RBI Penalty Report – 25th June 2026

Key Details

• Penalty Amount: ₹5 Lakh
• Date of Order: June 19, 2026
• Nature of Violation: Sanctioned loans to a relative of its director. Non-compliance with directions on ‘Loans and Advances to Directors, their Relatives, and Firms / Concerns in which they are Interested’.

Root Cause Analysis (RCA)

Failure in the pre-sanction due diligence process and conflict of interest checks. The bank’s credit appraisal mechanism lacked a robust verification step to cross-reference loan applicants against the declared list of directors’ relatives.

Preventive Controls

• Mandatory annual declarations from all board directors listing their direct relatives and associated firms.
• Configuration of automated alerts in the Core Banking System (CBS) to block or flag applications matching the names/PANs of declared relatives.
• Implementation of a strict “Maker-Checker” matrix specifically for insider and related-party transactions.

Lessons Learnt

Board oversight and strict adherence to conflict-of-interest regulations are paramount. Regulatory bodies have zero tolerance for insider lending violations, necessitating system-driven rather than manual compliance checks.

Key Details

• Penalty Amount: ₹3 Lakh
• Date of Order: June 19, 2026
• Nature of Violation: Multiple failures including non-submission of credit info to all four CICs, lack of periodic risk categorization reviews, absence of robust AML/suspicious transaction software, and failure to transfer funds to the Depositor Education and Awareness Fund (DEAF) on time.

Root Cause Analysis (RCA)

Severe technological obsolescence and weak operational standard operating procedures (SOPs). The bank relied heavily on manual processes for critical regulatory requirements (DEAF, CIC reporting, KYC updates) and lacked adequate IT infrastructure for AML monitoring.

Preventive Controls

• Immediate procurement and integration of an automated AML/CFT monitoring system.
• Setting up automated batch processing in the CBS to generate and dispatch monthly CIC data without manual intervention.
• Implementation of automated CBS triggers to sweep eligible 10-year-old unclaimed deposits into DEAF within the stipulated timelines.

Lessons Learnt

Technology upgrades are not optional; they are mandatory for compliance. Fragmented, manual tracking of statutory obligations inevitably leads to systemic regulatory failures and compounding penalties.

Key Details

• Penalty Amount: ₹3 Lakh
• Date of Order: June 22, 2026
• Nature of Violation: Failed to upload the KYC records of customers onto the Central KYC Records Registry (CKYCR) within the prescribed timeline.

Root Cause Analysis (RCA)

Operational bottlenecks in the branch-level customer onboarding process. Lack of a dedicated backend team or automated API integration to process and transmit KYC data to the CKYCR portal within the regulatory Turnaround Time (TAT).

Preventive Controls

• Establish an API-driven integration between the bank’s account opening module and the CKYCR portal for real-time or daily automated batch uploads.
• Implement a dashboard to monitor pending CKYCR uploads with age-wise alerts (e.g., T+2 days) for compliance officers.

Lessons Learnt

Regulatory timelines (SLA/TAT) must be strictly monitored at the head-office level. Delayed data sharing with central registries compromises the integrity of the national financial ecosystem.

Key Details

• Penalty Amount: ₹1 Lakh
• Date of Order: June 23, 2026
• Nature of Violation: Breached prescribed regulatory limits for single borrower exposure and failed to upload KYC records to CKYCR within prescribed timelines.

Root Cause Analysis (RCA)

Dual failure in underwriting limits and operational data management. The credit sanctioning authority lacked system-enforced guardrails for maximum exposure, allowing manual overrides. Simultaneously, CKYCR upload processes were neglected.

Preventive Controls

• Implementation of hard stops/blocks within the loan origination system to prevent the sanctioning of facilities that exceed the regulatory capital-linked exposure limits.
• Centralized tracking of CKYCR uploads linked to the daily closing checklist of branches.

Lessons Learnt

Exposure limits are designed to mitigate concentration risk. Relying on manual underwriting calculations without hard-coded system blocks leaves the bank vulnerable to severe prudential risks and penalties.

Key Details

• Penalty Amount: ₹1 Lakh
• Date of Order: June 22, 2026
• Nature of Violation: Allowed refund of share capital to members and sanctioned loans without complying with share-linking norms, despite Capital to Risk (Weighted) Assets Ratio (CRAR) being below the regulatory minimum.

Root Cause Analysis (RCA)

Ignorance or willful circumvention of Prudential Norms on Capital Adequacy. Management failed to link capital payout operations to the bank’s real-time financial health, continuing routine operations despite a stressed capital base.

Preventive Controls

• Automated systemic blocks preventing any share capital refunds when the bank’s CRAR falls below the minimum threshold.
• Strict system enforcement of share-linking-to-borrowings formulas before any loan disbursement can be processed.
• Monthly CRAR reporting to the Board to ensure immediate curtailment of capital payouts during stress periods.

Lessons Learnt

Capital Adequacy (CRAR) is the foundation of bank stability. Any capital distribution or lending practice must be strictly subordinated to maintaining the statutory minimum capital requirements.

Key Details

• Penalty Amount: ₹1 Lakh
• Date of Order: June 15, 2026
• Nature of Violation: Sanctioned/renewed director-related loans in contravention of Section 20 read with Section 56 of the BR Act, 1949.

Root Cause Analysis (RCA)

Failure of corporate governance and compliance checks. Board members and the credit committee failed to recuse themselves or identify statutory prohibitions regarding insider lending under the BR Act during the sanctioning/renewal phase.

Preventive Controls

• Digitize the repository of Directors and their interests into the CBS to create an automatic rejection rule for related loan applications.
• Mandatory independent compliance officer sign-off on all loan sanctions and renewals above a certain ticket size to verify no director relations exist.

Lessons Learnt

Statutory prohibitions under the BR Act regarding insider lending are absolute. Cooperative banks must foster a culture of transparent corporate governance to prevent the misuse of funds by individuals in power.

Key Details

• Penalty Amount: ₹1 Lakh
• Date of Order: June 15, 2026
• Nature of Violation: Sanctioned director-related loans, contravening Section 20 read with Section 56 of the BR Act, 1949.

Root Cause Analysis (RCA)

Similar to Shimoga DCCB, the root cause lies in ineffective board-level controls and a deficient compliance screening process during loan origination. The bank lacked a failsafe to detect and stop prohibited connected lending.

Preventive Controls

• Establish an internal audit mandate specifically targeted at screening 100% of the loan portfolio for connected/insider lending patterns.
• Implement CBS-level Customer Information File (CIF) tagging for all directors, their relatives, and affiliated entities to block prohibited sanctions.

Lessons Learnt

The recurring theme of Section 20 violations in co-operative banks highlights a critical need for rigorous, automated pre-sanction checks. Governance frameworks must supersede management authority in credit underwriting.