The Reserve Bank of India (RBI) has proposed a new framework under which banks will temporarily freeze only the disputed transaction amount, rather than the entire account, when unusual transfers of Rs.1000 or more are flagged as potentially linked to mule accounts or cyber fraud. Banks will be required to use AI-based transaction monitoring systems to identify transfers that are sudden, disappropriate to a customer’s declared profile, or linked to a known cyberfraud network.

 

The draft directions are scheduled to take effect on 1st April 2027, although banks can adopt them earlier. According to RBI, the framework follows the Supreme Court’s order dated 4th August 2026, directing it to prescribe and circulate an SOP for temporary debit holds on amounts or accounts linked to money-mule activity and cyber-enabled fraud. RBI’s proposed rules for suspected money-mule accounts will replace the drastic approach of freezing an entire account with a more targeted approach. The draft amendment directions, issued for public comments, amend existing instructions on bank account operations and money mules under KYC directions 2025.   

 

The new procedure would give customers 20 calendar days to establish the legitimacy of a transaction by providing proof of Identity, its context or documents showing the source of the funds.  Banks will then have 10 calendar days to assess the explanation and supporting evidence. If the account holder’s explanation is satisfactory, the hold will have to be lifted immediately.

 

If the customer fails to respond within 20 days, or the explanation does not dispel the suspicion of Cyber fraud, the bank will have to hand the case to the jurisdictional police through the NCRP/CFCFRMS portal. It cannot simply keep the funds frozen indefinitely. The onus then shifts to law enforcement, which would have 30 days from the referral to issue a formal statutory restraint order.