In digital financial fraud, a few seconds can separate a suspicious transaction from an irreversible loss.
Once money leaves a victim’s account, it can be dispersed through layers of mule accounts, transferred across institutions and withdrawn or converted before investigators can react. India’s emerging response is therefore based on a fundamentally different proposition: do not chase the money after it disappears; identify the risk and stop the transaction before it leaves the account.
That is the significance of the Department of Telecommunications’ Financial Fraud Risk Indicator (FRI), which has helped financial institutions prevent suspected cyber-fraud transactions worth ₹5,043.73 crore by August 2026. Launched on May 22, 2025, the system had prevented about ₹660 crore in its first six months. More than ₹2,000 crore was prevented in just four months from April 2026 as adoption by banks and payment platforms expanded.
The numbers are substantial, but the more important story is institutional. FRI represents an attempt to connect three systems that traditionally operated in separate silos: telecommunications intelligence, financial transaction monitoring and cybercrime enforcement.
India’s digital economy has created enormous efficiencies, but speed works for criminals too. Fraud proceeds can move through chains of accounts within minutes. Traditional policing, which begins after a complaint is lodged, is inherently disadvantaged in such an environment. By the time an FIR is registered, records are obtained and accounts are identified, the money may have travelled through several intermediaries.
FRI attempts to move intervention to the other side of the transaction.
Developed under DoT’s Digital Intelligence Platform (DIP), it assesses the likelihood that a mobile number is associated with financial fraud and classifies it as Medium, High or Very High risk. The assessment draws on multiple sources, including reports on DoT’s Sanchar Saathi platform, the Indian Cybercrime Coordination Centre’s National Cybercrime Reporting Portal, information from telecom operators, banks and financial institutions, and other telecom-related parameters.
The resulting intelligence can then be incorporated by banks, NBFCs, UPI applications and other financial institutions into their fraud-control systems.
The principle is simple but potentially transformative. A mobile number associated with suspicious activity becomes a risk signal before the next victim transfers money to it. A bank or payments company can then warn the customer, introduce additional verification, delay the transaction or, in sufficiently high-risk cases, decline it.
When FRI was introduced, DoT said PhonePe was using Very High-risk classifications to decline transactions and issue alerts, while leading UPI platforms including PhonePe, Paytm and Google Pay had begun integrating DIP intelligence into their systems.
The architecture has also expanded rapidly. More than 1,600 organisations are now connected to DIP, compared with more than 1,200 reported in February 2026. DoT says it has conducted over 25 training sessions covering 1,500 banks, financial institutions and regulators.
This is where FRI becomes more than another government technology platform. Cyber fraud does not respect administrative boundaries. A scam may originate through a fraudulent telephone call, impersonation attempt or malicious message; the payment may pass through a UPI application or bank; the proceeds may enter mule accounts across multiple institutions; and investigation ultimately falls within the cybercrime and policing apparatus.
Under the Allocation of Business Rules, cybercrime falls within the Ministry of Home Affairs’ domain, while police and public order are State subjects. DoT’s role is therefore not to investigate the crime but to provide telecom intelligence that can help prevent it. DIP enables bi-directional information sharing with stakeholders including MHA’s I4C.
This complements the Ministry of Home Affairs’ own prevention architecture. As of January 31, 2026, the Citizen Financial Cyber Fraud Reporting and Management System had helped save more than ₹8,690 crore across over 24.65 lakh complaints. I4C’s Suspect Registry had also shared information on 27.37 lakh Layer-1 mule accounts, with participating institutions declining transactions worth ₹9,518.91 crore.
Taken together, these initiatives indicate that India’s cyber-fraud strategy is moving towards network-level intelligence rather than institution-level reaction.
The Reserve Bank of India has recognised the same structural requirement. In proposing a Digital Payments Intelligence Platform, RBI argued that maintaining confidence in digital payments requires network-level intelligence and real-time data sharing across payment systems. Yet the success of FRI should not be measured only by the headline figure of ₹5,043 crore.
The next stage must involve rigorous independent evaluation of how the risk engine works in practice. How many transactions classified as Very High risk ultimately prove fraudulent? How many legitimate numbers are incorrectly flagged? What proportion of alerts result in transactions being abandoned by genuine customers rather than fraudsters? How quickly can an incorrectly classified number be reviewed and restored?
These are not peripheral questions. They determine whether an automated fraud-prevention architecture can operate at national scale without imposing disproportionate costs on legitimate users.
A false positive in a conventional analytical database may be inconvenient. A false positive embedded in real-time financial infrastructure can prevent a citizen or business from receiving money. If multiple banks and payment platforms rely on the same risk classification, an erroneous signal could potentially propagate across the financial ecosystem.
There is therefore a need for a clearly defined governance framework around classification, review and grievance redressal. Risk scores should not become opaque digital verdicts. Institutions need auditable rules specifying when an alert merely generates a warning, when additional authentication is required and when a transaction can actually be blocked.
Data governance is equally important. FRI gains its strength by combining signals from telecom operators, citizen reports, cybercrime databases and financial institutions. That same integration creates questions about purpose limitation, data retention, access controls, correction mechanisms and accountability for inaccurate information. The stronger the state becomes at linking digital identifiers across institutional databases, the stronger the safeguards around those linkages must become.
The ₹5,043-crore figure nevertheless demonstrates why prevention is becoming the central battlefield in financial cybercrime. RBI data have consistently shown that card and internet transactions dominate reported banking frauds by number, underscoring the scale of the challenge created by mass digitalisation.
DoT captures the logic of the new model in a striking line: “Every rupee stopped at source is a fraud that never happened.”
That is broadly correct, but India’s next challenge is to prove that prevention can be both effective and accountable. The objective should not simply be a larger number of blocked transactions. It should be a trusted national fraud-intelligence architecture in which telecom companies, banks, payment platforms and law-enforcement agencies exchange actionable information in milliseconds—while citizens retain meaningful protection against erroneous classifications.
If India can achieve that balance, the real achievement of FRI will not be ₹5,043 crore saved. It will be the creation of a governance model capable of fighting digital fraud at the speed at which digital money now moves.
