In a decisive push against online banking fraud, the Reserve Bank of India (RBI) has made it mandatory for all banks to migrate their websites to a verified domain — .bank.in — by October 31, 2025. This policy follows alarming reports of phishing, spoofing, and fake banking websites duping customers nationwide.
The RBI’s goal is simple yet powerful: make identifying genuine bank websites effortless for all users, including first-time digital customers.
The Rising Threat of Online Frauds
According to the RBI’s FY25 Annual Report, the total value of bank frauds soared to ₹36,014 crore, nearly triple the previous year’s figure. Digital payment and internet frauds formed over 56% of all reported cases, while the Ministry of Home Affairs estimated that Indians lost ₹7,000 crore to online scams in just the first five months of 2025.
Cybercriminals exploit users’ inability to distinguish real bank sites (like sbi.co.in) from fake ones (like sbi-online.co). The result: financial loss and loss of trust.
Why .bank.in Is a Game-Changer
The .bank.in domain acts as a digital trust signal. Unlike open domains such as .com or .in, it’s restricted and verified, available only to institutions holding an RBI-issued banking license.
The IDRBT (Institute for Development and Research in Banking Technology) is the sole registrar, ensuring only legitimate banks get access. This allows users to instantly recognize authentic banking portals — a major step toward eliminating phishing risks.
Simply put: if a site doesn’t end in .bank.in, it’s not your bank.
A Step Toward Global-Grade Security
This move aligns India’s banking security with global standards, similar to the .bank domain used internationally. As India’s digital banking population continues to grow, the .bank.in mandate ensures that financial inclusion is matched by digital safety.
By the end of October 2025, millions of users will only need to remember one rule — trust websites that end with .bank.in.
