RBI Consolidates Cyber Rules for Payment Apps

The Reserve Bank of India issued consolidated cyber security rules for non-bank payment system operators on November 5. The direction applies immediately to large and medium companies, while small firms have until April 1, 2028. New safeguards include a 12-hour block on online payments after mobile number changes and mandatory multi-factor authentication for electronic debits.