ANI
01 Oct 2022, 10:48 GMT+10
New Delhi [India], October 1 (ANI): The Reserve Bank of India (RBI) has made it mandatory for all credit and debit card data used in online, point-of-sale, and in-app transactions to be replaced with unique tokens by September 30 this year. This added layer of security by way of tokenisation is expected to enhance users' digital payment experience.
The deadline was extended multiple times over the past two years at the request of stakeholders and most recently by three months starting July so that the additional time period may be utilised by the industry in facilitating all stakeholders to be ready for handling tokenised transactions.
On September 30, RBI said about 35 crore cards have been tokenised and the system is ready for the new norms which will set in from October 1. The number of tokenised cards had gone up from 19.5 crore tokens created in June, according to data shared by RBI earlier.The extension was also given for creating public awareness about the process of creating tokens and using them to undertake transactions.
Currently, many entities, including merchants, involved in an online card transaction chain store card data like card number, expiry date, etc. [Card-on-File (CoF)] citing cardholder convenience and comfort for undertaking transactions in future.
While this practice does render convenience, the availability of card details with multiple entities increases the risk of card data being stolen or misused and there have been instances where such data stored by merchants have been compromised.
"Given the fact that many jurisdictions do not mandate Additional Factor of Authentication (AFA) for authenticating card transactions, stolen data in the hands of fraudsters may result in unauthorised transactions and resultant monetary loss to cardholders. Within India as well, social engineering techniques can be employed to perpetrate frauds using such data," RBI had earlier said.
In reaction, the RBI initially mandated that after December 31, 2021, entities other than card networks and card issuers cannot store card data.
What is tokenisation?As per the RBI, tokenisation refers to the replacement of actual card details with an alternate code called the "token".
Following are some of the frequently asked questions about card tokenisation:What is the benefit of tokenisation? A tokenised card transaction is considered safer as the actual card details are not shared with the merchant during the processing of the transaction.
How can tokenisation be carried out?-The cardholder can get the card tokenised by initiating a request on the app provided by the token requestor. The token requestor will forward the request to the card network which, with the consent of the card issuer, will issue a token corresponding to the combination of the card, the token requestor, and the device.
Who can perform tokenisation?Tokenisation can be performed only by the authorised card network and the list of authorised entities is available on the RBI website.
What are the charges that the customer needs to pay for availing of this service?The customer need not pay any charges for availing of this service.
What are the use cases (instances/scenarios) for which tokenisation has been allowed?The tokenisation has been allowed through mobile phones and/or tablets for all use cases/channels (e.g., contactless card transactions, payments through QR codes, apps etc.)Is tokenisation of a card mandatory for a customer?No, a customer can choose whether or not to let his / her card tokenised. Those who do not wish to create a token can continue to transact as before by entering card details manually at the time of undertaking the transaction. (ANI)Get a daily dose of Raleigh Times news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to Raleigh Times.
More InformationHONG KONG: China has fired back at the European Union in an escalating trade dispute by imposing new restrictions on medical device...
NEW YORK, New York - Monday's trading session saw mixed performances across U.S. and global markets, with several major indices posting...
WASHINGTON, D.C.: The U.S. government has granted GE Aerospace permission to resume jet engine shipments to China's COMAC, a person...
DUBAI, U.A.E.: Saudi Aramco is exploring asset sales as part of a broader push to unlock capital, with gas-fired power plants among...
MILAN, Italy: Italian regulators have flagged four non-EU countries—including Russia—as carrying systemic financial risk for domestic...
NEW YORK CITY, New York: With just weeks to spare before a potential government default, U.S. lawmakers passed a sweeping tax and spending...
WASHINGTON, D.C.: In a significant ruling last week, the U.S. Supreme Court upheld a Texas law requiring age verification for users...
(Photo credit: Stephen Brashear-Imagn Images) Cal Raleigh and Aaron Judge will be in the spotlight this week for their prolific power...
New Delhi [India], July 7 (ANI): Left-arm spinner R Sai Kishore is all set to play county cricket, having signed with Surrey for two...
Surrey [UK], July 7 (ANI): Indian left-arm finger-spinner Sai Kishore has signed for Surrey in Division One of the County Championship....
(Photo credit: Charles LeClaire-Imagn Images) Two-time champion Pete Alonso of the New York Mets said Sunday that he will not be...
Birmingham [UK], July 7 (ANI): After England's heavy 336-run defeat to India, captain Ben Stokes hinted at the possibility of Jofra...