Thursday, 25 September, 2025
RBI Mandates Stronger Two-Factor Authentication for All Digital Payments
The Reserve Bank of India has released final guidelines that make two-factor authentication (2FA) mandatory for all digital payments starting April 1, 2026, to strengthen fraud protection. One factor must be dynamically generated or proven, while the other should ensure that compromising one does not affect the other. The framework allows risk-based checks, biometrics, tokenization, PINs, or passwords as authentication methods, and retains SMS-based OTP as an option.
Read full story at CNBC