-
Hey there! Welcome to TFC! View fewer ads on the website just by signing up on TF Community.
6ix9ine
TF Legend
It has always been like this, and yes, it is indeed a security concern.
Gau₹av
TF Legend
Many banks don't require OTP for netbanking and it's good. It should always be optional, not forced. Those who want extra security can always enable it. Union Bank has it but it can be enabled, it's not forced.
Bank which don't force or require OTP: HDFC, ICICI, IndusInd, Federal, DBS, BOB, Union, Canara, UCO, IOB, Indian, IDFC, RBL, Bank of India, PNB, Karnataka Bank
Banks which mandatorily require OTP: SBI, Axis (mandatory Mobile OTP worst nonsense started in 2025), Yes Bank, Kotak (email OTP option), Central Bank, Bank of Maharashtra (email OTP option), AU Bank (email OTP option),
Some banks which don't require OTP do send an SMS to registered phone as soon as we're logged in e.g. BOB, IOB, UCO Bank, Canara Bank, PNB so that is also good security with blocking the user from logging in without their phone
Some banks which don't require OTP also send email to registered email: IOB, BOB, Bank of Maharashtra
SBI has some shitty TOTP options like Secure OTP but they have issues, BOB also has TOTP (can be enabled from netbanking)
Bank which don't force or require OTP: HDFC, ICICI, IndusInd, Federal, DBS, BOB, Union, Canara, UCO, IOB, Indian, IDFC, RBL, Bank of India, PNB, Karnataka Bank
Banks which mandatorily require OTP: SBI, Axis (mandatory Mobile OTP worst nonsense started in 2025), Yes Bank, Kotak (email OTP option), Central Bank, Bank of Maharashtra (email OTP option), AU Bank (email OTP option),
Some banks which don't require OTP do send an SMS to registered phone as soon as we're logged in e.g. BOB, IOB, UCO Bank, Canara Bank, PNB so that is also good security with blocking the user from logging in without their phone
Some banks which don't require OTP also send email to registered email: IOB, BOB, Bank of Maharashtra
SBI has some shitty TOTP options like Secure OTP but they have issues, BOB also has TOTP (can be enabled from netbanking)
Last edited:
sunit123
TF Ace
If you keep low balance OTP not required and as soon as you put a big amount in bank account, for every login they send OTP for safety of account
This is my personal experience...When my balance is low then NO OTP and if i increase balance, every login require OTP....I do not know what is the definition of big amount for bank but i think it is 8 digit
kuchrm
TF Select
Thanks for the reply
I don't think the balance part is true. It's just completely random and my guess here is if the IP/Device id matches to previously logged/used one they don't ask and if it's a new device they definitely ask. I am having a preferred savings account with 0 balance most of the days and yet sometimes I do get OTP to login to the bank. So, balance-based OTP isn't a thing of HDFC for sure.
Gau₹av
TF Legend
It's based on IP address and other forms of location tracking or device identification for many banks. HDFC or IDFC ask for OTP if device or location is not the usual one. For me, HDFC has never annoyed me with OTP in over 3 years of having their account
HDFC asks for otp if you're randomly opening on a new computer in a new location
Or sometimes when you're in a genuine hurry to make a transfer 🤭 but yea I did try to open NetBanking on my phone which I was probably doing for the first time hence it asked
But in general day to day it doesn't and it's good
Kotak always asks it's very notorious about it will even ask multiple times in a 15 minute window sometimes
In hdfc you have a secure image option to prevent against fishing btw
Or sometimes when you're in a genuine hurry to make a transfer 🤭 but yea I did try to open NetBanking on my phone which I was probably doing for the first time hence it asked
But in general day to day it doesn't and it's good
Kotak always asks it's very notorious about it will even ask multiple times in a 15 minute window sometimes
In hdfc you have a secure image option to prevent against fishing btw
Similar threads
- Question
- Question
