Context:
The Reserve Bank of India (RBI) has introduced the Digital Payments – E-mandate Framework, 2026. This consolidated set of rules streamlines recurring payments across UPI, cards, and prepaid instruments, balancing user convenience with a robust 24-hour “safety window” for every transaction.
When is an OTP Needed?
The new framework categorizes recurring payments by their risk and value. While the general limit remains at ₹15,000, specific “essential” financial commitments have a much higher threshold.
| Category | Limit (No OTP Required) | Examples |
| General Recurring | ₹15,000 | Netflix, Spotify, Utility Bills, Broadband, Gym Fees. |
| High-Value Exemptions | ₹1,00,000 | Insurance Premiums, Mutual Fund SIPs, Credit Card Bills. |
| Variable Payments | Set by User | Electricity bills where the amount changes each month. |
- Initial Setup: Every e-mandate must be registered using Additional Factor Authentication (AFA) (usually an OTP).
- The First Transaction: The very first payment under any mandate always requires an OTP, even if it is under ₹15,000.
The “Safety First” Features
The 2026 framework shifts significant control back to the consumer to prevent fraudulent or unwanted auto-debits.
- 24-Hour Pre-Debit Alert: Banks must send a notification (SMS/Email) at least 24 hours before any money is deducted.
- The “Opt-Out” Link: This alert must include a facility to cancel that specific transaction or revoke the entire mandate before the debit happens.
- Zero Charges: Banks and payment providers are prohibited from charging customers for setting up or using the e-mandate facility.
- Post-Transaction Feedback: Every debit must be followed by an instant notification that includes grievance redressal details (how to complain if the amount is wrong).
- Card Re-issuance: If your credit/debit card is re-issued (due to expiry or loss), banks can now automatically map your existing e-mandates to the new card, so your subscriptions aren’t interrupted.
Key Concepts: Keyword Q&A
Q: What is an "AFA" (Additional Factor Authentication)?most asked
A: It’s a second layer of security beyond just your card details—typically an OTP sent to your phone or a biometric check.
Q: Can I stop a payment after I get the 24-hour alert?
“RBI MPC Unpacked: Key Theory Meets Today’s Macro Trends”Tap to play · from the C4S channel
A: Yes. The framework mandates that the alert must provide a clear way to “opt-out” of that specific payment cycle without needing to delete the entire subscription.
A clean PDF of this page with the C4S header — it opens right away, and the link comes to your WhatsApp too.
Q: What if a fraudster sets up a mandate?
A: The RBI has extended its “Zero-Liability” policy to e-mandates. If you report an unauthorized debit promptly, the bank is responsible for the loss.
Conceptual MCQs
Q1. According to the 2026 framework, what is the maximum limit for an auto-debit for a Mutual Fund SIP without requiring an OTP for each cycle? A) ₹15,000
B) ₹50,000
C) ₹1,00,000
D) ₹5,00,000
Q2. How much time in advance must a bank notify a customer before processing a recurring e-mandate payment? A) 1 hour
B) 12 hours
C) 24 hours
D) 48 hours
Q3. Which of the following is EXEMPT from the mandatory 24-hour pre-debit notification? A) Netflix Subscription
B) Electricity Bill
C) FASTag Auto-replenishment
D) Insurance Premium
Answers
- Q1: C (Insurance, Mutual Funds, and Credit Cards have a special ₹1 lakh limit.)
- Q2: C (The 24-hour window is a mandatory safety feature.)
- Q3: C (FASTag and NCMC are exempt to prevent travel delays.)
Exam Relevance
| Exam Focus Area | Relevance Level |
| RBI Grade B | Phase II: Finance (Payment Systems & Consumer Protection) |
| SSC / Bank PO | General Awareness (New transaction limits and banking terms) |
