[Answered] Analyze the significance of shifting from unauthorized to coercion-based digital fraud frameworks. Evaluate the operational challenges of the RBI’s shared-risk compensation model.

Introduction

With UPI processing over 18 billion monthly transactions and the Economic Survey 2025–26 highlighting rising cyber fraud risks, RBI’s 2026 framework redefines consumer protection by recognising coercion-driven fraud beyond conventional unauthorized transactions.

Significance of the Shift from ‘Unauthorized’ to ‘Coercion-Based’ Fraud Framework

1. Recognition of Behavioural Cybercrime: Earlier framework covered only transactions executed without customer authorization. New framework recognises consent obtained through fraud, deception or coercion as legally defective. Aligns banking law with principles of free consent under the Indian Contract Act. Example: Digital Arrest scam.
2. Consumer-Centric Regulatory Evolution: Acknowledges victims as targets of organised social engineering instead of treating them as negligent customers. Reinforces RBI’s objective of strengthening trust in DPI. Example: Fake RBI/KYC calls.
3. Strengthening Financial Inclusion: Protects first-time digital users, elderly citizens and rural customers with limited cyber awareness. Encourages wider adoption of UPI and digital banking. Example: Senior citizen phishing.
4. Adapting to Emerging Cyber Threats: Modern cybercrime relies predominantly on psychological manipulation rather than malware. Framework reflects evolving fraud patterns involving: OTP theft, QR-code scams, screen-sharing apps and AI-enabled voice cloning. Example: Deepfake impersonation.
5. Enhancing Trust in India’s Digital Economy: A limited compensation mechanism reduces fear of digital payments, supports Digital India, cashless economy and fintech expansion. Example: Small-value UPI users.
6. Global Best Practice in Consumer Protection: Moves towards risk-sharing similar to evolving consumer liability standards in advanced payment systems. Complements FATF recommendations on consumer resilience. Example: Payment fraud safeguards.
7. Constitutional Perspective: Protects Article 21 and promotes equitable digital access. Strengthens substantive fairness in digital governance. Example: Inclusive Digital India.

Operational Challenges of RBI’s Shared-Risk Compensation Model

1. Moral Hazard: Partial reimbursement may reduce consumer vigilance. Users may become less cautious while sharing credentials. Example: Repeated phishing.
2. Determining Customer Negligence: Banks must distinguish between: genuine coercion, voluntary negligence, fraudulent claims and high evidentiary burden. Example: OTP sharing dispute.
3. Interbank Friction: While the RBI has given banks up to 45 days for domestic cases and 60 days for cross-border fraud resolution, tracking the movement of stolen funds across multiple mule accounts at different beneficiary banks can trigger administrative disputes over who carries the ultimate liability.
4. Exclusion of High-Value Frauds: Framework applies only to losses below ₹50,000. Larger fraud victims remain outside the compensation net. Example: Investment scams.
5. Administrative Delays: Multiple verification stages may delay settlements. Cross-border transactions require up to 60 days. Example: International gateway fraud.
6. The Five-Day Reporting Window: To qualify for compensation, victims must file reports within five calendar days on both the National Cyber Crime Portal (1930) and with their bank.
7. Fiscal Sustainability: Shared-risk model may become financially expensive if fraud volumes continue rising. Long-term viability depends upon prevention rather than reimbursement. Example: UPI growth.
8. Data Privacy Concerns: Fraud investigation requires greater inter-bank data sharing. Must remain compliant with the Digital Personal Data Protection Act, 2023. Example: Customer profiling.

Way Forward

1. Technological Measures: Deploy AI-driven fraud detection across banks (e.g., MuleHunter.AI). Real-time transaction risk scoring using Indian Digital Payment Intelligence Platform (IDPIC). Behavioural analytics and device fingerprinting and mandatory deepfake detection tools.
2. Regulatory Measures: Expand coverage gradually beyond ₹50,000 after pilot evaluation. Introduce differentiated compensation for vulnerable groups and standardise fraud reporting across all banks.
3. Institutional Measures: Strengthen Cyber Fraud Coordination Centre. Enhance inter-bank information sharing and dedicated cyber forensic units for regional banks.
4. Consumer Protection: Nationwide cyber awareness campaigns. Default transaction cooling-off period for suspicious transfers and mandatory multilingual fraud warnings.
5. Economic Measures: Incentivise fintech innovation in fraud prevention. Encourage cyber insurance for retail customers and link compensation framework with Digital Financial Literacy Mission.

Conclusion

As Dr. C. Rangarajan observed, financial stability ultimately rests on public confidence. RBI’s shared-risk framework must evolve alongside robust cyber resilience, ensuring innovation, consumer protection and trust reinforce India’s digital economy.