State Bank of India (SBI) customers defrauded in cyber incidents saw a nearly 70-fold increase in financial reimbursements over three financial years, with refunds rising from ₹12.38 lakh in FY24 to ₹858.72 lakh in FY26. Union Minister of State for Finance Pankaj Chaudhary disclosed these statistics in a written response to a parliamentary query in the Lok Sabha on Monday. The substantial upward surge in customer payouts highlights the growing efficacy of inter-agency account-freezing protocols, even as the official number of reported digital fraud cases experienced a sharp statistical contraction.
Regulatory Classification and Statistical Shift
According to data presented to Parliament, SBI logged 13,319 digital fraud cases involving ₹96.65 crore in FY24, which dropped to 10,465 cases involving ₹67.52 crore in FY25. However, in FY26, the public sector lender recorded just 20 cases involving ₹3.59 crore. The Central Government clarified that this dramatic reduction in recorded cases does not indicate an actual collapse in cybercrime activity across the country. Instead, the discrepancy stems from revised Master Directions on Fraud Risk Management issued by the Reserve Bank of India (RBI) on July 15, 2024.
Under the updated regulatory framework, financial institutions are now mandated to log disputed, suspected, or attempted digital transactions on Fraud Monitoring Returns only after internal procedures conclusively categorize them as deliberate fraud. Furthermore, compliance directives aligned with a 2023 Supreme Court ruling require banks to observe principles of natural justice and issue formal notices before classifying an account or transaction as fraudulent. This procedural shift significantly altered the reporting baseline, narrowing the immediate categorization of incidents compared to previous fiscal periods.
Mechanism of Recovery and Administrative Lag
The sharp escalation in recovered capital—climbing from ₹12.38 lakh in FY24 to ₹214.58 lakh in FY25 before reaching ₹858.72 lakh in FY26—is largely attributed to rapid account-freezing mechanisms. When victims report unauthorized transactions via the National Cyber Crime Reporting Portal or the 1930 emergency helpline, the Citizen Financial Cyber Fraud Reporting and Management System initiates real-time lien holdings. This automated intervention places immediate locks on beneficiary mule accounts before illicit funds can be siphoned into secondary conduits or foreign digital assets.
The Ministry of Finance emphasized that recovery and restitution processes operate on an extended timeline, often spanning several months. As a result, reimbursement figures logged in any given financial year frequently reflect successful account freezes and legal releases linked to cyber complaints registered in prior periods. The multi-fold jump in refunded capital demonstrates that modern coordination between law enforcement agencies and commercial banks is increasingly successfully intercepting stolen assets during transit.
Protection Frameworks and Institutional Oversight
To safeguard retail depositors against digital payment risks, the central bank maintains a structured customer liability model. Established under 2017 regulatory guidelines, this framework categorizes customer exposure into zero liability, limited liability, or liability determined by a bank’s board-approved policies. A supplementary compensation framework introduces a dedicated one-time reimbursement mechanism for small-value fraudulent electronic transactions. Eligible claimants facing small-value losses can receive compensation capped at ₹25,000 or up to 85 percent of their net loss, whichever is lower.
Beyond post-incident compensation, the central bank enforces strict operational rules through its Master Direction on Digital Payment Security Controls. Regular cybersecurity preparedness assessments and on-site IT audits are conducted across scheduled commercial banks to evaluate systemic resilience against evolving cyber threats. Over the past three financial years, regulatory non-compliance with these security standards resulted in monetary penalties imposed on 17 banking institutions.
As digital payment volumes continue to expand rapidly across urban and rural markets, institutional focus is shifting toward predictive fraud analytics and automated transaction flagging. While administrative reporting definitions continue to evolve, the trend in financial recoveries underscores that real-time inter-agency intervention remains the single most vital defense in restoring stolen wealth to retail victims.
