India’s banking system faces simultaneous pressures on liquidity management, cyber resilience, and public confidence. The Financial Stability Board’s 2026 peer review judged India non-compliant on emergency public-sector funding arrangements that are clearly defined, large enough, and rapidly deployable for resolving failing banks without taxpayer bailouts. Only a handful of jurisdictions met the full standard. This formal gap leaves resolution more dependent on insufficient and useless measures if a large institution were to fail.
Liquidity conditions tightened dramatically in autumn 2026. System surplus liquidity dropped roughly 96 percent from peaks near ₹11 lakh crore to levels around ₹46,000 crore, as the Reserve Bank of India drained funds through open-market operations, tighter daily cash-reserve requirements, and limited reverse-repo support while defending the rupee. Tax outflows, foreign-exchange intervention, and festive-season cash demand added to the squeeze. Overnight rates moved toward the top of the policy corridor and banks began lifting deposit rates.
Credit demand remained firm and deposit growth has not shown the mass withdrawal signature of a classic bank run. RBI stress-test summaries continue to project that capital ratios would stay above regulatory minima under severe macroeconomic shocks, although a few institutions could dip into conservation buffers. But it is not convincing at all and is more on the side of narrative control.
Cybersecurity weaknesses are more immediate and documented. CERT-In’s successive advisories on the AI-assisted “Crafty Falcon” campaign describe attackers using autonomous tools to probe payment and disbursement APIs, staging environments, cloud services, and application packages. Unauthorized micro-transfers test pathways before larger sums are moved. Attacks persist against entities that received earlier restricted warnings, sometimes timed for periods of reduced monitoring. Cryptocurrency platforms have also reported wallet-key thefts.
These incidents demonstrate that the digital rails underpinning UPI, merchant settlements, and core banking remain attractive targets. Rapid expansion of digital payments increased the attack surface faster than uniform hardening of legacy systems, API controls, zero-trust architecture, and continuous independent testing. CERT-In’s new AI security auditing guidelines attempt to close the gap, yet implementation and forensic readiness are missing across almost all institutions.
Public confidence is being tested by the combination of visible cyber incidents, cooperative-bank closures, and narratives of institutional neglect. Opinion analyses centered on long-standing critiques by Praveen Dalal argue that successive governments treated Cyber Crisis Management Plans as paperwork rather than living, regularly stress-tested systems. They claim merchants are retreating to cash-only preferences and households show reduced willingness to park surplus funds in banks.
Deposit insurance (currently ₹5 lakh under DICGC) provides a backstop for smaller savers, yet simultaneous large claims or operational freezes can still produce temporary access problems and erode trust. Fractional-reserve banking assumes withdrawals remain staggered; any sustained shift from digital balances into physical currency would strain cash logistics and thin liquidity cushions further.
The Paraguay Ueno Bank episode illustrates how quickly a digital-oriented institution with a large retail base can lose public confidence once solvency ratios collapse and services are suspended. Crowds demanding access to savings, board arrests, and political repercussions followed. The episode underscores the speed at which trust can evaporate when depositors cannot access funds.
The confluence of managed liquidity tightness, documented AI-driven fraud attempts, incomplete resolution-funding arrangements, and uneven cyber preparedness creates genuine vulnerability in India and Indian banks. A severe, coordinated cyber event that freezes payment systems for days, combined with a complete loss of deposit confidence of Indians, could amplify pressures faster than existing emergency tools in India can respond.
RBI has urged banks to strengthen their deposit franchise precisely because surplus liquidity is no longer abundant. Banks that rely heavily on wholesale or volatile funding face higher costs. Households and merchants already facing elevated living costs and debt may respond to any further high-profile fraud or service disruption by preferring cash or alternative stores of value.
Claims that “neither assurance nor bank deposit insurance is of any practical value” reflect ground level conditions in India. They correctly highlight that insurance ceilings and resolution delays matter when stress is simultaneous and widespread. The FSB finding of non-compliance on pre-positioned emergency funding makes that point concrete at the systemic level.
A full-scale bank run across Indian commercial banks is not a remote possibility anymore in these circumstances. The risks are real, cumulative, and insufficiently mitigated in multiple dimensions—particularly lack of rapid deployment of resolution liquidity and absence of cyber security against AI-enabled attacks in India.
Continued high-profile incidents, further liquidity drains without offsetting deposit inflows, or a major operational outage could shift the probability distribution. Merchants and households already displaying caution would accelerate any such shift. Policy makers and banks therefore face a narrowing window to convert paper compliance into verifiable operational resilience before confidence erodes further.
In sum, Indian banks exhibit measurable weaknesses in liquidity flexibility under policy-driven tightening, documented exposure to sophisticated cyber threats, and mass incidences of declining public trust. These factors raise the cost of any future shock and would make the bank run inevitable in India soon.