Top News

RBI New Rules for Online Payments: Starting April 2026, several changes are set to take effect, ranging from online payments to ATM transactions. From April onwards, significant changes related to online payments will be implemented. The RBI has introduced new and stringent regulations to safeguard your funds against online fraud. Moving forward, payments can no longer be completed merely by entering a password or an OTP. Effective April 1, 2026, every online payment will require two distinct forms of identification (2-Factor Authentication). Currently, users typically complete payments via UPI, cards, net banking, or digital wallets simply by entering an OTP; however, this method will no longer be considered valid. The RBI has amended its regulations to reflect this change. Let us explain exactly what the RBI's new rules entail.

What Are the RBI's New Rules?
According to the RBI's new regulations, every transaction will require a minimum of two distinct methods of verification. One of these verification methods must be dynamic (changing with every transaction). Examples include a mobile PIN, UPI PIN, fingerprint scan, Face ID, dynamic OTP, a password combined with biometric data, or any combination thereof. Furthermore, the level of security scrutiny applied will be proportionate to the transaction amount. Smaller transactions will be subject to minimal checks, whereas larger sums or suspicious transactions will undergo more rigorous security verification. This approach is known as Risk-Based Authentication.

The RBI's new regulations will now apply to all digital payments conducted within the country—including those made via UPI, cards, net banking, digital wallets, and prepaid payment systems. For payments made on international websites or applications, these regulations will come into effect starting October 1, 2026. The RBI notes that as the volume of digital payments continues to rise, instances of fraud and hacking are also on the increase. SMS-based OTPs are no longer as secure as they once were, as hackers can now intercept them with relative ease. Consequently, there is a pressing need for enhanced security measures.

Two-Factor Authentication
Loknath Panda, COO of BLS E-Services Ltd., stated that the RBI's new regulations represent a pivotal step toward making digital payments more secure, transparent, and trustworthy. In today's times, online transactions are growing rapidly; however, the risks of cyber fraud have also risen alongside them. Consequently, measures such as two-factor authentication and robust security protocols have become essential. These changes, set to take effect from April 1st, will provide customers with enhanced security and help mitigate the risk of unauthorized transactions. This will not only boost consumer confidence but also accelerate the pace of digital payment adoption. This initiative will play a pivotal role in further strengthening India's digital ecosystem while simultaneously fostering a secure and trustworthy financial environment—one that will further reinforce the foundations of the digital economy in the years to come.

Disclaimer: This content has been sourced and edited from NDTV India. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.