SIM Swap Fraud: Karnataka High Court Holds BSNL Liable to Pay Rs 55 Lakh

In a ruling with major consequences for telecom companies and bank customers, the Karnataka High Court has held that telecom service providers who enable SIM swap fraud through negligent issuance of duplicate SIM cards bear full civil liability for the resulting financial losses. Justice Suraj Govindaraj ordered BSNL to pay a cooperative bank Rs 50.5 lakh in compensation along with an additional Rs 5 lakh in damages.

The case, Sri Basaveshwara Pattana Sahakara Bank Niyamitha v. Canara Bank, arose from a 2019 SIM swap fraud in which the cooperative bank lost around Rs 87 lakh from its account after a fraudster obtained a duplicate SIM carrying the bank's registered mobile number.

How the Fraud Happened

The cooperative bank held a BSNL mobile number that was linked to its bank account and used to receive one time passwords for transactions. A BSNL employee issued a duplicate SIM for that number without proper verification of the applicant's identity. With the duplicate SIM in hand, the fraudsters received the OTPs needed to authorise transfers and moved approximately Rs 87 lakh out of the bank's account.

The cooperative bank argued that BSNL's negligence in issuing the duplicate SIM was the direct cause of the fraud. The High Court agreed, finding that BSNL had breached the duty of care it owed to its customer.

Verification Is Not an Empty Formality

Justice Govindaraj held that verification of a subscriber's identity before issuing a replacement or duplicate SIM is a critical security measure on which the financial safety of millions of bank account holders depends, particularly in the era of digital finance. The court observed that the very fact that a duplicate SIM reached a non subscriber was proof that verification was either not conducted or was conducted in so perfunctory a manner as to be worthless.

The judgment describes telecom service providers as critical infrastructure providers who hold in trust the mobile connectivity on which citizens and institutions depend for financial security. When a provider issues a duplicate SIM carelessly, the court said, it does not merely harm one subscriber; it introduces a systemic vulnerability into the digital financial architecture. The responsibility of telecom providers is therefore not merely private and contractual but systemic and public.

A Pattern the Courts Are Watching

The court noted with concern the pattern of SIM swap fraud in India, observing that reports from the Reserve Bank of India, the Ministry of Home Affairs and state cybercrime units consistently rank SIM swap fraud among the most prevalent and damaging forms of digital financial fraud. In virtually all such cases, the court said, the fraud is enabled by issuance of a duplicate SIM without proper verification at the telecom provider's end.

The ruling continues a broader judicial trend of fixing institutional accountability for cyber fraud losses. The Supreme Court has recently pushed banks toward a liability framework for digital arrest scams, and regulators have tightened expectations on fraud detection and customer protection.

What Victims of SIM Swap Fraud Should Do

Speed matters in cyber fraud cases. Victims should immediately inform their bank, block the compromised number and report the incident on the national cybercrime portal. Our step by step guide on filing a cybercrime complaint online explains the process, including the 1930 helpline.

If the bank does not restore the money or respond satisfactorily, the customer can escalate the matter. See our guide on filing a complaint with the RBI Banking Ombudsman for the process and time limits. Where money has been transferred out by fraudsters, the steps in our article on recovering money sent to the wrong account may also help.

Related Reading

Identity misuse often accompanies SIM swap fraud. Read our guide on checking Aadhaar authentication history and locking biometrics.

For how regulators are policing deceptive digital practices more broadly, see our report on the CCPA's dark pattern penalties against PhysicsWallah and McAfee.

Key Takeaways

The Karnataka High Court has held that telecom companies are fully accountable in civil law when their negligence in issuing duplicate SIMs enables SIM swap fraud. BSNL must pay about Rs 55 lakh for a 2019 fraud that cost a cooperative bank Rs 87 lakh. The ruling treats SIM verification as a public, systemic obligation, not a mere formality, and strengthens the position of every fraud victim seeking compensation from institutions whose lapses made the fraud possible.