Bank Must Compensate Customer for Cyber Fraud Losses Due to Inadequate Security Protocols and Failure to Detect Suspicious Transactions

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....HC allowed the petition, finding SBI liable for cyber fraud losses. The court determined the petitioner was not negligent, as he did not share OTPs or payment credentials. The bank demonstrated significant service deficiency by failing to detect unusual transaction patterns, prevent unauthorized access, and take prompt action after fraud notification. The court held that the bank's security protocols were inadequate, breached by simple malware, and the Banking Ombudsman's order was legally unsustainable. The judgment emphasized the bank's duty to exercise reasonable care in protecting customer funds and responding to potential fraudulent transactions.....