RBI New Rules April 2026 — UPI 2FA, ATM Charges, CIBIL Updates Explained
TL;DR
- Mandatory two-factor authentication (2FA) for all UPI, card, and digital payments from April 2026
- CIBIL score now updates every 7 days instead of 15 — faster recovery from missed payments
- ATM free withdrawals: 3 per month in metro cities, 5 in non-metro. Charges: ₹23 + GST per extra transaction
- No foreclosure or prepayment penalty on floating-rate home, personal, and MSME loans
- Cash deposits of ₹10 lakh or more must be reported to the Income Tax Department by the bank
Introduction
From April 2026, several changes introduced by the Reserve Bank of India are set to impact how you pay, borrow, withdraw cash, and manage your credit profile.
None of these changes are dramatic in isolation. But together they represent a coordinated push by RBI towards three goals: digital-first banking, stronger fraud prevention, and greater financial transparency. Understanding each change helps you avoid unexpected charges and take advantage of the benefits.
1. Mandatory Two-Factor Authentication for All Digital Payments
This is the most sweeping change affecting every digital payment user in India.
From April 1, 2026, two-factor authentication (2FA) is mandatory for all digital payment transactions — including UPI, debit cards, credit cards, and internet banking.
What 2FA means in practice
Two-factor authentication requires at least two independent methods of verification before a payment goes through. In India, the primary second factor has been OTP (One-Time Password) sent via SMS.
The RBI's new directions formalise this requirement and extend it to all transaction types without exception. This closes a gap where some payment instruments or amounts were processed with only single-factor verification.
What changes for users
For most people, very little changes in daily experience — OTP has already been standard for most UPI and card transactions. The difference is:
- No transaction, regardless of amount, can bypass 2FA
- Payment platforms must ensure at least one factor is unique per transaction
- If fraud occurs due to the platform's failure to enforce 2FA, the issuer (bank or payment platform) is liable to compensate you fully
The last point is significant. It strengthens consumer protection and shifts liability to platforms, not users, in case of system-level failures.
What to do
Ensure your registered mobile number is active and receiving SMS. If you have changed your phone number recently and not updated it with your bank, do it now. A missed OTP due to an outdated number can block legitimate transactions.
2. CIBIL Score Updated Every 7 Days — Not 15
This change directly impacts anyone with active loans, credit cards, or those trying to improve their credit score.
Previously, credit bureaus updated your CIBIL score every 15 days based on data received from lenders. From 2026, the update frequency has been reduced to 7 days.
Why this matters
Credit scores reflect your repayment behaviour, credit utilisation, and loan history. A faster update cycle means:
If you are improving your score: Responsible behaviour — paying EMIs on time, reducing credit card outstanding — reflects faster. A score improvement that previously took 3-4 weeks to show may now appear in 1-2 weeks.
If you miss a payment: The negative impact appears sooner. A missed EMI will show up in your credit profile within a week instead of two.
For loan applicants: Lenders checking your score get a more current picture, which is better if your score is improving but requires caution if you recently had a delinquency.
Practical implication
If you are planning to apply for a home loan or car loan in the next 30-60 days, your credit behaviour in the immediately preceding weeks matters more than before. Pay all EMIs and credit card bills on time and keep credit utilisation below 30% of your limit.
You can check your CIBIL score for free once a year at cibil.com, or more frequently through apps like CRED, Paytm, or your bank's app.
3. ATM Withdrawal Rules — Free Limits and Charges
RBI has updated ATM free transaction limits and charges, standardising what was previously inconsistent across banks.
Free transaction limits (from April 2026)
| Location | Free Transactions Per Month |
|---|---|
| Metro cities | 3 |
| Non-metro cities | 5 |
Important: UPI withdrawals from ATMs now count alongside debit card withdrawals for the purpose of free transaction limits. If you withdraw cash via UPI at an ATM, it uses one of your free transactions.
Charges beyond free limit
After exhausting free transactions: ₹23 + GST per transaction (approximately ₹27 after 18% GST).
Which cities are "metro" for ATM purposes?
Mumbai, Delhi, Chennai, Kolkata, Bengaluru, and Hyderabad are classified as metro cities. All other cities and towns qualify for the higher 5-transaction free limit.
How to avoid charges
- Withdraw larger amounts per trip rather than multiple small withdrawals
- Use UPI for daily small payments — it is free and does not count toward ATM limits when used for merchant payments
- Use your bank's own ATMs where possible — some banks offer additional free transactions at their own network ATMs before the charges apply
4. No Foreclosure Penalty on Floating Rate Loans
This is one of the most borrower-friendly changes in the RBI's April 2026 framework.
Banks and NBFCs cannot charge a foreclosure or prepayment penalty on:
- Floating rate home loans taken by individuals
- Floating rate personal loans taken by individuals
- Certain MSME loans taken by individuals
What this means for home loan borrowers
If you have a floating-rate home loan (which is the vast majority of home loans in India), you can now:
- Prepay any amount at any time without penalty
- Close your loan early without a foreclosure charge
- Refinance to another lender offering a lower rate without paying an exit fee
Previously, some lenders charged 1-2% of the outstanding principal as a prepayment penalty, which could amount to ₹50,000–₹2 lakh on a typical home loan. That charge is now prohibited.
Who this does not apply to
Fixed rate loans and loans taken by companies or business entities are not covered. If you have a fixed-rate home loan or a corporate loan, prepayment penalties may still apply — check your loan agreement.
How to use this benefit
If you receive a bonus, inheritance, or any windfall, consider making a partial prepayment on your home loan. Even a single prepayment of ₹2-3 lakh on a ₹50 lakh outstanding loan can reduce your total interest outgo by ₹5-8 lakh over the remaining tenure.
Use the EMI Calculator to model how a partial prepayment reduces your outstanding balance and total interest cost.
5. High-Value Cash Deposits Must Be Reported
From April 2026, if you deposit ₹10 lakh or more in cash into any bank account, the bank is required to report this transaction to the Income Tax Department automatically.
This is not a new tax — it is a compliance and transparency measure. The money itself is not taxed at deposit. But the Income Tax Department will cross-verify it against your declared income and ITR.
What you should know
- The ₹10 lakh threshold applies per transaction, not cumulatively across the year
- Multiple smaller deposits structured to stay below ₹10 lakh can still attract scrutiny under anti-money laundering provisions
- If you have a legitimate source for large cash deposits (property sale, agricultural income, business income), ensure you have documentation ready
This change largely affects people who receive large cash payments in their business or from property transactions. For salaried individuals with digital income, this is unlikely to be relevant.
6. Basic Savings Bank Deposit Account Updates
RBI has also revised rules for Basic Savings Bank Deposit (BSBD) accounts — the zero-minimum-balance accounts available at all banks.
Key updates effective April 2026:
- Free cash deposits through any channel (previously limited)
- Free ATM/debit card transactions within limits
- Internet and mobile banking services provided free of charge
- Monthly statements or passbook provided free
These changes make BSBD accounts more practical for low-income households and first-time banking customers.
What These Changes Mean for Your Financial Planning
Taken together, the April 2026 RBI changes push in a consistent direction: use digital payments, manage your credit carefully, and prepay loans when you can.
For someone in their 30s managing a home loan, SIP investments, and regular banking:
- The no-foreclosure penalty rule is the most financially significant change — use it to aggressively prepay when you have surplus funds
- The faster CIBIL updates mean your credit score is more responsive — both to improvement and deterioration
- The 2FA mandate is primarily a security upgrade with minimal daily impact
- The ATM charge structure is a nudge to go digital — which most urban Indians already have
Frequently Asked Questions
Is two-factor authentication mandatory for small UPI payments like ₹10 or ₹20?
Yes. The RBI's 2FA mandate applies to all digital payment transactions regardless of amount. However, in practice, UPI already requires PIN authentication for every transaction, so you may not notice any change for routine payments.
If I miss an EMI payment, will it now affect my CIBIL score faster?
Yes. With 7-day update cycles, a missed payment will reflect on your credit report sooner than before. However, most lenders have a 30-day grace period before reporting a delinquency to credit bureaus, so a payment that is a few days late typically does not immediately impact your score. The faster update cycle matters more for positive changes — like paying down outstanding balances.
Can I now close my home loan anytime without penalty?
Yes, if your home loan is on a floating interest rate. Floating rate home loans for individual borrowers are exempt from foreclosure and prepayment charges under the updated RBI framework. Verify your loan type by checking your loan agreement or calling your lender. Fixed-rate loans are not covered by this exemption.