Gau₹av
TF Legend
I made a list in case anyone finds it useful of banks that require OTP vis SMS or app and the ones that don't
Many banks don't require OTP for netbanking and it's good. It should always be optional, not forced. Those who want extra security can always enable it. e.g. Union Bank has it but it can be enabled, it's not forced.
Bank which don't force or require OTP yet (at least not every time): HDFC, ICICI, IndusInd, Federal, DBS, BOB, Union, Canara, UCO, IOB, Indian, IDFC, RBL, Bank of India, PNB, Karnataka Bank
Banks which mandatorily require OTP: SBI, Axis (mandatory Mobile OTP worst nonsense started in 2025), Yes Bank, Kotak (email OTP option besides SMS), Central Bank, Bank of Maharashtra (email OTP option besides SMS), AU Bank (email OTP option besides SMS),
Some banks which don't require OTP do send an SMS to registered phone as soon as we're logged in e.g. BOB, IOB, UCO Bank, Canara Bank, PNB so that is also good security without blocking the user from logging in without their phone
Some banks which don't require OTP also send email to registered email: IOB, BOB, Bank of Maharashtra
SBI has some shitty TOTP options like Secure OTP but they have issues, BOB also has TOTP (can be enabled from netbanking)
Many banks don't require OTP for netbanking and it's good. It should always be optional, not forced. Those who want extra security can always enable it. e.g. Union Bank has it but it can be enabled, it's not forced.
Bank which don't force or require OTP yet (at least not every time): HDFC, ICICI, IndusInd, Federal, DBS, BOB, Union, Canara, UCO, IOB, Indian, IDFC, RBL, Bank of India, PNB, Karnataka Bank
Banks which mandatorily require OTP: SBI, Axis (mandatory Mobile OTP worst nonsense started in 2025), Yes Bank, Kotak (email OTP option besides SMS), Central Bank, Bank of Maharashtra (email OTP option besides SMS), AU Bank (email OTP option besides SMS),
Some banks which don't require OTP do send an SMS to registered phone as soon as we're logged in e.g. BOB, IOB, UCO Bank, Canara Bank, PNB so that is also good security without blocking the user from logging in without their phone
Some banks which don't require OTP also send email to registered email: IOB, BOB, Bank of Maharashtra
SBI has some shitty TOTP options like Secure OTP but they have issues, BOB also has TOTP (can be enabled from netbanking)
