The Reserve Bank of India imposed monetary penalties totalling ₹54.78 crore on 353 regulated entities during the fiscal year ended March 2025, the central bank's most comprehensive enforcement accounting for the period covering April 2024 through March 2025. The figures span the full range of entities under the RBI's supervisory umbrella and reflect a broad-based push to enforce compliance with prudential, conduct, and reporting obligations.

Cooperative banks bore the heaviest enforcement burden in terms of the number of individual actions, with 264 penalty orders worth a combined ₹15.63 crore handed down over the twelve-month period. The high count reflects the large number of cooperative banking institutions operating in India, many of which are smaller entities with more limited compliance infrastructure, and underscores the RBI's continued close attention to a sector that has experienced governance failures and financial distress at various institutions in recent years.

PRIVATE, PUBLIC, AND FOREIGN BANKS ALL PENALISED

Among scheduled commercial banks, 15 private sector banks were fined a combined ₹14.8 crore during the year, while 8 public sector banks collectively paid ₹11.11 crore in penalties. Six foreign banks operating in India were also subjected to monetary sanctions, rounding out the picture of an enforcement sweep that reached across all categories of the domestic banking system. The RBI did not single out individual institutions in its aggregate figures, but the spread of penalties across bank types signals that the central bank regards compliance failures as a sector-wide concern rather than isolated to any one segment.

Non-banking financial companies and asset reconstruction companies accounted for 37 penalty orders with a combined value of ₹7.29 crore. NBFCs have been a growing focus of the RBI's supervisory attention as the sector has expanded in size and systemic importance, and the regulator has in recent periods tightened its expectations around governance, risk management, and customer-facing conduct for those entities.

The violations that triggered penalties spanned a broad range of regulatory requirements. Cybersecurity lapses featured prominently, reflecting the RBI's escalating concern about the adequacy of information security frameworks at regulated entities. Income recognition and asset classification norm breaches — where loans are not correctly categorised as non-performing — were another category of infringement, as were know-your-customer violations, deficient reporting to the central bank, and failures in fraud identification and classification.

ENFORCEMENT REFLECTS BROADER SUPERVISORY PRIORITIES

The volume and variety of penalties in FY2024-25 are consistent with a deliberate shift in the RBI's enforcement approach that has been under way for several years. The central bank has moved away from relying primarily on supervisory guidance and moral suasion to correct compliance deficiencies, instead using formal monetary penalties more readily as both a punitive measure against specific lapses and a deterrent signal to the wider regulated community.

Cybersecurity has emerged as a particularly sensitive area following a number of high-profile incidents at Indian financial institutions. The RBI has issued detailed instructions on IT and cybersecurity risk management and has signalled that lapses in those frameworks will attract penalties rather than merely written warnings. The presence of cybersecurity violations in the FY2024-25 penalty data suggests that not all entities have yet brought their technology risk management practices up to the standard the regulator expects.

KYC compliance, though a long-standing regulatory obligation, continues to generate enforcement actions because the practical challenges of maintaining accurate and up-to-date customer records at scale remain significant, particularly for cooperative banks and smaller NBFCs. The RBI has indicated it will continue to prioritise this area, viewing robust customer identification as the foundation of effective anti-money-laundering and counter-financing-of-terrorism controls across the financial system.