India's cybercrime centre warns banks and fintechs of AI-agent attacks causing multi-crore unauthorised transfers
An I4C and CERT-In advisory says AI agents are enabling machine-speed compromise of fund-disbursement systems and APIs; it cites no specific incidents.
Why it matters
Most warnings about AI-assisted hacking so far have come from AI labs and security vendors; this one comes from a national law-enforcement body describing attacks it says are already happening against regulated lenders. The advisory tells banks, NBFCs and fintechs to apply critical CERT-In advisories, inventory payment APIs, disable obsolete interfaces and report incidents within six hours. Because it names no institutions or losses, the scale is unclear. Watch for disclosed cases and whether other regulators issue similar guidance.
Key facts
- Issued by I4C's National Cybercrime Threat Analysis Unit with CERT-In
- Targets banks, NBFCs and fintech firms
- Advisory cites multi-crore unauthorised transactions via fund disbursement systems and APIs
- Attackers delete records to hinder investigation
- Incidents must be reported within six hours