More Stories

Informist, Thursday, Nov. 5, 2026

 

MUMBAI - The Reserve Bank of India has tightened cybersecurity and digital payment security requirements for non-bank payment system operators, mandating them to report unusual incidents, including cyberattacks, critical system outages, internal fraud and settlement delays, within six hours of detection.

 

Under the revised Master Directions on Cyber Resilience and Digital Payment Security Controls for non-bank payment system operators, issued Thursday, the RBI has also mandated a minimum 12-hour cooling period before allowing online payment transactions following a change in the registered mobile number or email ID linked to a payment instrument.

 

The directions aim to strengthen the resilience of payment systems against existing and emerging information technology and cybersecurity risks, the RBI said. The revised directions will come into effect immediately for large and medium non-bank operators, from the date they are placed on the RBI's official website. Small non-bank operators will have to comply with the directions from Apr. 1, 2028.

 

The central bank has mandated operators to report unusual incidents to it within six hours of detection through a prescribed reporting format. The RBI has further directed operators to establish a round-the-clock facility to facilitate the swift resolution of unauthorised or fraudulent transactions reported by customers and provide prompt responses to law enforcement agencies.

 

For mobile payment services, the RBI has mandated device binding or fingerprinting of mobile applications with the device and SIM. Payment applications will also have to prevent access when remote access applications are active, to the extent possible.  End

 

Reported by Kabir Sharma

Edited by Shubhayan Bhattacharya

 

For users of real-time market data terminals, Informist news is available exclusively on the NSE Cogencis WorkStation.

 

Cogencis news is now Informist news. This follows the acquisition of Cogencis Information Services Ltd. by NSE Data & Analytics Ltd., a 100% subsidiary of the National Stock Exchange of India Ltd. As a part of the transaction, the news department of Cogencis has been sold to Informist Media Pvt. Ltd.

 

Informist Media Tel +91 (22) 6985-4000

Send comments to feedback@informistmedia.com

 

© Informist Media Pvt. Ltd. 2026. All rights reserved.