A private bank’s internal audit has blown open what investigators describe as a coordinated scheme to manipulate credit records and push through loans that should never have been approved. The Cyber Crime Police in Karnataka have registered a case alleging that a network of individuals used sixty-one forged Loan Closure Certificates and No Due Certificates to fabricate the appearance of cleared debts, enabling twenty-eight personal loans worth ₹4.49 crore to sail through the bank’s own risk checks.
The case, triggered by a whistleblower’s tip, has since widened into a forensic examination of emails, loan files and internal approval logs. For a banking sector already grappling with digital fraud at scale, the episode is a reminder that some of the most damaging breaches originate not from external hackers but from within the very systems designed to prevent them.
How the Alleged Fraud Bypassed Lending Safeguards
According to the complaint filed by the bank’s authorised representative, Sudheer Kumar K., the fraud came to light only after an internal inquiry followed a whistleblower complaint. That sequence itself is telling. Banks typically rely on automated checks such as the Fixed Obligation to Income Ratio, or FOIR, which measures how much of a borrower’s income is already committed to existing debt, to decide whether a fresh loan is viable. Investigators allege that several applications in this case were initially rejected precisely because they failed this test.
What happened next forms the crux of the case. Rather than the applications being closed out, they were reportedly resubmitted with forged Loan Closure Certificates attached, documents meant to show that the applicant’s earlier loans had already been paid off. With those liabilities apparently erased, the FOIR calculation would have looked far healthier, clearing the path for credit managers to reassess and approve loans that had failed scrutiny only weeks earlier.
The Role of Connector Networks and CIBIL Manipulation
The complaint also names Direct Marketing Agencies, or DMAs, as central to the alleged conspiracy. These are third-party agents that banks and non-banking financial companies commonly use to source and process retail loan applications, and they often operate at arm’s length from a bank’s direct oversight. Investigators allege that the forged certificates were circulated through email accounts linked to connector personnel associated with these DMAs, before being fed into the bank’s loan processing system.
This detail matters because it points to a structural vulnerability rather than an isolated act of document fraud. If confirmed, it would suggest that intermediaries operating outside a bank’s core compliance perimeter had enough access, or influence over loan files, to alter what credit officers ultimately relied upon. The certificates were allegedly used to strip existing liabilities from CIBIL records, the credit bureau data that Indian lenders lean on heavily when deciding whether to sanction a loan. When that data is compromised at the point of entry, the safeguard collapses regardless of how rigorous the underlying formula is.
Legal Ground Being Covered by Investigators
The case has been registered under Sections 66(C) and 66(D) of the Information Technology Act, 2000, which deal with identity theft and cheating by personation using computer resources, along with Section 84B and multiple provisions of the Bharatiya Nyaya Sanhita, 2023, India’s newly codified criminal law that replaced the Indian Penal Code in 2023. The combination signals that police are treating this as both a cyber-enabled offence and a conventional case of forgery and criminal conspiracy, an approach increasingly common in financial fraud investigations where digital tools are used to manufacture paper trails.
Police officials have stressed that the investigation remains at a preliminary stage, with digital evidence including emails and loan records now undergoing forensic examination. Investigators are also working to establish the bank’s actual financial exposure and whether the network extends beyond those already identified. Authorities have been careful to note that no conclusions have been reached and that the case will proceed on the basis of evidence gathered rather than the allegations as they currently stand. For India’s lending ecosystem, where personal loan disbursals have grown sharply on the back of faster digital processing, the case underscores a persistent tension between speed of approval and depth of verification, one that regulators and banks alike will be watching closely as the investigation unfolds.
