Rs.14 Crore Banking Fraud Exposes Payment Security Gaps

A major cybersecurity incident has raised concerns over India's banking infrastructure after approximately ₹13.97 crore was allegedly siphoned from Central Bank of India's settlement account with the Reserve Bank of India through 187 unauthorised transactions.

The suspicious transfers occurred between October 15 and 17, 2026, with funds reportedly distributed across accounts in 36 banks. Investigators are examining how transactions bypassed established banking controls.

The Mystery of Missing Transaction Records

The most alarming finding is the absence of corresponding transaction records within the bank's core banking, internet banking and branch systems. Investigators reportedly discovered only partial references in Structured Financial Messaging System (SFMS) database logs.

Under normal RTGS procedures, transactions generate identifiable records before settlement. However, the disputed transfers allegedly appeared without standard internal transaction identifiers, raising concerns about possible manipulation of payment messaging workflows.

Suspected Compromise of Banking Infrastructure

The bank suspects unauthorised access involving its SFMS infrastructure and the central messaging environment operated by Indian Financial Technology and Allied Services (IFTAS), an RBI subsidiary. The precise intrusion mechanism remains unconfirmed.

The incident highlights a critical vulnerability: financial institutions may maintain strong customer-facing authentication while remaining exposed through interconnected backend payment systems, service accounts and privileged infrastructure.

Investigation and Regulatory Response

Mumbai Cyber Police have registered an FIR against unidentified individuals. The bank has alerted RBI, IFTAS, CERT-In and the National Critical Information Infrastructure Protection Centre.

Why This Incident Matters

The alleged disappearance of transaction trails raises serious questions about audit integrity, system reconciliation, privileged access and real-time fraud detection across interbank settlement networks.

Banks must strengthen zero-trust controls, independent transaction verification, tamper-resistant logging, continuous behavioural monitoring and automated reconciliation between messaging systems and settlement accounts.

The bigger warning is that authentication alone cannot guarantee transaction integrity. Financial institutions must continuously verify payment instructions, detect abnormal activity and preserve independent forensic evidence.

Ultimately, the Rs.14 crore incident demonstrates why India's digital banking resilience depends on securing not merely customer accounts, but the entire interconnected payment infrastructure.