Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteThe Pathanamthitta District Consumer Disputes Redressal Commission reportedly directed State Bank of India (SBI) to pay a Kerala couple ₹1,34,874 after an unauthorised fixed-deposit debit linked to a fake KYC-update message. The reported award comprises ₹99,874 in disputed funds, ₹25,000 for mental agony and distress, and ₹10,000 in litigation costs. The ruling, as described by The Indian Express, turned in part on evidence: the commission reportedly said SBI had not substantiated its claim that the customer authorised the transactions or disclosed credentials. This is a report of one case, not a guarantee that a customer who follows a phishing link will receive the same outcome.
What happened in the SBI fake-KYC case
The Indian Express reported on October 10, 2026, that a couple with an SBI savings account challenged withdrawals from the husband’s fixed deposit. According to the couple’s account in the report, he had placed ₹10 lakh in a three-month deposit on October 28; the report passage does not specify the year for that date. A credit-card payment attempted through the bank application failed on January 7, 2023. He then received a message saying the account was blocked and asking him to update KYC. He said he entered details through what he believed was the bank app or link, after which four withdrawals were made from the deposit.
As an Amazon Associate I earn from qualifying purchases.
The bank and customer gave different accounts of how the fraud was enabled. SBI reportedly argued that it does not ask customers to update KYC through the app and that the customer willingly gave details to another entity. Its lawyer said the customer followed a fake link and supplied an OTP, allowing access to payment credentials. Those statements are SBI’s reported submissions; the news account does not independently verify the exact link, OTP disclosure, or incident mechanics.
The amounts reported are not fully consistent
The report’s opening says around ₹3.24 lakh was debited and ₹2.24 lakh refunded; its later account says ₹3.28 lakh was withdrawn and ₹2.23 lakh refunded. Because the figures conflict, neither total should be treated as definitive without the original consumer commission order. The clearer reported award components add to ₹1,34,874:
#1 Best Overall
| Reported component | Amount |
|---|---|
| Disputed balance to be returned | ₹99,874 |
| Compensation for mental agony and distress | ₹25,000 |
| Litigation costs | ₹10,000 |
| Total of reported award components | ₹1,34,874 |
The Indian Express says the commission directed SBI to return ₹99,874 within 45 days, in addition to the compensation and costs. The original signed order was not available in the reporting reviewed here, and the report does not establish whether SBI appealed or paid the award.
Why the commission reportedly ruled for the couple
The report says the commission found the transactions unauthorised and that the customer reported them promptly. It also says SBI had “absolutely failed” to produce evidence substantiating that the husband authorised the debits or shared credentials. The commission’s reported reasoning was that SBI should establish through system or audit records and other evidence that the complainant disclosed credentials and contributed to the fraud; without that proof, the couple could not be held responsible for the remaining ₹99,874.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
That is a case-specific finding as reported, not a blanket rule that banks always owe a refund whenever a KYC message is involved. The account also does not settle the factual dispute over whether the customer supplied an OTP or other credentials.
Recommended Free Tools
How RBI’s customer-liability framework relates
The Reserve Bank of India’s July 6, 2017 circular on unauthorised electronic banking transactions applies to scheduled commercial banks, including SBI. It separates cases according to whether the bank contributed to the loss, the customer was negligent, or a third party was responsible. The circular also places the burden of proving customer liability on the bank. Read the RBI customer-protection directions alongside the facts of an individual dispute.
| Situation under the 2017 directions | Reported liability treatment |
|---|---|
| Unauthorised transaction caused by the bank’s contributory fraud, negligence, or deficiency | Zero customer liability |
| Third-party breach, with neither bank nor customer at fault; customer reports within three working days of receiving communication of the unauthorised transaction | Zero customer liability |
| Customer negligence, such as sharing payment credentials | Customer bears losses up to the time of reporting; losses after reporting are borne by the bank |
The three-working-day window applies to the specified third-party-breach situation, not indiscriminately to every kind of unauthorised transaction. The circular is from 2017; the sources cited here do not reconcile later regulatory amendments. Check current RBI and bank instructions for a live dispute.
Quick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Rank #4
What to do if a suspicious KYC message is followed by a debit
- Contact the bank immediately through an official channel. Report the unauthorised transaction using a reporting route provided by the bank, rather than replying to the message or using its link. RBI directs banks to provide channels for reporting and take immediate steps to prevent further unauthorised transactions.
- Keep a record of the report. Save the complaint acknowledgement, transaction details, account statements, message, and any correspondence with the bank. Record when you noticed the debit and when you notified the bank.
- Ask the bank to investigate and explain its decision. Clearly identify the disputed transactions and request a written response. Under the 2017 directions, the bank bears the burden of proving customer liability, but the applicable outcome depends on the circumstances and current rules.
- Verify KYC instructions independently. Use SBI’s official KYC Guidelines page as a starting point. Do not assume that a message or link is genuine merely because it uses the bank’s name.
What this report does—and does not—establish
- The reported award is ₹1,34,874: ₹99,874 to be returned, ₹25,000 compensation, and ₹10,000 litigation costs.
- The reported commission finding rested on the bank’s failure to substantiate that the customer authorised the debit or disclosed credentials.
- The report gives conflicting figures for the total debit and refund, so those amounts should not be repeated as settled facts without the original order.
- The sources do not establish whether SBI appealed, whether the order became final, or whether the couple received payment.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
