Mandatory dual authentication from 1 April aims to plug gaps in PIN- and OTP-based systems as digital frauds surge.