ENCO Legal | Consumer, Banking & Cyber Law | 31 October 2026

Quick Answer: Can You Get a Refund After a Digital Arrest Scam?

A victim of a digital-arrest scam may have a reimbursement claim, particularly where the bank failed to exercise applicable due diligence or where the RBI’s existing unauthorised-transaction framework limits customer liability. On 29 October 2026, the Supreme Court emphasised that proposed RBI measures should require financial institutions to compensate victims at least for their loss where fraud resulted from institutional due-diligence failure. There is no unconditional automatic refund for every victim. The proposed measures were discussed for notification by 30 November 2026 and operationalisation by 31 December 2026; those dates are not proof of commencement. Court-hearing report.

What Happened in the Supreme Court on 29 October 2026?

The Court heard suo motu proceedings titled In Re: Victims of Digital Arrest Related to Forged Documents, SMW (Crl.) No. 3/2025. The bench of Chief Justice Surya Kant and Justices Joymalya Bagchi and V. Mohana examined institutional safeguards against impersonation and coercive cyber fraud, including proposed RBI KYC Amendment Directions, 2026. The Court stressed prevention of unusual transfers, effective bank accountability and compensation where due-diligence failure contributes to loss. The next hearing was reported for 30 November 2026.

Did the Court order refunds in every case?

No. The reported position concerns compensation where an institution’s failure of due diligence is established. The proposed RBI framework was not yet operative. Individual claims depend on evidence and applicable law.

What other safeguards were discussed?

The Court discussed temporarily suspending anomalous transactions, automated reporting, verification of suspicious activity and stronger accountability for failures. These proposals must be distinguished from already operative banking duties.

What Is a Digital Arrest Scam?

Fraudsters impersonate police, investigating agencies, customs officials, courts or other authorities, often using forged documents and video calls, and threaten a victim with arrest or prosecution unless money is transferred. A purported arrest announced by an unknown caller over WhatsApp or video call is not a substitute for lawful arrest procedures. A demand to transfer money to avoid a so-called digital arrest is a serious warning sign.

What Do Existing RBI Rules Say About Unauthorised Transactions?

RBI Circular DBR.No.Leg.BC.78/09.07.005/2017-18 dated 6 July 2017 sets out customer-liability rules for unauthorised electronic banking transactions. Under specified conditions, a customer has zero liability where loss is caused by contributory fraud, negligence or deficiency on the bank’s part. A qualifying third-party breach may also result in zero liability if the customer reports it within three working days of receiving the transaction communication. For reporting within four to seven working days, prescribed limited-liability rules may apply. Where customer negligence such as sharing payment credentials causes the loss, the circular treats liability before and after reporting differently. RBI’s official circular.

Does the three-working-day rule apply to every digital-arrest scam?

No. Some victims personally authenticate transfers while being coerced. Whether such a transaction is covered by the unauthorised-transaction circular requires analysis; it should not be assumed automatically.

When Can a Bank Be Responsible for a Digital-Arrest Loss?

Failure to detect or act on unusual transactions

A transaction far outside an account’s ordinary pattern may raise questions about monitoring safeguards. Unusual size alone, however, does not conclusively prove a legal breach.

Failure to respond after a fraud report

The timing of customer notification, the bank’s acknowledgement and any later transfers may be important to liability.

Failure to follow applicable customer-protection requirements

Transaction alerts, grievance handling, account safeguards and other operative RBI obligations should be examined against the actual evidence.

Employee collusion or misuse of information

Proven staff misconduct can raise additional legal consequences, but an allegation is not proof. Liability requires the relevant factual and legal findings.

Does the Supreme Court’s Position Create Strict Liability for Banks?

The Court urged stronger enforceable accountability, but the reported compensation formulation is conditional on an institutional due-diligence failure contributing to the fraud. A customer-authenticated transfer may present different legal questions from an unauthorised debit. A final claim must examine the law, transaction records, conduct of the parties and causation.

What Should Victims Do Immediately?

1. Report the financial fraud through 1930

Call the national financial cyber-fraud helpline 1930 promptly. Timely reporting may assist tracing and freezing, but recovery is not guaranteed.

2. Notify the bank

Report the transactions immediately through the bank’s official fraud channel. Ask for a complaint reference, investigation and steps to prevent additional losses.

3. File the cybercrime complaint

Use the official National Cyber Crime Reporting Portal. Supply transaction identifiers, beneficiary information and relevant communications.

4. Preserve evidence

Retain screenshots, forged notices, phone numbers, call logs, transaction statements, messages, complaint acknowledgements and bank responses. Prepare a dated chronology.

How Can You Complain Against the Bank?

First: Written complaint to the bank

Identify each disputed transaction, the fraud circumstances, when the bank was informed and the specific conduct alleged to constitute a deficiency. Request a reasoned written response.

Second: RBI Ombudsman, if eligible

Under the Reserve Bank–Integrated Ombudsman Scheme, 2021, an eligible complainant may generally approach the RBI Ombudsman if the regulated entity rejects the complaint, gives an unsatisfactory response or fails to respond within 30 days, subject to scheme conditions and time limits. Use RBI’s Complaint Management System.

Third: Other lawful remedies

A consumer commission or civil forum may be relevant depending on maintainability, jurisdiction, evidence and any overlapping proceedings. A police complaint investigates the offence; it does not by itself establish a bank’s duty to reimburse.

What Evidence Helps Establish Bank Negligence?

Evidence of the fraud and evidence of bank deficiency are distinct. The former may include impersonation calls and coerced instructions. The latter may involve notification timestamps, the bank’s subsequent response, relevant alerts, account history and records obtainable through lawful complaint or adjudication processes. An unusually large transfer is a potential indicator, not automatic proof.

What If the Victim Personally Approved the Payment?

An OTP, UPI approval or completed digital-loan application may support a bank’s position that the transaction was technically authorised. The victim may contend that coercion or deception vitiated genuine choice and that bank safeguards failed. Those questions are fact-specific. In a separate Karnataka High Court matter concerning an alleged ₹50 lakh digital-arrest loan, the Court reportedly declined to quash proceedings because disputed facts required evidence. That procedural outcome did not finally determine every question of the borrower’s liability. Related case reporting.

Can a Victim Recover the Entire Amount?

Full recovery or compensation may be available in qualifying circumstances, but is not guaranteed. A criminal recovery from fraudsters and a compensation claim against a bank are different routes. The Supreme Court’s October discussion should not be represented as a universal reimbursement order.

What Responsibilities Could Banks Face Under the Proposed Framework?

The Court considered enforceable measures addressing suspicious-transaction detection, temporary intervention, verification, reporting and liability for institutional failures. Any final duties must be assessed against the actual notified RBI directions and subsequent Supreme Court orders; the October discussion alone does not establish every proposed operational requirement.

Frequently Asked Questions

Did the Supreme Court order every bank to refund every digital-arrest loss?

No. The reported compensation approach is tied to an established failure of institutional due diligence.

When was the relevant Supreme Court hearing?

29 October 2026.

What is the case number?

SMW (Crl.) No. 3/2025.

Are the proposed RBI KYC amendments already in force?

They had not been notified as of 31 October 2026.

What implementation dates were discussed?

Notification by 30 November 2026 and operation by 31 December 2026, subject to official action.

Can compensation equal the full loss?

The Court urged compensation of at least the loss where institutional due-diligence failure is found, but individual entitlement depends on applicable law and findings.

What is the cyber-fraud helpline?

1930.

Where can I file a cybercrime complaint?

At cybercrime.gov.in.

Must I inform my bank as well?

Yes. Prompt reporting and documentation are important.

Does sharing an OTP always defeat a claim?

Not necessarily; the applicable rules and facts must be assessed.

Does the RBI three-day rule cover all coerced payments?

No automatic application should be assumed.

Can I complain to the RBI Ombudsman?

Yes, where the complaint meets the scheme’s eligibility and procedural requirements.

Does filing an FIR guarantee reimbursement?

No. Criminal investigation and bank liability are separate questions.

Can a bank rely on the customer’s authentication?

It may raise that argument; the legal result depends on the facts and governing framework.

Does the Supreme Court guarantee recovery from the fraudsters?

No.

Which records should I keep?

Transaction details, communications, complaints, bank responses and the reporting timeline.

Can a consumer commission hear a banking deficiency claim?

Potentially, subject to maintainability and jurisdiction.

Are the proposed safeguards limited to senior citizens?

The reported discussion concerns digital-arrest and cyber-fraud victims more generally, subject to the final framework.

Conclusion

The Supreme Court’s October 2026 proceedings highlight the need for stronger institutional accountability in digital-arrest fraud. They do not establish automatic bank refunds for all victims. Existing RBI customer-liability rules, the legal status of customer-authenticated transfers, evidence of due-diligence failure and future notified regulations must be distinguished. Victims should report immediately, preserve records and pursue the appropriate cybercrime and banking complaint mechanisms.

Legal Authorities and Sources

In Re: Victims of Digital Arrest Related to Forged Documents, SMW (Crl.) No. 3/2025 (29 October 2026 hearing), as reported by Bar & Bench and LiveLaw; RBI Circular DBR.No.Leg.BC.78/09.07.005/2017-18, 6 July 2017; Reserve Bank–Integrated Ombudsman Scheme, 2021 (RBI CMS); National Cyber Crime Reporting Portal; Related Karnataka High Court reporting.

Source-Verification Note

The existing RBI circular and government reporting portals are primary sources. The Supreme Court’s 29 October hearing was cross-checked through contemporary specialist reporting; its complete signed order was not independently retrieved for this article. No unverified order paragraphs or finalised RBI amendments are asserted.

Legal Disclaimer

This article is for general legal information and education only. It is not individual legal advice, an invitation to engage legal services or an advocate-client relationship. Bank liability, reimbursement and criminal remedies depend on applicable law and specific facts. No outcome is guaranteed.

ENCO Legal | Legal Insights