The Reserve Bank of India (RBI) has proposed new measures to combat financial fraud in digital payments, including lagged credit for authorised push payments and a 'kill switch' for users to disable all digital transactions.
Two-factor authentication for all digital transactions, including UPI, is now mandatory in India, as per RBI guidelines, to enhance security and curb fraud.
It will enable real-time intel sharing among banks and other financial sector participants to strengthen customer protection against digital fraud.
Out of all the reported digital payment frauds in India, over half (55 per cent) were United Payments Interface (UPI)-related, a new report released on Tuesday revealed. Another 18 per cent are card related, 12 per cent are related to internet banking and nine per cent are from phishing calls. Most of the UPI-related frauds, however, have a low ticket size.
The Reserve Bank of India (RBI) has introduced its 'Payments Vision 2028' document, outlining initiatives to enhance digital payment security, introduce electronic cheques, and expand regulatory oversight to include e-commerce entities.
Customers will qualify for compensation even if they mistakenly share the OTP.
A 20-year-old man was arrested for allegedly posing as an employee of a digital payment platform and duping shopkeepers in East Delhi by claiming to check defective sound boxes.
The amount involved in banking system frauds surged to Rs 21,515 crore in the first half of FY26, up 30 per cent from the same period last year, even as the number of frauds fell 2.8 times to 5,092.
'It is a tradeoff between convenience and fraud prevention.'
From April 1, 2026, the Reserve Bank of India's new authentication directions modernise how every digital payment you make must be verified -- and place the burden of security squarely on your bank, not on you.
The proposed solution is a one-hour delay for digital transactions exceeding Rs 10,000, particularly when the transfer is made to a new or unverified beneficiary. The idea is simple -- give users a window to reconsider, detect fraud or alert their bank before the funds are irretrievably transferred.
'The focus needs to shift towards the ability to collect payments, particularly in tier-3 to tier-4 areas where acceptance is still lacking.'
With digital adoption fast gaining currency, India is likely to see retail digital payments double to $7 trillion by 2030 from current levels, a study by Kearney and Amazon Pay said. In the report 'How Urban India Pays', Kearney-Amazon Pay said strong adoption of digital payments in online purchases has potentially led to a permanent shift in consumer behaviours, fuelling offline adoption as well.
Cyber intelligence firm CloudSEK reports that online fraudsters are using a new toolkit called 'Digital Lutera' to bypass security features of UPI apps and carry out fraudulent financial transactions.
The Enforcement Directorate (ED) has identified a Grenadian man based in Dubai as the 'beneficial owner' of a Delhi-based company involved in a large-scale betting, gaming, and cyber fraud-linked money-laundering operation in India.
Delhi Police have arrested a man from Rajasthan for allegedly running an online shopping fraud racket, cheating people through fake social media advertisements offering discounted branded suits and sarees.
Mumbai Police's 1930 cyber helpline has successfully intercepted and frozen over 101 crore defrauded from citizens in the last five months, preventing significant financial losses.
OTP scams accounted for over one-fourth of all cyber frauds.
Delhi Police have dismantled a cyber fraud racket involving malicious mobile applications, arresting two individuals, including the alleged mastermind from Uttar Pradesh. The accused developed and supplied 'FUD' APK files to cyber fraudsters across the country, enabling them to gain remote access to victims' phones and siphon off money.
Delhi Police have arrested two men from Goa, claiming to have busted an interstate cyber-fraud-and-cash-conversion racket. Transactions worth nearly Rs 40 lakh routed through the network have been uncovered.
A 61-year-old man from Mangaluru was allegedly cheated of Rs 2.07 crore by cyber fraudsters posing as officials of central investigative agencies in a 'digital arrest' scam, police said.
Rajasthan Police have issued an advisory warning citizens about potential cyber fraud attempts disguised as part of the ongoing digital census. Scammers may use various methods, including fake calls, messages, and in-person visits, to steal personal and financial information.
Delhi Police have dismantled an interstate cyber fraud syndicate, arresting 14 individuals allegedly involved in fraudulent transactions exceeding Rs 8 crore. The accused targeted job seekers with fake work-from-home opportunities via social media and job portals.
By enabling real-time data sharing, the platform will help prevent scams and ensure secure transactions.
We propose an expert group be set up to form a national strategy on digital fraud. This group would bring together skills in financial regulation, security economics, cyber defence, and public communications, and an understanding of the Indian financial and security systems. It should lay the foundations of a coordinated approach by the Indian State in fighting digital fraud, suggest Ajay Shah and Nandkumar Saravade.
A 32-year-old man has been arrested in Delhi for allegedly defrauding a resident of 2 lakh under the guise of selling a second-hand car online. The accused impersonated an employee of a reputable online car sale platform to gain the victim's trust.
Only bona fide victims would be compensated by banks within five days of receiving the complaint.
Google Pay, PhonePe, and Paytm may deliberately delay transactions, issue fraud alerts, and require an extra layer of user confirmation before processing any transactions that are likely to be classified as fraudulent.
Delhi Police have dismantled an interstate cyber fraud racket that deceived individuals with false promises of overseas jobs and visa services, leading to the arrest of three suspects.
Police in Himachal Pradesh have arrested five individuals for allegedly assaulting a man and forcing him to transfer money via UPI.
Kochi cyber police recovered over 1 crore stolen from an 81-year-old man through a 'digital arrest' online fraud. The police froze the funds in a bank account in Srinagar and returned the money to the victim.
Delhi Police have dismantled a fraudulent call centre in Pitampura, arresting 19 individuals for allegedly defrauding people nationwide by posing as representatives of a finance company offering fake loans and insurance schemes.
Kochi city cyber police have recovered over 1 crore stolen from an 81-year-old man through a 'digital arrest' online fraud. The incident occurred in November when the man was defrauded of around 1.30 crore. Police intervention led to the recovery of 1.06 crore from a bank in Jammu and Kashmir.
Delhi Police have arrested two individuals from Rajasthan for allegedly defrauding a Delhi resident of over 21 lakh through a high-return online investment scam. The accused lured the victim with promises of lucrative returns and prepaid tasks.
Delhi Police have arrested two individuals for allegedly defrauding a man of approximately Rs 4.35 lakh in an online gas bill booking scam. The victim was tricked into installing a malicious mobile application that allowed the fraudsters to siphon off funds.
A software engineer earning a high salary allegedly abandoned his career to run a fake online trading racket, duping investors of nearly Rs 100 crore.
In today's rapidly evolving digital payment landscape, security concerns remain a top priority for stakeholders across sectors.
The Uttarakhand Special Task Force has arrested the alleged mastermind of a cheating racket in an SSC recruitment examination from Saharanpur in Uttar Pradesh. The accused, Shubham Bhatnagar, allegedly provided remote access to candidates to solve papers illegally.
'Just like oral hygiene, cyber hygiene must become a daily habit,' says Beena Vaheed, executive director, Bank of Baroda. 'It is not enough to rely only on banks, companies, or the government. Each of us must play our part.'
Public sector banks have written off loans worth Rs 6.15 lakh crore in the last five and a half years, Parliament was informed on Monday.