The Reserve Bank of India (RBI) has issued the final framework governing authentication mechanisms for digital payment transactions, marking a significant shift in the regulatory landscape for payment security. The Reserve Bank of India (Authentication Mechanisms for Digital Payment Transactions) Directions, 2025, released on 25 September 2025, consolidate and update the rules around digital payment authentication after two rounds of public consultation. These directions will come into force from 1 April 2026, unless a specific provision carries a different compliance date. At its core, the framework reiterates that all domestic digital payment transactions must be secured by at least two distinct factors of authentication (2FA), unless specifically exempted. While the digital paym
From April 2026, All Domestic Digital Payments Will Require 2FA under RBI’s New Directions

117