The Reserve Bank of India (RBI) will launch an exclusive ‘bank.in’ Internet domain for Indian banks, with registrations starting in April 2025. The move aims to help customers easily identify legitimate bank websites and avoid fraudulent ones. A similar ‘fin.in’ domain for the broader financial sector including NBFCs is also on the cards.
Announcing the initiative, RBI Governor Sanjay Malhotra stressed the growing concerns over digital fraud. “The surge in digital frauds is a matter of concern, warranting action by all stakeholders,” he said, noting that while digital financial services have made banking more convenient, they have also exposed customers to sophisticated cyber threats.
The ‘bank.in’ domain is expected to reduce risks such as phishing, where scammers set up fake websites to steal sensitive user information. By visiting websites with this exclusive domain, customers may find it easier to distinguish authentic bank platforms from fraudulent ones.
To further improve the digital security, the RBI will also introduce an Additional Factor of Authentication (AFA) for cross-border ‘Card Not Present’ transactions—those made without the physical card, like online payments. Currently, AFA is mandatory only for domestic transactions, which has reportedly enhanced payment safety within India.
The Institute for Development and Research in Banking Technology (IDRBT) will act as the exclusive registrar for ‘bank.in’ domain registrations. Banks will soon receive detailed guidelines on the registration process.
