The Kangra District Consumer Commission has held a public and a private bank liable for a cyber fraud loss. The banks must now pay ₹1.74 lakh due to delayed action and KYC deficiencies.
- The victim is to receive ₹1.39 lakh in unrecovered funds plus ₹35,000 in compensation and costs.
- Both a public sector bank (SBI) and a private bank were held jointly liable.
- The ruling applies the RBI's 'zero-liability' framework for timely reporting.
- Failure to maintain proper KYC records was identified as a major service deficiency.
In a significant ruling, the Kangra District Consumer Commission has held a public sector bank and a private bank responsible for the financial losses suffered by a victim of cyber fraud. The bench, comprising President Hemanshu Mishra and members Arti Sood and Narayan Thakur, directed the banks to jointly compensate the complainant for the unrecovered amount of ₹1.39 lakh, along with ₹25,000 in compensation and ₹10,000 in litigation costs.
The incident dates back to October 13, 2023, when ₹2.02 lakh was illegally transferred from the complainant's account to an account held by Mastufa Ali. Despite the complainant reporting the fraud to State Bank of India (SBI) within 24 hours, the commission found that SBI failed to communicate promptly with the recipient's bank to freeze the fraudulent account, allowing the perpetrator to withdraw the funds.
Why This Matters
BozokMedia analysis shows that this judgment sets a critical precedent for the Indian banking sector. It reinforces that banks cannot hide behind the excuse that a victim is not their direct customer if the fraudulent money flows through their systems. It places a heavy burden of accountability on both remitting and beneficiary banks.
Banks must realize that in the era of instant digital transfers, a delay of even a few hours in freezing a suspicious account can result in irreversible financial loss to the customer.
The private bank involved was found to be in gross violation of KYC norms. The commission noted that the bank failed to produce essential documents like the PAN card and address proof for the account holder, Mastufa Ali. The commission characterized the account as a "mule account," likely opened without proper verification to facilitate criminal activities.
Historical Background: Under the Reserve Bank of India (RBI) circular dated July 6, 2017, customers are protected by a 'zero-liability' framework. If an unauthorized transaction is reported within 72 hours, the customer's liability is limited to zero, shifting the burden of loss onto the banking institution.
| Factor | Complainant Action | Bank Deficiency |
|---|---|---|
| Reporting Speed | Within 24 Hours | Delayed email/communication |
| KYC Verification | Compliant | Missing PAN/Address Proof |
| Total Liability | Zero (as per RBI) | Jointly liable for ₹1.74 Lakh |
Frequently Asked Questions
1. What is the RBI's zero-liability policy?
It protects customers from losses due to unauthorized electronic transactions if they report the fraud immediately.
2. What should I do if I suspect a fraudulent transaction?
Immediately contact your bank, report it on the National Cyber Crime Reporting Portal, and call the helpline at 1930.
