UPI payments get extra security: Fingerprint or OTP now mandatory for most transactions from today
text_fields
Starting April 1, 2026, UPI users must add a second verification step beyond their PIN for most online payments. The Reserve Bank of India (RBI) rolled out updated Additional Factor of Authentication (AFA) guidelines to slash fraud and sharpen accountability across UPI, cards, and wallets.
Simply entering your UPI PIN won't suffice anymore—transactions need an OTP, fingerprint, or face scan to process. This dual check stops unauthorized payments even if someone glimpses your PIN.
RBI carves out exceptions for balance: trusted devices enable quick low-value transactions, while high amounts or new devices demand full 2FA. Banks and platforms now shoulder more blame for system glitches, offering swift compensation and complaint fixes.
UPI ATM withdrawals count as standard ATM use, tapping into your free monthly limit—extras cost Rs 23 plus taxes. The change curbs scams but adds a brief extra step to payments.