RBI unveils new digital authentication guidelines for card transactions, boosting security

RBI issued updated digital authentication guidelines for card transactions, balancing security and flexibility. SMS-based OTP remains valid, while issuers may adopt risk-based authentication. AFA validation is now mandatory for cross-border Card Not Present transactions. The rules promote open access to authentication tech, foster innovation, and increase issuer accountability. With compliance due April 1, 2026, India aligns with global standards for secure digital payments.