RBI Penalty Report – 27th July 2026

Key Details

• Penalty Amount: ₹10.10 Lakh (Rupees Ten Lakh and Ten Thousand only)
• Order Date: July 23, 2026
• Contraventions:
  • Section 20(1) read with section 56 of the Banking Regulation Act, 1949 (BR Act).
  • Directions issued by RBI on ‘Membership of Credit Information Companies (CICs) by Co-operative Banks’.
• Specific Charges Sustained:
  1. Sanctioned director-related loans.
  2. Failed to report credit information of its borrowers to all Credit Information Companies (CICs).

Root Cause Analysis (RCA)

• Director Loans: Likely a breakdown in the loan origination and approval system (LOS) where checks identifying conflicts of interest or director affiliations were either absent, bypassed, or ignored by the sanctioning authority. Lack of robust KYC cross-referencing against the board of directors list.
• CIC Reporting: Systemic failure in data integration between the bank’s Core Banking Solution (CBS) and the reporting portals of all mandated CICs. This could stem from technical limitations, lack of automated reporting mechanisms, or oversight by the compliance/IT teams regarding the mandatory requirement to report to all CICs, not just a select few.

Preventive Controls to be Implemented

• System-Level Blocking: Implement a hard block within the LOS that prevents the sanctioning of any credit facility where the applicant’s details (PAN, Aadhaar, name) match the database of current directors or their specified relatives.
• Automated Data Extraction & Submission: Develop and deploy an automated script or API integration within the CBS to extract borrower credit data precisely in the formats required by all recognized CICs, scheduling these submissions automatically to eliminate manual oversight.
• Maker-Checker for Regulatory Reporting: Institute a strict maker-checker process for CIC reporting, with automated alerts generated if a submission to any specific CIC fails or is missed within the regulatory timeframe.

Lessons Learnt

Regulatory compliance requires holistic system integration. Manual checks for conflicts of interest are insufficient; they must be hardcoded into the approval workflow. Furthermore, compliance with CIC reporting is not optional or selective; data must flow seamlessly and completely to all mandated entities to maintain the integrity of the credit ecosystem.

Key Details

• Penalty Amount: ₹7 Lakh (Rupees Seven Lakh only)
• Order Date: July 23, 2026
• Contraventions: Section 20(1) read with section 56 of the Banking Regulation Act, 1949 (BR Act).
• Specific Charge Sustained: The bank had sanctioned director-related loans.

Root Cause Analysis (RCA)

• Failure in governance and internal controls during the credit appraisal process.
• Inadequate identification of related parties at the time of loan application sourcing.
• Possible manual override of standard operating procedures (SOPs) or lack of systemic flags identifying borrowers associated with the bank’s directors.

Preventive Controls to be Implemented

• Master Data Maintenance: Maintain an updated, centralized master database of all directors, their relatives, and firms in which they are interested.
• Pre-Sanction Screening: Mandate a compulsory screening step in the loan processing system against this related-party database before any sanction is generated.
• Periodic Audits: Institute quarterly concurrent audits specifically focused on identifying any credit facilities extended to prohibited entities under Section 20 of the BR Act.

Lessons Learnt

Strict adherence to Section 20 of the BR Act is non-negotiable. Banks must ensure absolute separation between governance (directors) and credit availment to prevent conflicts of interest. Ignorance of related-party status is not a valid defense; proactive, systemic identification is required.

Key Details

• Penalty Amount: ₹1 Lakh (Rupees One Lakh only)
• Order Date: July 21, 2026
• Contraventions: Section 26A read with section 56 of the Banking Regulation Act, 1949 (BR Act).
• Specific Charge Sustained: Failure to transfer eligible unclaimed amounts to the Depositor Education and Awareness (DEA) Fund within the prescribed period.

Root Cause Analysis (RCA)

• Deficiency in the CBS to automatically identify accounts that have been inoperative for 10 years or more.
• Lack of a scheduled, automated process to sweep eligible funds into the DEA Fund account on the exact due dates.
• Manual oversight or delays in processing the transfer by the operations/finance department after identifying the eligible accounts.

Preventive Controls to be Implemented

• System Parameterization: Configure the CBS to automatically flag accounts crossing the 10-year inoperative threshold on a daily basis.
• Automated DEA Transfer: Implement a system-driven process to automatically calculate and transfer the eligible amounts, along with accrued interest, to the DEA Fund without requiring manual initiation.
• Reconciliation Mechanism: Establish a monthly reconciliation process between the internal list of 10-year inoperative accounts and the amounts remitted to the RBI to ensure zero slippage.

Lessons Learnt

Managing unclaimed deposits requires stringent time-bound actions. Relying on manual identification and transfer of funds to the DEA Fund is prone to errors and delays. Automation of deposit lifecycle management, particularly for dormant accounts, is essential to meet statutory deadlines.

Key Details

• Penalty Amount: ₹50,000/- (Rupees Fifty Thousand only)
• Order Date: July 17, 2026
• Contraventions: Non-compliance with directions on ‘Income Recognition, Asset Classification, Provisioning and Other Related Matters – UCBs’.
• Specific Charge Sustained: Failure to classify certain loan accounts as non-performing assets (NPAs).

Root Cause Analysis (RCA)

• Inadequate system automation (IRAC norms) within the Core Banking System, relying too heavily on manual intervention to classify accounts.
• Misinterpretation or misapplication of RBI guidelines regarding restructuring, evergreening, or specific triggers for NPA classification by the credit administration team.
• Failure of internal audit to identify the divergence in asset classification prior to the statutory inspection.

Preventive Controls to be Implemented

• System-Driven Classification: Mandate and verify that asset classification (Standard, Sub-standard, Doubtful, Loss) is 100% system-driven based on objective criteria (e.g., 90-day overdue rule) with no manual override permitted without high-level executive approval and documented justification.
• Enhanced Training: Conduct rigorous, mandatory training for all credit and branch managers on the latest IRAC norms and RBI master circulars.
• Independent Review: Implement a robust concurrent audit mechanism focused specifically on validating the system’s asset classification against physical account statements to catch discrepancies early.

Lessons Learnt

Accurate asset classification is the bedrock of a bank’s financial health representation. Subjectivity or manual processes in NPA marking lead to regulatory divergence. Banks must trust and rely on fully parameterized, automated systems to ensure compliance with IRAC norms and present a true picture of their asset quality.