Indian supervisory controls for secure digital payment products, authentication, fraud risk, reconciliation and customer protection. Its scope covers internet, mobile, card and digital payment channels.

The main requirements are to maintain governance, secure development, authentication, fraud controls, reconciliation and customer safeguards.

Fraud prevention and reimbursement answer different questions. Prevention aims to stop a harmful transaction; reimbursement allocates loss after it occurs. The distinction between an unauthorised transaction and a payment the customer authorised after being deceived can change the applicable rules, as can the customer's status and the payment rail used.

An investigation needs to reconstruct the instruction, authentication, warnings, recipient information and the parties' actions. Successful authentication can establish that credentials were used without proving that a customer understood the true purpose of a payment. Equally, a name-check result can confirm account details without establishing that an underlying invoice or investment is legitimate.

The practical framework connects controls before payment with fair and evidence-based handling of claims afterwards. Eligibility, exclusions, reimbursement limits and procedural requirements belong to the specific instrument. Those conditions should be kept separate from a provider's voluntary goodwill policy and from a commercial dispute with a legitimate merchant.

The instrument also addresses reporting and evidence: monitor incidents and fraud and submit regulatory reports where prescribed.