RBI Proposes a 60-Day Cap on Money-Mule Debit Holds: What Bank Customers Should Know

RBI’s September 2026 draft proposes time-bound debit holds for suspected money-mule transactions, customer notice and a 60-day outer limit unless authorities direct otherwise.

Published 2026-09-11T13:00:00.000Z

RBI Proposes a 60-Day Cap on Money-Mule Debit Holds: What Bank Customers Should Know

The quick answer

The Reserve Bank of India has proposed a uniform procedure for banks dealing with accounts or transactions suspected of being linked to money-mule activity and cyber-enabled financial fraud. The September 11 draft would let banks place temporary debit holds, but it also introduces customer-notice, review and time-limit safeguards.

The most important point is that these are draft rules, not final rules in force today. RBI invited comments until 2 October 2026. The proposed framework is intended to take effect from 1 April 2027, although the final text may change after consultation.

Key facts

RBI draft issued: 11 September 2026.
Why: the Supreme Court directed RBI on 4 August 2026 to adopt and circulate an SOP for temporary debit holds linked to money-mule activity and cyber-enabled fraud.
Consultation deadline: 2 October 2026.
Proposed implementation: on or before 1 April 2027, subject to the final directions.
Proposed customer response window: 20 days to explain or justify a flagged transaction.
Proposed maximum temporary hold: ordinarily 60 days from the initial hold when there is no contrary instruction from a law-enforcement agency or competent authority.

What is a money-mule account?

A money-mule account is an account used, knowingly or unknowingly, to receive, layer or transfer proceeds of cyber-enabled financial fraud for another person. That distinction matters: being flagged by a monitoring system is not the same as a final finding that the account holder committed fraud.

How the proposed debit-hold process would work

Under the draft, banks would use their transaction-monitoring systems and internal policies to identify suspected money-mule transactions or accounts. Reporting on the draft says a suspected transaction threshold begins at ₹1,000 where the bank’s monitoring systems flag the transaction as potentially connected to fraud or mule activity.

The bank could place a temporary debit hold on the suspected amount. An account-level hold would be reserved as a last resort for exceptional circumstances. The customer would have to be told about the hold, the reason for it, how removal can be sought and whom to contact at the bank.

The customer would have 20 days to provide an explanation or supporting material. The bank would then have prescribed time to decide whether to remove the hold, continue it and refer the matter to law enforcement, or act on instructions from an authority.

Why the 60-day number needs careful reading

The proposed 60-day period is an outer limit for the bank’s temporary debit hold in the absence of a contrary instruction from a law-enforcement agency or competent authority. It is therefore not a promise that every restriction must disappear after 60 days regardless of an investigation or legal order.

It is also not a rule allowing banks to seize money for 60 days without process. The draft creates notification, explanation, decision and grievance steps intended to make the process more structured and time-bound.

Who could be affected?

The consolidated consultation draft covers commercial banks, including small finance banks, payments banks, regional rural banks and local area banks, as well as urban co-operative banks. Customers who receive unusual third-party credits, route money for another person, or have transactions caught in a fraud trail could face scrutiny under the eventual framework.

What this does not mean

It does not mean every transaction of ₹1,000 or more will be frozen.
It does not mean a flagged customer has automatically been found guilty of fraud.
It does not mean the final rules will necessarily be identical to the consultation draft.
It does not override a lawful direction from police, a court or another competent authority.
It does not justify paying a stranger, “verification agent” or caller to release a bank hold.

Why this matters to borrowers

A debit restriction can become an EMI problem even when the underlying loan is unrelated to the suspicious transaction. If the account used for loan repayment is restricted, an automated EMI may fail. A borrower should not assume the lender will automatically know why a payment failed.

If a genuine account is restricted, contact the bank immediately, preserve the written notice and transaction evidence, and separately inform the lender before an EMI due date where possible. Ask the lender for an authorised alternative repayment method rather than transferring money to an account supplied through an unsolicited message or call.

Practical customer checklist

Do not let anyone use your account, UPI ID or wallet to receive and forward money on their behalf.
If a transaction is flagged, ask the bank for the written reason, affected amount and designated contact.
Respond within the stated window with invoices, salary records, sale documents or other legitimate source-and-purpose evidence.
Keep acknowledgements, complaint numbers and copies of every submission.
If an EMI, rent or essential payment may be affected, contact the recipient through verified channels before the due date.
Never share OTPs, PINs, passwords or remote-access credentials with someone claiming they can remove a hold.

Fact versus interpretation

Fact: RBI has issued a consultation draft proposing a standard operating procedure and time limits for suspected money-mule debit holds.

Interpretation: the framework could reduce open-ended restrictions for genuine customers while giving banks a clearer fraud-response process. The real customer impact will depend on the final directions, bank implementation and law-enforcement coordination.

What to watch next

The immediate milestone is the 2 October consultation deadline. After reviewing feedback, RBI is expected to issue final directions separately for the relevant regulated entities. Customers and businesses should rely on that final text before changing banking procedures.

FAQ

Are bank accounts now limited to a 60-day freeze?

No. This is a draft framework, and the proposed 60-day maximum applies to the bank’s temporary debit hold where no contrary instruction is received from law enforcement or another competent authority.

Does a debit hold mean the bank has taken my money?

Not necessarily. A debit hold restricts outgoing use of the affected amount or account while the matter is reviewed. The exact scope depends on the action taken and any authority instruction.

Can a bank freeze the whole account?

The draft contemplates account-level holds, but says they should be used as a last resort and only in exceptional circumstances.

What if the account is used for my home-loan EMI?

Contact both the bank and lender promptly. Do not simply stop repayment. Ask the lender, through its official channel, how to make a legitimate alternative payment if the repayment account is temporarily restricted.

RiteAssetz takeaway: payment reliability is part of borrowing resilience. Keep your EMI account clean, avoid routing third-party money for others, maintain transaction evidence and use only verified bank and lender channels when a payment account is restricted.