There is no exception for recurring payments. Also unfortunately this applies to all online merchants and Payment aggregators regardless of size and certificati

There is no exception for recurring payments. Also unfortunately this applies to all online merchants and Payment aggregators regardless of size and certifications. So as it stands a separate auth is needed for each transaction which is completely regressive and precludes a lot of convenience use cases. My guess is that they are doing this to make Upi more convenient in comparison. But I won't be surprised if its just another short sighted we know it all mentality decision from the regulator who has a history of u-turns. Edit: Looks like they do allow card tokenization (not part of original proposal) which should address a lot of use cases Here is the commentary about the original proposal: https://www.businessinsider.in/finance/banks/news/rbi-wants-you-to-memorise-all-your-debit-and-credit-card-numbers/articleshow/81186570.cms https://www.businessinsider.in/finance/banks/news/rbi-wants-... Here is the one after push back from industry (Which allows tokenization): https://timesofindia.indiatimes.com/business/india-business/e-tailers-cant-store-your-card-data-says-rbi/articleshow/85581684.cms https://timesofindia.indiatimes.com/business/india-business/...