Hyderabad Police Commissioner V. C. Sajjanar on Monday, 9 November 2026, issued a sharp directive to banks, financial institutions, quick-commerce platforms, and mobility service providers in Hyderabad, urging them to immediately overhaul their cybersecurity defences against a rising wave of AI-assisted cyberattacks and organised hacker syndicates. The commissioner stressed that inaction could expose citizens' finances and sensitive data to irreversible harm.

The Threat Landscape

Commissioner Sajjanar described a rapidly evolving threat environment in which international cybercriminal networks are deploying cutting-edge Artificial Intelligence tools to probe and exploit weaknesses inside financial systems. Criminals are, according to the commissioner, specifically targeting outdated software, misconfigured internet systems, and technical loopholes in customer grievance portals.

Of particular concern is the use of automated fund disbursement systems and payment APIs to redirect crores of rupees into so-called 'mule' accounts within seconds — often erasing digital records entirely to obstruct law enforcement. The speed and scale of such diversions make conventional monitoring systems inadequate, Sajjanar warned.

Third-Party Systems Under the Microscope

A significant portion of the commissioner's advisory focused on Non-Banking Financial Companies (NBFCs), which routinely depend on third-party modules and API services for customer data management and payment processing. Sajjanar stressed that these supporting systems must be subjected to the same rigorous security scrutiny as core banking applications — a standard that many institutions are reportedly not meeting.

'Entities handling citizen finances and data — including Banks, Financial Institutions, Quick Commerce, and Mobility Platforms — are requested to strengthen their cybersecurity systems, processes, and manpower against evolving AI-assisted attacks and hacker syndicates,' the commissioner said.

Key Defensive Measures Prescribed

Commissioner Sajjanar outlined a set of immediate steps financial institutions must implement. These include removing obsolete APIs — particularly those created for testing that were never decommissioned — and enforcing robust security protocols around fund-disbursement systems. Institutions are also advised to keep all software updated, conduct daily security audits of internet-facing customer portals, and set transaction thresholds to automatically flag unusually rapid or large-value movements.

He further directed that a full-scale KYC (Know Your Customer) process must be completed and senior-official approval obtained before funds are credited to any account. To stress-test preparedness, IT and cybersecurity teams should run frequent coordinated 'Red Team' mock drills simulating live attack scenarios.

Public Advisory and Helpline

The commissioner also addressed citizens directly, urging anyone who notices a suspicious transaction or falls victim to cyber fraud to immediately contact the national cybercrime helpline at 1930 or file a complaint through the portal cybercrime.gov.in. Prompt reporting, he noted, can significantly improve the chances of fund recovery before digital trails are wiped.

This advisory comes at a time when cyber fraud losses in India have surged, with government data pointing to tens of thousands of complaints filed monthly. As AI tools become cheaper and more accessible, security experts warn that attack complexity will only increase — making Sajjanar's call for proactive, not reactive, security culture all the more urgent.