Article
"Your Bank Pays Unless It Can Prove Otherwise": The Supreme Court Rewrites The Cyber-Fraud Liability Rulebook
A victim of a "digital arrest" scam usually does not lose money because someone has stolen a password. The victim is frightened, over hours or days, by callers impersonating the police, a central agency or even a court, and then transfers the money personally, from a genuine device, using genuine credentials. Under the way Indian banking regulation has so far allocated losses, that victim has had very little protection, because the transaction was authorised by the customer. On 29 October 2026, the Supreme Court indicated that this will no longer be enough for the bank.
Legitpro Law





