RBI guidelines on tokenisation

If you are a frequent online shopper, you may tend to save your card details for quick payments. As per the latest Reserve Bank of India (RBI) guidelines, without tokenisation, merchants can no longer store your Debit Card or Credit Card details on their apps, platforms, or websites. That means you have to re-enter your card details every time you shop online if you have not completed the tokenisation process. Tokenisation is a security measure you can opt for, which replaces your card details with a unique token number. Here, you can get all the information regarding the RBI tokenisation guidelines.

Tokenisation - an overview

When you make an online payment using a Debit Card or Credit Card, the merchant initiates the transaction by transmitting the transaction details along with full card details to your card-issuer (Bank or Credit Card company). After confirming your card details, the card-issuer approves the payment, and deducts the payment from your account. However, in the case of tokenisation, the merchant initiates the transaction without knowing your full card details. Instead, a unique token linked to your card is transmitted to your card-issuer; the card issuer checks if the token number matches your card details and approves the transaction.

RBI guidelines on tokenisation

As per the RBI notification, with effect from September 30 2022, merchants cannot store customers’ card information. As such, only card-issuers can store the card details. The guidelines are as follows:

  • Cardholders must complete an Additional Factor of Authentication (AFA) like OTP even though the transactions are tokenised.

  • Card issuers are to provide the tokenisation facility free of charge.

  • You can tokenise your card via authorised card networks, Bank or Credit Card company only.

  • Your card data remains with your card issuer only. Merchants cannot access your complete card details.

  • Merchants can only view the last four digits of your card along with your name.

  • This facility is optional and merchants can tokenise your card only by receiving explicit consent through AFA.

  • You can tokenise several cards in one mobile application. You are also free to choose the card you wish to use for a particular transaction.

  • Card-issuers, too, can place limits on the daily, weekly, or monthly tokenised transactions.

  • Card-issuers are to provide you with a portal to manage all your tokens at the same place. You can choose to suspend the token at a particular merchant or at all merchants in case you fear that your merchant account has been compromised, your device gets lost/stolen or a fraudulent token transaction is made by making use of this portal.

  • Card-issuers can decline tokenisation requests if they detect suspicious activity.

  • As per the latest RBI tokenisation circular, all existing card data saved with the merchant app must be purged by the merchant by 30th September 2022.

Tokenise your HDFC Bank Credit or Debit Cards

By tokenising your cards, you can protect your card information from falling into the wrong hands. When you make a card transaction, what transmits is a unique token number instead of your card number. Only your bank or card-issuing company can store your data. Here’s how you can tokenise your HDFC Bank Debit or Credit Cards before the deadline.

  • Step 1 – Visit your favourite online application/website to purchase grocery, pay bills or order food and initiate a transaction.

  • Step 2 – In the check-out page, select HDFC Bank Credit/Debit Card and provide CVV

  • Step 3 – Tick mark the check box “Secure your Card” or “Save Card as per RBI guidelines”

  • Step 4 – Enter the OTP received on your registered mobile number

  • Step 5 – Congratulations!!! Your card details are now secured and safe with your Bank

  • Step 6 – For subsequent payments, you can choose to pay using your HDFC Bank Credit/Debit Card by choosing the token bearing the last four digits of your Credit/Debit Card

Tokenise your own HDFC Bank Credit Cards to enjoy faster check-outs and great offers across your favourite shopping apps and websites. Click here to apply now. Pre – approved customers can apply by clicking here.

Read more here about the advantages of tokenisation.

​​​​​​​*Terms and conditions apply. The information provided in this article is generic in nature and for informational purposes only. It is not a substitute for specific advice in your own circumstances. Credit Card approvals at the sole discretion of HDFC Bank Limited. Credit Card approvals is subject to documentation and verification as per Bank's requirement. Interest rates are subject to change. Please check with your RM or closest bank branch for current interest rates.