Instrument 34 | E. RBI - Banking / Fintech / Payments / Financial AI

DIRECTIONBINDING RBI DIRECTION

RBI - Commercial Banks (Fraud Risk Management) Directions, 2026

Reserve Bank of India under Sections 21 and 35A Banking Regulation Act, 19492026Binding RBI DirectionBanking

AI / PRIVACY / CYBER RELEVANCE

Relevant to AI/ML fraud analytics, anomaly detection, behavioural monitoring and financial-data governance.

AI: Very HighPrivacy: HighCybersecurity: High

READ FIRST

  • Chapters II - III
  • EWS/RFA framework
  • governance, transaction indicators, data analytics and fraud reporting

PURVIEW

Sets RBI’s fraud-risk management requirements for commercial banks, including governance, accountability, fraud-risk identification, prevention, early warning, monitoring, reporting and institutional response. The Directions therefore provide a regulatory context in which AI-based fraud controls must be governed, validated and embedded within the bank’s broader fraud-management framework rather than treated as autonomous decision tools. For privacy, the framework is important because fraud analytics can process extensive transaction and customer data, making security, access control, audit trails and responsible use of automated detection particularly significant.

Classification and legal status. Binding Directions for commercial banks in scope; effective immediately upon issuance.

Open document Download PDF Copyright remains with the publishing authority. For informational purposes only.

Read the official document

This browser cannot display the PDF in the page. Open the document or download the PDF.

Keywords

fraud riskearly warning signalsAI fraud analyticsbanks

Source note

RBI Directions dated 31 July 2026, official copy reviewed.

Legal status indicates whether this resource is legislation, delegated regulation, regulatory direction, guidance, policy, research or technical material. Inclusion in this library does not by itself make a document legally binding.

This tool provides research navigation only and does not constitute legal advice or a determination of legal applicability.

Back to the framework library