Loans, payments and cyberattacks now move in seconds. Deposits, staffing and controls still move in years.
Picture a branch manager in a mid-sized Indian town on an ordinary Monday. Let's call her Sia. A customer stands at her desk, furious. His account is frozen because a stranger once sent him money that turned out to be stolen. Sia's regional office wants next month's loan target raised. One of her two clerks is on leave.
These look like separate headaches. They are one story.
The story starts with good news, which should be said plainly. Indian banks are strong. Bad loans stand at a multi-decade low of 1.8 percent, and capital ratios are at multi-decade highs. Banks earned ₹1.05 lakh crore in the June quarter alone. Nobody should write about Indian banking as if it were 2015.
But look at how the strength is being used. Banks are lending faster than the country is saving with them. In the June quarter, loans grew 16.5 percent while deposits grew 11.3 percent, pushing the loan-to-deposit ratio to a record 83.3 percent. The cause is no mystery. Families have found other places for their money. In 2024-25, for every ₹100 they put into bank deposits, they put about ₹45 into mutual funds and shares, more than double the ratio a year earlier. Cheap savings and current-account money has slid from about 44 percent of deposits to under 38 percent.
Then came a fix: $127 billion in dollar deposits, raised through an RBI scheme. The window ran from June 8 to August 31, under three months. Deposit growth hit a 15-year high, and the gap between loans and deposits nearly closed. It was a clever rescue. It was also fast money. Much of it is borrowed and must be returned within three to five years, with hedging bills along the way, while the rupee hovers around 95 to the dollar.
A bank can raise money in a quarter. It takes years to earn a customer who stays.
The same mismatch shows up in risk. Reported bank frauds fell by more than half last year, to about 10,000 cases. That sounds like progress. But the money involved rose 46 percent to ₹48,021 crore, mostly in loans, and about ₹30,199 crore came from earlier years' cases classified only now. In plain terms, some losses are being recognised long after the damage.
The decision to lend was fast. The decision to notice was slow.
RBI's answer is a new provisioning rule from April 2027 that makes banks set aside money for losses they expect, not just losses that have happened. Analysts expect a capital hit of 60 to 80 basis points over four years, falling hardest on public-sector and mid-sized private banks. The rule is good. But it is only as good as the data feeding it, and that data is typed in by people at the counter and in the loan department.
Meanwhile lending is drifting toward whatever looks safest. Gold loans have more than doubled in a year to roughly ₹5.1 lakh crore. Bank lending to non-bank lenders grew 22 percent. Indeed, collateral protects the bank but it does not always protect a family borrowing against its last reserve to repay an earlier loan. Risk that seems gone may only have changed address.
Outside the bank, the criminals are faster still. UPI moves money in seconds, and mule accounts pass it along before anyone raises an alarm. RBI's own survey of banks and large NBFCs ranked AI-driven cyberattacks as the top threat for the coming year, and more than nine in ten institutions lean at least partly on outside vendors. The defences are slower and blunter. RBI's draft rules are meant to make freezes narrower and fairer, yet they still allow holds of up to 60 days without a court order. For an honest shopkeeper caught in a fraud chain, even a partial freeze can mean missed rent and unpaid suppliers.
Which brings us back to the branch. People are the shock absorber for all of this, and the absorber is wearing thin. Bank unions struck on September 11, plan another strike for September 28 to 30, and have threatened an indefinite one from October 26. Their central demand is a five-day week that they say was agreed in March 2024. Whatever one thinks of that demand, the dispute is a symptom. State-owned banks' headcount rose just 0.22 percent in FY25, the first rise in five years. The same people are being asked to chase deposits, clean loan data, spot mule accounts, calm frozen customers and hit targets.
What should be done? Speed is not the enemy. Mismatched speed is.
Frontline staff should treat a strange transaction, or a borrower rolling over a gold loan for the third time, as data, not noise. Log it and escalate it. That only works if managers protect the time and the trust to do so.
Middle managers and risk heads should track the slow signals, such as early overdues, repeated rollovers and data gaps, with the same energy they give to loan targets. Cleaning data for the 2027 rules should start now.
CXOs and boards should judge funding by its staying power, not its size. Match the tenor of borrowed dollars to the assets they fund. Treat software patching and vendor risk as business continuity, not IT housekeeping. Settle the human questions of hours, incentives and vacancies before they are settled on the street. RBI's revised board rules, effective October 1, will put directors under a closer lens. Better to have the answers ready.
The best bank, naturally, will be the ones that can notice, decide and correct at the speed their own products move. Any bank can lend quickly. The test is whether it can see trouble as quickly as it sells.