RBI Proposes New Rules for Money Mule Accounts: Temporary Debit Holds for Cyber Fraud
The Reserve Bank of India has proposed new KYC provisions introducing a uniform, time-bound procedure for banks to place temporary debit holds on suspected money mule accounts and transactions linked to cyber-enabled financial fraud.
The proposed framework comes after the Supreme Court’s August 4, 2026 order, which directed the RBI to adopt and circulate a Standard Operating Procedure (SOP) for banks dealing with amounts or accounts linked to money-mule activity and cyber-enabled financial fraud.
The proposals are contained in the Draft Reserve Bank of India (Know Your Customer) Amendment Directions, 2026.
📲 STAY CONNECTED WITH INSIGHTFULX
Get the latest Banking, Finance & Union updates directly on your phone.
🟢 WhatsApp 🔵 Telegram 🔴 YouTube
🔴 What is a Money Mule Account?
A money mule account is an account used, knowingly or unknowingly, to receive, layer or transfer proceeds of cyber-enabled financial fraud on behalf of another person.
The RBI’s proposed framework specifically focuses on accounts that may be used in fraud schemes such as:
- Phishing
- Identity theft
- Smurfing
- Other cyber-enabled financial frauds
Banks would be required to strengthen transaction monitoring and identify accounts that may be operating as money mules.
🏦 What is a Temporary Debit Hold?
A Temporary Debit Hold would allow a bank to temporarily restrict debits from a suspected transaction or account while the bank verifies whether money-mule activity or cyber-enabled financial fraud is involved.
Importantly, the proposed framework distinguishes between placing a hold on a specific suspected amount/transaction and placing a hold on the entire account.
The account-level hold is intended to be used only as a last resort and in exceptional circumstances under the bank’s internal policy.
⚡ What Will Happen When a Suspicious Transaction is Detected?
The proposed SOP lays down a specific process.
Step 1 — Temporary Debit Hold
Once the bank identifies a suspected money-mule transaction or account through its transaction-monitoring system or internal policy, it shall place a temporary debit hold immediately.
If the entire account is identified as a suspected money mule account, the hold may be placed on the entire account.
Step 2 — Customer Notification
The bank must notify the account holder about the temporary debit hold.
The communication should mention:
- The reason for the hold
- The process for removal
- Contact details of the concerned bank officer
Where digital communication is available, notification is to be made immediately; otherwise, it is to be made by the end of the next day.
⏳ Customer Gets 20 Days to Explain
The proposed SOP gives the account holder 20 days from the date of the temporary debit hold to submit an explanation or justification regarding the genuineness of the transaction or account.
After receiving the explanation, the bank has to examine it and conduct the necessary due diligence.
If the explanation is satisfactory
The bank should remove the temporary debit hold immediately and notify the customer.
If the explanation is not received or is not satisfactory
The bank may continue the temporary debit hold and report the matter to the Jurisdictional Police Authority through NCRP-CFCFRMS, along with the reasons.
The bank must take its decision:
- Within 10 days of receiving the customer’s explanation, or
- Within 30 days from the date of the temporary debit hold if no explanation is received.
🛡️ What Happens After the Matter is Referred to Police?
If the matter is referred to the Jurisdictional Police Authority, the bank has to wait for any instruction or direction from the Law Enforcement Agency (LEA) or Competent Authority.
If such an instruction is received within the prescribed period, the bank must act on it immediately.
However, if no instruction or direction requiring continuation of the debit hold is received within 30 days from the date of reference, the bank would have to remove the temporary debit hold on the 31st day from the date of reference.
⏱️ Maximum Duration of Temporary Debit Hold
The draft SOP specifies that, in the absence of a contrary instruction from an LEA or Competent Authority, the maximum duration of a temporary debit hold would be:
60 DAYS
This comprises:
Up to 30 days for the initial explanation, examination and decision process
+
Up to 30 additional days for the LEA/Competent Authority stage.
This time-bound mechanism is intended to balance fraud prevention with protection of genuine customers from prolonged restrictions.
🤖 Role of AI/ML in Identifying Suspicious Transactions
The draft defines a Suspected Money Mule Transaction as a transaction of ₹1,000 or above flagged by the bank’s transaction-monitoring systems, including AI/ML-based tools, based on specified indicators.
These indicators can include transactions that:
- Are unusual or disproportionate to the customer’s declared profile, or
- Have a linkage to an account already reported as a money mule or fraudulent account.
This brings technology-driven transaction monitoring into the proposed framework for identifying potential cyber-fraud activity.
🏦 Which Banks Will Come Under the SOP?
The proposed SOP applies to:
- Commercial Banks
- Small Finance Banks
- Payments Banks
- Regional Rural Banks
- Local Area Banks
- State Bank of India
- Urban Cooperative Banks
Certain special-purpose accounts are excluded, including:
- Nodal accounts
- Pool accounts
- Escrow accounts
- Other special-purpose accounts such as dividend and share-capital accounts.
📋 Banks Will Need an Internal Policy
Banks will be required to establish an internal policy covering areas such as:
- Technology for identifying suspected money-mule and cyber-fraud transactions
- Circumstances for placing and removing temporary debit holds
- Customer communication procedures
- Integration with the MHA’s NCRP-CFCFRMS portal
- Customer grievance redressal
The policy should also use objective parameters to minimise the risk of genuine transactions or accounts being wrongly flagged.
📝 What About Record Keeping?
Banks will have to maintain a centralised MIS containing details such as:
- Date and reasons for the temporary debit hold
- Communications with the account holder
- References and reports to LEAs
- Directions received from authorities
- Removal or continuation of the debit hold
The relevant records must generally be retained for at least five years from the date of placing the temporary debit hold.
Where an account is closed, the records must be retained for at least 10 years from the date of closure.
Banks will also continue to have their existing obligation to file Suspicious Transaction Reports (STRs) with FIU-IND.
📅 When Will the New Directions Come Into Effect?
The draft directions state that the amendments will come into effect from:
April 1, 2027
However, a bank may choose to implement the SOP earlier.
🔎 Why This Matters
The proposed framework creates a more clearly defined process for dealing with suspected money-mule accounts.
For banks, it means stronger monitoring, defined timelines and greater coordination with law-enforcement agencies.
For customers, the proposed framework provides a structured process for notification, explanation and removal of the temporary debit hold, while also placing a time limit on the hold in the absence of further instructions from the authorities.
The broader objective is to strengthen the banking system’s response to cyber-enabled financial fraud while reducing unnecessary inconvenience to genuine customers.
⚠️ Important Note
These are draft provisions and should not be treated as final RBI regulations until the RBI issues the final directions.
📲 STAY CONNECTED WITH INSIGHTFULX
Get the latest Banking, Finance & Union updates directly on your phone.
