Anatomy of an Insider Siphon: How ₹35 Crore Vanished Silently from PNB Greater Noida

Following protests outside the locked branch, the Sector Beta-2 police station registered an First Information Report (FIR). PNB’s zonal leadership suspended multiple staff members, including the Branch Manager, and initiated an emergency forensic audit.

Beyond the headline losses, the incident exposes severe systemic vulnerabilities in branch-level Core Banking Solution (CBS) operations, silent phone-number alterations, and the circumvention of dual-authorization safeguards.

Key Incident Metrics

┌─────────────────────────────────────────────────────────────────────────────┐

│ PNB GREATER NOIDA FRAUD SUMMARY │

├───────────────────────────────┬─────────────────────────────────────────────┤

│ Branch Location │ Aichhar Market, Sector Pi-1, Greater Noida │

├───────────────────────────────┼─────────────────────────────────────────────┤

│ Estimated Fraud Quantum │ ~₹35 Crore across dozens of retail accounts │

├───────────────────────────────┼─────────────────────────────────────────────┤

│ Source of Depositor Funds │ Land acquisition compensation (Authority) │

├───────────────────────────────┼─────────────────────────────────────────────┤

│ Primary Mechanism │ Unauthorized premature FD break & siphoning │

├───────────────────────────────┼─────────────────────────────────────────────┤

│ Alert Failure │ Suppression of CBS SMS debit notifications │

├───────────────────────────────┼─────────────────────────────────────────────┤

│ Regulatory / Police Action │ FIR at Beta-2 PS; Branch Manager suspended │

└───────────────────────────────┴─────────────────────────────────────────────┘

1. The Modus Operandi: Silent Siphoning & Alert Suppression

Initial police disclosures and victim testimonies reveal a classic pattern of insider-assisted operational embezzlement:

1. Targeting Passive, High-Balance Accounts: Victims were largely rural landholders who received sizable one-time government compensation windfalls (ranging from ₹10 lakh to over ₹1 crore). These accounts typically remain passive, with depositors rarely using mobile banking or daily net-banking apps.
2. Premature FD Liquidation: Fixed deposits were closed prematurely within the core banking system without signed customer mandate forms, physical passbook verification, or deposit receipt surrenders.
3. SMS Alert Suppression: Victims reported that they received zero SMS alerts when funds were debited. In banking fraud forensics, this typically points to one of two vulnerabilities:
4. • Unauthorized manipulation of the customer’s registered mobile number in the CBS Master Data.
   • Internal routing of transactions through suspense/intermediate accounts where alert triggers are bypassed.