NextFin News - The next global financial crisis may not start in a bank, a trading floor, or a bond market at all. Reserve Bank of India Governor Sanjay Malhotra warned on Saturday that the trigger could come from outside the financial system entirely - a geopolitical shock, a cyber attack, or a technological failure that reaches finance through multiple channels at once.
Speaking at an event in New Delhi, Malhotra framed the warning against a backdrop that makes it more than theoretical. The war between the United States and Iran has driven Brent crude as high as $126.41 a barrel since it began on February 28, pushed India's rupee to record lows, and forced the central bank to deplete reserves at a record pace to defend the currency. Yet Malhotra insisted India is navigating the episode "from a position of strength" - a claim the data both supports and complicates.
The Warning: Crises Now Have Non-Financial Triggers
"It may begin with a geopolitical event, or cyber attack or a technological failure that affects the financial system through multiple channels," Malhotra said in New Delhi. The phrasing matters. He did not describe a familiar financial imbalance - excessive leverage, a credit bubble, or a liquidity mismatch. He described an external shock that then propagates inward.
That distinction separates this warning from the standard central-bank playbook. The 2008 crisis was born inside finance: subprime mortgages, securitized into instruments few understood, funded by overnight wholesale borrowing that vanished in days. The 2020 pandemic shock was biological but transmitted through a single, clear channel - lockdowns shutting off cash flow simultaneously across entire sectors. Malhotra's concern is different: a trigger outside finance that hits through several channels at once, leaving policymakers fighting on multiple fronts with no single lever to pull.
India's own recent experience illustrates the mechanism. The Iran war did not damage Indian banks' balance sheets directly. It arrived through the external sector: higher oil import bills, a weaker rupee, and pressure on foreign-exchange reserves. Within days of the conflict's escalation, the rupee fell to a record low, and the central bank's stockpile dropped $18.34 billion in the week ended September 25 - the largest one-week decline on record - to $747.56 billion, data released Friday showed. That is the multi-channel transmission Malhotra is describing: one geopolitical event, three financial stress points, all at once.
"It may begin with a geopolitical event, or cyber attack or a technological failure that affects the financial system through multiple channels." - Sanjay Malhotra, Governor, Reserve Bank of India
The warning lands as India's monetary policy committee is already balancing on a knife-edge. This week the panel voted unanimously to hold the repo rate at 5.25%, a move anticipated by nearly 80% of 56 economists surveyed. Retail inflation accelerated to 4.45% in July, the second consecutive month the key gauge breached the central bank's 4% medium-term target, and forecasters expect it to climb above 5% from September as food and fuel costs feed through. The rupee, at 95.6 per dollar on Thursday, sits about 1.4% from its record low of 96.96 and has fallen 5.87% against the dollar in 2026.
Why the Transmission Runs Through India's External Sector
To understand why an RBI governor is the one sounding this alarm, start with India's structural exposure. India imports the vast majority of its crude oil. When a war erupts in the Persian Gulf region, the first-order effect is mechanical: the import bill rises, the trade deficit widens, and demand for dollars outstrips supply. The rupee falls. That is textbook.
The second-order effect is where the crisis risk hides. A falling rupee raises the domestic price of every imported input - fuel, fertilizer, electronics components, edible oils. Those costs flow into headline inflation, which the RBI is mandated to keep within a 2% to 6% band around a 4% target. Once inflation expectations unanchor, the central bank faces a brutal trade-off: raise rates to defend the currency and price stability, or cut them to support growth. Do neither, as the unanimous 5.25% hold demonstrates, and you buy time - but only if the external shock proves temporary.
Here is the uncomfortable part of the "position of strength" narrative. India's buffers are real but have been visibly drawn down. Foreign-exchange reserves of $747.56 billion remain among the world's largest, and a record $133 billion inflow from the Indian diaspora earlier this year gave the central bank substantial firepower. But the pace of reserve depletion matters as much as the level. An $18.34 billion one-week drop is the kind of number that forces markets to do the arithmetic: sustained at that rate, a prolonged conflict could test even a $747 billion stockpile within a year. The rupee's 5.87% decline in 2026 suggests the market is already pricing in continued pressure rather than a quick normalization.
Oil markets tell the same story of unresolved risk. December Brent settled at $98.56 a barrel on Thursday, up 0.5%, while West Texas Intermediate gained 0.4% to $88.70 - even as Middle East crude exports recovered toward prewar levels. In a volatile session earlier, Brent briefly traded above $108 a barrel after Saudi Arabia said it intercepted six ballistic missiles, and November Brent rose 3.4% to $106.60. The market is not pricing a clean de-escalation. It is pricing a conflict that can flare again on any headline, and every flare pushes Brent back toward the $126.41 peak reached on April 30.
The Cyber Channel: Where the Warning Gets Teeth
The geopolitical leg of Malhotra's warning is familiar to any student of emerging-market crises. The cyber and technological-failure legs are not - and they are harder to defend against with conventional buffers. A cyber attack on a financial system does not arrive through the trade account. It arrives through the payments rails, the securities settlement layer, and the messaging networks that banks use to move money across borders.
Consider the transmission chain. A successful attack on a major payment switch or clearing house does not merely freeze transactions for a few hours. It breaks trust in the finality of settlement - the assumption that a payment that has cleared will actually settle. Once that assumption cracks, banks stop lending to each other overnight, precisely the mechanism that turned a housing correction into the 2008 crisis. The difference is speed: a cyber event can propagate across institutions in minutes, not months, leaving regulators chasing a failure that has already crossed every border.
India has invested heavily in precisely this layer of infrastructure. Malhotra has pointed to the Unified Payments Interface, which processed more than 22 billion transactions in March alone, as evidence of a resilient domestic financial architecture. But centralization carries its own risk. A system that routes tens of billions of transactions through a common switch is efficient until it is not - at which point the single point of coordination becomes a single point of failure. The same digital public infrastructure that gives India its "position of strength" also concentrates the attack surface.
This is why the warning is not really about India. A cyber-triggered crisis would not respect the current-account deficit, the reserve stockpile, or the inflation target. It would hit every digitally integrated economy simultaneously, and the countries with the most advanced, most interconnected financial rails would have the farthest to fall. The governor's framing - multiple channels, non-financial origin - describes a failure mode for which no emerging market has adequate defenses, because the defenses are not monetary.
The Counter-Thesis: India's Buffers Are Not the Weak Link
The strongest argument against reading Malhotra's warning as a near-term India-specific crisis call is that India is not 2013. Back then, a tapering signal from the Federal Reserve exposed a current-account deficit funded by flighty capital, and the rupee collapsed until the RBI hiked rates and gold-import rules were tightened. Today's external position is sturdier: reserves above $747 billion, a current-account deficit expected to remain within the RBI's 2% of GDP comfort threshold, and growth that the International Monetary Fund forecasts at 7.3% for fiscal 2026 - the fastest among major economies.
Malhotra has made this case himself. In a speech at Princeton University, he noted that India's general government debt-to-GDP ratio of 81.1% in 2024-25 was reasonable compared with most of the world's top 10 economies, and pointed to the Unified Payments Interface as evidence of resilient domestic financial infrastructure. The point is not that India is immune to a geopolitical shock. It is that the shock would have to be large and persistent - a war that closes the Strait of Hormuz for months, not weeks - to break India's external position rather than bend it.
There is also a global dimension that blunts the India-specific reading. If the next crisis begins with a cyber attack or a technological failure, India is no more exposed than any other digitally integrated economy - and arguably less so than systems with older infrastructure and more concentrated clearing arrangements. The warning is a call for systemic resilience everywhere, delivered from an emerging-market vantage point precisely because emerging markets absorb the second-round effects of shocks they did not create.
But this is where the counter-thesis meets its limit. Reserves and growth buffers protect against a temporary shock. They do not protect against a structural one. If the geopolitical realignment proves durable - if Hormuz flows stay disrupted, if oil settles structurally above $100, if the rupee's 2026 decline is the first leg of a longer depreciation rather than a spike - then the buffers get consumed faster than they can be rebuilt. The unanimous rate hold at 5.25% is itself evidence of this tension: with inflation already above target and expected to rise further, the committee chose not to tighten, implicitly betting that the shock is cyclical and will revert.
Cyclical Shock or Structural Regime Shift?
This is the judgment the market has to make, and Malhotra's warning is, at heart, a statement that the answer is not yet clear. History offers three relevant cycles, and none maps cleanly onto the present.
The 1990 balance-of-payments crisis was structural in origin - a war in the Gulf sent remittances and exports collapsing, reserves fell to three weeks of imports, and India was forced to pledge gold and liberalize the economy. That shock did not revert; it changed the regime. The 2013 taper tantrum was cyclical - a Fed signal triggered capital flight, the rupee plunged, and once the outflow reversed, the currency recovered much of its losses. The 2020 pandemic shock was cyclical in transmission but structural in consequence - the initial scare reversed quickly, but it left permanent changes in work patterns, supply chains, and fiscal balances.
The current episode sits between these cases. On the cyclical side, Middle East crude exports are already recovering toward prewar levels, and a temporary cease-fire between the United States and Iran sparked a relief rally across Asian markets before the RBI's decision. On the structural side, shipping volumes through the Strait of Hormuz remain far below their prewar peak, and major Wall Street banks have raised their oil-price forecasts - a survey put fourth-quarter Brent at an average of $90.22 a barrel and West Texas Intermediate at $85.47, sharply above previous estimates of $78.92 and $74.62.
The call here: treat the geopolitical leg as cyclical but the pricing of geopolitical risk as structural. Wars in the region have repeatedly flared and faded; the supply shock itself is likely to revert. What does not revert easily is the risk premium that markets now embed in every barrel, every emerging-market currency, and every central bank's reaction function. That is the durable change - and it is the change Malhotra's warning is really about.
What to Watch
The falsifying signal for the "cyclical shock" view is specific: if Brent crude closes above $110 a barrel for two consecutive weeks while Hormuz shipping volumes remain below 60% of their prewar peak, the market is pricing a structural disruption, not a temporary spike. At that point, the RBI's buffers would be drawn down faster than reserve accumulation can replace them, and the 5.25% repo rate would look too accommodative for an economy with inflation above 5% and a weakening currency.
Short term, watch the weekly reserve data and the rupee's distance from its record low - a sustained break below 96.5 per dollar would signal that defense is becoming more costly. Medium term, watch the inflation print: if retail inflation holds above 5% through the September and October releases, pressure will build on the monetary policy committee to abandon the wait-and-watch stance. Long term, watch whether the current-account deficit stays within the 2% of GDP threshold as oil prices settle; a breach would mark the shift from cyclical pressure to structural strain.
Base case: the conflict de-escalates in stages, oil drifts back toward $85 to $90, and India's buffers absorb the episode without a policy mistake. Upside case: a durable cease-fire sends Brent below $80, the rupee strengthens, and the RBI gains room to cut rates toward the end of the fiscal year. Downside case: a prolonged disruption keeps Brent above $110, reserves fall another $50 billion over a quarter, and the RBI is forced to hike into slowing growth - the classic emerging-market policy trap.
The takeaway is this: Malhotra is not predicting a crisis. He is describing a world in which the old crisis taxonomy no longer applies. The next shock may not come from a balance sheet anyone is watching - and by the time it reaches the financial system through those multiple channels, the window to prevent it may already be closed. The buffer between a manageable episode and a crisis is no longer leverage or liquidity. It is geopolitical luck.
Data as of October 3, 2026. Market figures anchored to Thursday and Friday closes as cited in source reports.
Explore more exclusive insights at nextfin.ai.
