Skip to content
Try one-tap loginBook a demo

Rule map 2027: authentication and scam liability in seven markets

One table for compliance and fraud teams: what India, Singapore, Malaysia, the Philippines, Australia, the UAE and Saudi Arabia ask of a bank app at login and at payment, when each rule applies, and who pays when a customer is scammed.

PDF4 sources

Get the report.

The regional team for India, APAC or the Gulf sends it.

We use these details only to send the report and to reply. Privacy notice

In this report

What is inside

  1. The authentication rules, dated

    What each market asks at login and at payment, with its status and its source.

  2. Who pays when a customer is scammed

    India’s 2027 framework, Singapore’s SRF, Australia’s SPF and the Philippines’ AFASA, side by side.

  3. The controls against each rule

    Binding, step-up, cool-off and hold, mapped to the rules they support.

  4. Every source

    With its publisher and period, and secondary sources marked.

Why one table

A bank that operates in more than one market answers to more than one rulebook, each on its own timetable. Compliance teams ask the same three questions of each: what does it require of the app, from when, and who pays when a customer is scammed.

In India, RBI’s Authentication Directions have applied since 1 April 20261, and RBI’s amendment directions on limiting customer liability in digital transactions take effect on 1 January 20272. Singapore’s Shared Responsibility Framework sets out duties for banks and telcos3, and Australia’s Scams Prevention Framework Act 2025 sets duties for banks and others4.

How it is built

Every rule in the report carries its date, its status (in force, applying later or a proposal) and its source. Where the only source is news reporting, the report says so. Nothing in it is legal advice.

Sources

Secondary sources are news or trade reporting of a rule or figure. Check the regulator’s own text before relying on them. Nothing here is legal advice.

  1. RBI (opens in a new tab), Sep 2025Authentication Mechanisms for Digital Payment Transactions Directions, 2025
  2. RBI (opens in a new tab), Jun 2026Press release: amendment directions on the review of the framework of limiting customer liability in digital transactions, effective 1 January 2027
  3. MAS and IMDA (opens in a new tab), Oct 2024Response to consultation on the Shared Responsibility Framework
  4. Federal Register of Legislation (opens in a new tab), Feb 2025Scams Prevention Framework Act 2025, as made

See DeepID on a real phone.

We show your fraud, security and engineering leads how DeepID would run your sign-up, login or payment journey, then plan a pilot on your own traffic.

Book a demoTry one-tap login