India: RBI asks banks to stop relying on OTP-based authentication, look for safer alternatives

 

Indian central bank, the Reserve Bank of India (RBI), has asked banks in the country to ditch the traditional SMS-based second-factor authentication system and seek safer, advanced alternatives. As per media reports, while there are multiple options available, all include the use of a user’s mobile phone for authentication.

The RBI issued a detailed statement on Development and Regulatory Policies on February 8 on its website but did not lay out instructions in this regard as of now.

Currently, whenever we conduct a digital financial transaction, the fintech firm or bank typically sends an OTP to the mobile number linked to the account as an extra layer of authentication. The transaction can only proceed after entering this OTP, ensuring the security of bank accounts and preventing unauthorised use of financial data.

The RBI has not indicated any intention to completely eliminate the authentication process, but rather to streamline the AFA (additional factor of authentication) process.

“Though RBI has not prescribed any particular AFA, the payments ecosystem has largely adopted SMS-based one-time password (OTP). With innovations in technology, alternative authentication mechanisms have emerged in recent years. To facilitate the use of such mechanisms for digital security, it is proposed to adopt a principle-based "Framework for authentication of digital payment transactions," reads the statement.

In the same context, the RBI has suggested simplifying the onboarding process for Aadhaar-enabled payment system (AePS) touchpoint operators, to be supervised by banks. Additionally, they will consider additional requirements for managing fraud risks.

Safer OTP-less alternative

Route Mobile's latest initiative, TruSense, has introduced an innovative OTP-less authentication system. This method allows service providers to establish direct data connections with users' devices, facilitating identification and token exchange without requiring OTP input from users.

David Vigar, Executive Vice President overseeing digital identity, warned against relying solely on biometrics for authentication. He highlighted the risks posed by advancements in artificial intelligence, particularly the potential for deepfake technology to bypass facial recognition systems.

Comments

Post a Comment

Popular posts from this blog

Senior Citizen Train Ticket Discount: Government has issued a new statement regarding giving discount to senior citizens on train tickets, know the details here

Image
  Senior Citizen Train Ticket Discount: Once again a demand has been made in the Lok Sabha to give discount to senior citizens on train tickets. Senior Citizen Train Ticket Discount:  Railways has withdrawn the discount given to senior citizens on train tickets since the Corona period. However, from time to time there has been a demand to restore this concession given to senior citizens in trains. Even in the winter session of the Lok Sabha, some members raised the demand for increasing fare concessions and facilities for senior citizens traveling in trains. However, even before this, Railway Minister Ashwini Vaishnav has told in the Lok Sabha that during the train journey, every passenger is given an average subsidy of 53 percent on the train ticket. Apart from this, he also told who gets discount on tickets while traveling by train. Demand for discount in train tickets raised again During Zero Hour in the House, Janata Dal (United) MP Kaushalendra Kumar said that before the ...
Read more

Cash Transaction Rules: Income tax rules on cash transaction between Husband-Wife and Son-Father, know rules

Image
  Cash Transaction Rules: Income tax keeps an eye on our every transaction. But is there any tax on cash transactions or can Income Tax send a notice? Or how much cash transaction can take place between you and your wife or between father and son? If you also have these questions in your mind, then let us know their answers… If you also transact money between father and son or between husband and wife, then this news is useful for you. Actually, every transaction of ours has an eye on income. In such a situation, a question arises in the minds of many people whether income tax notice can be received even on cash transactions? Let us know how much cash transaction you can do in your family. Income tax sends notice? According to tax experts, if you give money every month for household expenses or give money as a gift, then the wife is not liable for income tax. Both these types of amounts will be considered as the income of the husband. The wife will not receive any notice from the I...
Read more

Have a Current/Savings Bank Account? Know the Cash Deposit Limits under Income Tax Act to avoid Penalties and Notices

Image
  Adhering to cash deposit and withdrawal limits is crucial to remain compliant with the Income Tax Act in India. This article aims to elucidate the various facets of cash-related regulations, encompassing savings and current accounts, fixed deposits, credit card bill payments, real estate transactions, and more.  Cash Deposit Limits in Savings and Current Accounts The Indian Income Tax Act imposes specific regulations on significant cash deposits in savings accounts. Individuals accumulating INR 10 lakh or more during a fiscal year must notify tax authorities.  For current accounts, this threshold is set higher at INR 50 lakh. Although not immediately taxed, financial institutions report transactions exceeding these limits.  Cash Withdrawal and TDS under Section 194N  Section 194N outlines TDS rules for cash withdrawals. A 2% TDS is levied on withdrawals exceeding INR 1 crore within a fiscal year. Non-filers face a 2% TDS on withdrawals over INR 20 lakh and a 5...
Read more