The Reserve Bank of India (RBI) has proposed new measures to combat financial fraud in digital payments, including lagged credit for authorised push payments and a 'kill switch' for users to disable all digital transactions.
Two-factor authentication for all digital transactions, including UPI, is now mandatory in India, as per RBI guidelines, to enhance security and curb fraud.
It will enable real-time intel sharing among banks and other financial sector participants to strengthen customer protection against digital fraud.
The highest number of frauds was reported under the card, Internet, and digital payments categories in FY24 and FY25. 'Advances' accounted for the largest share (85.5 per cent) in FY26.
Authorised push payment frauds have emerged as a growing challenge globally as scammers increasingly rely on social engineering techniques to persuade users to transfer money voluntarily, making recovery more difficult even when transactions are authenticated.
Out of all the reported digital payment frauds in India, over half (55 per cent) were United Payments Interface (UPI)-related, a new report released on Tuesday revealed. Another 18 per cent are card related, 12 per cent are related to internet banking and nine per cent are from phishing calls. Most of the UPI-related frauds, however, have a low ticket size.
Three alleged cyber fraudsters, including the mastermind, have been arrested in Gorakhpur for operating a fake merchant QR code racket. They used forged documents and mule accounts to channel money from cyber crimes, with transactions worth crores of rupees linked to cases across several states.
The Reserve Bank of India (RBI) has introduced its 'Payments Vision 2028' document, outlining initiatives to enhance digital payment security, introduce electronic cheques, and expand regulatory oversight to include e-commerce entities.
Customers will qualify for compensation even if they mistakenly share the OTP.
Bhubaneswar police have busted a fraudulent digital escort service racket, arresting four individuals for allegedly misusing women's photographs on social media and cheating customers through online payments. The investigation, initiated by a woman's complaint, led to the seizure of digital evidence and a public advisory against such scams.
The amount involved in banking system frauds surged to Rs 21,515 crore in the first half of FY26, up 30 per cent from the same period last year, even as the number of frauds fell 2.8 times to 5,092.
A 20-year-old man was arrested for allegedly posing as an employee of a digital payment platform and duping shopkeepers in East Delhi by claiming to check defective sound boxes.
'It is a tradeoff between convenience and fraud prevention.'
From April 1, 2026, the Reserve Bank of India's new authentication directions modernise how every digital payment you make must be verified -- and place the burden of security squarely on your bank, not on you.
Delhi Police dismantled an interstate cyber fraud network involved in routing illicit funds through bank account kits, SIM cards, and ATM credentials, leading to the arrest of three key individuals from Haryana and Himachal Pradesh.
'The focus needs to shift towards the ability to collect payments, particularly in tier-3 to tier-4 areas where acceptance is still lacking.'
Gurugram police have arrested five individuals in connection with a Rs 42.92 lakh digital arrest scam. The fraudsters posed as CBI officers, intimidated a victim, and coerced them into transferring a large sum of money. The arrested individuals include account holders and those who withdrew the defrauded cash.
With digital adoption fast gaining currency, India is likely to see retail digital payments double to $7 trillion by 2030 from current levels, a study by Kearney and Amazon Pay said. In the report 'How Urban India Pays', Kearney-Amazon Pay said strong adoption of digital payments in online purchases has potentially led to a permanent shift in consumer behaviours, fuelling offline adoption as well.
While opening new accounts, banks can check if the name appears in any mule data. In case it does, the bank can conduct enhanced due diligence.
The proposed solution is a one-hour delay for digital transactions exceeding Rs 10,000, particularly when the transfer is made to a new or unverified beneficiary. The idea is simple -- give users a window to reconsider, detect fraud or alert their bank before the funds are irretrievably transferred.
Gujarat police have uncovered cyber frauds worth Rs 2,289 crore and arrested 638 individuals as part of 'Operation Mule Account 1.0', a state-wide crackdown on online criminals launched in 2025.
Cyber intelligence firm CloudSEK reports that online fraudsters are using a new toolkit called 'Digital Lutera' to bypass security features of UPI apps and carry out fraudulent financial transactions.
The Enforcement Directorate (ED) has identified a Grenadian man based in Dubai as the 'beneficial owner' of a Delhi-based company involved in a large-scale betting, gaming, and cyber fraud-linked money-laundering operation in India.
OTP scams accounted for over one-fourth of all cyber frauds.
Delhi Police have arrested a man from Rajasthan for allegedly running an online shopping fraud racket, cheating people through fake social media advertisements offering discounted branded suits and sarees.
Dark patterns are no longer just a consumer protection concern, but a broader macroeconomic challenge affecting the long-term sustainability of India's digital commerce ecosystem.
Mumbai Police's 1930 cyber helpline has successfully intercepted and frozen over 101 crore defrauded from citizens in the last five months, preventing significant financial losses.
We propose an expert group be set up to form a national strategy on digital fraud. This group would bring together skills in financial regulation, security economics, cyber defence, and public communications, and an understanding of the Indian financial and security systems. It should lay the foundations of a coordinated approach by the Indian State in fighting digital fraud, suggest Ajay Shah and Nandkumar Saravade.
Delhi Police have dismantled a cyber fraud racket involving malicious mobile applications, arresting two individuals, including the alleged mastermind from Uttar Pradesh. The accused developed and supplied 'FUD' APK files to cyber fraudsters across the country, enabling them to gain remote access to victims' phones and siphon off money.
Delhi Police have arrested two men from Goa, claiming to have busted an interstate cyber-fraud-and-cash-conversion racket. Transactions worth nearly Rs 40 lakh routed through the network have been uncovered.
By enabling real-time data sharing, the platform will help prevent scams and ensure secure transactions.
A 61-year-old man from Mangaluru was allegedly cheated of Rs 2.07 crore by cyber fraudsters posing as officials of central investigative agencies in a 'digital arrest' scam, police said.
Rajasthan Police have issued an advisory warning citizens about potential cyber fraud attempts disguised as part of the ongoing digital census. Scammers may use various methods, including fake calls, messages, and in-person visits, to steal personal and financial information.
Delhi Police have dismantled an interstate cyber fraud syndicate, arresting 14 individuals allegedly involved in fraudulent transactions exceeding Rs 8 crore. The accused targeted job seekers with fake work-from-home opportunities via social media and job portals.
Google Pay, PhonePe, and Paytm may deliberately delay transactions, issue fraud alerts, and require an extra layer of user confirmation before processing any transactions that are likely to be classified as fraudulent.
Only bona fide victims would be compensated by banks within five days of receiving the complaint.
A 32-year-old man has been arrested in Delhi for allegedly defrauding a resident of 2 lakh under the guise of selling a second-hand car online. The accused impersonated an employee of a reputable online car sale platform to gain the victim's trust.
Police in Himachal Pradesh have arrested five individuals for allegedly assaulting a man and forcing him to transfer money via UPI.
Uttar Pradesh DGP Rajeev Krishna stated that the state's law and order situation has significantly improved, with criminals losing their former confidence. He warned against anti-social elements using social media to intimidate and discussed ongoing probes into the Ayodhya Ram Mandir irregularities and the extradition of a drug trafficking kingpin. The DGP also highlighted the rising challenge of cybercrime and police efforts to combat it.
Delhi Police have dismantled an interstate cyber fraud racket that deceived individuals with false promises of overseas jobs and visa services, leading to the arrest of three suspects.
