IDFC FIRST bank 590 Cr Fraud: How it happened

In a significant breach of financial security, IDFC First Bank has disclosed a ₹590 crore fraud involving Haryana government accounts. The bank’s management, led by CEO V. Vaidyanathan, has attributed the incident to internal collusion between bank employees and external parties.

🚩 Key Details of the Fraud

The incident came to light on February 18, 2026, after a Haryana government department requested to close its account and transfer funds, only to find a massive discrepancy between their records and the bank’s system balance.

Total Amount: Approximately ₹590 crore (₹490 crore identified via reconciliation and ₹100 crore “self-identified” by the bank).
The Method: The fraud was carried out through forged physical cheque transactions rather than digital or system-level failures.
Location: The activity was isolated to a single branch in Chandigarh.
Scope: The bank maintains this is an “isolated incident” confined to a specific group of government-linked accounts and does not affect other retail or corporate customers.

🏛️ Government and Regulatory Action

The Haryana government has responded with a “zero-tolerance” approach to the mismanagement of public funds:

De-empanelment: Both IDFC First Bank and AU Small Finance Bank (which also reported a smaller suspected discrepancy of ~₹47 crore) have been removed from the state’s list of approved banks.
Account Closure: All state departments, boards, and corporations have been ordered to immediately transfer funds out of these banks and close their accounts.
Police Investigation: A formal police complaint has been filed, and the State Anti-Corruption Bureau (ACB) is investigating the matter.

🛠️ The Bank’s Response

To mitigate damage and recover funds, IDFC First Bank has taken several immediate steps:

Suspensions: Four employees suspected of involvement have been suspended.
Forensic Audit: The bank has appointed KPMG to conduct an independent forensic audit, expected to conclude in 4–5 weeks.
Lien Marking: Recall requests have been sent to other banks to “lien-mark” (freeze) funds in suspicious beneficiary accounts.
Insurance: The bank plans to invoke its ₹35 crore employee dishonesty insurance to help cover part of the loss.

Financial Impact: Following the disclosure, IDFC First Bank shares plunged nearly 20% on Monday, February 23, 2026, wiping out over ₹14,000 crore in market capitalization.

In summary, while IDFC First Bank has framed this as an isolated act of internal collusion rather than a systemic failure, the fallout remains a severe blow to its reputation and market standing.

The incident underscores a critical vulnerability: even with robust digital safeguards, human-level compromise in the physical processing of high-value transactions can bypass standard security protocols.

The swift de-empanelment by the Haryana government serves as a stark warning to the private banking sector regarding the handling of public funds. As the investigation shifts to the State Anti-Corruption Bureau and KPMG’s forensic team, the bank faces a steep climb to restore investor confidence and prove that its internal controls can prevent a localized breach from becoming a recurring liability.