RBI Tightens Digital Payments Security: Your Money Just Got Safer?
The RBI has consolidated and strengthened cybersecurity rules for non-bank Payment System Operators (PSOs), mandating incident reporting within six hours and implementing a 12-hour cooling period for online transactions after mobile/email changes.
Banking
6 hours
Incident Reporting Deadline
For cyberattacks, critical outages, fraud
12 hours
Cooling Period (Contact Change)
For online transactions after mobile/email update
April 1, 2028
Small PSOs Compliance By
Large/medium PSOs comply immediately
July 30, 2024
Initial Cyber Security Directions
RBI issued its first Master Directions on Cyber Resilience and…
April 2026
Anticipation of Tighter Rules
Industry discussions began intensifying around the need for more…
November 5, 2026
Master Directions Issued
The RBI released its consolidated Master Directions for Cyber…
If you’re wondering
What is CERT-In?
CERT-In, the Indian Computer Emergency Response Team, is the national agency for cyber security incidents. It collects, analyzes, and disseminates information on cyber attacks, and issues forecasts and alerts.
