New credit, debit card rules from Jan 1 2022: Learn more about card tokenisation

New Delhi, Dec 22: There are new rules coming for credit and debit cards starting January 1 2022. One of the rules says that merchants cannot store card number, CVV and expiry dates while processing online transactions.

In order to enhance security of online transactions merchants such as Amazon, Flipkart an Tomato have been asked to delete card information stores earlier.

Further RBI has allowed Visa, RuPay and Mastercard to issue tokens on request on behalf of the card issuing bank and companies. This system is called tokenisation.

Card tokenisation: Card tokenisation replaces card details by a unique code or token allowing purchases to take place without important and sensitive details are not exposed.

This is a not a new concept and the concept is being used by the United Payment Interface (UPI). It is considered to be one of the safest online payment systems. This would hugely benefit customers who shop online. The RBI told the merchants to create a token reference number against each token.

If a fraud is detected the same token cannot be used again and users will have to request for a new token. Tokenisation would work only for domestic transactions. In this case customers will not have to remember the token number which will be a 16 digit number as is the case for credit and debit cards.

In fact the user will not know the token details.

The tokens will be issued by the card networks and they will inform the issuing banks about the same. Moreover the token will be merchant specific. If a consumer has one token and he or she shops from three different merchants, then three different tokens will be issued.

In case a customer does not have a token then he or she will have to enter the card details every time to shop. A portal will be created for card holders and they will be able to delete tokens.