India’s central bank to launch a special “.bank.in” domain for banks in April 2025 to fight digital payment fraud and enhance trust in online banking.
The Reserve Bank of India announced that the Institute for Development and Research in Banking Technology (IDRBT) will exclusively manage the new “fin.in” domain for non-bank financial institutions.
By infosecbulletin
/ Tuesday , June 3 2025
Qualcomm has issued security patches for three zero-day vulnerabilities in the Adreno GPU driver, affecting many chipsets that are being...
Read More
By infosecbulletin
/ Monday , June 2 2025
Roundcube Webmail has fixed a critical security flaw that could enable remote code execution after authentication. Disclosed by security researcher...
Read More
By infosecbulletin
/ Sunday , June 1 2025
A hacker known as "303" claim to breach the company's systems and leaked sensitive internal data on a dark web...
Read More
By infosecbulletin
/ Sunday , June 1 2025
CISA and ACSC issued new guidance this week on how to procure, implement, and maintain SIEM and SOAR platforms. SIEM...
Read More
By infosecbulletin
/ Saturday , May 31 2025
The Qualys Threat Research Unit (TRU) found two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities....
Read More
By infosecbulletin
/ Saturday , May 31 2025
New ransomware payment reporting rules take effect in Australia yesterday (May 30) for all organisations with an annual turnover of...
Read More
By infosecbulletin
/ Saturday , May 31 2025
Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious new security rules that require...
Read More
By infosecbulletin
/ Thursday , May 29 2025
GreyNoise has discovered a campaign where attackers have gained unauthorized access to thousands of internet-exposed ASUS routers. This seems to...
Read More
By infosecbulletin
/ Wednesday , May 28 2025
The rise of online gambling in the country is leading to increased crime and societal issues. In response, the central...
Read More
By infosecbulletin
/ Wednesday , May 28 2025
Cybersecurity researchers recently revealed a coordinated cloud-based scanning attack that targeted 75 different exposure points earlier this month. On May...
Read More
“Increased instances of fraud in digital payments are a significant concern,” said RBI governor Sanjay Malhotra, adding that the new domain system aims to reduce cybersecurity threats and malicious activities like phishing. The move comes as India grapples with a surge in digital payment frauds and predatory lending apps.
The central bank will provide banks with guidelines for a new initiative aimed at helping users identify legitimate banking websites from fraudulent ones.
How the ‘.bank.in’ & ‘fin.in’ domain will work:
Starting April 2025, all approved Indian banks must use websites ending in ‘.bank.in’ to enhance customer security and help distinguish legitimate banking sites from fraudulent ones.
Indians lost Rs 485 crore to UPI fraud in 632,000 incidents during FY25 (up to September). From 2022-23, total UPI fraud losses reached Rs 2,145 crore in 2.7 million cases, with FY24 alone accounting for Rs 1,087 crore from 1.34 million incidents.
To tackle this fraud, the government has blocked over 669,000 SIM cards and 132,000 IMEIs, as well as 1,700 Skype IDs and 59,000 WhatsApp accounts. The Union Home Ministry reports saving more than Rs 3,431 crore from 994,000 complaints.
The RBI will implement extra verification for international digital transactions to offshore merchants to enhance consumer protection, reduce unauthorized payments, and prevent card fraud.
Using 2.8 millions IPs, massive brute attack ongoing