Reserve Bank of India on September 25 issued final guidelines for authentication mechanisms in digital payment transactions, aiming to bolster security and encouraging innovation in fraud prevention.

The Reserve Bank of India said the new framework, effective April 1, 2026, allows issuers to adopt additional risk-based checks beyond the mandatory two-factor authentication, depending on a transaction's fraud risk.

The digital payment norms facilitate interoperability, open access to technology, said RBI.

The directions promote the use of emerging technologies for authentication without phasing out SMS-based one-time passwords.

They also mandate that card issuers validate additional authentication for non-recurring, cross-border, card-not-present transactions when requested by overseas m

See Full Page