Follow us on Google News
The Centre’s National Cybercrime Suspect Registry, launched by the Ministry of Home Affairs (MHA) in September 2024, has played a decisive role in curbing cyber-enabled financial crimes, helping prevent losses amounting to ₹8,031.56 crore by blocking lakhs of fraudulent digital transactions, according to official government data.
Developed and operated by the Indian Cyber Crime Coordination Centre (I4C) under the MHA, the registry is designed to identify and intercept suspicious transactions in real time, marking a shift in India’s cybercrime strategy from reactive investigation to proactive prevention.
Officials said the system has significantly strengthened coordination between law enforcement agencies and financial institutions, enabling early detection of fraud attempts linked to mule accounts, phishing operations, fake investment schemes and identity theft networks.
According to figures released by the ministry in December 2025, more than 18.43 lakh suspect identifiers provided by banks and 24.67 lakh Layer-1 mule bank accounts were shared across participating institutions. This information sharing led to the blocking of fraudulent transactions worth over ₹8,000 crore, officials said.
Certified Cyber Crime Investigator Course Launched by Centre for Police Technology
How the Suspect Registry works
The Suspect Registry was formally launched on September 10, 2024, with the aim of creating a centralised, dynamic database of individuals and entities suspected of involvement in cyber-enabled financial crimes. The system draws its core inputs from the National Cybercrime Reporting Portal (NCRP), where citizens across the country lodge complaints related to online fraud.
In addition to citizen reports, the registry aggregates inputs from state and Union Territory police forces, central investigation agencies, intelligence units, banks, payment gateways and financial intermediaries. These inputs are verified and processed to generate actionable alerts.
The database stores multiple identifiers associated with suspicious activity, including mobile numbers, email addresses, bank account details, UPI handles and IP addresses. When a digital payment is initiated through UPI platforms, net banking channels or mobile applications, the transaction details are automatically cross-checked against the registry.
If a match is detected, the transaction is flagged and declined instantly, preventing funds from being transferred to accounts linked to cybercriminal activity. Officials said this real-time intervention helps stop frauds at the source, often before victims realise they are being targeted.
To ensure nationwide implementation, the Reserve Bank of India (RBI) has directed all banks to integrate their systems with the Suspect Registry. Controlled access has also been provided to central probe agencies and state police forces to aid investigations and intelligence-led operations.
Early impact and expanding scale
The registry delivered measurable results soon after its launch. Within the first 90 days, it helped block over 6.10 lakh fraudulent transactions, preventing estimated losses of ₹1,800 crore, officials said.
By mid-2025, the scale of operations expanded significantly, with more than 13 lakh fraudulent transactions blocked, translating into savings of around ₹5,100 crore for potential victims. The continued growth of the registry has been driven by sustained data inflow and increased adoption by financial institutions.
Officials said the system uses AI-enabled analytical tools and pattern recognition technologies to detect emerging fraud trends, link related identifiers and update the database dynamically as new complaints and intelligence inputs are received.
The MHA clarified that the Suspect Registry is exclusively focused on cyber-enabled financial crimes, such as online payment fraud, phishing, fake investment schemes and identity theft. It is not linked to GST or tax fraud detection, which is handled through separate regulatory and enforcement mechanisms.
Use in cross-border cybercrime cases
Authorities said the registry is also being deployed proactively in cases involving cross-border cybercrime syndicates. In recent investigations into international job and investment fraud networks, digital identifiers uncovered during forensic analysis were added to the registry, enabling real-time disruption of scam-linked transactions and communications.
Officials noted that such integration allows enforcement agencies to limit financial damage while investigations continue, particularly in cases involving overseas handlers and complex digital trails.
Legal safeguards and data protection
The Suspect Registry operates under the Information Technology Act, 2000, and follows established data-handling protocols aligned with the Personal Data Protection framework, officials said. Access to the database is restricted, logged and monitored to ensure accountability while prioritising consumer protection and national security.
With digital payments forming the backbone of India’s financial ecosystem, the government views the Suspect Registry as a critical pillar of the country’s cyber-security architecture, aimed at safeguarding citizens, strengthening trust in digital transactions and countering increasingly sophisticated online fraud networks.
About the author – Ayesha Aayat is a law student and contributor covering cybercrime, online frauds, and digital safety concerns. Her writing aims to raise awareness about evolving cyber threats and legal responses.
