Archive · 3 Oct 2025
RBI Mandates Enhanced Authentication for Digital Payments
The RBI is making online payments safer.
They are now requiring two-factor authentication (2FA), meaning you'll need to prove who you are in two ways.
This could be a password and a code from your phone, or a fingerprint.
SMS-based codes will still be used, but the RBI wants to use new technologies like biometrics.
It's designed to prevent fraud and protect your money.
Some small payments and recurring payments won't need the extra steps.
Banks may add more security checks based on how risky the payment looks.
This change aims to make digital transactions more trustworthy.
RBI mandates two-factor authentication (2FA) for digital payments.
The new norms require alternatives to SMS-based OTPs.
Compliance for all payment system providers by April 1, 2026.
Aim to reduce fraud and enhance security in digital transactions.
Issuers may implement risk-based transaction evaluations.
- Who
- Reserve Bank of India (RBI)
- What
- Implemented new digital payment authentication norms
- When
- Announced with compliance by April 1, 2026
- Where
- India
- Why
- To reduce fraud and enhance security
Consumers
Financial Institutions
Increased Security Measures
Consumers
Benefits from enhanced security to protect against fraud.
Financial Institutions
Must implement updated security measures.
- Mandatory Compliance Date
- April 1, 2026
- 2FA Requirement
- Mandatory for all digital payments
- Exempted Transactions
- Small contactless payments, recurring e-mandates, certain PPI transactions
- Goal
- Mitigate fraud risks, strengthen authentication
- Impact
- More secure digital transactions
