list all the authorized financial institutions on the next date (para 6). The order issues no final directions.

Legal Principle

The order lays down no new rule of law; it records the Court's position that the RBI's measures must require financial institutions to indemnify victims of digital arrest scams and other cyber frauds, with compensation not less than the amount lost, where their failure to exercise due diligence is established (para 4).

NyayVidhan's view · Practice note

Why It Matters

This is a directions order in a continuing suo motu matter, not a final ruling. Its weight lies in para 4: before examining the RBI's proposed Know Your Customer Amendment Directions, 2026, the Court has said that the regulatory measures must make financial institutions compensate victims where a failure of due diligence in preventing or reporting the fraud is established. Those advising victims of digital arrest scams should watch for the directions that follow. The order fixes no separate deadline for the police and intermediary reports (paras 7-8); the matter returns on 23.11.2026 (para 9).

Editorial comment by the NyayVidhan Editorial Desk. It is not part of the Court's judgment and is not legal advice.

Join our WhatsApp Group
✕

Try: POCSO, IBC, Electoral Bond, Article 370, NDPS Act, Bail Conditions, SC Contempt