Bharat’s march towards becoming a major global economic power is no longer being challenged merely through conventional political opposition, economic criticism or street protests. A far more dangerous threat is emerging in cyberspace, where artificial intelligence is increasingly being weaponised by criminal networks to infiltrate financial institutions, compromise digital payment systems and potentially undermine public confidence in the country’s economic infrastructure. The latest warning from the Indian Computer Emergency Response Team (CERT-In) should therefore be treated as a wake-up call, not another routine cybersecurity advisory. In a critical advisory issued on November 4, CERT-In identified an AI-assisted threat actor named ‘CRAFTY FALCON’, which is targeting banking, financial services and insurance (BFSI) entities, including NBFCs, digital lenders, fintech companies, payment aggregators and cryptocurrency exchanges. What makes this campaign particularly alarming is the deployment of sophisticated AI-enabled tools such as ARTEX, PentAGI, Cairn and CyberStrikeAI to identify vulnerabilities, generate attack scripts and execute multiple stages of cyber intrusions at machine speed. Attackers are even exploiting payment and disbursement APIs, conducting transactions as small as Re.1 to test unauthorised fund transfers before attempting to siphon larger amounts. Worse, some institutions that had already attempted corrective measures have reportedly been targeted again, with intrusions timed around weekends and holidays when security monitoring is relatively weak. This is not ordinary online fraud. It represents a disturbing escalation in the ability of hostile cyber networks to exploit technological vulnerabilities with precision, speed and considerable financial consequences. While CERT-In has not established any political motive or identified state sponsorship behind this particular campaign, the possibility of hostile external and internal elements exploiting such vulnerabilities to disrupt Bharat’s economic progress cannot be dismissed. Those who seek to weaken the country need not necessarily confront it on the streets or across political platforms when its financial arteries can potentially be attacked from behind computer screens.
Under Narendra Modi’s leadership, Bharat has made enormous strides in digital payments, financial inclusion, banking penetration and the formalisation of its economy. The expansion of UPI, digital banking, Jan Dhan accounts and financial services into rural and semi-urban areas has transformed how millions of Indians transact, save and access credit. But this remarkable transformation has also created a larger digital attack surface. The very infrastructure powering economic growth must now be protected against those seeking to exploit it. Consider the potential consequences of a coordinated attack on rural NBFCs, digital lenders or financial institutions with a substantial presence outside metropolitan centres. If depositors and borrowers suddenly discover that money has disappeared through fraudulent transactions, the immediate fallout could extend well beyond financial losses. Panic, anger and mistrust could spread rapidly, particularly among small depositors, farmers and economically vulnerable households. Agricultural credit, rural lending and everyday commercial transactions could be disrupted. Political opportunists could then exploit genuine public grievances, turning a cybersecurity failure into a larger campaign against the government and its economic policies. This is a possible chain of consequences, not evidence of an established conspiracy, but one that policymakers cannot afford to ignore. The government must consequently look beyond issuing advisories and demand accountability from financial institutions. Cybersecurity cannot remain a compliance formality or an annual audit exercise. Banks, NBFCs and fintech companies must strengthen round-the-clock surveillance, secure payment APIs, impose robust transaction controls, isolate vulnerable testing environments and ensure that even a Re.1 suspicious transaction triggers immediate scrutiny. Weekend and holiday monitoring must be as rigorous as weekday surveillance. Regulators must also insist on independent security audits, rapid incident reporting and clear accountability for negligence. Equally important is public awareness. Depositors must know how to report suspicious transactions and seek immediate intervention before losses multiply. The RBI, CERT-In and the Indian Cyber Crime Coordination Centre must work in close coordination to ensure that cybercriminals do not exploit institutional gaps. Bharat cannot afford to become a victim of its own digital success. The country’s economic ambitions, financial credibility and the confidence of millions of ordinary citizens are at stake. Political differences are inevitable in a democracy, but sabotaging national economic interests through cyber warfare is an altogether different proposition. The battle for Bharat’s economic future will not be fought only in Parliament, on electoral platforms or at international negotiating tables. Increasingly, it will also be fought in cyberspace. The government must ensure that those attempting to breach the country’s financial defences discover that Bharat’s digital walls are far stronger than they imagined.
