The Soaring Cost of Digital Fraud
The push for tighter regulation is not happening in a vacuum. India is facing a digital fraud epidemic that has escalated in both scale and sophistication. According to data from the National Cyber Crime Reporting Portal, approximately 28 lakh cyber frauds
were reported in 2025 alone, involving staggering sums of money. These are not simple nuisance calls; they are highly organised operations. Scammers now use artificial intelligence to create deepfake videos, clone voices, and craft hyper-personalised phishing messages that are increasingly difficult to detect. From fraudulent KYC update requests to impersonating officials in 'digital arrest' scams, these activities erode trust in the digital ecosystem and cause significant financial and emotional distress to millions of citizens.
A New Regulatory Armoury
In response, Indian authorities have launched a coordinated, multi-agency offensive. This isn't just one ministry's job; it's a joint effort involving the Reserve Bank of India (RBI), the Telecom Regulatory Authority of India (TRAI), the Ministry of Electronics and Information Technology (MeitY), and law enforcement. A key development is the establishment of the India Digital Payment Intelligence Corporation (IDPIC), an entity created to share real-time fraud intelligence among banks and financial institutions using AI and big data analytics. The new Telecommunication Act, 2023, also empowers the government to mandate that telecom operators deploy AI-based fraud detection systems. This signals a strategic shift from merely reacting to incidents to building a proactive, technology-driven defence system against cybercriminals.
RBI's Proposed Consumer Safeguards
The RBI has been particularly active, recently floating a discussion paper with several consumer-centric proposals to interrupt the fraud cycle. One of the most talked-about ideas is introducing a mandatory one-hour time lag for digital payments exceeding ten thousand rupees. During this window, the transaction would be provisionally debited, but the payer would retain the option to cancel it. Other proposals include giving users a 'switch on/off' facility for different digital payment modes and setting transaction limits at the account level. For vulnerable populations, the RBI has suggested an extra layer of authentication from a trusted person for high-value transactions conducted by senior citizens or persons with disabilities. These measures are designed to put control back into the hands of the consumer.
The Tightrope Walk for Legitimate Business
Here lies the central challenge. While these security measures are necessary, the technology industry and digital businesses worry about the potential for unintended consequences. The core fear is that overly broad or cumbersome regulations could introduce friction into legitimate transactions, harming user experience and slowing down the digital economy. Some companies argue that the new rules place an excessive compliance burden on them. For instance, the online marketplace IndiaMART has legally challenged recent TRAI amendments, contending they could negatively affect its business communications. The government's increased powers under new laws like the Telecom Act are also a point of concern for tech giants, who fear that administrative delays and heightened scrutiny could impact their operational viability in the country.
Striking a Difficult Balance
Experts agree that the fight against fraud requires a whole-of-ecosystem approach. A scam is rarely confined to a single platform; it often involves a chain of fraudulent SIM cards, mule bank accounts, fake websites, and messaging apps. Therefore, isolated interventions are often ineffective. The new strategy focuses on coordinated action across telecom operators, banks, and technology platforms to disrupt these fraud chains before money is lost. However, this raises complex questions about liability, data sharing, and privacy. Digital rights advocates also caution that powers designed to take down scam content could potentially be misused to stifle legitimate expression. The government's task is to calibrate these powerful new tools precisely to target criminals without infringing on the rights of citizens or the dynamism of the digital market.
