Online banking has made our lives simpler – but it has also opened doors to cybercriminals who thrive on imitation. Over the past few years, phishing scams have become alarmingly sophisticated. A single extra letter or dot in a website address is often enough to fool even the most cautious user.
To fix this problem once and for all, the Reserve Bank of India (RBI) has taken a strong step toward protecting Indian bank customers. It has ordered all public, private, and co-operative banks to move their official websites to a verified domain — .bank.in — by October 31, 2025.
What Exactly Is .bank.in?
.bank.in is not just another internet address. It’s a secure, RBI-regulated domain space created exclusively for banks operating under the Reserve Bank of India’s supervision.
Every website ending with .bank.in will be verified and approved by the Institute for Development and Research in Banking Technology (IDRBT) – the same body that helped set up India’s digital payment backbone.
Unlike .com or .in, which anyone can register, .bank.in will be restricted to legitimate, licensed banks only. That means fraudsters, scammers, and fake finance sites can’t simply buy a similar-looking domain anymore.
Why the Change Was Needed
The RBI’s move comes after a sharp rise in phishing cases where people were tricked into visiting fake banking websites that mimicked real ones.
Attackers often use domains like:
sbii-login.comorhdfcbankindia.co.in- or even more deceptive links shared through WhatsApp, SMS, or email.
Once users log in, their credentials and one-time passwords (OTPs) are stolen in seconds.
By shifting to .bank.in, RBI wants to create a “trusted digital zone” where every customer can confidently know – if the website ends with .bank.in, it’s real.
Key Deadlines to Remember
| Event | Date |
|---|---|
Banks must complete migration to .bank.in | October 31, 2025 |
Customers should only use .bank.in sites | From November 1, 2025 |
From November onward, RBI will encourage everyone to check the domain before entering login details. If your bank hasn’t moved yet, expect an official announcement or redirect to the new address soon.
Who’s Managing the Domain
The .bank.in domain will be governed by the IDRBT (Institute for Development and Research in Banking Technology), under the National Internet Exchange of India (NIXI) and the Ministry of Electronics and IT (MeitY).
This structure ensures that domain registration, verification, and maintenance remain entirely within the Indian regulatory system – no private registrars, no intermediaries.
How It Helps Customers
- Instant authenticity check: If the site ends with
.bank.in, it’s officially verified. - Reduced phishing risk: Fraudsters can’t buy similar names or extensions.
- Better DNS security: RBI-approved infrastructure prevents spoofing and hijacking.
- Simpler awareness: Customers no longer need to memorize dozens of unique URLs.
- Uniform digital identity: Every legitimate bank, from SBI to small co-operative banks, will share the same trusted domain suffix.
What You Should Do as a User
- Always check the website address before logging in – it should end with
.bank.in. - Avoid clicking links from unsolicited emails, messages, or advertisements.
- Bookmark your bank’s new official site once it migrates.
- If you come across a suspicious banking site or email, report it to your bank immediately.
Think of it as the digital version of checking the hologram on your credit card – a simple visual cue that separates real from fake.
What It Means for the Future of Digital Banking
This shift is not just a technical change. It’s a signal of how India wants to redefine trust in online finance. With UPI, FASTag, and the Digital Rupee already reshaping the payments ecosystem, .bank.in adds another crucial layer – verified digital identity for every bank.
By 2026, if things go as planned, India could become one of the first countries where every regulated bank operates under a single, secure top-level domain.
Final Word
Cybersecurity is not just about technology – it’s about awareness. RBI’s move toward .bank.in is a reminder that even small habits, like glancing at the URL bar, can save you from a major financial loss.
So the next time you log in to your bank account, pause for one second and look at the address.
If it ends with .bank.in, you’re safe. If it doesn’t – stop right there.
