IDFC First Bank Chandigarh Fraud: KPMG Finds Isolated

What the forensic review found

IDFC First Bank has said a forensic review by KPMG has confirmed that the fraud detected at its Chandigarh branch was an isolated incident. In a stock exchange filing, the private sector lender said the findings reaffirmed that the issue was limited to the Chandigarh branch and had not been observed at other branches. The fraud, quantified at around ₹646 crore in net principal terms, was described as involving collusion among branch employees, customer-side representatives, and third parties. The bank said the amount in KPMG’s report is in line with its earlier disclosures. The KPMG review was internally referred to as “Project Ultra”. The report was submitted on a Friday, and the bank said its board has taken note of the findings.

How the alleged fraud was executed

The bank and related disclosures indicate the fraud did not stem from a digital breach or a systemic cybersecurity failure. Instead, it was described as a traditional, physical manipulation. The methods cited include forged cheques and unauthorised debit instructions. The execution is understood to have involved connivance that allowed perpetrators to bypass standard maker-checker-authoriser controls at the branch level. IDFC First Bank’s management has said the incident reflects collusion among individuals rather than an electronic system error. The bank also stated there is no evidence indicating involvement of any senior management personnel.

Accounts affected: government-linked and school accounts

The case is tied to Haryana government-linked accounts operated through the Chandigarh branch. A version of the disclosures also noted that based on claims received, the bank paid the net principal amount totalling ₹645.59 crore along with applicable interest. The payments went to 11 government accounts and two school accounts. Separately, the bank had earlier disclosed a suspected fraud amount of about ₹590 crore, with the final figure subject to reconciliation, validation of claims, and recoveries. The later payment figure implies the settled claim amount was higher than the initial estimate. The bank has said the claims pertain to the same incident and the same branch, and not a new incident.

What the bank has already done financially

IDFC First Bank said it has paid the aforesaid amount and applicable interest to the concerned departments. It has recognised the principal and interest in its books of accounts in Q4FY26. The bank described itself as a victim of the fraud and said it is working with investigative authorities. In earlier communication, it also stated that the discrepancy would pass through the profit and loss account, while recoveries and an employee dishonesty insurance cover of ₹35 crore could reduce the final hit. The lender has also said reconciliation of all relevant accounts has been completed and that zero claims were received nationwide since February 25, 2026.

Regulatory and official backdrop

On February 21, IDFC First Bank formally reported to the Reserve Bank of India that it had detected a suspected fraud. The bank also informed stock exchanges on the same day, stating that about ₹590 crore was involved at that time. RBI Governor Sanjay Malhotra said the central bank was watching developments but did not see a systemic issue. The bank’s managing director and CEO, V Vaidyanathan, also described it as a specific, isolated incident in one branch with one client group. The bank appointed KPMG for a forensic audit to determine how the discrepancy occurred.

Investigation steps and enforcement action

The bank has said it issued recall requests to beneficiary banks to freeze potentially recoverable funds. It also indicated that legal proceedings against suspected employees and third parties would follow. Disclosures stated that employees suspected of involvement have been suspended, and earlier reporting mentioned four employees being suspended. Haryana’s Anti-Corruption Bureau has arrested four accused in the suspected IDFC First Bank fraud. The bank has continued to position the case as confined to a limited cluster of government-linked accounts routed through the Chandigarh branch.

Controls and operational changes after the incident

IDFC First Bank has said it implemented new controls to prevent future collusion risks at the branch level. The emphasis in its disclosures has been on strengthening oversight where physical instruments and manual instructions can be misused through coordinated behaviour. The bank’s comments also suggested that existing controls were circumvented through collusion rather than a failure of the underlying core system. Management said transactions across the country would continue smoothly, and that there was no broader impact on other branches that had come to notice.

Market context and investor-facing disclosures

When the bank first disclosed the suspected fraud on February 21, it said the news rattled markets. One research note cited in the provided material said the issue related to discrepancies of approximately ₹5,900 million (₹590 crore) linked to Haryana State Government accounts, and noted a rating change from BUY to REDUCE with a target price of ₹65.4. The same note listed a 52-week high and low of 87 and 53. Separately, the bank said its average liquidity coverage ratio was comfortable at 114% for the ongoing quarter, and it expected deposit and loan growth to continue broadly in line with past trends.

Key facts at a glance

Timeline of disclosed developments

Why the KPMG findings matter

The KPMG report matters because it supports the bank’s repeated position that the fraud was limited to one branch and a specific set of government-linked accounts. For investors and regulators, the distinction between a collusive, branch-level event and a system-wide control failure can influence how the risk is assessed. The disclosures also draw a clear line between manual instrument fraud and a digital breach, which affects how banks typically respond in terms of technology controls versus operational supervision. The bank’s settlement of the principal and applicable interest, and its recognition in Q4FY26, clarifies the accounting treatment and the timing of the impact.

Conclusion

IDFC First Bank has said KPMG’s forensic review confirms the ₹645.59-₹646 crore Chandigarh branch fraud was an isolated incident driven by collusion and physical manipulation. The lender has paid the principal and applicable interest to the concerned accounts and recognised the amounts in Q4FY26. It has also stated that suspected employees have been suspended, recoveries are being pursued, and investigative authorities are involved. The next set of disclosures is likely to track enforcement progress, recoveries, and any further regulatory or legal outcomes linked to the Chandigarh branch incident.