This is an interim directions order in continuing suo motu proceedings, not a final adjudication. It orders no compensation to any victim and finds no financial institution liable: it directs the RBI's proposed regulatory measures to require compensation where a fraud is established to have occurred because of a financial institution's failure of due diligence. The matter returns on 23 November 2026.
- Case
- In Re: Victims of Digital Arrest Related to Forged Documents
- Court
- Supreme Court of India
- Decision
- Bench
- Surya Kant; Joymalya Bagchi; V. Mohana
- Case numbers
- Suo Motu Writ Petition (Criminal) No. 3/2025
- Outcome
- Interim directions order in continuing suo motu proceedings: RBI to file a list of authorised financial institutions; law-enforcement agencies to report FIR and investigation status; WhatsApp and other intermediaries to apprise the Court of preventive measures; matter listed on 23 November 2026.
Supreme Court issues fresh directions in the digital-arrest suo motu case
On 29 October 2026, the Supreme Court issued further directions in its continuing suo motu proceedings on victims of digital-arrest scams, In Re: Victims of Digital Arrest Related to Forged Documents. A bench of Chief Justice Surya Kant and Justices Joymalya Bagchi and V. Mohana directed WhatsApp LLC and other concerned intermediaries to apprise the Court of the measures they propose to undertake to prevent digital-arrest scams and related cybercrimes, and to submit their proposals simultaneously to the Indian Cyber Crime Coordination Centre (I4C).
The Court also directed the Reserve Bank of India to submit a list of all authorised financial institutions before it on the next date of hearing, and directed all law-enforcement agencies in the States and Union Territories to submit the status of first information reports registered so far in digital-arrest cases and the investigations undertaken. The matter is posted for further consideration on 23 November 2026. The order, dated 29 October 2026, was reported on 10 November 2026.
A suo motu case built on the amicus curiae's note and the Union's response
The proceedings are suo motu — the Court took cognisance of the issue itself — and were heard with several tagged matters, including Writ Petition (Criminal) No. 15/2026, Special Leave Petition (Criminal) No. 4942/2026, Suo Motu Writ Petition (Criminal) No. 3/2026 and Writ Petition (Criminal) No. 276/2026. The amicus curiae, senior advocate N.S. Nappinai, had placed suggestions and proposed directions before the Court in a note dated 14 October 2026, and the Attorney General for India had placed on record a note dated 28 October 2026 suggesting certain directions on behalf of the Union of India.
The Court recorded that it was inclined to issue appropriate directions on those suggestions, but considered it appropriate, in the first instance, to examine the Reserve Bank of India's proposed Know Your Customer Amendment Directions, 2026, which are proposed to be notified by 30 November 2026 and operationalised by 31 December 2026.
Bank rules must require compensation where the bank's own failure let the fraud happen
The Court reiterated and emphasised that the regulatory measures proposed by the Reserve Bank of India must mandate and incorporate suitable provisions requiring financial institutions to indemnify victims of digital-arrest scams and other cyber frauds and to pay suitable compensation not less than the amount lost by the customer, where it is established that the fraud or crime occurred due to the failure of the financial institution to exercise due diligence in preventing or reporting the act or incident.
The Court also emphasised preventive safeguards that must be mandated for every financial institution. These may include temporarily suspending unusual or suspicious transactions inconsistent with the account's past transaction history, automatically intimating such transactions to the nearest police station, and subsequently physically verifying the reported transactions to ascertain their genuineness. To ensure effective implementation of the proposed regulatory measures and its own directions, the Court directed the RBI to submit a list of all authorised financial institutions before it on the next date of hearing.
Police must report FIRs and investigations; platforms must show their plans
The order's other directions reach the police and the messaging platforms. All law-enforcement agencies in the States and Union Territories were directed to submit the status of the FIRs registered thus far in connection with digital-arrest scam cases and the resultant investigation undertaken, and to suggest appropriate measures for the prevention, detection and prosecution of such cases. The Directors General of Police of all States and Union Territories are to ensure compliance, and the information furnished to the Court must simultaneously be forwarded to the Indian Cyber Crime Coordination Centre.
WhatsApp LLC, described in the order as a Meta company, and other concerned intermediaries were directed to apprise the Court of the measures they propose to undertake to prevent digital-arrest scams and related cybercrimes, and to submit their proposals to the I4C at the same time. The Court also allowed an intervention application, IA No. 167477/2026, permitting the applicant to intervene in the matter.
BANTHRY ANALYSISWhat this order does not decide
This is an interim directions order in continuing proceedings, not a final judgment on liability for any digital-arrest fraud. It does not order any bank or platform to pay compensation to any victim, and it does not find any financial institution to have failed in due diligence. What it does is set the content of the RBI's proposed regulatory measures: those measures must require indemnification and compensation of not less than the amount lost where a fraud is established to have occurred because of a financial institution's failure to exercise due diligence in preventing or reporting it.
The Court has also not yet issued the directions it is inclined to pass on the amicus curiae's suggestions: it first wants to examine the RBI's Know Your Customer Amendment Directions, 2026, which are proposed to be notified by 30 November 2026. The preventive safeguards it emphasised — suspending unusual transactions, intimating the police, physically verifying transactions — are framed as safeguards that must be mandated, and the full picture of what the RBI, the police and the intermediaries will propose will only emerge at the next hearing on 23 November 2026.
BANTHRY ANALYSISFor law students
This order is a useful study in how the Supreme Court uses continuing suo motu proceedings to supervise a regulatory response. The Court has not decided a dispute between two parties; it took cognisance of a recurring fraud — digital-arrest scams — and is now steering the institutions that can stop it: the banking regulator, the police, and the messaging platforms.
Note the three different kinds of direction, and the different verbs. The RBI is directed to file a list and told what its proposed measures must contain — the Court is shaping regulation before it is notified. The police are directed to report FIRs and investigations and to suggest measures, with their Directors General made responsible for compliance. The intermediaries are directed to apprise the Court of what they propose to do — the Court is asking for their plans, not yet prescribing them. And note the information architecture: everything filed in Court must go simultaneously to the I4C, the national coordination centre, so the Court's record and the enforcement machinery work from the same material. The test to watch on 23 November is whether the RBI's proposed KYC directions, and the platforms' proposals, satisfy the Court's compensation condition in paragraph 4.
READING PROMPTSQuestions for a closer reading
- What did the Supreme Court direct the RBI to place before it on the next date of hearing, and why?
- What must the RBI's proposed regulatory measures require financial institutions to do for victims, and on what condition?
- What did the Court direct WhatsApp and other intermediaries to do, and to whom must their proposals also be sent?
