International Financial Services Centres Authority (IFSCA) has granted Indian Bank Units (IBUs) a one-time extension to comply with internet banking requirements for liability products, pushing the deadline to September 30, 2026. The extension, formalized in Circular IFSCA/LEGAL/916 issued July 31, 2026, is explicitly linked to the closure of the Reserve Bank of India’s “Swap Facility for FCNR (B) Deposits” scheme.
What Changed: The 30-Second Answer
IFSCA Circular IFSCA/LEGAL/916, issued July 31, 2026, amends two prior circulars (December 29, 2025 and June 30, 2026) governing internet banking services to IBU clients. The key change: IBUs must now comply with internet banking requirements for liability products by September 30, 2026, not earlier dates. This provides a crucial, albeit temporary, reprieve for these banking entities. IBUs that fail to comply by that date must cease onboarding new customers for non-compliant liability products effective October 1, 2026. The extension applies whether an IBU commenced operations before or after the original circular issuance. This is a one-time only relief tied specifically to RBI’s FCNR swap facility timeline, signaling a firm stance from the regulator that this is the final opportunity for compliance.
From a practical standpoint, this means that while the underlying regulatory requirements for internet banking functionality for liability products remain untouched, the timeline for their full implementation has been adjusted. Banking institutions operating within IFSCA-regulated International Financial Services Centres (IFSCs) now have a consolidated deadline to ensure their digital platforms meet the specified standards for products such as savings accounts, current accounts, and various types of deposits offered to customers via online channels.
Who This Applies To
This circular binds all Indian Bank Units (IBUs) operating in IFSCA-regulated financial centres. An IBU is essentially a branch of an Indian bank operating within an IFSC, such as GIFT City. These units are established to conduct financial services for non-residents and residents, primarily in foreign currencies, thereby facilitating India’s role in global financial markets. Their regulatory oversight falls under IFSCA, which is the unified authority for the development and regulation of financial products, financial services, and financial institutions in the IFSCs in India.
Two cohorts face different compliance mechanics under the amended rules:
IBUs that commenced operations after the original circular issue date may now offer liability products without complying with the internet banking requirements “upto September 30, 2026.” This provides a transitional period, allowing newer entrants to establish their operations and customer base before fully integrating the specified internet banking functionalities. After that date, non-compliance triggers a mandatory cessation of new customer onboarding for the affected liability product(s) effective October 1, 2026. This means that while they initially benefit from a relaxed entry, the ultimate compliance burden and deadline are identical to older IBUs.
IBUs that commenced operations before the original circular issue date must ensure compliance with the specified requirements by September 30, 2026. These are the established players who have been operating under the initial regulatory framework. For them, this extension offers additional time to complete any outstanding implementations or rectify existing non-compliances. Failure to comply results in the same enforcement consequence: ceasing new customer onboarding for non-compliant liability products from October 1, 2026 onwards. This ensures a level playing field for compliance enforcement across all IBUs, regardless of their operational tenure.
The circular does not specify which liability products are in scope, nor does it define what “requirements” entail — practitioners must refer to the December 29, 2025 and June 30, 2026 circulars themselves. These foundational circulars would detail the specific functionalities, security protocols, user experience standards, and operational safeguards expected for internet banking services related to deposits and other customer liabilities. If your institution operates a branch in GIFT City or other IFSCA financial centres and offers internet banking for rupee-denominated or foreign currency deposit accounts, you should verify which products fall under this regime. This often includes savings accounts, current accounts, fixed deposits, and recurring deposits accessible via online platforms.
Key Deadlines and What Must Happen
Understanding these dates is critical for any IBU’s compliance roadmap and operational planning:
September 30, 2026: Hard compliance deadline. All IBUs must satisfy the internet banking requirements specified in the prior circulars for liability products. This means that by the close of business on this date, all systems, processes, and controls related to internet banking for liability products must be fully operational and compliant with the detailed stipulations of the December 2025 and June 2026 circulars. This involves not just technical implementation but also testing, internal audits, and staff training to ensure smooth and compliant operation.
October 1, 2026: Enforcement begins. Any IBU non-compliant on September 30, 2026 must immediately cease onboarding new customers for the liability product(s) it failed to bring into compliance. This is a significant operational impact. “Ceasing new customer onboarding” means that from this date forward, the IBU cannot open new accounts or offer new liability products to any individual or entity through its internet banking channels if those specific products are not compliant. Existing customers are not forced to exit, but new customer acquisition halts. This directly affects an IBU’s ability to grow its deposit base and expand its market share for the non-compliant products.
The circular does not specify what “non-compliance” looks like operationally (e.g., missing authentication protocols, reporting gaps, system integrations) — that language lives in the December 2025 and June 2026 circulars. Your compliance officer should extract those requirements and map them to your current architecture now, especially if you’re near the deadline. This mapping exercise should identify any discrepancies between current internet banking functionalities and the mandated requirements, allowing the IBU to develop a clear remediation plan. For instance, if the original circulars mandate multi-factor authentication for all online transactions, and an IBU’s system only offers single-factor authentication, this would constitute a clear gap requiring immediate attention.
What This Extension Means Strategically
The explicit tie to RBI’s FCNR swap facility closure is noteworthy. The FCNR (Foreign Currency Non-Resident) (Bank) Deposit scheme is a mechanism through which Indian banks can raise foreign currency deposits from non-resident Indians (NRIs) and Persons of Indian Origin (PIOs). The swap facility provided by RBI effectively offered a hedge against exchange rate fluctuations for banks attracting these deposits, making them a popular source of foreign currency funding. Its closure implies a shift in the regulatory and liquidity landscape for IBUs, potentially influencing their funding strategies and operational priorities. IFSCA framed this as a “one-time extension” requested by IBUs, suggesting the regulator received pressure from the sector to align banking compliance with broader forex liquidity management cycles. For CFOs managing FCNR funding, this creates a compressed window: you have until September 30, 2026 to either complete internet banking compliance or prepare for a customer onboarding freeze on liability products. This strategic alignment underscores the interconnectedness of various financial regulations and market conditions.
The enforcement mechanism — customer onboarding suspension rather than penalties or licence revocation — signals IFSCA’s intent to avoid operational disruption while maintaining compliance teeth. A bank that can’t add new deposit customers faces revenue and market share pressure, making this a real enforcement tool without appearing punitive. While less severe than a monetary penalty, the inability to acquire new customers for key products can be devastating for a growth-oriented financial institution, potentially impacting its long-term viability and competitive position within the IFSC. This approach allows the regulator to exert significant pressure for compliance without immediately disrupting the broader financial ecosystem or penalizing existing customers.
The circular explicitly states that “all other provisions” of the prior circulars “shall remain unchanged,” meaning this amendment touches only the compliance timeline, not the substantive requirements themselves. Don’t assume the rest of the regime has shifted. This is a crucial point for compliance teams: the focus should be squarely on achieving the functionalities and standards previously defined, rather than re-evaluating the scope or nature of the requirements themselves. Any efforts to reinterpret or dilute the original requirements would be misplaced and could lead to non-compliance despite the extended deadline.
The Algoy Perspective
This is a tightly scoped, operationally surgical amendment. IFSCA didn’t relax requirements; it bought time tied to an external constraint (RBI’s FCNR scheme). The framing as “one-time” matters: it signals no further extensions are coming, and IBUs are being nudged to complete implementations now or face execution risk in Q3–Q4 2026. This means IBUs should treat September 30, 2026, as an absolute final deadline, with no expectation of further leniency. Strategic planning should reflect this urgency, allocating necessary resources and prioritizing projects to meet the deadline.
For mid-sized IBUs or newer players in GIFT City, three months is achievable if systems are modular and your vendor ecosystem is responsive. This implies that institutions with modern, agile IT infrastructure and strong relationships with technology providers are better positioned to adapt quickly. If you’re still assessing requirements or your technology stack has legacy internet banking components, September 30 becomes tight. Legacy systems often require more extensive and time-consuming upgrades or complete overhauls, posing a significant challenge within a three-month window. The customer onboarding freeze is the bite: in a growth-focused IBU, that’s revenue-material. The potential loss of new business can severely impact financial projections and investor confidence, making compliance a top-tier strategic imperative.
Fintech founders operating non-banking lending or payment businesses through IFSCA-regulated entities should check whether they’ve inherited any liability-product internet banking obligations from their parent or banking partner. The circular doesn’t carve out fintech-specific exemptions, so if your platform routes deposits, you fall under this regime. This highlights the importance of understanding the regulatory perimeter for all entities involved in the financial value chain within an IFSC, even those not directly classified as IBUs but providing services that touch upon regulated banking activities. Due diligence on such partnerships is critical.
We recommend running an audit now against the December 2025 and June 2026 circulars to identify gaps. This audit should be comprehensive, covering technical infrastructure, security protocols, data privacy measures, user interface/experience, and back-office processes supporting internet banking. If you’re compliant, document it thoroughly for regulatory scrutiny. If you’re not, prioritize your remediation backlog and flag vendor or platform dependencies that might slip the September deadline. Establishing clear timelines for vendor deliverables and having contingency plans in place will be vital to mitigate risks.
Frequently Asked Questions
Can we ask IFSCA for another extension after September 30, 2026?
The circular states this is “one-time” relief. IFSCA’s language provides no mechanism for subsequent extensions, and the explicit tie to RBI’s FCNR facility closure suggests the timeline is final. Plan to hit September 30 or face customer onboarding suspension. Any request for further extension would likely be met with a reiteration of this “one-time” clarification, making it imperative for IBUs to utilize this current window effectively.
What happens to existing deposit customers if we’re non-compliant on October 1?
The circular only mandates cessation of “onboarding new customers.” It does not require you to freeze, migrate, or exit existing customers. Existing deposits can remain open, and the IBU can continue to service them through compliant channels. However, if the internet banking channel for that specific liability product is non-compliant, new accounts for that product cannot be opened. You cannot attract new ones for that liability product. Clarification from IFSCA’s Banking department would be prudent if you need certainty on migration or wind-down mechanics for specific non-compliant products, but generally, the focus is on preventing future non-compliant activities.
Does this amendment change what “internet banking” means under these circulars?
No. The circular amends only the compliance timeline (paragraph 4 of the December 2025 circular and paragraph 2 of the June 2026 circular). All other provisions remain unchanged. You must still understand and implement whatever the original circulars define as required internet banking functionality — authentication, access controls, transaction monitoring, and any other features IFSCA specified. This could include aspects like secure login procedures, encryption standards, real-time transaction alerts, dispute resolution mechanisms, and adherence to specific data security frameworks. The scope of “internet banking” requirements is comprehensive and defined in the preceding circulars.
We commenced operations on July 1, 2026. Do we get the full grace period until September 30?
Yes. The amended paragraph 4 states: “An IBU commencing operations after the date of issue of this circular may offer liability products to its customers without complying with the requirements of the circular upto September 30, 2026.” The circular is dated July 31, 2026, so any IBU licensed after that date falls under this track. You have until September 30, 2026 to achieve compliance. This provides a clear, consistent grace period for all new entrants, ensuring they are not immediately burdened by a compliance deadline that predates their operational start.
What are “liability products” in the context of this circular?
While the circular itself doesn’t offer a specific definition, in banking terms, “liability products” generally refer to the ways a bank raises funds from its customers, creating a liability for the bank. These primarily include various types of deposit accounts. Common examples would be savings accounts, current accounts, fixed deposits (FDs), recurring deposits (RDs), and other types of term deposits offered to individuals and businesses. If an IBU offers these products through an internet banking channel, those services must comply with the requirements by the deadline.
What are the potential consequences if we fail to cease new customer onboarding for non-compliant products after October 1, 2026?
The circular explicitly states that an IBU “must cease onboarding new customers” for non-compliant liability products from October 1, 2026. Failure to adhere to this mandate would constitute a direct violation of IFSCA’s instructions. While the circular itself doesn’t detail further penalties for such a breach, regulatory bodies typically have a range of enforcement actions at their disposal for non-compliance, which could include further directives, monetary penalties, or even more severe restrictions on operations, depending on the scale and persistence of the violation. It is crucial for IBUs to strictly enforce the onboarding freeze to avoid additional regulatory scrutiny and potential sanctions.
Sources and Further Reading
- IFSCA Circular IFSCA/LEGAL/916 (July 31, 2026): https://www.ifsca.gov.in/CommonDirect/DownloadFile?id=29709e474fe6b066fc0cb19f7da6f6f9&fileName=circular__internet_banking_July_31_20260731_0201.pdf (Official text, 2 pages)
- IFSCA Official Website: https://ifsca.gov.in — Navigate to Banking Regulation and Circulars for the December 2025 and June 2026 predecessor circulars and other IBU guidance.
- RegChat – Algoy Regulatory Tracking: Search and track this circular on RegChat, Algoy’s regulatory chatbot. Set alerts for follow-up IFSCA announcements on internet banking compliance or FCNR scheme closures.
Track every new RBI, SEBI and IFSCA circular and ask questions in plain English on RegChat — Algoy’s free regulatory chatbot.
[…] note that the IFSCA has previously extended internet banking compliance deadlines for IBUs. The IFSCA extended the internet banking compliance deadline for IBUs to September 30, 2026, linking it to the RBI’s FCNR swap scheme. Such extensions highlight the ongoing evolution of […]