RBI Drafts KYC Rules to Freeze Accounts Linked to Cyber Fraud

Following a Supreme Court order, the central bank proposes standardized SOPs for commercial and cooperative banks to freeze illicit funds.

The Reserve Bank of India has issued draft guidelines proposing amendments to its Master Direction on Know Your Customer requirements to curb cyber-enabled financial fraud and illicit account operations. Under the proposed framework, titled the Reserve Bank of India (Know Your Customer) Amendment Directions, 2026, commercial and cooperative banks across the country will follow a standardized framework to place temporary debit holds on accounts suspected of involvement in money-mule networks and online financial scams.

Supreme Court Order Drives Standardized Action

The regulatory initiative follows a directive from the Supreme Court of India dated August 4, 2026. The apex court instructed the central bank to establish and disseminate a Standard Operating Procedure (SOP) that outlines clear rules for banking institutions when freezing funds or imposing debit restriction protocols on suspicious accounts linked to cyber crime and fraudulent money routing.

To implement the court’s instructions, the RBI has drafted amendments to its existing KYC Directions, 2025, which already incorporate guidelines regarding the operations of bank accounts and money mules. By formalizing a standardized procedure across the banking sector, the central bank aims to create a uniform mechanism that allows rapid intervention before fraudulent proceeds are siphoned off through complex, multi-layered account networks.

Scope of the Draft KYC Directions

The consolidated draft directions released for public consultation apply broadly across the Indian banking landscape. Regulated entities covered under these proposed rules include:

• All Scheduled Commercial Banks and Non-Scheduled Commercial Banks
• Small Finance Banks and Payments Banks
• Regional Rural Banks (RRBs) and Local Area Banks
• Urban Cooperative Banks (UCBs) across all tiers

By bringing this comprehensive range of deposit-taking institutions under a single operational SOP, the regulator intends to eliminate regulatory arbitrage and plug loopholes that fraudsters frequently exploit by moving illicit funds between commercial banks and regional or cooperative lenders.

Understanding Money Mules and Temporary Debit Holds

Money mules refer to accounts or account holders used by cyber criminals to transfer and launder illegal funds, often without the account owner fully understanding the criminal nature of the transactions. In many instances, fraudsters recruit vulnerable individuals, rent account credentials, or use phishing tactics to hijack legitimate accounts to receive victim deposits before immediately routing them to secondary offshore or crypto accounts.

A temporary debit hold allows a bank to block outgoing payments or withdrawals from a specific account or on a specific flagged transaction amount while keeping incoming deposits open or allowing initial verification. Under the proposed draft SOP, banks will have a defined procedure to execute these temporary holds swiftly upon receiving alerts or reports of cyber-enabled fraud, reducing the window of opportunity for fraudsters to liquidate stolen funds.

Feedback Deadline and Next Steps

The central bank has opened a public consultation period to gather feedback from regulated entities, banking industry professionals, consumer advocacy groups, and individual stakeholders. Submissions must be filed on or before October 2, 2026.

Stakeholders can submit their comments through two primary channels provided by the central bank: the ‘Connect 2 Regulate’ portal hosted on the official RBI website, or via email with the subject line ‘Feedback on Draft Reserve Bank of India (Know Your Customer) Amendment Directions, 2026’. Following the evaluation of public feedback, the Reserve Bank will issue finalized directions separately for all regulated entities.

What this means for your money

For ordinary bank customers and digital banking users in India, the proposed RBI framework provides an enhanced safety net against cyber fraud. By standardizing how banks freeze funds tied to reported scams, the measures aim to increase the likelihood of recovering stolen money before cyber criminals can transfer it beyond the reach of law enforcement and banking authorities.

However, the establishment of strict debit hold mechanisms also highlights the importance of maintaining accurate account credentials and responding promptly to bank notifications. Account holders should ensure their KYC details, phone numbers, and email addresses are fully updated with their banks to avoid accidental flagging or to resolve any legitimate verification inquiries quickly if temporary holds are initiated.

Detailed operational clarity in the SOP will help prevent unnecessary disruption for genuine account users while providing banks with clear legal and regulatory coverage when acting against fraudulent activity. Customers should remain vigilant against sharing banking credentials, OTPs, or renting out personal accounts, as participation in mule activity carries serious regulatory and legal consequences.

Frequently asked questions

What is the purpose of the RBI draft KYC amendments? The draft amendments aim to establish a Standard Operating Procedure for banks to place temporary debit holds on bank accounts or funds associated with cyber-enabled fraud and money-mule activity, in compliance with a Supreme Court directive.

Which financial institutions are covered under the draft rules? The draft directions apply to all commercial banks, small finance banks, payments banks, regional rural banks, local area banks, and urban cooperative banks across India.

Until when can stakeholders submit feedback on the draft directions? Stakeholders and members of the public can submit their feedback to the RBI on or before October 2, 2026 through the Connect 2 Regulate portal or by email.

This article is for information only and is not investment advice. Do your own research or consult a licensed adviser before investing.

Based on information published by Reserve Bank of India (RBI). Source: Reserve Bank of India (RBI). Spotted an error? corrections@moneypuran.com