The details furnished by Reserve Bank of India (RBI) in respect of Scheduled Commercial Banks pertaining to frauds relating to ATMs/Debit Cards/ Internet Banking and Credit Cards is as under :

                                                                        (Rs. In lakhs)

*Bank wise details of Cyber Frauds for the last 3 years is at Annex – 1.

RBI has informed that it does not have data on Cyber Frauds in Public Sector Bank   that have turned into non– performing assets.

           The measures initiated by RBI to strengthen security arrangements are as under:-

(i) RBI acts as per the Master Circular RBI.DBS.FrMC.BC.No.1/23.04.001/2012-13 dated July 02, 2012 on “Frauds – Classification and reporting” containing all the details/aspects relating to frauds. The same is also available on the website of RBI i.e. www.rbi.org.in. On receipt of fraud reports from banks, various aspects related to the frauds are examined and concerned banks are advised to report the case to CBI/ Police/ SFIO, examine staff accountability, complete proceedings against the erring staff expeditiously, take steps to recover the amount involved in the fraud, claim insurance wherever applicable and streamline the system as also procedures so that frauds do not recur.

(ii) RBI has issued two circulars viz; (i) ‘Security arrangements for ATMs of bank’ dated February 22, 2006 and (ii) ‘Skimming of ATM/Credit Cards’ dated June 26,2006 advising banks to take various preventive measures to combat frauds relating to skimming or duplicating of credit cards. The preventive measures include educating customers through cautionary messages posted in the web-site of card issuing banks, informing customers not to reveal PIN in response to requests received through e-mails, to periodically verify the transaction history, immediate reporting to the bank, if any unauthorized transaction is observed, and inform the bank if the card is lost or stolen.

(iii) On the basis of suggestions of a Working Group set up by RBI in 2010, RBI has issued guidelines which are fundamentally expected to enhance safety, security, efficiency in banking processes leading to benefits for banks and their customers. The implementation progress are required to be reviewed and report submitted to the Board on quarterly basis.

(iv) RBI vide its Master Circular dated 1.7.2011, on ”Credit Card Operation of Banks” advised banks to set up internal control systems to combat frauds and to take pro-active fraud control and enforcement measures and to ensure that credit card operations were run on sound, prudent and profitable lines as also fulfill ‘Know Your Customer’ requirement, assess credit risk of customers, specify terms and conditions in clear and simple language, ensure prompt dispatch of bills, maintain customer confidentiality etc.

(v) All Commercial Banks have also been cautioned by RBI vide letter dated. 16.02.2006 on phishing attacks which contained details of the modus-operandi on such attacks and minimum set of preventive/detective measures to tackle phishing attacks.

(vi) Besides above, public is advised through press releases/notifications regarding not to reveal account details, do not fall prey to fictitious offers of fund transfer, remittance towards participation in lottery, money circulation schemes, and other fictitious offers of cheap funds etc.

This was stated by the Minister of State for Finance, Shri Namo Narian Meena in a written reply to a question in the Lok Sabha today.

DSM/RS/ka

   ANNEXURE – I

DSM/RS/ka

(Release ID :92456)

Cyber fraud prevention: regulatory framework mandates fraud reporting, internal controls and customer safeguards in banking operations. The document compiles calendar-year totals and bank-wise data on ATM, debit card, internet banking and credit card frauds for 2010-2012 and describes RBI's multi strand regulatory response: the Frauds - Classification and reporting master circular requiring reporting, staff accountability, law enforcement referral, recovery and system fixes; specific ATM and skimming guidance advising customer education, PIN confidentiality and transaction monitoring; Working Group recommendations with quarterly implementation reviews; a credit card operations circular mandating internal controls and KYC; and advisories on phishing and public alerts to prevent credential disclosure.