Skip to main content

What are restrictions on storage of actual card data?

Reserve Bank of India (RBI) restricts storage of actual card data [i.e. Card-on-File (CoF)] by non-bank payment aggregators and merchants.

What is Card-on-File (CoF)?

Card-on-file (CoF) is the storing of customer card and payment information by a merchant, i.e. keeping card information “on file”.

What are the guidelines on storage of actual card data [i.e. Card-on-File (CoF)]?

No entity in the card transaction / payment chain, other than the card issuers and / or card networks, shall store Card-on-File (CoF) data, and any such data stored previously shall be purged.

From when are the restrictions on storage of actual card data [i.e. Card-on-File (CoF)] applicable?

Reserve Bank of India (RBI) had periodically extended the deadline for effecting the restriction on storage of actual card data [i.e. Card-on-File (CoF)] from June 30, 2021 to September 30, 2022, taking into account the representations received from the stakeholders.

All entities, except card issuers and card networks, are required to purge the CoF data before October 01, 2022.

What relaxations are allowed for “guest checkout transactions”?

For ease of transition to an alternate system in respect of transactions where cardholders decide to enter the card details manually at the time of undertaking the transaction (commonly referred to as “guest checkout transactions”), the following are permitted as an interim measure –

  • Other than the card issuer and the card network, the merchant or its Payment Aggregator (PA) involved in settlement of such transactions, can save the CoF data for a maximum period of T+4 days (“T” being the transaction date) or till the settlement date, whichever is earlier. This data shall be used only for settlement of such transactions, and must be purged thereafter.
  • For handling other post-transaction activities, acquiring banks can continue to store CoF data until January 31, 2023.


References

Reserve Bank of India. (2020, March 17). 'Guidelines on Regulation of Payment Aggregators and Payment Gateways (Updated as on November 17, 2020)'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822&Mode=0

Reserve Bank of India. (2021, December 23). 'Restriction on storage of actual card data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12211&Mode=0

Reserve Bank of India. (2022, June 24). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12345&Mode=0

Reserve Bank of India. (2022, July 28). 'Restriction on Storage of Actual Card Data [i.e. Card-on-File (CoF)]'. Retrieved from https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12363&Mode=0


Follow at - Telegram   Instagram   LinkedIn   Twitter

Comments

Popular Posts

Trade Receivables Discounting System (TReDS)

Reserve Bank of India (RBI) has issued the directions on Trade Receivables Discounting System (TReDS). What is TReDS? TReDS is a technology platform on a digital or electronic network for facilitating factoring of trade receivables through multiple financiers. What is a Factoring Unit? Factoring unit refers to trade receivable in the form of invoice / bill uploaded either by the seller (in the case of factoring) or by the buyer (in case of reverse factoring), as the case may be. Who are the participants in TReDS? Seller – Micro, Small and Medium Enterprise (MSME) Buyer – any person liable to the seller, whether under a contract or otherwise, against an invoice or bill of exchange, to pay any trade receivable Financier – all entities / institutions permitted to undertake factoring business under the Factoring Regulation Act, 2011 Insurance companies  Credit Guarantee Fund Trust notified by the Government of India Who can operate TReDS platforms? An entity shall seek authorisation fr...

Payment of Agency Commission to Agency Banks (ABs) and Disbursement of Government Pension by ABs

Reserve Bank of India (RBI) has issued guidelines on the conduct of Government business by Agency Banks (ABs), payment of agency commission to ABs and disbursement of Government pension by ABs. Who are ABs? ABs mean all Public Sector Banks (PSBs), scheduled Private Sector Banks (PVBs), scheduled Payments Banks (PBs), and scheduled Small Finance Banks (SFBs) appointed by the RBI under Section 45 of the RBI Act, 1934, by mutual agreement, to carry out Government banking business of the Central Government (CG) / State Governments (SGs). What is agency commission? Agency commission means the remuneration paid by the RBI to an AB in consideration of it acting as an agent of the RBI in the conduct of general banking business of the CG and the SGs at the places and in the manner specified in the agreement between the RBI and the bank, with the exception of the functions relating to the management of the public debt. What are the guidelines on appointment of ABs? Any eligible bank which intend...

Swap Facility for FCNR (B) Deposits, ECBs and OFCBs (updated as on June 23, 2026)

Reserve Bank of India (RBI) has introduced US Dollar-Rupee swap facility for Foreign Currency Non-Resident (Bank) [FCNR (B)] deposits, External Commercial Borrowings (ECBs) and Overseas Foreign Currency Borrowings (OFCBs). Swap facility for FCNR (B) deposits Swap facility for ECBs and OFCBs The swap facility has been introduced for fresh FCNR (B) deposits, including deposits that are renewed upon maturity, for a minimum tenor of 3 years and a maximum tenor of 5 years. The swap facility has been introduced for – ECBs of average maturity of 3 years and above, drawn on after June 8, 2026 till December 31, 2026 by – (a) Public Sector Undertakings (PSUs) whose majority ownership is held by the central and / or state government (other than banks), or (b) PSUs which are incorporated, established or registered under a Central or State Act and controlled by the central / state government. The facility will also be available for the undrawn portion of any exist...

Kisan Credit Card (KCC) Scheme

Reserve Bank of India (RBI) has issued directions on Kisan Credit Card (KCC) Scheme. To whom are the directions applicable? The directions are applicable to the following entities – Commercial Banks (excluding overseas branches of Indian banks) Small Finance Banks (SFBs) Regional Rural Banks (RRBs) Rural Co-operative Banks – State Co-operative Banks (StCBs) Central Co-operative Banks (CCBs) To which loans shall the directions be applicable? The directions shall be applicable to loans sanctioned under the KCC Scheme with effect from January 01, 2027.  What are the crop seasons? Crop season means the period up to harvesting and marketing of the crops raised. Short duration crops shall mean crops with anticipated period from sowing to marketing up to 12 months. Long duration crops mean crops which are not short duration crops. The crop season for long duration crops i.e., anticipated period from sowing to marketing is more than 12 months and up to 18 months. For the purpose of the KCC...

Lead Bank Scheme (LBS)

Reserve Bank of India (RBI) has issued guidelines on the Lead Bank Scheme (LBS). Who is a Lead Bank? RBI designates a commercial bank as Lead Bank in each district, to coordinate the efforts of the banks, Government, National Bank for Agriculture and Rural Development (NABARD) and other stakeholders at the district level to improve credit flow to the priority sectors and promote financial inclusion in the district. 12 public sector banks and 2 private sector banks (Jammu & Kashmir Bank and ICICI Bank) have been assigned lead bank responsibilities, covering 778 districts across the country. What appointments are made under the LBS? Every lead bank shall appoint a Lead District Manager (LDM) in each district where it has the lead bank responsibility, to exclusively oversee and coordinate the implementation of the LBS in the district. NABARD shall appoint a District Development Manager (DDM) for each district to act as a liaison between NABARD and the district-level banking and financ...