RBI Announces New Online Payment Guidelines from April 1
The Reserve Bank of India unveiled new online payment guidelines effective on April 1, 2026, emphasizing two-factor authentication (2FA) to strengthen security against fraud. All forms of digital payments within the country will be affected from this date onwards, including UPI, cards, net banking, and prepaid instruments.
Highlights
- •Two-Factor Authentication Mandate: Mandatory for all online transactions starting April 1, 2026.
- •Risk-Based Verification Requirement: All transactions now necessitate at least two forms of verification. One method must be dynamic and can include biometrics or unique codes.
- •E-Payment Safety: E-shopkeepers, including UPI transactions, need to adopt biometric verification by April 1, 2026.
- •Payment Companies Required Updates: Banking systems and payment companies like Paytm, Google Pay, and PhonePe will be required to update their systems in compliance with new security measures.
The Reserve Bank of India (RBI) announced new stringent regulations for online payments that come into effect on April 2026. The move aims to enhance the security of your funds against fraud by enforcing two-factor authentication (2FA).
Under these guidelines, every transaction will require at least two methods of verification, including a dynamic option like a mobile PIN or biometric verification such as fingerprint or Face ID.
Tiny shopkeepers and online shoppers are also encouraged to adopt biometrics for UPI transactions to ensure their security. Banks and payment companies like Paytm and Google Pay will be required to update their systems in compliance with these new rules by April 1, 2026. All digital payments within the country including UPI, cards, net banking, and prepaid payment instruments are affected.
The RBI has cited an increase in fraud incidents and instances of hacking for SMS OTPs as reasons behind adopting more secure measures like mandatory biometric verification, which have now taken effect from April 2026. This move is expected to reduce phishing and unauthorized transactions while making digital payments safer and easier for users.
