Skip to main content

What are restrictions on storage of actual card data?

Reserve Bank of India (RBI) restricts storage of actual card data [i.e. Card-on-File (CoF)] by non-bank payment aggregators and merchants.

What is Card-on-File (CoF)?

Card-on-file (CoF) is the storing of customer card and payment information by a merchant, i.e. keeping card information “on file”.

What are the guidelines on storage of actual card data [i.e. Card-on-File (CoF)]?

No entity in the card transaction / payment chain, other than the card issuers and / or card networks, shall store Card-on-File (CoF) data, and any such data stored previously shall be purged.

From when are the restrictions on storage of actual card data [i.e. Card-on-File (CoF)] applicable?

Reserve Bank of India (RBI) had periodically extended the deadline for effecting the restriction on storage of actual card data [i.e. Card-on-File (CoF)] from June 30, 2021 to September 30, 2022, taking into account the representations received from the stakeholders.

All entities, except card issuers and card networks, are required to purge the CoF data before October 01, 2022.

What relaxations are allowed for “guest checkout transactions”?

For ease of transition to an alternate system in respect of transactions where cardholders decide to enter the card details manually at the time of undertaking the transaction (commonly referred to as “guest checkout transactions”), the following are permitted as an interim measure –

  • Other than the card issuer and the card network, the merchant or its Payment Aggregator (PA) involved in settlement of such transactions, can save the CoF data for a maximum period of T+4 days (“T” being the transaction date) or till the settlement date, whichever is earlier. This data shall be used only for settlement of such transactions, and must be purged thereafter.
  • For handling other post-transaction activities, acquiring banks can continue to store CoF data until January 31, 2023.


References

Reserve Bank of India. (2020, March 17). 'Guidelines on Regulation of Payment Aggregators and Payment Gateways (Updated as on November 17, 2020)'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822&Mode=0

Reserve Bank of India. (2021, December 23). 'Restriction on storage of actual card data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12211&Mode=0

Reserve Bank of India. (2022, June 24). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12345&Mode=0

Reserve Bank of India. (2022, July 28). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12363&Mode=0


Follow at - Telegram   Instagram   LinkedIn   Twitter

Labels:

Comments

Post a Comment

Popular Posts

Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR) (Updated as on September 11, 2026)

Reserve Bank of India (RBI) has issued the directions on maintenance of Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR) by banks. To whom are the directions applicable? The directions are applicable to the following Regulated Entities (REs) – Commercial Banks  Small Finance Banks (SFBs) Payments Banks (PBs) Local Area Banks (LABs) Regional Rural Banks (RRBs) Primary (Urban) Co-operative Banks (UCBs) Rural Co-operative Banks – State Co-operative Banks (StCBs) District Central Co-operative Banks (DCCBs) What is CRR? Every bank shall maintain in India by way of cash reserve, a sum equivalent to such percent of its Net Demand and Time Liabilities (NDTL) in India, as the RBI in terms of Section 42(1) of the RBI Act, 1934 (for scheduled banks) and Section 18(1) of the Banking Regulation Act (BR Act), 1949 (for non-scheduled banks) [including provisions of Section 18(1) of the BR Act as applicable to co-operative banks], may specify. What is incremental CRR? In terms of Secti...
Post a Comment
Read more

Framework for Self-Regulatory Organisations in the FinTech Sector (Updated on September 10, 2026)

Reserve Bank of India (RBI) has released the framework for self-regulatory organisations in the FinTech sector. What are FinTechs? For the purpose of membership of an Self-Regulatory Organisations for FinTech Sector (SRO-FT), FinTechs may be defined as entities that provide technological solutions for delivery of financial products and services to businesses and consumers or encompass regulatory and supervisory compliance in partnership with traditional financial institutions or otherwise.  What is the need of Self-Regulatory Organisations for FinTech Sector? FinTechs play a pivotal role in redefining financial services by saving time, enhancing access, and lowering costs. While the FinTechs bring various innovations, the FinTech sector also raises concerns relating to customer protection, data privacy, cyber security, grievance handling, internal governance, financial system integrity, etc. A judicious balance between maximising the creative potential of FinTechs, while minimising...
Post a Comment
Read more

Credit Facilities to Scheduled Castes (SCs) & Scheduled Tribes (STs)

Reserve Bank of India (RBI) has issued guidelines on credit facilities to Scheduled Castes (SCs) & Scheduled Tribes (STs). What are the guidelines on credit facilities to SCs & STs? District Level Consultative Committees formed under the Lead Bank Scheme should continue to be the principal mechanism of co-ordination between banks and development agencies.  National Scheduled Tribes Finance & Development Corporation and National Scheduled Castes Finance & Development Corporation have been set up under the administrative control of Ministry of Tribal Affairs and Ministry of Social Justice & Empowerment, respectively. Banks should advise their branches / controlling offices to render all the necessary institutional support to enable these institutions to achieve the desired objectives. Loans sanctioned to State Sponsored Organisations for Scheduled Castes / Scheduled Tribes for the specific purpose of purchase and supply of inputs and / or the marketing of the out...
Post a Comment
Read more

What is Ways and Means Advances (WMA)? (Updated as on September 25, 2026)

Reserve Bank of India (RBI) has recently announced the Ways and Means Advances (WMA) limit for the Government of India. So, what is WMA? What is Ways and Means Advances (WMA)? Ways and Means Advances (WMA) is a collateral free clean advance availed by the Central and State Governments from RBI, to tide over temporary mismatches in the receipts and payments. Section 17(5) of the Reserve Bank of India Act, 1934 empowers RBI to grant WMA to Central and State Governments, as and when required by them. What is Special WMA / Special Drawing Facility (SDF)? In addition to WMA, State Governments are also eligible for a Special Drawing Facility (SDF), which is granted against collateral of Government Securities held by the State Governments.  SDF availed by State Governments / UTs is linked to the quantum of their investments in marketable securities issued by the Government of India, including Auction Treasury Bills (ATBs).  (Updated as on June 28, 2024) Based on the recommendations m...
Post a Comment
Read more

Credit Derivatives (Updated as on September 22, 2026)

Reserve Bank of India (RBI) has issued directions on credit derivatives. What is Credit Derivative? Credit derivative means a derivative contract whose value is derived from the credit risk of an underlying debt instrument or an index of underlying debt instruments. What is Credit Default Swap (CDS) and Total Return Swap (TRS)? Credit Default Swap (CDS) means a credit derivative contract in which one counterparty (protection seller) commits to pay to the other counterparty (protection buyer) in the case of a credit event with respect to a reference entity and in return, the protection buyer makes periodic payments (premium) to the protection seller until the maturity of the contract or the credit event, whichever is earlier. Total Return Swap (TRS) means a credit derivative contract under which one counterparty (total return payer) commits to transfer the entire economic performance of a reference asset to the other counterparty (total return receiver), and, in return, receives a pre-d...
Post a Comment
Read more