What is a red-flagged account (RFA)?

A red-flagged account (RFA) is a borrower account that a bank has formally marked as suspected of fraud. It is an intermediate status: stronger than an early warning signal, but short of a fraud classification. Its purpose is to make the suspicion visible across the banking system quickly, while the bank investigates.

What is the current regulatory framework?

The RFA framework was set out in RBI's Master Directions on Fraud Risk Management dated 15 July 2024. On 31 July 2026, RBI replaced them with entity-wise directions. For commercial banks, the governing text is now the RBI (Commercial Banks – Fraud Risk Management) Directions, 2026, which took effect immediately. Parallel 2026 directions apply to NBFCs and co-operative banks.

The 2026 Directions require a board-approved fraud risk policy covering the early warning signal (EWS) and RFA framework, a dedicated data analytics and market intelligence unit, and oversight by a Special Committee of the Board for Monitoring and Follow-up of cases of Frauds.

How does an account become an RFA?

The process usually starts with EWS alerts. These indicators are approved by the bank's Risk Management Committee, and alerts should preferably be examined within 30 days. Where the examination points towards possible fraud, the account is red-flagged.

Once red-flagged:

1. CRILC reporting. The bank reports the RFA on the Central Repository of Information on Large Credits within 7 days. The CRILC reporting threshold under the 2026 Directions is aggregate exposure of INR 3 crore and above.
2. Investigation. The bank investigates through an external or internal audit, in line with its board policy, which must include a policy on engaging external auditors. Loan agreements should allow such audits. If an audit is inconclusive or delayed by the borrower, the directions set out how the bank proceeds.
3. Decision. The bank ordinarily classifies the account as fraud or removes the red flag within 180 days of first reporting it on CRILC. Older cases go to the board committee and are subject to RBI supervisory review.

What protections does the borrower have?

Before classifying an account as fraud, the bank must issue a show cause notice giving at least 21 days to respond, and then pass a reasoned order. This reflects the Supreme Court's decision in SBI v. Rajesh Agarwal (2023). In SBI v. Amit Iron (April 2026), the Court has held that no personal hearing is required, but that the borrower must receive the complete forensic audit report rather than a summary.

The practical consequence is that the forensic audit report becomes the central document. Its findings, methods and limitations will be read closely by the borrower and, potentially, a court.

What happens after fraud classification?

• A fraud monitoring return to RBI within 14 days of classification.
• Reporting to law enforcement: for private and foreign banks, State Police for amounts below INR 1 crore and State Police plus SFIO at INR 1 crore and above; for public sector banks, State Police below INR 6 crore and CBI at INR 6 crore and above.
• A five-year debarment for the borrower, promoters and directors from raising funds from RBI-regulated entities.
• Staff accountability review, including reference of cases of INR 3 crore and above at public sector banks to the Advisory Board for Banking and Financial Frauds.

What triggers a red flag?

• Diversion of loan funds to related or unknown parties.
• Fictitious or inflated stock and receivables statements.
• Frequent changes of auditors, or qualified audit reports.
• Sale of secured assets without consent.
• Funds routed through multiple accounts with no business purpose.

How does it differ from related terms?

An RFA is a suspicion of fraud under the fraud directions. A wilful defaulter declaration is a separate process under different directions, about deliberate non-repayment. A stressed asset is any loan in difficulty, with or without misconduct. Banks reduce RFA cases through sound fraud risk assessment. For a step-by-step guide, see from red-flagged account to fraud classification and RBI fraud risk management directions.

Spectra Forensics' stressed asset and insolvency forensics service covers forensic audits of red-flagged accounts for lenders and independent reviews for borrowers.