Advertisement

Updated December 21st, 2023 at 10:03 IST

RBI introduced a Card-on-File (CoF) token facility at the level of banks

Generation of CoF tokens for a card, through the card issuer, can be enabled through mobile banking and internet banking channels.

Business Desk
RBI's measures aim to moderate unsecured loan growth, not halt credit flow
RBI's measures aim to moderate unsecured loan growth, not halt credit flow | Image:RBI
Advertisement

The Reserve Bank of India introduced a Card-on-File (CoF) token facility at the level of banks and other institutions to provide convenience for cardholders to get tokens created and linked to their existing accounts with various e-commerce applications on Wednesday.

At present, a CoF token can only be created through the merchant's application or webpage.

Advertisement

For a CoF, a token is a 16-digit number unique for a combination of card, token requestor and merchant. Through tokenisation, the actual card details are replaced with token credentials that can be used only with the intended merchant.

"It has been decided to enable Card-on-File Tokenisation (CoFT) directly through card-issuing banks/institutions also. This will provide cardholders with an additional choice to tokenise their cards for multiple merchant sites through a single process," the RBI said in a circular.

Advertisement

Generation of CoF tokens for a card, through the card issuer, can be enabled through mobile banking and internet banking channels.

In October, the RBI had said tokenisation has improved transaction security and transaction approval rate.

Advertisement

The RBI introduced CoFT in September 2021 and began implementation from October 1 last year.

The circular further said CoFT generation should be done only on explicit customer consent, and with Additional Factor of Authentication (AFA) validation.

Advertisement

"If the cardholder selects multiple merchants for which to tokenise his/her card, AFA validation may be combined for all these merchants," the RBI said.

The cardholder may tokenise the card at any time of his convenience, either at the time of receiving the new card or later.

Advertisement

Also, the card issuer should provide a complete list of merchants for whom it can provide tokenisation services. 

With PTI Inputs

Advertisement

 

Advertisement

Published December 20th, 2023 at 20:41 IST

Your Voice. Now Direct.

Send us your views, we’ll publish them. This section is moderated.

Advertisement
Advertisement
Whatsapp logo