ICICI Bank Moves to .bank.in: What Customers Should Change—and What Stays the Same
ICICI Bank has moved its website and retail net banking to the RBI-backed .bank.in domain. Here is what customers should update, what stays unchanged, and how to avoid phishing.
Published
Answer first: ICICI Bank has moved its main website and retail internet-banking portal to the restricted .bank.in domain. Customers do not need a new customer ID or password because of the move. The practical action is simpler: update saved bookmarks, type the official address carefully, and treat messages asking you to “re-register”, reset credentials or disclose an OTP because of the domain change as suspicious.
Key facts
- ICICI Bank’s main website has moved from its former .com address to icici.bank.in.
- Its retail internet-banking portal has moved to retailnetbanking.icici.bank.in.
- Existing customer IDs and passwords continue to work; the migration itself does not require re-registration.
- The bank has also introduced an additional CAPTCHA step on the net-banking login page.
- The move sits within the Reserve Bank of India’s framework for an exclusive .bank.in domain for regulated Indian banks, intended to make authentic bank websites easier to identify and reduce phishing and spoofing risk.
What happened?
ICICI Bank informed customers of the new web and internet-banking addresses in September 2026. The change is part of the wider banking-sector migration to the restricted .bank.in namespace. RBI operationalised the domain through the Institute for Development and Research in Banking Technology (IDRBT), the exclusive registrar authorised for this purpose.
The change matters because a familiar-looking bank page is not necessarily a genuine bank page. A restricted banking namespace gives customers an additional authenticity signal when they are about to enter credentials or initiate a financial transaction.
What changes for ICICI Bank customers?
If you normally reach internet banking from a browser bookmark, password-manager shortcut or saved home-screen link, update it to the new official address. Businesses that maintain internal finance-team bookmarks or approved banking links should update those too.
Your account number, customer ID and existing password do not change merely because the website domain changed. You should not have to pay a fee, install a special certificate, share an OTP or complete a fresh KYC exercise just to follow the domain migration.
Fact vs interpretation
Fact: ICICI Bank has migrated its website and retail net-banking addresses to .bank.in, and existing login credentials remain valid. RBI created the restricted domain framework to strengthen trust in digital banking and reduce malicious impersonation.
Interpretation: The new domain is a useful anti-phishing signal, but it is not a substitute for normal security discipline. Customers should still verify the complete address, avoid login links received unexpectedly by SMS, email or messaging apps, and never share passwords, PINs or OTPs.
Who is affected?
The most direct impact is on ICICI Bank customers who use browser-based internet banking, especially anyone relying on an old bookmark. Corporate users and household members who help relatives with online banking should also update trusted links.
Customers who primarily use the bank’s mobile app are not required to create a new banking identity because of the web-domain change. A separately announced period of iMobile maintenance on 19 September is an operational event, not evidence that customer credentials have changed.
Why .bank.in matters beyond ICICI Bank
RBI’s .bank.in initiative is sector-wide. The domain is reserved for eligible Indian banks and registration is handled through IDRBT. Several large banks have already migrated. For consumers, this means the ending of a bank’s official address in .bank.in can become a useful verification check before entering sensitive information.
That does not mean every old bank domain instantly becomes fraudulent. Banks may maintain redirects or legacy addresses during migration. The safer habit is to use the bank’s currently published official address rather than assume an old saved link will remain the best route indefinitely.
A 60-second safety checklist
- Replace old ICICI Bank browser bookmarks with the bank’s current official .bank.in address.
- Before entering credentials, read the full domain—not just the logo or page design.
- Do not reset your password solely because an unsolicited message says the domain has changed.
- Never share an OTP, UPI PIN, card PIN or net-banking password with someone claiming to “complete migration”.
- If a link arrives by SMS, email or WhatsApp, independently open the bank’s official site rather than trusting the embedded link.
- For a time-sensitive EMI or bill payment during maintenance, confirm available official channels early rather than waiting until the due-time window.
What borrowers should know
The website migration does not change the terms of an existing home loan, personal loan or other credit facility. Your contracted EMI, due date and loan account do not change merely because the bank’s web address changes. If you use net banking to make a manual repayment, however, update the trusted login route before the due date.
What to watch next
Expect more customer education around restricted banking domains as banks complete or refine their migrations. The useful signal to watch is not a viral message claiming a bank has changed its website, but the address published by the bank itself and the RBI/IDRBT framework behind the restricted domain.
FAQ
Do I need a new ICICI Bank password?
No. Reporting based on ICICI Bank’s customer communication says existing customer IDs and passwords remain valid after the domain migration.
Does the domain change affect my home-loan EMI?
No. A website-domain migration does not by itself alter your loan contract, EMI or repayment schedule.
Is every .bank.in website safe?
The namespace is restricted to eligible banks and is designed to make authentic banking domains easier to identify. Customers should still check the complete address and follow normal cyber-safety practices.
Should I click a message asking me to re-register because of .bank.in?
No. The domain change does not require ICICI Bank customers to create a new login. Open the bank’s official site independently if you need to verify anything.
Related RiteAssetz reading
For borrowers, the practical rule is to separate a bank’s digital-access change from the terms of the underlying loan. RiteAssetz News & Insights also tracks RBI customer-protection changes, borrower rights and payment-system developments that can affect household finances.
Need to compare a home-loan decision? Use RiteAssetz tools and guidance to understand affordability, documentation and lender options. Verify final pricing and eligibility directly with the lender before acting.
Sources reviewed: RBI/IDRBT .bank.in framework; ICICI Bank customer communication as reported by Mint and The Economic Times; Bank of Baroda’s official explainer. Published 19 September 2026.
Sources
- https://www.livemint.com/money/personal-finance/icici-bank-changes-net-banking-url-new-bank-in-address-captcha-feature-what-customers-need-to-know-11789816727068.html
- https://economictimes.indiatimes.com/wealth/save/icici-bank-changes-website-and-net-banking-domain-addresses-do-you-also-need-to-reset-your-user-id-and-password/articleshow/134335100.cms
- https://bankofbaroda.bank.in/banking-mantra/recent-trends-in-banking/articles/what-is-bank-in-domain