The Reserve Bank of India (RBI) has implemented updated auto-debit regulations, significantly enhancing the security and control consumers have over their recurring online payments. These rules, primarily impacting transactions made via Unified Payments Interface (UPI), debit cards, and credit cards, mandate additional authentication for payments exceeding a specific threshold.
What Are the New RBI Auto-Debit Rules?
At the core of the RBI's framework for e-mandates on recurring online transactions is the requirement for an Additional Factor of Authentication (AFA). This means that for certain recurring payments, customers must provide an extra layer of verification, such as a One-Time Password (OTP), to authorize the transaction.
The current AFA limit, updated in January 2023, stands at ₹15,000 per transaction. Previously, this limit was ₹5,000. Any recurring payment above ₹15,000 will now require explicit approval from the customer through AFA.
Key Features of the Regulations:
- Mandatory Notifications: Banks and payment aggregators must send a pre-debit notification to the customer at least 24 hours before a recurring payment is due. This notification is typically sent via SMS or email, detailing the amount and the service provider.
- Opt-Out Option: Customers are provided with an easy option to opt-out of a particular recurring payment or modify the mandate if they wish, giving them greater control over their subscriptions and bills.
- First Transaction AFA: The very first transaction in a recurring mandate always requires AFA, regardless of the amount. This ensures that the customer consciously sets up the recurring payment.
- AFA for High-Value Transactions: For subsequent recurring transactions, if the amount is below ₹15,000, AFA is not required, but the pre-debit notification remains mandatory. If the amount exceeds ₹15,000, AFA is required even for subsequent payments.
Impact on UPI and Card Payments
These regulations are universal for all recurring online transactions, including those set up through UPI AutoPay, credit cards, and debit cards. This means that services like streaming subscriptions, utility bill payments, insurance premiums, and loan EMIs, if set up as recurring payments, fall under this framework.
The Reserve Bank of India stated that the objective of these measures is to protect customers from fraudulent transactions and provide them with enhanced control over their recurring payment mandates, fostering a safer digital payment ecosystem.
For consumers, these rules translate into significantly greater security and transparency. They gain more control over their financial commitments, reducing the risk of unauthorized deductions or forgotten subscriptions. For banks and merchants, while requiring system adjustments for compliance, the framework builds greater trust in digital payment methods.
Ultimately, the RBI's auto-debit rules are a proactive step towards building a robust and secure digital payment landscape in India, empowering users with better oversight of their financial outgoings.