The Reserve Bank of India imposed a total penalty of ₹17.30 lakh on three cooperative banks — two from Maharashtra and one from Odisha — for regulatory violations. Separately, RBI fined six NBFCs including Muthoot Finance ₹23.60 lakh for KYC and regulatory lapses. SEBI imposed ₹1 crore penalty on CDSL for cybersecurity failures linked to a 2022 malware attack. These actions reflect RBI's and SEBI's intensified enforcement against KYC non-compliance and cyber governance failures.

RBI's enforcement actions against cooperative banks and NBFCs are not routine housekeeping — they signal the regulator's zero-tolerance posture on KYC compliance and prudential norms. Cooperative banks occupy a unique regulatory space in India: they are licensed under the Banking Regulation Act, 1949, but administratively supervised by state governments and the Registrar of Cooperative Societies, creating a dual-control problem. This structural ambiguity historically allowed regulatory arbitrage. Post the PMC Bank crisis of 2019, RBI secured stronger supervisory powers over urban cooperative banks (UCBs) through the Banking Regulation (Amendment) Act, 2020, bringing them firmly under RBI's prudential oversight.

KYC violations are particularly serious because they enable money laundering, identity fraud, and terror financing. RBI's KYC Master Direction 2016 (updated periodically) mandates customer due diligence, periodic re-KYC, and risk-based profiling. NBFCs like Muthoot Finance, operating in gold lending where cash transactions dominate, are especially prone to KYC slippages.

The CDSL penalty by SEBI for a 2022 cyberattack highlights a different but equally critical dimension — market infrastructure institutions (MIIs) must meet SEBI's cybersecurity framework. Depositories holding demat accounts for crores of retail investors are systemically critical, and cybersecurity failures can undermine market integrity and investor confidence. These cases together demonstrate that regulatory enforcement is moving from entity-level warnings to financial penalties with named accountability.