NEW DELHI(Realist English). Reserve Bank of India Governor Sanjay Malhotra said the next global financial crisis could originate outside the financial sector itself. According to him, the trigger could be a geopolitical conflict, a cyberattack, or a technological failure that hits the financial system through multiple channels simultaneously.
What exactly the RBI head said
Speaking at an event in New Delhi on Saturday, October 3, Malhotra put it this way: “It could start with a geopolitical event, or a cyberattack, or a technological failure that affects the financial system through multiple channels.”
He also noted that India remains vulnerable to the consequences of the war with Iran — through rising commodity prices and “pressure on the external sector.” However, according to him, the country is passing through this phase “from a position of strength.”
Why this is not an abstract warning
Malhotra’s statement is based on systemic analysis that the RBI and other regulators have been conducting for several years. The key idea: operational risks — cyberattacks, failures at technology providers, disruptions in critical infrastructure — have ceased to be “isolated cases” and have acquired a systemic character.
An October 2026 report by the Reserve Bank of Australia (RBA) states directly: operational failures can disable the very systems through which central banks and regulators normally respond to crises — liquidity provision mechanisms, clearing and settlement systems. In other words, the blow can hit the “fire station” at the same time as the “fire.”
Three channels through which the shock spreads
Analysts identify three main mechanisms through which an operational shock turns into a financial crisis:
— Concentration and irreplaceability. The financial system depends on a small number of critical providers — cloud services, payment systems, communications infrastructure. A failure at one provider hits dozens of banks and companies simultaneously.
— Complex and opaque interconnections. Banks, infrastructure operators, and technology contractors are linked to each other. The inability of one node to process a payment creates problems for its counterparties — a domino effect.
— Loss of trust. A cyberattack aimed at undermining stability rather than financial gain can cause panic faster than a traditional bank run: information spreads through social media, and clients can transfer funds instantly.
Background: global vulnerability is growing
Malhotra’s warning came amid reports from the IMF and RBI documenting the accumulation of vulnerabilities in the global financial system. Among them: record levels of government debt, stretched asset valuations, growth in non-bank lending, and high concentration in AI-related stocks.
In its June 2026 Financial Stability Report, the RBI also called cybersecurity a “key financial stability concern.” The report notes that AI-enabled cyberattacks have become the main near-term threat to the financial system.
India’s position: “from a position of strength”
Despite the warning, Malhotra emphasized that India is entering this period with stronger fundamentals than many peer countries. According to him, this provides “greater resilience to external shocks than in past crisis episodes.”
RBI stress tests show that India’s banking system can withstand potential shocks: aggregate capital ratios remain above regulatory thresholds even in hypothetical adverse scenarios.
Will India be able to maintain this resilience if the crisis indeed begins with a cyberattack on infrastructure shared with the US or Europe? And are regulators prepared for a blow that comes through their own response tools?
