In view of various representations received from industry bodies, the Reserve Bank of India (RBI) has extended the card-on-file (CoF) tokenisation deadline by six months to June 30, 2022. CoF refers to card information stored by payment gateway and merchants to process future transactions. The earlier deadline was December 31, 2021. In addition to tokenisation, it said ‘Industry stakeholders may devise alternate mechanism(s) to handle any use case (including recurring e-mandates, EMI option, etc.) or post-transaction activity (including chargeback handling, dispute resolution, reward/ loyalty programme, etc.) that currently involves/requires storage of CoF data by entities other than card issuers and card networks.’
Under tokenisation services, a unique alternate code is generated to facilitate transactions through cards. The RBI in September prohibited merchants from storing customer card details on their servers with effect from January 1, 2022, and mandated the adoption of CoF tokenisation as an alternative to card storage. Citing several operational challenges, industry associations 'Merchant Payments Alliance of India (MPAI) and Alliance of Digital India Foundation (ADIF)' had requested the RBI to extend the December 31 deadline for implementation of norms related to tokenisation of card transactions.
Citing the convenience and comfort factor for users while undertaking card transactions online, many entities involved in the card payment transaction chain store actual card details. Some merchants force their customers for storing card details. Availability of such details with a large number of merchants substantially increases the risk of card data being stolen. In the recent past, there were incidents where card data stored by some merchants have been compromised/ leaked. Any leakage of CoF data can have serious repercussions because many jurisdictions do not require an AFA for card transactions, the RBI said adding that stolen card data can also be used to perpetrate frauds within India through social engineering techniques.
MoneyWorks4Me is a SEBI-registered Investment Adviser (IA) dedicated to helping investors build long-term wealth through transparent, research-driven, conflict-free guidance. Founded in 2008, we started our journey as a Research Analyst (RA), providing deep fundamental analysis, intrinsic value insights, and long-term investing frameworks for Indian equities. In 2017, we transitioned to a full-fledged SEBI-registered Investment Adviser, strengthening our commitment to acting as a fiduciary—always putting the investor’s interest first.
To become India’s most trusted, research-powered fiduciary advisory platform—where every investor, regardless of experience, can make calm, confident, and well-reasoned investment decisions.
MoneyWorks4Me ensures this through: