RBI made Two-Factor Authentication (2FA) mandatory for all digital payments from 1 April 2026 to improve transaction security.
Two-Factor Authentication (2FA) means using two different verification methods, such as PIN (Personal Identification Number), OTP, or biometric authentication.
At least one authentication factor must be dynamic, like OTP, which changes for every transaction and increases security.
Single-factor authentication methods like only PIN or only OTP will no longer be allowed for any digital transaction.
The rule is applicable to all digital payment systems, including UPI, debit and credit cards, and mobile wallets.
The main objective is to reduce the increasing number of digital payment frauds and protect users from cyber threats.