A Rs 160-crore suspected fraud at Kotak Mahindra Bank's Panchkula branch just shook depositors across the country. Allegedly forged fixed deposit receipts, diverted funds from a municipal corporation account — and now both the bank and Haryana state authorities are running separate investigations. The accounts are still being reconciled. But the real question nobody is asking loudly enough? If something like this happened to your bank, what would actually happen to your money?
That's exactly what this piece breaks down — and the honest answer is more nuanced than a simple "you're safe" or "you're not."
The Kotak case didn't land in isolation. Just weeks before it surfaced, a Rs 590-crore suspected fraud emerged at IDFC First Bank's Chandigarh branch — again tied to government-linked deposits. Different bank, different city, same uncomfortable story: internal lapses and possible employee involvement.
This is a pattern the RBI knows well. Bank fraud in India doesn't usually look like a Hollywood heist. It shows up quietly — as forged fixed deposit receipts (FDRs), misappropriated funds, manipulated account books, or unauthorised transactions nobody caught in time.
Here's what most people get wrong: they assume fraud at a bank branch automatically means their personal deposits are at risk. That's not how it works — at least not directly. The RBI's fraud classification system puts cases like forged FDs and fund diversion into specific categories: criminal breach of trust, cheating and forgery, and manipulation of books. Once a fraud crosses a certain threshold, banks are legally required to report it to the RBI — sometimes within a single week for large-value cases. Criminal proceedings must follow. The regulatory machinery kicks in fast, even when the headlines take longer to catch up.
Here's the thing: India does have a formal safety net for depositors, and most people have no idea it exists until they need it.
The Deposit Insurance and Credit Guarantee Corporation — DICGC, a subsidiary of the RBI — covers your deposits up to Rs 5 lakh per depositor, per bank. Savings accounts, current accounts, fixed deposits — principal and interest both count toward that ceiling. The bank pays this insurance premium, not you.
But that Rs 5 lakh ceiling is absolute. No exceptions.
If you hold Rs 8 lakh in a single bank and it collapses, Rs 5 lakh gets covered. The remaining Rs 3 lakh? That's exposure. Multiple accounts in the same bank don't each get separate coverage — they're all clubbed together. Joint accounts may be counted differently depending on how the holding is structured, but don't assume they give you doubled protection without checking.
The DICGC insurance applies specifically when a bank fails, is liquidated, or is forcibly merged. It's a last-resort safety net, not a day-to-day guarantee.
One thing changed significantly a few years ago, and it matters if you're thinking about worst-case scenarios.
Before 2021, depositors in a distressed bank could wait months — sometimes longer — to see any of their insured money. The rules have since tightened considerably. Now, if a bank faces restrictions like a moratorium, depositors must receive their insured amount within 90 days. The bank doesn't need to be fully liquidated for this timeline to kick in. That's a meaningful shift.
Think about it this way: if your bank suddenly can't operate normally and the RBI steps in, you're not left waiting indefinitely. The 90-day window applies regardless of how long the overall resolution process takes.
This is the part nobody talks about clearly enough — and it's the most important thing to understand.
A fraud inside a bank branch is not the same as a bank failure. These are two entirely different situations with very different outcomes for depositors.
When fraud occurs in a branch — like the current Kotak case — the bank itself remains operational. In that scenario, depositors typically don't lose money at all. The bank is expected to absorb the loss, especially when internal lapses or employee misconduct are proven. You don't file a DICGC claim. You don't hit the Rs 5 lakh ceiling. The bank makes it right.
The deposit insurance framework only becomes directly relevant when the bank itself becomes financially unviable — when it collapses, is liquidated, or gets merged into another institution under regulatory pressure. If a bank faces a temporary liquidity crisis, the RBI may impose withdrawal limits. In severe cases, it may engineer a merger with a stronger bank — as happened with YES Bank in 2020 — rather than allow an outright failure.
For large banks classified as systemically important, the probability of outright collapse is significantly lower. The RBI and the government typically intervene well before that point.
Banks aren't allowed to simply manage fraud risks on their own terms. The RBI mandates a specific institutional framework.
Every bank must maintain a board-approved fraud risk policy. Dedicated internal units handle fraud prevention and investigation. Fraud cases are reported to the RBI on a quarterly basis, with faster timelines for large-value incidents. Audit committees have direct oversight responsibilities for significant fraud cases. For anything above Rs 1 crore, special monitoring applies. Senior management — including CEOs — are expected to be directly involved in overseeing fraud control, not delegating it entirely down the chain.
This isn't a suggestion framework. It's regulatory architecture with teeth. When violations occur, they compound the accountability problem for the bank, not just the individual bad actor.
Most people skip this — don't. The RBI's rules on unauthorised transactions are specific and worth knowing before something goes wrong.
If a breach happens due to the bank's system failure or internal fault, your liability is zero. If you spot something suspicious and report it within three days, again — zero liability. The window starts tightening after that. Reporting between four and seven days after the incident caps your liability between Rs 5,000 and Rs 25,000 depending on the account type. Wait beyond seven days, and your liability is determined by the bank's own policy, which varies.
There's one scenario where the math flips entirely: if your own negligence caused the loss — say, you shared an OTP with someone — the loss is yours until you report it. After reporting, any further losses shift back to the bank.
Every bank is also required to maintain a customer compensation policy. That's not optional goodwill — it's mandated. Loss after the point of reporting is always borne by the bank, regardless of the circumstances that led to the fraud.
In most situations, yes. When fraud happens within a branch — like forged FDRs or misappropriated accounts — the bank is expected to absorb the loss. As long as the bank itself remains financially operational, depositors are typically not affected. DICGC insurance only becomes relevant if the bank actually fails or is liquidated.
The DICGC insures up to Rs 5 lakh per depositor per bank. This covers savings accounts, current accounts, and fixed deposits — both principal and interest combined. If you hold more than Rs 5 lakh in a single bank, everything above that limit remains uninsured in a failure scenario.
Since 2021, regulations require that depositors receive their insured amount within 90 days of a bank facing restrictions such as a moratorium. This timeline applies even if the bank's full resolution hasn't been completed yet.
Report it to the bank immediately — and ideally within three days. Under RBI guidelines, if a fraud occurs due to the bank's fault or is reported within three days, your liability is zero. Delays increase your exposure. After reporting, any subsequent losses are the bank's responsibility.
No. The Rs 5 lakh insurance limit applies per depositor per bank — not per account. All your accounts in the same bank are added together and measured against that single ceiling. If you want higher effective coverage, spreading deposits across different banks is the only way to achieve it.
A moratorium typically places temporary restrictions on withdrawals — meaning you may not be able to access your full balance immediately. The 90-day rule now ensures that insured amounts up to Rs 5 lakh must be released to depositors within that window, even while the broader resolution process continues.
First, fraud inside an operational bank is not the same as losing your money — the bank bears that burden, and regulatory oversight is designed to ensure accountability. Second, deposit insurance up to Rs 5 lakh exists as a real safety net, but it only activates in genuine bank failure scenarios, not everyday fraud cases. Third, your response speed matters enormously if something ever goes wrong with your account — the RBI's zero-liability rules reward quick action.
Bank fraud depositor protection in India is more structured than most people realise, but it's not unconditional.
A few practical steps worth building into your financial habits right now: don't concentrate all your savings in a single bank if your balances exceed Rs 5 lakh. Verify large FDs through digital statements rather than paper receipts alone. Check your account activity consistently, not just when something feels wrong. And the moment you notice anything suspicious — report it the same day.
Your email address will not be published. Required fields are marked *