Yes, RuPay prepaid cards issued in different form factors viz physical or virtual, shall necessarily have Additional Factor of Authentication (AFA) as required for debit cards, except in case of PPIs issued under PPI-MTS.