Flipkart, Axis Bank and PayU have introduced biometric authentication for online card payments in India, allowing customers to approve transactions using fingerprint or facial recognition instead of traditional OTPs. The initiative aims to reduce checkout friction while strengthening security at a time when digital payment fraud and OTP-related vulnerabilities are increasing across the country’s rapidly expanding e-commerce ecosystem.
E-commerce giant Flipkart has partnered with Axis Bank and PayU to launch biometric authentication for card payments, a move aimed at eliminating the friction and security vulnerabilities associated with traditional one-time passwords (OTPs). The new feature allows eligible Axis Bank cardholders on Android and iOS devices to approve online transactions using fingerprint or Face ID. Shifting to device-bound authentication reduces transaction failures caused by SMS delays while providing a more robust defence against increasingly sophisticated digital fraud.
The integration utilises a sophisticated infrastructure where PayU manages the merchant-side transaction flows, while Wibmo, a PayU-owned company, powers the issuer-side biometric verification for Axis Bank. This one-touch approval process is designed to improve conversion rates at checkout, as customers no longer need to wait for a text message or manually enter a six-digit code. The launch addresses a significant pain point in the Indian digital economy, where SMS-based OTPs have remained a primary security layer but are increasingly targeted by phishing and SIM-swap attacks.
Gaurav Arora, Vice President of Payments at Flipkart, stated that the integration reflects the company’s commitment to building safety into consumer payments at a time when digital fraud risks are evolving. Industry data recently released by the Reserve Bank of India (RBI) showed that digital payment fraud losses in the country crossed ₹1,400 crore in the 2024 fiscal year. Biometric authentication is viewed as a critical countermeasure, as it ties transaction approval to the physical device and the user’s unique biological markers, making unauthorised access significantly more difficult for remote attackers.
Arnika Dixit, President and Head of Cards and Payments at Axis Bank, emphasised that modern customers expect digital payments to be both safe and effortless. The bank is positioning the biometric feature as a core component of its trust-building strategy, ensuring that high-value transactions can be completed with minimal cognitive load. For the wider Indian payments sector, this deployment serves as a pilot for a potential industry-wide shift toward “passkey” style authentication, moving away from legacy protocols that rely on the telecommunications infrastructure for security.
As digital commerce continues to scale toward a trillion-dollar market in India, the convergence of e-commerce platforms, payment aggregators, and major banks is essential for maintaining a stable financial ecosystem. The success of this biometric rollout will likely influence future RBI guidelines regarding multi-factor authentication (MFA) standards. Throughout 2026, the industry will be monitoring whether this move leads to a measurable decrease in cart abandonment and a reduction in successful phishing attempts, potentially setting a new gold standard for secure digital spending in one of the world’s most dynamic fintech markets.
What this means for the industry
- India may begin moving beyond OTP-based authentication. While OTPs have been central to India’s digital payments security framework, biometrics and device-based authentication could gradually replace SMS-based verification for many online transactions.
- Checkout experiences could become significantly faster. Eliminating OTP entry reduces delays caused by network issues or SMS failures, potentially improving payment success rates and lowering cart abandonment for merchants.
- Fraud prevention becomes more device-centric. Biometric authentication ties the transaction approval to the user’s physical device and identity, making phishing attacks, SIM swaps and OTP interception far more difficult.
- Collaboration across the payments ecosystem is becoming essential. The partnership between an e-commerce platform, issuing bank and payment gateway highlights how large-scale security upgrades now require coordination across multiple players in the digital commerce stack.
- Regulators may take interest in biometric MFA models. If the rollout demonstrates lower fraud rates and higher transaction success, it could influence how the Reserve Bank of India approaches future authentication standards for digital payments.
