RBI plans to move away from one-time passwords to authenticate online transactions by instead allowing users to choose other verification options from April 2026. The alternatives include "something the user has", "something the user knows" or "something the user is" questions. They may also include password, passphrase, PIN, card hardware, software token, fingerprint or any form of biometric.