RBI Mandates FRI Technology to Fight Cyber Fraud: What It Means for India’s Banks—and What the Rest of APAC Can Learn

As cyber fraud escalates across digital finance, the Reserve Bank of India has taken a bold step to defend consumers—mandating all banks to adopt the Department of Telecommunications' Financial Fraud Risk Indicator (FRI). The move marks a new frontier in real-time, cross-sector intelligence-sharing. But its significance extends well beyond India's borders.

A Bold Regulatory Move in the Fight Against Digital Fraud

On June 30, 2025, the Reserve Bank of India (RBI) issued a landmark directive requiring all Scheduled Commercial Banks, Small Finance Banks, Payments Banks, and Cooperative Banks to integrate the Financial Fraud Risk Indicator (FRI)—a technology developed by India’s Department of Telecommunications (DoT).

The FRI platform allows banks to access real-time telecom intelligence to assess whether a customer’s mobile number is linked to prior or ongoing financial fraud. As cybercrime syndicates increasingly use spoofed numbers, mule accounts, recycled SIMs, and social engineering to commit fraud—this level of cross-domain risk insight is revolutionary.

Already adopted by major players like PhonePe, ICICI Bank, HDFC Bank, Paytm, and India Post Payments Bank, FRI is positioned to become a national fraud defense standard in India. More importantly, it represents a model that could reshape fraud prevention strategies across the broader Asia-Pacific region.

What Is the Financial Fraud Risk Indicator (FRI)?

FRI is a risk-based classification tool that assigns mobile numbers a fraud risk score—categorized as Medium, High, or Very High. The classification is derived from:

• Cybercrime reports from India’s National Cybercrime Reporting Portal (NCRP)

• DoT’s Chakshu platform, which crowdsources telecom fraud reports

• Intelligence from banks, NBFCs, and UPI service providers

• Mobile Number Revocation Lists (MNRLs), which flag numbers disconnected for misuse

When a mobile number is flagged as high-risk, banks and financial institutions can take real-time actions, including:

• Declining or delaying suspicious transactions

• Blocking account access

• Sending warning alerts to customers

• Enabling enhanced verification measures

This shared fraud signal bridges a long-standing gap between telecom networks and financial institutions—two systems traditionally siloed despite facing common threats.

Why the FRI Mandate Matters: A Shift from Reactive to Proactive Defense

Historically, many fraud defense strategies have been reactive—investigating fraud after it occurs. FRI flips this model, allowing institutions to predict and prevent.

Key Benefits:

• Real-time visibility: Banks can evaluate the risk associated with a transaction before it’s completed.

• Cross-sector collaboration: Fraud data from telecom and financial ecosystems is unified.

• Faster law enforcement coordination: Agencies can trace fraud networks using mobile number intelligence.

• Consumer protection at scale: Millions of users, especially in UPI-heavy markets, gain new layers of safety.

The Indian Context: Why This Matters Now

India is ground zero for digital payment adoption. With over 400 million UPI users, more than 12 billion monthly transactions, and widespread mobile-first banking, fraud is both a scale and complexity problem.

Common fraud types include:

• Remote screen-sharing scams

• Fake customer support impersonation

• Malware on budget smartphones

• KYC-based social engineering

• SIM swapping and OTP hijacking

In many cases, the fraudster’s mobile number is the common entry point—but until now, banks lacked a standard tool to assess its risk status in real time.

FRI changes that.

How Banks Are Using FRI Today

According to the DoT, institutions like HDFC Bank, PhonePe, ICICI Bank, and Paytm are already integrating FRI into:

• Digital banking platforms

• Transaction screening engines

• Customer support chat and call workflows

• Fraud investigation dashboards

These integrations allow frontline systems to:

• Interrupt risky payment flows

• Alert users during login or password reset

• Escalate flagged accounts for deeper due diligence

• Automatically generate suspicious transaction reports (STRs)

Industry Expert Views on FRI’s Impact

“FRI isn’t just a fraud detection tool—it’s a digital trust enabler.”– Sheetal R Bhardwaj, Executive Member, ACFCS

“By merging telecom intelligence with AI-based risk scoring, FRI helps banks predict and prevent fraud before it hits.”– Tarun Wig, CEO, Innefu Labs

“Very few countries offer this structured, automated mobile fraud risk intelligence. India’s mandatory model may set a global benchmark.”– Ranjeeth Bellary, Partner, EY Forensic India

Key Features of FRI Technology

Feature	Benefit
Mobile Number Risk Scoring (M/H/VH)	Empowers real-time decisions based on a number’s fraud history
API-First Design	Seamless integration with banking apps, fintech platforms, and fraud systems
Mobile Number Revocation List (MNRL)	Dynamic watchlist of deactivated or high-risk SIMs
Multi-source intelligence	Combines input from cybercrime, telecom fraud, and financial institutions
Regulatory Mandate (RBI)	Standardizes adoption across the sector, unlike optional systems elsewhere
Scalable Across Institutions	Works for small co-operative banks as well as large payment platforms

Real-World Use Cases in India

• PhonePe integrated FRI into its backend fraud engine to flag fake customer care scams linked to flagged numbers.

• ICICI Bank uses FRI to augment risk scoring during UPI push transactions, delaying or denying suspicious activity.

• India Post Payments Bank leverages FRI to protect rural customers—many of whom are new to digital banking and more vulnerable to telecom-led fraud.

What This Means for Other APAC Markets

India’s FRI mandate is a blueprint that other Asia-Pacific regulators can adapt to their contexts. The need is clear:

Common APAC Challenges:

• Thailand and Philippines: SIM-swapping and WhatsApp-based mule recruitment are growing rapidly.

• Indonesia: Remote banking fraud targeting rural users on low-end smartphones.

• Vietnam and Cambodia: Telecom-finance scams increasing in cross-border digital lending.

• Malaysia and Singapore: High volumes of fake SMSs impersonating banks, ecommerce platforms, and telcos.

Lessons from India’s FRI Model:

1. Make fraud intelligence a shared national utility — not a private asset.

2. Mandate participation across financial institutions — from legacy banks to e-wallet providers.

3. Integrate fraud scoring into real-time payment flows — not just post-incident investigation.

4. Combine risk scoring with telecom metadata — to add dimensionality to fraud detection.

5. Align with consumer data protection laws — ensuring informed consent and ethical cross-sector data use.

What Institutions Must Do Next

For Indian banks (and fintechs), compliance is now mandatory. For institutions in other APAC countries, this is a strategic opportunity to future-proof fraud infrastructure.

Immediate Steps:

• Integrate FRI (or its equivalent) into onboarding, transaction monitoring, and customer support channels.

• Train fraud and risk teams to interpret FRI scoring models and implement escalation protocols.

• Map customer journeys to identify touchpoints where mobile number risk checks can be applied.

• Pair FRI with behavioral analytics and device fingerprinting for deeper threat detection.

Challenges to Watch

No system is perfect. For FRI and its future versions, institutions must proactively address:

• False positives: Mobile numbers recycled by telecom operators may be unfairly flagged.

• Privacy concerns: Cross-domain data sharing must comply with India’s Digital Personal Data Protection Act (DPDPA).

• Fraudster adaptation: Bad actors may shift to foreign VoIP numbers or anonymous messaging platforms.

• Data fatigue: Too many risk signals can overwhelm analysts without smart prioritization.

Final Thoughts: From Compliance to Confidence

The RBI’s move to enforce FRI adoption isn’t just about checking a regulatory box. It’s about restoring digital trust at scale, especially as India becomes the world’s largest real-time payments market.

For financial institutions across Asia-Pacific, this represents a defining moment. It’s not about whether fraud will increase—it will. It’s about whether your systems are connected, intelligent, and responsive enough to stop it in real time.

India has offered a bold example. The next step is global alignment.

Three Questions Every Risk Leader Should Be Asking Today:

1. Are we making use of telecom intelligence in our fraud prevention models?

2. Can we assess mobile number risk before a transaction occurs?

3. Are we building shared, system-wide defenses, or just isolated controls?

If the answer to any of these is “not yet,” it’s time to rethink the roadmap.