Payments Council of India (PCI), the representative body for payment companies in the country, says that the customers will not have to remember the 16-digit card number for online payments effective Jan 2022, in contrast to what has been reported in certain sections of the media. The industry and PCI are working in alignment with Reserve Bank of India (RBI) on possible secure card on file solutions which will ensure a near similar customer experience for online purchases whilst enhancing the security of the storage of card credentials of customers.
On March 31, 2020, RBI released a notification, for payment system providers and participants to put in place workable solutions such as tokenization for enhancing the security of storage of customer's card credentials, within the framework of the relevant guidelines issued by the RBI. PCI has shared with RBI the principles which can be adopted by the industry for developing such secure card on file solution.
"We are working closely with RBI on charting a roadmap of the possible solutions that could be adopted by the industry for securing the storage of raw card data. Solutions being worked upon, would not require the customers to enter their card number manually every time they make an online purchase" says PCI. "The solutions will adhere to the security checks and controls and frameworks prescribed by RBI", it further added.
From tightening the security of card not present transactions by introducing the requirement of AFA in 2009 to tackling the risk associated with data storage/breach effective Jan 2022, RBI has played a key role in enhancing the security of card transactions.
The apex monetary institution has also played a catalytic role in the development and growth of digital payments across the country thereby progressing towards the goal of "less-cash society". It has set out guidelines and circulars for the effective functioning of the payment systems with focus on security controls. RBI has over the time published several guidelines on security of card transactions, as cards is right now one of the most accepted forms of digital payment.
