How IDFC First, AU Small Bank And IAS Officers Looted The Haryana Government?

Who Was Watching the Watchers? The Interrogative Trail of Forged FDRs, Mujra Parties, ₹75,000 Favours and the Collapse of Every Control Meant to Protect Haryana’s Public Money By IDFC First- AU Small Finance Bank!

The recent disclosures in the CBI’s investigation into what is commonly labelled the ₹657-crore IDFC First Bank fraud have forced a public reckoning that goes far beyond banking irregularities. According to reporting by The Statesman on 5 October 2026, three confidential female witnesses identified only as W-1, W-2 and W-3 have described private dance parties at Jade Manor in Zirakpur, demands for “fresh faces,” cash showered on performers, and a specific episode in which one woman allegedly received ₹75,000 for sexual favours after a suite was booked at the Wyndham in Mohali with a security guard positioned outside.

These accounts, submitted in sealed cover to the Special CBI Court in Panchkula, place suspended Haryana IAS officer Pankaj Agarwal under sharper scrutiny. Agarwal has denied demanding or accepting any bribe. The identities of the women remain protected. The allegations remain unproven in court. Yet their appearance in a chargesheet concerning the alleged diversion of hundreds of crores of public money raises a series of interrogative questions that the system has so far failed to answer with transparency or urgency.  

How does a case that began with a government department’s inability to reconcile an account balance end with sealed testimony about mujra parties and private hotel suites? What does it say about the integrity of public financial administration when investigators feel compelled to record such details as potential evidence of quid pro quo? And why, months after the first FIR, do the public and the affected departments still lack a complete, independently verified accounting of every rupee that moved?

The figure of ₹657 crore itself requires careful unpacking. The CBI has described the Haryana government funds component as approximately ₹504 crore and related Chandigarh cases as approximately ₹153 crore. These are investigative aggregates, not final adjudicated losses. IDFC FIRST Bank’s own forensic review by KPMG quantified net principal claims of ₹645.59 crore across 13 affected accounts after adjusting ₹94.32 crore of available credit balances, plus ₹30.60 crore in interest.

The bank has stated that it paid these amounts to 11 government accounts and two school accounts and recognised the outgo as an expense. The Enforcement Directorate has referred to an alleged embezzlement of approximately ₹645 crore. Each number reflects a different stage or scope of inquiry. Treating any single headline figure as settled fact is both misleading and dangerous; it obscures the evolving nature of the probe and the possibility that further accounts or layers remain unexamined.

The scandal did not begin with sophisticated forensic software or a whistle-blower inside a regulatory body. It began with the most elementary of administrative acts: a Haryana government department sought to close an account and transfer its balance. The expected balance did not match the bank’s records. A particularly important account had originally received ₹50 crore. When the department expected the money to be returned, the bank’s figures showed a drastically different position.

A three-member departmental committee was constituted on 11 February 2026. Its findings became the foundation for the Vigilance and Anti-Corruption Bureau FIR of 23 February 2026. Accounts had been opened in both IDFC FIRST Bank and AU Small Finance Bank under arrangements linked to the Mukhyamantri Gramin Awas Yojana. The discovery was therefore not the product of proactive oversight; it was the product of attempted reconciliation that failed. That detail alone should provoke sustained public concern. How many other government accounts, in how many other banks, might contain similar discrepancies that have never been tested by an attempt to close or transfer them?

One of the most revealing strands concerns the Haryana Power Generation Corporation Limited. Investigators allege that bank officials offered HPGCL an unusually high 14 per cent interest rate to induce the deposit of ₹50 crore. The offer was reportedly not an official IDFC FIRST Bank rate. The money was transferred from an existing fixed deposit with another bank.

According to the CBI, it was subsequently represented as associated with Chandigarh Municipal Corporation and the Chandigarh Renewable Energy and Science & Technology Promotion Society, despite HPGCL having no connection with those entities. A purported fixed-deposit receipt connected with the ₹50 crore is alleged to have been forged and never to have existed in the bank’s system.  

Consider the implications of a 14 per cent rate. In an environment of regulated public deposits, an interest offer that exceeds standard rates functions as a powerful incentive. If that offer was unauthorised, every subsequent transaction built upon a false premise. The alleged forgery of an FDR transforms a simple deposit into a documented fiction. Public funds that should have remained under the control of a power-generation corporation were, according to the chargesheet narrative, given the appearance of legitimate investment while being moved elsewhere.

The human and institutional cost of such a manoeuvre is not abstract. Every rupee that leaves a public account without proper authorisation is a rupee unavailable for the purposes for which it was allocated, whether infrastructure, welfare or operational needs of a state corporation. When documentation is manufactured to conceal the movement, the breach is no longer merely financial; it is a breach of the evidentiary chain that underpins democratic accountability.

The KPMG forensic review, commissioned by IDFC FIRST Bank itself, examined 56 accounts for the period from 1 October 2024 to 28 February 2026. It reviewed account-opening documentation, transaction vouchers, cheques, RTGS forms, system audit logs, fund flows, employee access records, emails, electronic devices, CCTV footage, employee interviews and potential links between recipients and bank employees. KPMG concluded that unauthorised transactions appeared to have been processed through collusion involving branch employees, with employees of some customers and third parties also apparently involved.  

The alleged mechanism was conceptually straightforward yet operationally sophisticated. Government funds were deposited. Authorisation letters, cheques and approval emails were allegedly modified or edited and attached to transaction vouchers. Signature inconsistencies were observed in some cases. Transactions were processed despite the underlying authorisation being invalid, forged or otherwise unauthorised.

False supporting documents were generated: non-existent Fixed Deposit Advices, edited interest certificates, modified bank statements. These documents allegedly created the appearance that the government’s money remained properly invested. Substantial sums were then transferred to accounts in other banks, rendering a complete money trail impossible from IDFC FIRST Bank’s records alone. KPMG explicitly noted that access to statements from other financial institutions was necessary to identify ultimate beneficiaries.  

For every number that appears in the forensic quantification, ₹645.59 crore principal after adjustment of ₹94.32 crore credit balances, plus ₹30.60 crore interest, the critique must extend beyond arithmetic. The payment of these sums by the bank to affected customers does not erase the period during which the funds were unavailable to the government entities that owned them. Interest paid after the fact does not restore the opportunity cost of money that could have been deployed for public purposes.

The adjustment of credit balances itself raises questions: how were those credit balances generated, and did their existence mask earlier unauthorised movements? The fact that a private forensic firm, limited by the scope of its engagement and the information supplied to it, could reconstruct this much suggests that the internal systems of both the bank and the government departments contained sufficient data to have detected the irregularities earlier. Why was that data not interrogated until a department attempted to close an account?

When the scandal first became public in February 2026, the widely reported figure was approximately ₹590 crore. IDFC FIRST Bank initially disclosed an incident involving that approximate amount. The figure subsequently expanded as investigators examined additional accounts. The ED later described the alleged embezzlement as approximately ₹645 crore.

The CBI’s combined Haryana and Chandigarh figure of ₹657 crore reflects separate but overlapping investigations. The evolution of the numbers is itself a source of public concern. Each upward revision implies that earlier estimates were incomplete. Each incomplete estimate implies that oversight mechanisms failed to capture the full scope at the first opportunity. The public is left with shifting headlines rather than a stabilised, independently audited total.

The Haryana government case centres on the alleged illegal diversion of funds belonging to eight departments and bodies: the Haryana Development and Panchayats Department, Municipal Corporation Panchkula, Municipal Corporation Kalka, Haryana School Shiksha Pariyojana Parishad, Haryana Labour Welfare Board, Haryana State Agricultural Marketing Board, Haryana State Pollution Control Board, and Haryana Power Generation Corporation Limited. The CBI alleges that government money was transferred to third parties that had no legitimate connection with those entities.  

Consider the institutional design that should have prevented such transfers. Government departments are required to operate under Finance Department instructions governing the parking and investment of public funds. Empanelled banks are selected according to defined criteria. Reconciliation of balances and verification of fixed deposits are elementary controls.

Yet the February 18, 2026 circular issued by the Haryana government after the scandal broke ordered departments to conduct regular reconciliation of bank and fixed-deposit accounts, verify fixed deposits, ensure compliance with approved deposit conditions, investigate discrepancies immediately, and complete reconciliation. The very issuance of such a circular is an admission that these controls were not functioning effectively. How many months or years of irregular reconciliation were required before a single department’s attempt to close an account exposed the scale of the problem? What does that lag say about the culture of financial oversight inside Haryana’s administrative machinery?

Ribhav Rishi, former branch manager of IDFC FIRST Bank’s Sector 32 branch, has been described by the CBI as the “principal architect and mastermind” of the alleged conspiracy. That designation is an agency allegation, not a judicial finding. Investigators allege that he helped open accounts, authorised suspicious transactions, facilitated forged documentation, created false banking records, coordinated with government officials, interacted with shell entities, and facilitated the movement of government funds.

Entities connected to him are alleged to have received or routed diverted funds. Abhay Kumar, a former relationship manager, is alleged to have assisted in preparing fake FDRs, fabricated account statements and other banking documents. Other bank employees, including Seema Dhiman, Priyanka Bhatoa and Anuj Kaushal, are alleged to have functioned as transaction makers or authorisers, allowing the Maker-Checker controls of the bank to be circumvented through collusion.  

The concept of Maker-Checker is foundational to banking control. One employee initiates a transaction; another authorises it. When both roles are allegedly occupied by colluding individuals, the control collapses. The KPMG review found that existing manual branch controls were circumvented. System-level controls such as SMS alerts, monthly statements and account confirmations apparently failed to generate effective detection. This distinction between the existence of controls and their operational integrity is critical.

A banking system can possess every technical safeguard and still fail if the human beings responsible for those safeguards act in concert. The public is entitled to ask why the bank’s internal audit, risk management and compliance functions did not detect patterns of high-value transfers from government accounts to shell entities over the period examined.

The CBI’s case is not limited to bank employees. Several government officials have been accused of facilitating transactions or accepting alleged illegal benefits. The investigation alleges that departments transferred money contrary to applicable instructions, failed to properly reconcile accounts, accepted suspicious banking documentation, and in some cases helped facilitate account openings or transactions.

Among the officers named are Vineet Garg, Mohammed Shayin, Pankaj Agarwal, Dr Saket Kumar, R.K. Singh and Pradeep Kumar. The precise allegations differ. Certain officers are alleged to have facilitated banking arrangements and, in return, received benefits that included gold, hotel expenses, luxury hospitality, travel, parties, cash and other forms of gratification.  

The gold-coin allegation against Vineet Garg illustrates the investigative attempt to establish quid pro quo. The CBI alleges that two gold coins, each weighing approximately 50 grams, were delivered to his residence through intermediaries associated with Ribhav Rishi. Call-detail records, movements of individuals, witness accounts and other communications are said to support the allegation. Two full paragraphs of critique are required here.

First, the delivery of physical gold to a government bungalow, if proved, would represent a classic form of illegal gratification, portable, difficult to trace once melted or sold, and symbolically resonant of corruption cases across decades of Indian public life.

Second, the reliance on intermediary delivery raises questions about the chain of custody and the ability of investigators to prove knowledge and acceptance. Until a court rules, the allegation remains just that. Yet its inclusion in a chargesheet concerning public-fund diversion forces the public to confront the possibility that senior officials responsible for safeguarding government money were themselves alleged beneficiaries of its diversion.

Mohammed Shayin, former managing director of HPGCL, is alleged to have received hospitality paid for by Rishi. Restaurant and hotel bills of ₹35,629, ₹58,399 and ₹73,073 are cited. Hotel records, bills, communications and WhatsApp exchanges are said to form part of the evidence. The monetary value of individual restaurant bills is modest compared with the crores under investigation. Their significance, in the CBI’s theory, lies in the pattern: repeated hospitality connected to official decisions that enabled the movement of public funds.

The critique must therefore focus on the principle rather than the quantum. If public servants accept even modest benefits from individuals who stand to gain from official decisions, the integrity of those decisions is compromised. The human impact extends beyond the individuals involved; it erodes public trust in the impartiality of administration.

Pankaj Agarwal’s alleged role has drawn particular attention because of the sealed-witness accounts. The chargesheet describes private dance parties at Jade Manor in Zirakpur. W-1, described as the girlfriend of Ribhav Rishi, allegedly told investigators that she was tasked with arranging the “best mujra girls,” that Agarwal repeatedly pressed for more parties and sought “fresh faces,” that arrangements were discussed over WhatsApp conference calls, that cash was showered on performers, and that total expenditure was estimated at ₹2.5 crore to ₹3 crore.

It has separately reported CBI allegations that four parties involved approximately ₹15–20 lakh in cash per occasion. W-2 alleged that she was called to Chandigarh, a suite was booked at the Wyndham in Mohali, a guard was positioned outside, and she received ₹75,000 for sexual favours. W-3 alleged attendance at two parties in November and December 2025 and receipt of ₹10,000–₹12,000 each time. Both W-2 and W-3 allegedly identified Agarwal after being shown his photograph.  

These allegations must be treated with the legal caution they demand. They are witness statements recorded in a chargesheet. They have not been tested under cross-examination. Agarwal denies wrongdoing. Yet their presence in a public-funds investigation forces an interrogative evaluation. Why would investigators include such details unless they believed the parties formed part of a gratification network?

If the theory is that government officials facilitated banking arrangements in exchange for personal benefits, then hospitality of this nature becomes relevant evidence rather than a separate morality tale. The human impact of such allegations, whether ultimately proved or disproved, is corrosive. They damage reputations, fuel public cynicism, and distract from the harder work of reconstructing every unauthorised transfer and recovering every diverted rupee.

Naresh Kumar Bhuwani, formerly a superintendent in the Development and Panchayats Department, was arrested by the ED on 10 June 2026 under the Prevention of Money Laundering Act. The ED alleges that he received proceeds of crime, acted as an intermediary, helped divert government money, assisted in concealment, and received approximately ₹1.20 crore through his own and family accounts. The CBI separately alleges that Rishi funded travel and hospitality for him, including Dubai and Bangkok travel, hotel stays, cash and direct bank transfers, with approximately ₹1 crore allegedly moved through Swastik Desh Projects.  

Swastik Desh Projects appears repeatedly as a shell entity allegedly used to receive and route diverted government money. Its role, according to investigators, was to sit between government accounts and private recipients, obscuring the trail. The jeweller angle involves Sawan Jewellers and its proprietor Rajan Katodia. Investigators allege that more than ₹250 crore was routed to the firm from companies associated with the accused, recorded as gold purchases even though the underlying purpose was conversion or layering.

Katodia was arrested in March 2026. Gold’s portability and relative anonymity make it an attractive vehicle for transforming bank-account money into physical assets. The critique here is structural: every rupee converted into gold is a rupee that has left the formal banking system and entered a less transparent domain. Recovery becomes harder; accountability becomes more diffuse.

Vikram Wadhwa, a real-estate businessman and hotelier, appears in both CBI and ED investigations. The CBI alleges that money was routed through entities connected to the conspiracy and ultimately reached him, including ₹21.58 crore from CAPCO Fintech Services, approximately ₹74.37 crore through layering entities, and ₹4.57 crore in cash. Proceeds were allegedly invested in property.

The ED arrested him on 29 May 2026, alleging that he received more than ₹70 crore in proceeds of crime and played a role in their generation, layering and concealment. Real-estate investment of allegedly diverted public funds raises additional questions about the impact on land markets, the possible inflation of property values through illicit capital, and the difficulty of clawing back assets once they have been integrated into legitimate-looking holdings.

Parallel investigations concern Chandigarh Smart City Limited. The CBI alleges that 11 fake FDRs with a combined value of approximately ₹116.84 crore were shown in official records as CSCL investments, yet the bank had no corresponding deposits. The case originated from a complaint by the Chandigarh Municipal Commissioner. Nalini Malik, former Chief Financial Officer of CSCL, is among those chargesheeted. Evidence reportedly includes WhatsApp messages, call records, banking transactions, visitor logs and other digital material.

Renovation work worth approximately ₹45 lakh is alleged to have been carried out at her residence at Rishi’s instance. A later CBI allegation put the diversion through 87 fraudulent debit transactions involving CSCL and Municipal Corporation Chandigarh accounts at approximately ₹340 crore between 19 September 2024 and 1 September 2025. CREST, the Chandigarh Renewable Energy and Science & Technology Promotion Society, is the subject of yet another investigation involving approximately ₹75.34 crore, with a chargesheet naming 13 accused.

Haryana’s response on 18 February 2026 was to de-empanel both IDFC FIRST Bank and AU Small Finance Bank for government business and to direct departments to stop parking, depositing, investing or transacting government funds through these banks. The same circular ordered monthly reconciliation, verification of fixed deposits and immediate investigation of discrepancies. IDFC FIRST Bank has maintained that the incident was caused by fraudulent activity by certain employees and external parties. It suspended employees, appointed KPMG, cooperated with agencies, reimbursed affected customers and strengthened branch controls. It has stated that the incident was isolated to one branch.

KPMG’s report found apparent collusion but also stated that its work was not an audit, did not provide legal assurance, relied partly on information supplied to it, and had limitations on access to some data. Its findings are powerful forensic evidence of the bank’s internal reconstruction; they are not a court judgment.

The ED registered its PMLA investigation on the basis of the February 2026 Haryana Vigilance FIR. Searches in March 2026 covered 19 premises. Later searches in late September and early October 2026 covered 14 premises across Chandigarh, Mohali and Panchkula, focusing on jewellers and entities allegedly used for layering. Approximately ₹4.3 crore in cash was seized and bank balances of approximately ₹22 crore frozen.

Against an alleged embezzlement of ₹645 crore, the recovery figures invite critique. Seizure of ₹4.3 crore is not trivial, yet it represents a fraction of the sums under investigation. Freezing of balances is a provisional measure. The gap between the scale of the alleged diversion and the scale of recovered assets raises the question of how much of the money has already been dissipated, converted or concealed beyond easy reach.

As of early October 2026 the case remains active. Multiple CBI chargesheets have been filed. The third chargesheet of 2 September 2026 named 19 accused, including six IAS officers, three IDFC FIRST Bank officials, one AU Small Finance Bank official and nine other Haryana government officials. Offences alleged include criminal conspiracy, cheating, forgery, using forged documents, destruction of evidence, falsification of accounts, criminal breach of trust, abetment, bribery and criminal misconduct.

Pankaj Agarwal was arrested on 22 June 2026 in connection with approximately ₹60.54 crore involving the Haryana School Shiksha Pariyojana Parishad and the Haryana State Agricultural Marketing Board. Pradeep Kumar was arrested on the day of his superannuation in July 2026. Courts have yet to determine criminal liability.  

The most disturbing feature of the entire episode is not the sensational material about parties. It is the combination of apparently legitimate government banking infrastructure with allegedly fraudulent internal documentation. Fake FDRs, modified statements, edited authorisation letters, forged or questionable signatures, false confirmations, unauthorised debit instructions, shell entities, multiple bank accounts, cash, gold and property form a chain that, if proved, would demonstrate a sophisticated attack on the very processes designed to prove legitimacy.

Technology and electronic evidence, bank transaction records, Core Banking System logs, emails, WhatsApp messages, call-detail records, CCTV, hotel records, restaurant bills, property transactions, digital devices, have been used to connect people who might otherwise appear unrelated. Yet technology that records also creates the possibility of detection. Why were the patterns not detected earlier by either the bank’s systems or the government’s reconciliation processes?

Three accountability questions remain. First, bank accountability: how could branch-level employees allegedly circumvent multiple controls involving hundreds of crores? Second, government accountability: how could public departments fail to identify discrepancies in accounts and fixed deposits containing hundreds of crores? Third, individual criminal accountability: did particular bankers, government officials and private beneficiaries deliberately participate in the alleged conspiracy, and can prosecutors prove those allegations beyond the evidentiary threshold required by criminal law? The third question will be answered by the courts. The first two are already raised by the documentary record.

The IDFC FIRST Bank scandal is best understood as a sprawling alleged public-funds diversion network centred on the Sector 32 Chandigarh branch, rather than as a simple bank theft. The investigation alleges a network connecting bank employees, government officials, private businesses and shell entities, with public funds allegedly moved through forged or manipulated banking documents and unauthorised transactions before being layered through other accounts and allegedly converted into cash, gold, property and personal benefits.

The bank’s KPMG review remains one of the most significant documents: it quantified ₹645.59 crore of net principal claims, found apparent collusion, and described a modus operandi involving manipulated documents. The CBI’s separate cases produced the ₹657-crore aggregate. The allegations involving gold coins, luxury hospitality, mujra parties and the ₹75,000 alleged payment form part of the attempt to establish quid pro quo. They must not be reported as established facts.  

For every number cited, ₹50 crore, ₹504 crore, ₹153 crore, ₹645.59 crore, ₹30.60 crore, ₹116.84 crore, ₹340 crore, ₹75.34 crore, ₹1.20 crore, ₹70 crore, ₹4.3 crore seized, the public is entitled to exhaustive evaluation of process, consequence and unanswered questions. The money that should have remained under public control was, according to the investigations, subjected to a sequence of unauthorised movements.

Each movement carried opportunity costs for the departments and the citizens they serve. Each forged document eroded the evidentiary foundation of public finance. Each alleged personal benefit, whether gold or hospitality or private gatherings, deepened the suspicion that public office had been subordinated to private gain. The courts will decide the criminal liability of individuals. The institutional failures that allowed the alleged diversion to continue undetected for so long remain a matter of urgent public concern that no chargesheet alone can resolve.