The Telecom Regulatory Authority of India is pushing for universal SMS templates for One-Time Passwords to combat cybercrime, which has caused financial losses of ₹22,495 crore in 2025. This regulation will require banks and digital platforms to update their messaging systems, potentially increasing their compliance and technology costs.
The Telecom Regulatory Authority of India (TRAI) is initiating a move to mandate a universal format for One-Time Password (OTP) messages sent by banks and digital platforms. This move is part of a wider effort to reduce the impact of rising digital fraud in the country, which has reached a scale of ₹22,495 crore in 2025. The regulator aims to replace the current system, where every company uses its own format, with a single, easily identifiable template for users to recognize.
This development is important for investors because it marks an increase in regulatory compliance requirements for financial institutions and digital platforms. Banks, payment gateways, and e-commerce companies will likely need to update their internal software to match the new templates required by TRAI. While these changes are intended to improve security, they represent an additional operational burden and technology cost for these companies.
The urgency behind this move follows a sharp rise in cybercrime in India. According to government data, complaints surged to 2.4 million in 2025, compared to just 262,000 in 2021. To manage this threat, the government has already deployed tools like the ASTR solution and the Financial Risk Indicator, which have helped disconnect millions of fraudulent connections. However, the volume of fraud remains a significant concern for both consumers and businesses.
From an industry perspective, the effectiveness of this move is being debated. While standardizing the layout makes it harder for scammers to send fake messages that look like official bank alerts, some analysts argue that sophisticated fraudsters often find ways to mimic official communications regardless of the template. Additionally, global companies operating in India may face challenges in integrating these local requirements into their existing global security platforms, which often rely on different authentication methods.
For investors and observers, the next stage of this process will be important. TRAI is expected to release a formal consultation paper, which will clarify the technical requirements and the timeline for companies to implement these changes. Investors may want to monitor how this compliance timeline affects the technology spending of listed banks and fintech companies. Additionally, the broader impact on user trust in digital banking remains a factor to watch, as the financial sector relies heavily on the safety of OTPs for customer transactions.