Source: Reserve Bank of India · RBI/2004-05/405 · issued 29 Mar 2005 · ~1 min read
Quick answerRBI warns banks about a fraud by M/s Ahaana Computers at a Tamil Nadu co-op bank due to unfettered AMC access and staff dependency. Banks must tighten IT outsourcing controls and review vendor access.
The rule, in the simplest words
Limit vendor access to only the functions that are absolutely necessary under an Annual Maintenance Contract (AMC – a yearly service agreement).
Train in‑house staff to operate the bank’s software so the bank is not completely dependent on the vendor.
Regularly balance the books and keep good housekeeping of computer records to spot any irregularities early.
Review and strengthen internal controls for all IT outsourcing arrangements to minimise risk.
Exercise caution when dealing with sole‑proprietor IT firms like Ahaana Computers.
How it plays out — a real example
A branch manager at a cooperative bank in Tamil Nadu, after reading the RBI alert, arranges a hands‑on training session for his team on the core banking software and sets up a monthly review of system logs to ensure no vendor has unchecked access. He feels reassured that the bank can run its operations independently.
What changed
RBI issued a specific alert about a fraud involving M/s Ahaana Computers, a sole proprietor firm, at a cooperative bank in Tamil Nadu. The fraud exploited unfettered vendor access under an Annual Maintenance Contract and total bank dependency on the firm for computer operations.
What it means for you
Banks must reassess IT outsourcing risks, especially vendor access rights and staff training. The case highlights dangers of poor housekeeping, lack of periodic balancing, and inadequate controls. Lenders should ensure in-house staff can operate systems independently to avoid vendor lock-in.
What you must do
Review all IT outsourcing contracts to limit vendor access to only necessary functions.
Train bank staff on software operations to reduce dependency on external vendors.
Strengthen internal controls, including periodic book balancing and housekeeping checks.
Exercise caution when dealing with M/s Ahaana Computers or similar sole proprietor IT firms.
Who it affects
All banks with IT outsourcing arrangements, Cooperative banks relying on external software vendors, Bank IT and risk management teams
❓ Common questions
What specific fraud is RBI alerting about?
A fraud by M/s Ahaana Computers, a sole proprietor firm, at a cooperative bank in Tamil Nadu, due to unfettered access under an AMC and total bank dependency on the firm.
What key controls failed in this case?
Staff lacked knowledge of software operations, controls were inadequate, housekeeping was poor, and periodic balancing of books was not conducted.
What should banks do to prevent similar frauds?
Review IT outsourcing controls, limit vendor access, train staff on system operations, and ensure regular internal checks like book balancing.
📜 Read the original circular — full text as issued by RBI
RBI/2004-05/405
DIT(CO). 2403 /09.63.99/2005
March 29, 2005
The Chairmen and CEOs of all banks
Dear Sir,
OUTSOURCING OF IT SYSTEMS
– FRAUD INVOLVING A SOFTWARE SUPPLIER
It has been brought to the notice
of the Reserve Bank of India that a fraud has been perpetuated by the following
sole proprietor firm, in a co-operative bank in Tamil Nadu:
M/s Ahaana Computers, Dharmapuri,
Tamil Nadu .
2. The fraud was perpetuated on
account of unfettered access given to the firm by the bank as part of the Annual
Maintenance Contract and total dependency of the bank on the firm for all operations
on the computer system in the bank. Some of the factors which resulted in the
perpetuation of the fraud included the absence of staff knowledge on the method
of operating the software, inadequate controls, poor housekeeping non-conduct
of periodical balancing of books, etc.
3. We advise that banks may exercise
caution while dealing with the above firm. Banks are also advised to review
their controls and practices relating to Outsourcing of IT projects and ensure
that risks in this regard are minimised.
Yours faithfully
(A M Pedgaonkar)
Chief General Manager
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2004-05/405 · issued 29 Mar 2005. The plain-English explanation above is BankPulse’s own independent summary.
Train bank staff on software operations to reduce dependency on external vendors.
📜 Compliance
Review all IT outsourcing contracts to limit vendor access to only necessary functions.
Strengthen internal controls, including periodic book balancing and housekeeping checks.
Exercise caution when dealing with M/s Ahaana Computers or similar sole proprietor IT firms.
Grouped from the action items above — a single circular may involve more than one team.
Worked example & action-note template
Example: if you are a Compliance officer at a bank this circular applies to (All banks with IT outsourcing arrangements, Cooperative banks relying on external software vendors, Bank IT and risk management teams), your first concrete step on “IT Outsourcing Fraud Alert: Ahaana Computers Case” is: “Review all IT outsourcing contracts to limit vendor access to only necessary functions.” (RBI issued this 29 Mar 2005).
Circular: RBI/2004-05/405 -- IT Outsourcing Fraud Alert: Ahaana Computers Case
Issued: 29 Mar 2005
Action required: Review all IT outsourcing contracts to limit vendor access to only necessary functions.
Action required: Train bank staff on software operations to reduce dependency on external vendors.
Action required: Strengthen internal controls, including periodic book balancing and housekeeping checks.
Action required: Exercise caution when dealing with M/s Ahaana Computers or similar sole proprietor IT firms.
Owner: ____________ Target date: ____________
Board/committee approval needed? Y / N
Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.
💬 Banker Discussion
Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.
BankPulse Compliance Evidence Pack — generated 05 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly). Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=2166&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Help us keep this accurate
Found an inaccuracy or have an improvement? Tell us. Every report is reviewed by our team before any change is made — nothing goes live unverified.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗
BANKPULSE · FREE DAILY BRIEF
Get RBI updates for your role
Every important RBI update, decoded in plain English — for your career, exams & financial awareness.
We collect only your email, name and role, used solely to send your brief — never sold or shared. Withdraw anytime via the unsubscribe link in any email. Independent platform, not affiliated with the RBI. Information, not legal advice.
REPORT AN ERROR · BETA
Spotted an error? Earn 500 BankPulse Credits
Help us stay accurate. If your correction is verified true and approved by our founder, you earn 500 BankPulse Credits — redeemable when the platform monetises.
Reviewed by a human before any credit is awarded. We never change the site from crowd input without verification.
WANT A NEW FEATURE · BETA
What would make BankPulse more useful for you?
Tell us what to build next — a tool, a data view, a role page, anything. We read every suggestion.
Thank you — your ideas directly shape what we build.