The Reserve Bank of India (Commercial Banks – Digital Payment Security Controls) Directions, 2026, issued by the Reserve Bank of India with immediate effect, establish a comprehensive framework for securing digital payment products and services offered by Commercial Banks. The Directions require banks to implement Board-approved security policies, robust governance, secure application development, multi-factor authentication, cyber risk management, fraud prevention, data protection, and business continuity measures. They also prescribe specific security controls for internet banking, mobile
banking, and card payment systems, while mandating customer protection, grievance redressal, and adherence to global security standards such as PCI and OWASP to strengthen the security, resilience, and reliability of the digital payment ecosystem.
