Skip to content
Spectra Forensics, Investigation Specialist

Regulatory framework · Lenders, insolvency and markets

Bank fraud classification and natural justice

Our account has been red-flagged: what must the bank do before it declares fraud, and what should we do?

Spectra Forensics6 laws and regulators

Short answer

Before a bank classifies a borrower’s account as fraud, it must give a detailed show cause notice, allow at least 21 days for a reply, consider it and pass a reasoned order. The Supreme Court read these protections into RBI’s rules in 2023 because classification carries consequences akin to blacklisting, including a five-year bar on fresh finance. In April 2026 it held that a written reply can be enough without a personal hearing. Borrowers should treat the notice as a trial on paper and answer the forensic audit point by point.

The landscape

Laws and regulators in play

RBI (Commercial Banks – Fraud Risk Management) Directions 2026
Issued on 31 July 2026 (RBI/DoS/2026-27/412), replacing the 2024 Master Direction for commercial banks, with parallel directions for other categories of regulated entity. They keep the show cause notice, 21-day reply and reasoned order.
RBI Master Directions on Fraud Risk Management, 15 July 2024
Built the current framework of board-approved policy, early warning signals, red-flagged accounts, audit, natural justice and penal measures. The commercial-bank direction was replaced in 2026; the co-operative bank and NBFC directions of the same date set out the same architecture.
Supreme Court, State Bank of India v Rajesh Agarwal (27 March 2023)
Held that the principles of natural justice must be read into the fraud rules: notice, an opportunity to explain the forensic audit findings, and a reasoned order.
Supreme Court, State Bank of India v Amit Iron Pvt Ltd (7 April 2026)
Held there is no vested right to a personal hearing and that the notice-and-reply process can satisfy natural justice.
Central Repository of Information on Large Credits (CRILC)
Where banks report red-flagged accounts, so one lender’s red flag is visible to others.
Insolvency and Bankruptcy Code 2016 and law enforcement
Run alongside: a fraud classification can feed an FIR, a CBI or police case, and avoidance or fraudulent-trading claims in insolvency.

Step by step

Decision framework

  1. 01

    Early warning signal

    The bank’s monitoring flags the account: stock statement gaps, cheque returns, diversion signs, delays in audited results. Under the 2024 framework, alerts were to be examined preferably within 30 days.

  2. 02

    Red flag and reporting

    If concerns persist, the account is red-flagged and reported on CRILC, which tells the consortium and other lenders.

  3. 03

    Audit and investigation

    The bank commissions an internal or external audit, often a forensic audit, by auditors qualified under the relevant statutes. If the borrower does not cooperate, the bank may decide on the records it has.

  4. 04

    Show cause notice

    A detailed notice to the borrower and its promoters and whole-time or executive directors, setting out the transactions and findings relied on, with at least 21 days to respond.

  5. 05

    Borrower’s reply

    The reply should engage with each finding: documents, reconciliations, explanations of related-party flows, and, where useful, an independent forensic response to the bank’s audit.

  6. 06

    Reasoned order

    The competent authority considers the reply and passes a reasoned order either classifying the account as fraud or removing the red flag. Under the RBI framework, this is ordinarily completed within 180 days of the red flag being reported.

  7. 07

    Consequences and challenge

    Classification triggers reporting to RBI and law enforcement and penal measures. The borrower can challenge the order in a writ petition, typically on process: inadequate disclosure, ignored replies or an unreasoned order.

Duties and deadlines

Who must do what, and by when

  • Bank

    Issue a detailed show cause notice to the borrower and its promoters and whole-time or executive directors, with complete details of the transactions and findings relied on.

    By whenBefore any decision to classify as fraud

    RBI fraud directions 2024 and 2026; Rajesh Agarwal (2023)

  • Borrower and its promoters and directors

    Reply to the show cause notice with evidence and explanations.

    By whenWithin the time given, at least 21 days

    RBI fraud directions 2024 and 2026

  • Bank

    Examine the reply and pass a reasoned order.

    By whenBefore classification; the red-flag review ordinarily completed within 180 days

    RBI Master Direction 2024, paras 2.1.1 and 4.1.5

  • Bank

    Report the fraud to RBI through the Fraud Monitoring Return.

    By whenWithin 14 days of classification under the 2024 framework

    RBI Master Direction 2024, para 6.3.1

  • Bank

    Report the fraud to law enforcement agencies.

    By whenAfter classification; the 2026 directions advise reporting frauds of ₹1 lakh and above

    RBI fraud directions 2026; BNSS s.33

  • Persons classified as fraud

    Are barred from raising finance from banks and regulated lenders.

    By whenFor five years from full repayment of the defrauded amount or settlement

    RBI Master Direction 2024, para 4.4

Analysis

How the regimes interact

Why this question matters

A fraud classification is one of the most consequential decisions a lender can take against a borrower. It is shared with other lenders, reported to RBI and law enforcement, and bars the company and its promoters from fresh bank finance for years. Because it is an administrative decision with civil consequences, the Supreme Court has insisted on a fair process. For borrowers, that process is the main opportunity to change the outcome, and it is decided largely on paper.

How the regimes interact

RBI's directions supply the procedure; the Supreme Court supplies the floor. Rajesh Agarwal held that natural justice had to be read into the 2016 rules. RBI's 2024 directions wrote it in: a detailed notice, at least 21 days, and a reasoned order. The 2026 directions for commercial banks keep that structure. Amit Iron then clarified that the requirement is a fair opportunity to answer, not an oral hearing. The practical effect is that the borrower's written reply carries the whole case.

The forensic audit is the battlefield. Most classifications rest on an audit commissioned by the bank. A good reply explains each transaction the auditor questioned, with documents, and corrects factual errors. An independent forensic response, prepared by people who can read the same ledgers, is often more persuasive than legal argument.

Classification, crime and insolvency run in parallel. A fraud classification leads to a law enforcement report, and the same transactions may be examined as avoidance transactions or fraudulent trading if the company enters insolvency. Consistency matters: explanations given to the bank will be read again by investigators and resolution professionals.

Directions vary by lender type. Since 31 July 2026, commercial banks follow their own fraud directions, with separate directions for other bank categories. Co-operative banks and NBFCs had parallel directions dated 15 July 2024. Confirm which set governs the lender before relying on a paragraph or timeline.

How Spectra Forensics can help

We prepare borrowers' forensic responses to bank audits through our stressed-asset forensics and forensic accounting teams, and support challenges through litigation support. Speak to us in confidence.

Warning signs

Red flags

  • The bank asks for stock audits, end-use certificates or ledger extracts beyond the usual cycle.
  • A forensic auditor is appointed by the lead bank or consortium.
  • Other lenders suddenly freeze limits or ask about related-party flows.
  • Promoters are asked to attend meetings to ‘explain’ specific transactions.
  • The show cause notice summarises findings but does not attach the audit report.

Checklist

What good looks like

  • A data room ready with stock records, bank statements, related-party agreements and board minutes before any audit begins.
  • A single point of contact for the auditor, and a log of every document requested and provided.
  • An independent forensic review of the bank’s audit findings, prepared before the show cause notice arrives.
  • A request for the full forensic audit report and documents relied on, made in writing.
  • A reply that takes each finding in turn, with evidence, not a general denial.
  • Promoters and directors advised separately where their personal exposure differs from the company’s.

Myths and corrections

Common misreadings

Misreading

Without a personal hearing, any fraud classification is invalid.

Better reading

Rajesh Agarwal required notice, an opportunity to respond and a reasoned order. Amit Iron (2026) confirmed that a personal hearing is not a vested right; a fair written process can suffice.

Misreading

A red flag means fraud has been decided.

Better reading

A red flag starts an inquiry. Many red-flagged accounts are cleared; the outcome depends heavily on the quality of the borrower’s explanations.

Misreading

Repaying the loan ends the matter.

Better reading

Repayment affects the penal measures, which run for five years from full repayment, but does not undo a classification or a criminal complaint already made.

Misreading

The 2024 Master Direction still governs every bank.

Better reading

For commercial banks it was replaced on 31 July 2026. Check which directions apply to the lender concerned.

For the board pack

Takeaways

  • 01Fraud classification carries consequences akin to blacklisting, which is why natural justice applies.
  • 02The show cause notice is the borrower’s main chance; answer the forensic audit point by point.
  • 03A written process can satisfy natural justice, so the written reply must carry the whole case.
  • 04Prepare before the notice: the evidence needed for the reply sits in the borrower’s own records.

Questions we are asked

Is the borrower entitled to see the forensic audit report?

The Supreme Court in Rajesh Agarwal required that borrowers be given an opportunity to explain the conclusions of the forensic audit report. Commentary on the 2026 Amit Iron judgment reports that banks should generally disclose the full report, with redaction only where justified. Ask for it in writing.

Does the bank need to hear the borrower before filing an FIR?

No. Rajesh Agarwal held that natural justice applies to the administrative decision to classify an account as fraud, not to the registration of an FIR.

How long does the bank have to decide on a red-flagged account?

Under the RBI framework, classification as fraud or removal of the red flag should ordinarily be completed within 180 days of the red flag being reported. Accounts that remain red-flagged longer are escalated within the bank and to RBI’s supervisors.

Sources

  1. RBI, Master Direction on Fraud Risk Management in Commercial Banks (including RRBs) and All India Financial Institutions, 15 July 2024 link
  2. RBI, Reserve Bank of India (Commercial Banks – Fraud Risk Management) Directions 2026, RBI/DoS/2026-27/412, 31 July 2026 link
  3. Supreme Court of India, State Bank of India v Rajesh Agarwal, Civil Appeal No. 7300 of 2022, 27 March 2023 link
  4. Supreme Court of India, State Bank of India v Amit Iron Pvt Ltd, 2026 INSC 323, 7 April 2026 link

This guide is general information on the law as stated above, not legal advice. Facts change outcomes; take advice on your own matter.

Go deeper

Further reading

Banking fraud11 Sept 2026

From Red-Flagged Account to Fraud Classification: A Borrower's Guide to the RBI Process

How a loan account moves from early warning signal to red flag, forensic audit, show-cause notice and reasoned order, and what borrowers can do at each stage.

Banking fraud8 Sept 2026

RBI Fraud Risk Management Directions 2026: What Banks and Borrowers Need to Know

The RBI's 2026 Fraud Risk Management Directions replaced the July 2024 Master Directions. What carried over, what banks must do and what borrowers face.

Confidential consultation

Facing this question on a live matter? Talk to us.

Tell us what has happened. A senior member of our team will help you work out who must do what, and in what order, in strict confidence.

Speak to an expertAll regulatory frameworks
Confidential enquiry