Visa Payment Passkey Goes Live at Five India State Banks: OTP Attack Surface Eliminated
Visa and In-Solutions Global (ISG) launched Visa Payment Passkey (VPP) at five Indian state banks, enabling phishing-proof authentication. The system, built on FIDO2, eliminates OTP-based fraud risks, which cost India $2.4B in 2024. The RBI's 2025 directive mandates stronger authentication for digital payments.
How this was made

The 30-second read
Why it matters
Visa's passkey rollout directly addresses RBI's mandate, positioning Visa as a key security provider in a high‑risk market.
Market read
The launch could drive increased transaction volume for Visa and set a new security standard for Indian public banks.
What to watch
Potential regulatory scrutiny if implementation issues arise; impact on Visa's margins depends on fee structures.
Background
India faces a surge in cybercrime and SIM‑swap fraud, prompting RBI to issue new authentication directives effective April 2026.
Ticker impact
Visa launched its Payment Passkey service at five Indian public‑sector banks, the first such rollout globally.
Short‑term upside as investors price in new revenue opportunity in India.
The launch addresses a massive fraud problem and aligns with RBI's new authentication rules, creating a growth catalyst.
Market effects
Accelerates adoption of passkey authentication across Indian banking, pressuring competitors to upgrade security.
Improves fraud outlook for Indian payments sector, may boost investor confidence in fintech firms.
Sets a precedent for public‑sector banks worldwide to adopt FIDO2‑based authentication.
Counterpoint
Adoption may be slower than expected due to legacy system constraints and consumer education challenges.
Key entities
- CompanyVisa Inc.
Global payments network introducing Passkey authentication.
- CompanyIn‑Solutions Global (ISG)
Mumbai‑based payment processor enabling the rollout.
- RegulatorReserve Bank of India
Issued authentication directives that enable the new system.




