[INDIA] RBI, SEBI and IRDAI · Source-code escrow and continuity obligations for critical applications[EU DORA] ICT third-party risk testing required · In force Jan 2025[PRA] SS2/21 UK · Vendor recovery evidence required[MAS] Singapore TRM · Independent vendor recoverability expected[APRA] CPS 230 Australia · Third-party continuity obligations in force[FFIEC] United States · Source-code access and software escrow addressed in third-party contracts[ENTERPRISE] Mission-critical software procurement increasingly requires continuity evidence before contract
[INDIA] RBI, SEBI and IRDAI · Source-code escrow and continuity obligations for critical applications[EU DORA] ICT third-party risk testing required · In force Jan 2025[PRA] SS2/21 UK · Vendor recovery evidence required[MAS] Singapore TRM · Independent vendor recoverability expected[APRA] CPS 230 Australia · Third-party continuity obligations in force[FFIEC] United States · Source-code access and software escrow addressed in third-party contracts[ENTERPRISE] Mission-critical software procurement increasingly requires continuity evidence before contract

CYBER WATCH / Cyberattacks

Bengaluru fintech reports ₹31.43 crore fraud from escrow account

A Bengaluru digital financial services company has reported unauthorized debits of about ₹31.43 crore from its escrow account at a private bank. A complaint says the bank flagged suspicious transfers on November 4, 2026, and the company's internal investigation the next day found 301 debits. The transfers went to 127 beneficiary accounts, and about ₹68.48 lakh has been credited back. Whitefield police have registered a case under the IT Act and Bharatiya Nyaya Sanhita. The company's identity and the attack method are not reported.

All updates
Reported ReportedPublished 13 November 2026

Incident timing: Bank alert on November 4, 2026. Internal investigation on November 5, 2026. Dates are from the police complaint as reported.

What the complaint says

A digital financial services company in Varthur, Whitefield, has reported suspected cyber fraud, according to The Hindu. The company's bank alerted it on November 4, 2026 to suspicious transactions of ₹8.47 crore in one customer's account. An internal investigation on November 5 found 301 unauthorized debits totaling ₹31,43,61,635 from the company's escrow account with a private bank.

Funds and police response

About ₹68.48 lakh was later credited back. The transfers went to 127 beneficiary bank accounts, the complaint says. Whitefield CEN police registered Crime No. 595/2026 under sections 66(C) and 66(D) of the Information Technology Act, 2000 and sections 318(4) and 319(2) of the Bharatiya Nyaya Sanhita, 2023. Investigators are tracing the beneficiary accounts and trying to recover the money.

What is not known

The report does not name the company, the bank or how the account was accessed. The figures come from a police complaint as reported by one outlet. They have not been checked against the complaint or a company statement.

Why it matters

Escrow accounts hold money on behalf of other parties, so unauthorized debits can affect people beyond the account holder. Finance and operations teams should treat bank alerts and reconciliation exceptions as possible signs of a wider pattern, not one-off events.

Source & attribution

Read the original reporting at The Hindu

None independently checked.

AI-assisted summary prepared for Castler editorial review. Evidence labels describe the source of a claim, not a guarantee that every detail of an investigation is settled.

Editorial policy & corrections