Indian cybercrime agency warns financial sector of AI-driven cyberattacks
The Indian Cybercrime Coordination Centre has advised banks and payment providers to reinforce safeguards against rapid machine-speed intrusions.
What happened
India's primary cybercrime agency has issued a directive to banks, non-banking financial companies, and payment platforms, warning them of an emerging wave of cyberattacks powered by artificial intelligence agents.
The Indian Cybercrime Coordination Centre, operating under the Ministry of Home Affairs, cautioned that these financially motivated attacks occur at machine speed, making traditional human response times insufficient. According to the advisory, bad actors are scanning for unpatched software and misconfigured IT infrastructure before targeting automated fund disbursement systems and application programming interfaces used for online transfers.
The warning underscores the central government's proactive strategy in safeguarding the national digital banking ecosystem as financial transactions across the country reach record volumes.
How AI attacks target financial systems
Unlike traditional manual hacking attempts, AI-driven threats deploy automated frameworks that systematically discover system vulnerabilities and execute breaches in fractions of a second. Recent incidents across the sector have highlighted the critical need for heightened digital vigilance.
| Financial entity / Incident | Threat type | Key impact |
|---|---|---|
| State Bank of India | Data exposure | Customer data leaked for 3,900 accounts |
| Spandana Sphoorty | Cyber fraud | Financial loss of ₹7.8 crore reported |
| Live system stress tests | AI penetration | Confidential records breached undetected |
To counter these threats, the cybercrime agency instructed all financial entities, including fintech firms and payment aggregators, to implement security measures issued by the Indian Computer Emergency Response Team on 9 October.
What measures financial institutions must take
The advisory outlines concrete preventive safeguards designed to secure automated payment gateways and protect consumer funds. Beyond basic software updates, the central agency has advised firms to put strict operational limits on automated processes.
Key recommended safeguards include:
- Setting daily and per-transaction caps on automated disbursements.
- Implementing strict beneficiary name verification protocols prior to processing payments.
- Monitoring transaction speeds for anomalous or high-frequency activity.
- Patching all enterprise software and resolving IT configuration errors immediately.
- Adhering fully to CERT-In cybersecurity guidelines.
The Reserve Bank of India has concurrently instructed banks to demonstrate compliance with existing cybersecurity regulations and submit detailed preparedness plans regarding AI-related operational risks. These joint steps demonstrate India's robust regulatory approach to ensuring that its financial institutions remain secure against evolving technological risks.
Key numbers
| What | Figure | Source |
|---|---|---|
| Spandana Sphoorty fraud amount | ₹7.8 crore | Spandana Sphoorty company filing |
| SBI customer records affected | 3,900 | State Bank of India disclosure |
| CERT-In advisory date | 9 October | Indian Cybercrime Coordination Centre |
In this story
| Name | Role in the story |
|---|---|
| Indian Cybercrime Coordination Centre | Issued the advisory warning financial institutions about AI cyberattacks |
