India's RBI Weighs Facial Recognition at Banks

Person using an ATM machine inserting a bank card — Photo via Unsplash

Reviser note, July 16, 2026: No official RBI notice for the facial-recognition consultation was fetchable during this review. This article uses cautious wording and relies on named reporting. It does not describe a final RBI order or a confirmed Aadhaar connection.

TL;DR:

Reports describe an RBI request for feedback on possible AI-based facial recognition at ATMs, branches, and other banking outlets.^[1]^[2]
The proposal is framed as fraud prevention. The reporting says banks would need to consider infrastructure, system integration, costs, and data-protection compliance.^[1]^[2]
It is not a confirmed nationwide deployment. Outlook Money says the RBI would decide after receiving feedback.^[1]
India's privacy law has broad government exemptions. Two legal analyses describe Section 17 of the DPDP Act as allowing exemptions or processing without consent in specified government and security contexts.^[5]^[6]

What the Reporting Says

Outlook Money reported that the RBI was seeking feedback from banks on possible AI-based facial-recognition systems for ATMs, branches, and other banking outlets. The report said the RBI was weighing benefits and operational feasibility before making a final decision.^[1]

The420.in and VAR India also described the request as a consultation covering public and private banks, with feedback on feasibility, cost, and technical challenges due by the end of the month.^[2]^[3]

That distinction matters. A request for feedback is not the same thing as an order to put a camera at every ATM.

The Hard Part Is the Infrastructure

Outlook Money reported that a rollout would require more cameras, greater processing capacity, integration with core banking platforms and ATM networks, and compatibility with payment systems run by the National Payments Corporation of India. It also said smaller banks could face higher costs.^[1]

The same report said banks would need to examine compliance with India's Digital Personal Data Protection Act. It noted that connecting a system to Aadhaar would require coordination with the Unique Identification Authority of India. The report did not say that an Aadhaar connection had been approved.^[1]

The Fraud Case for It

Rozana Spokesman reported around 28 lakh cyber-fraud cases in 2025 and losses of about ₹22,931 crore, attributing the figures to India's National Cyber Crime Reporting Portal.^[4]

Those figures explain why banks and regulators are discussing more fraud controls. They do not show that facial recognition will stop phishing, SIM-swap attacks, or social engineering. The reporting reviewed here provides no trial data showing that it would.

Outlook Money separately reported draft compensation rules under which an eligible victim with a loss up to ₹50,000 could receive 85 percent of the net loss or ₹25,000, whichever is lower, once in a lifetime.^[1] That proposed compensation rule is separate from any facial-recognition system.

What India's Privacy Law Says

TechPolicy.Press says Section 17(2)(a) of the DPDP Act allows the government to exempt an instrumentality of the state from provisions of the law for reasons including national security, public order, or foreign relations. It also discusses Section 36, which it says can let the central government require data fiduciaries to share personal data.^[5]

IAPP's review says Section 17 permits government processing without consent for reasons including public order and national security, and criticizes the lack of independent oversight or judicial review for surveillance activity.^[6]

Those are analyses of the law, not proof that the RBI has approved a facial-recognition database. Any banking deployment would still need clear answers about purpose, retention, access, security, and refusal.

What to Watch

Whether the RBI publishes an official consultation or decision.
Whether banks are asked to use facial recognition only at selected high-risk locations or more broadly. The reporting reviewed here describes high-fraud areas as an initial possibility.^[2]
Whether any proposal explains what database a system would check and whether customers could use banking services without a face scan.
Whether the final policy addresses deletion, retention, security, and access by police or other government agencies.

What You Can Do

Ask your bank whether it has submitted feedback on facial recognition and what data a possible system would collect.
Ask whether customers could refuse a scan and still withdraw cash or receive service.
Watch for an official RBI notice rather than treating a media report about a consultation as a final rule.
Push for clear retention limits, deletion rights, security standards, and independent oversight before any biometric rollout.

Sources

Published: April 12, 2026