RBI's New E-Mandate Framework Rewrites the Rules of Recurring Digital Payments

Key Takeaways

1. On 21 April 2026, the RBI notified the Digital Payments – E-mandate Framework, 2026, which consolidates all existing circulars on e-mandates for recurring digital transactions. 

2. The framework repeals eight earlier circulars issued between August 2019 and August 2024, replacing fragmented guidance with a single unified set of directions.

India's auto-debit framework has undergone a significant regulatory overhaul

The Reserve Bank of India has issued the Digital Payments – E-mandate Framework, 2026, consolidating earlier circulars and incorporating changes based on stakeholder feedback. 

The directions apply to all payment system providers handling recurring transactions through cards, UPI, and PPIs, including cross-border payments.

This is not routine regulatory maintenance. It reshapes how millions of Indians interact with automated financial commitments daily.

The framework does more than simplify the law. It also reshapes how automated recurring payments will operate in India. 

In the short term, banks and payment platforms face tighter compliance requirements. Over the longer run, the framework raises infrastructure costs for fintech companies. 

It creates a system that is safer and more standardised, but less adaptable. Smaller payment operators may find compliance burdensome.

By the Numbers: What the Framework Actually States

At the core of the framework is the concept of customer consent and control. Recurring payments are designed for convenience, but without proper checks, they can lead to unnoticed outflows.

The table below captures the key transaction thresholds and consumer protections introduced under the 2026 directions.
 

The first payment under any mandate always requires an OTP, even if it is under ₹15,000. 

The framework shifts significant control back to the consumer to prevent fraudulent or unwanted auto-debits.

For everyday users, these numbers directly define what requires their attention and when.

This transforms the daily lives of India's 300 million digital payment users

Customers must be given the facility to opt out of a particular transaction or of the e-mandate itself. 

Any such opt-out must be validated by the issuer using an additional factor of authentication, followed by an intimation to the customer.

This means consumers gain granular control, stopping one payment without cancelling an entire subscription. For SIP investors and insurance policyholders, this is practically significant.

The directions require issuers to maintain an appropriate dispute resolution and grievance redressal system.

 

RBI's instructions on limiting customer liability for unauthorised transactions shall be applicable to recurring payments under e-mandates.

Consumers who previously faced unresolved auto-debit disputes now have a formal, protected pathway to seek resolution.

Analysts See Long-Term Trust Gains Despite Short-Term Friction

The RBI's E-Mandate Framework 2026 delivers better regulatory clarity, stronger consumer protection, and improved transparency. 

However, the framework also restricts user autonomy, raises compliance costs, and limits innovation flexibility.

Analysts tracking fintech regulation note that India is deliberately choosing a control-first model over agility. That trade-off is intentional and defensible given the rising volume of digital fraud.

The framework builds trust in digital payments, reduces transaction costs and delays, and strengthens India's digital economy.

Looking ahead, the standardisation across UPI, cards, and PPIs creates a level playing field. 

Payment firms that invest in compliance infrastructure now will likely gain a competitive advantage as recurring payment volumes grow.

Conclusion  

India's digital payments system handles billions of transactions every month. Recurring payments are now used for things like subscriptions, insurance, investments, and online shopping. This setup is important for the future of India's digital financial system.

FAQs

Can anyone explain what the new RBI guidelines on recurring payments are and how to deal with them?  

The RBI's updated 2026 e-mandate framework requires 24-hour pre-debit notifications for all auto-debit payments (cards/UPI), allowing customers to approve, cancel, or modify subscriptions easily. 

What are the new RBI rules for online payments? 

Effective April 1, 2026, the Reserve Bank of India (RBI) has mandated Two-Factor Authentication (2FA/AFA) for all digital payments, including UPI, cards, and wallets. This new regulation eliminates the reliance on one-time passwords (OTPs) alone.