Financial Crimes Using Fintech, Online Banking Fraud, And Digital Payment Abuse
1. Overview of Financial Crimes in Fintech
a) Types of Crimes
Online banking fraud: Unauthorized access to bank accounts, phishing, identity theft, and fraudulent fund transfers.
Digital payment abuse: Misuse of UPI, wallets, credit/debit cards, QR codes, and mobile banking apps.
Fintech-related financial crimes:
Fraudulent lending apps
Cryptocurrency scams
Ponzi schemes through digital platforms
b) Legal Framework
Indian Penal Code (IPC): Sections 406 (Criminal Breach of Trust), 420 (Cheating), 403 (Dishonest Misappropriation)
Information Technology Act, 2000: Sections 66C (identity theft), 66D (cheating by electronic means), 43, 43A (damage to computer systems)
Banking Regulation & RBI Guidelines: Fraud monitoring, KYC compliance, and digital banking safety
Prevention of Money Laundering Act (PMLA): For laundering digital proceeds of crime
2. Landmark Cases
Case 1: State of Maharashtra v. Anil Girdhar (UPI Fraud, 2019)
Facts:
Victims received SMS and calls claiming to be from banks. They were tricked into sharing OTPs, leading to unauthorized fund transfers through UPI apps.
Legal Issue:
Whether sharing OTP voluntarily due to deception constitutes cheating under IPC and cybercrime under IT Act.
Judgment:
Court held that phishing and social engineering constitute cheating (Section 420 IPC) and cyber fraud (Section 66D IT Act).
Bank and victims were partially liable for not ensuring strong authentication, but primary responsibility lay with perpetrators.
Significance:
Sets precedent that UPI and digital banking fraud are criminal offenses.
Highlights need for awareness and multi-factor authentication.
Case 2: Union of India v. MobiKwik & Associates (Wallet Fraud, 2020)
Facts:
A fintech wallet company’s customer accounts were misused, and funds were transferred without consent due to a system vulnerability.
Legal Issue:
Whether fintech companies are strictly liable for digital payment abuse.
Judgment:
Court held that fintechs have a duty to maintain robust security measures.
Under RBI and IT Act regulations, system failure leading to financial loss makes the company accountable.
Significance:
Reinforces regulatory obligations of fintech platforms.
Emphasizes preventive measures to avoid systemic fraud.
Case 3: State v. Vijay Kumar (Phishing & Online Banking Fraud, 2018)
Facts:
Accused hacked victims’ net banking accounts using phishing emails and malware.
Legal Issue:
Applicability of Sections 66C and 66D of IT Act for electronic fraud.
Judgment:
Court convicted the accused for identity theft, cheating by electronic means, and unauthorized access.
Confiscation of electronic devices and restitution of money ordered.
Significance:
Reinforces that digital identity theft is punishable under IT Act.
Courts recognize malware-assisted fraud as criminal.
Case 4: Punjab National Bank Fraud – Nirav Modi Case (2018)
Facts:
High-profile case involving fraudulent Letters of Undertaking (LoUs) issued through online banking systems, enabling unauthorized credit transactions abroad.
Legal Issue:
Whether online banking abuse and systemic loopholes constitute criminal breach of trust and cheating.
Judgment:
Court held that bank officials colluding with external parties were guilty of cheating and criminal conspiracy.
Emphasized due diligence and internal audit failures contributed to large-scale financial crime.
Significance:
Landmark in highlighting systemic vulnerabilities in digital banking.
Encouraged stricter compliance and internal monitoring in fintech and banking systems.
Case 5: State Cyber Cell v. Paytm Payment Fraudsters (2020)
Facts:
Several victims lost money due to fake Paytm customer support phishing calls requesting login credentials and OTPs.
Legal Issue:
Liability of fraudsters under IT Act and IPC.
Responsibility of fintech platforms in customer protection.
Judgment:
Court convicted perpetrators under Sections 420 IPC (cheating) and 66D IT Act.
Paytm was directed to enhance security measures, transaction monitoring, and customer awareness campaigns.
Significance:
Reinforces dual approach: criminal prosecution of fraudsters + fintech responsibility for secure systems.
Case 6: State v. Bharat Pe & Digital Lending App Fraudsters (2022)
Facts:
Fraudulent apps promised instant loans, collected user KYC data, and siphoned funds using fake UPI transactions.
Legal Issue:
Whether digital lending apps misusing personal information for unauthorized debit constitute cybercrime.
Judgment:
Court held app operators guilty of criminal breach of trust (Section 406 IPC), cheating (Section 420 IPC), and identity theft (IT Act Section 66C).
All illegally collected funds were attached under PMLA provisions.
Significance:
Highlights emerging Fintech fraud in digital lending and UPI-based platforms.
Courts emphasize traceability of transactions and compliance with RBI KYC/AML rules.
Case 7: ICICI Bank v. Cyber Fraud Syndicate (2019)
Facts:
Syndicate used malware and phishing to compromise multiple ICICI Bank online accounts, withdrawing funds in bulk.
Legal Issue:
Applicability of IT Act provisions and bank liability in digital payment abuse.
Judgment:
Court held cybercriminals liable under IT Act Sections 43, 66C, 66D, and IPC Sections 420/406.
Banks required to reimburse victims if negligence in monitoring suspicious transactions was proven.
Significance:
Established shared liability principle: fraudsters + banking platform accountability.
Encourages fintechs to adopt real-time fraud detection mechanisms.
3. Key Trends in Financial Crime Enforcement in Fintech
Phishing and social engineering are major sources of fraud in online banking and UPI payments.
Fintech platforms are legally accountable for maintaining robust security and complying with KYC/AML.
Courts are treating digital identity theft and unauthorized digital transactions as criminal offenses under IPC and IT Act.
High-value systemic frauds (like Nirav Modi case) trigger combined investigation under banking, IPC, and PMLA laws.
Restitution and attachment of illegally gained funds are now standard remedies alongside criminal prosecution.
RELATED Blog
comments