RBI Elevates Fraud Risk to a Governance Priority

Blog
August 3, 2026

Home - RBI Elevates Fraud Risk to a Governance Priority

Brief Overview:

Fraud risk is now central to governance and institutional accountability. RBI’s new 2026 directions make fraud prevention a core governance priority, requiring banks to strengthen board oversight, early warning systems, monitoring, escalation and reporting.

The directions also widen the fraud-control perimeter. Red flags, legal checks, professional accountability and RBI system access now sit within one supervisory chain, meaning fraud reviews will cut across governance, technology, credit, legal and compliance, not just vigilance teams.

Technical Details:

Key initiatives:

1) Board-led fraud governance: Banks must adopt a board-approved fraud policy, constitute an ‘Special Committee of the Board for Monitoring and Follow-up of cases of Frauds’ (“SCBMF”). The SCBMF shall comprise a minimum of 3 (three) members of the board, consisting of a whole-time director and a minimum of 2 (two) independent directors / non-executive directors. The committee shall be headed by one of the independent directors / non-executive directors.

2) Sharper Early Warning Signals (“EWS”) / Red Flagging of Accounts (“RFA”) controls: EWS and RFA frameworks must be system-integrated and analytics-led. The bank shall report an account, with an aggregate exposure of INR 30,000,000 and above, once red flagged in ‘Red Flagged Account Return’ on the RBI’s Central Repository of Information on Large Credits (CRILC) platform within 7 (seven) days of being red flagged.

3) Natural justice built in: Banks must issue show-cause notices to persons (including third party service providers and professionals, inter-alia, architects, valuers, chartered accountants, advocates and other professionals / service providers), entities and their promoters / whole-time and executive directors against whom allegation of fraud is being examined. The bank shall provide at least 21 (twenty-one) days to respond and pass reasoned orders before declaring fraud.

4) Wider accountability net: In case an account is identified as a fraud by any bank, the borrowal accounts of other group companies, in which one or more promoter(s) / whole-time director(s) are common, shall also be subjected to examination by regulated entities (REs) concerned from fraud angle under the said directions.

5) Stronger legal controls: The bank shall subject the title deeds and other related title documents in respect of all credit facilities of INR 50,000,000 and above to periodic legal audit and reverification, till the loan is fully repaid.

6) Faster reporting: Frauds must be reported through the fraud monitoring returns to RBI within 14 (fourteen) days, with nodal officers coordinating law-enforcement escalation.

JC takeaway:

Banks will need to demonstrate how alerts were identified, investigated and acted upon. Board oversight, fraud surveillance, EWS, credit controls, legal review, audit, compliance and vigilance must operate as one connected control environment. As RBI shifts from remediation to prevention, banks should proactively strengthen monitoring, analytics, escalation and ownership frameworks.

For further details, please see:

For any queries/clarifications, please feel free to ping us and we will be happy to chat: