Home > Blog

Blog / 23 May 2025

Cybersecurity in Digital Payments

Context:

In response to the rising incidents of cyber fraud in India’s rapidly expanding digital payments ecosystem, the Department of Telecommunications (DoT) has unveiled the Financial Fraud Risk Indicator (FRI). This initiative, a part of the broader Digital Intelligence Platform (DIP), aims to enhance real-time fraud detection and mitigation by enabling proactive collaboration between telecom authorities and financial institutions.

About the Financial Fraud Risk Indicator (FRI):

The FRI is a risk-based metric that classifies mobile numbers based on their association with financial fraud. This classification system uses categories such as Medium, High, and Very High risk.

The categorization is based on,

·        Inputs from the National Cybercrime Reporting Portal (NCRP)

·        DoT’s Chakshu platform

·        Banks and financial institutions

·        Helps in prioritizing response and blocking fraudulent transactions.

The FRI's core function is to inform digital payment platforms, banks, and Non-Banking Financial Companies (NBFCs) about the potential risk posed by a mobile number before transactions are processed.

Cybersecurity in Payments: A Comprehensive Guide

Operational Mechanism:

  • Immediate Classification: The number is analyzed for fraud patterns and assigned a risk score (Medium, High, or Very High).
  • Stakeholder Notification: This classification is shared in real-time with financial institutions, UPI service providers, and telecom operators via DIP.
  • Validation and Response: Stakeholders use this intelligence to conduct additional validation checks, delay transactions, or block them entirely in high-risk cases.

The Mobile Number Revocation List (MNRL), which includes numbers disconnected due to involvement in cybercrime or verification failures, is also regularly shared with stakeholders.

Industry Implementation and Collaboration:

  • PhonePe: Integrated FRI within its PhonePe Protect feature to block or delay transactions involving “Very High” risk numbers and warn users in case of “Medium” risk.
  • Other UPI Platforms (e.g., Paytm and Google Pay): Begun incorporating DIP alerts, triggering transaction delays, user alerts, and confirmation prompts for flagged numbers.
  • Banks and NBFCs: Are now able to take swift action to mitigate fraud by leveraging FRI intelligence.

These collective efforts account for over 90% of India’s UPI transactions, indicating broad sectoral adoption and significant systemic coverage.

Significance and Future Outlook:

The implementation of FRI represents a proactive shift in India’s cyber fraud prevention strategy:

  • It introduces a predictive, risk-based model that can act before a transaction is completed.
  • It enhances inter-agency collaboration, linking telecom surveillance with financial enforcement.
  • It reduces response time and promotes real-time intervention.

As adoption deepens, the DoT envisions the standardization of FRI integration across all digital financial platforms, strengthening the resilience of India's fintech ecosystem.

Conclusion:

The Financial Fraud Risk Indicator is a landmark initiative in safeguarding India’s digital economy. By integrating cyber intelligence with financial transaction frameworks, it marks a shift from reactive to proactive fraud prevention. As the digital payments landscape evolves, tools like the FRI will be crucial in maintaining public trust and ensuring transactional security at scale.