Is tokenisation the way forward? Here’s what the industry thinks, BFSI News, ET BFSI

[ad_1]

Read More/Less


Tokenisation will help bring huge value to the digital payments space, and is likely to gain momentum in the coming months, said Ravi Varma Datla, Mastercard‘s vice president – digital products, South Asia.

Last month, the Reserve Bank of India issued guidelines, allowing card-on-file tokenisation. Tokenisation helps consumers to enter and save a 16-digit token on e-commerce or merchant platforms, instead of storing their card details.

“Card-on-File tokenisation enhances the safety and security of the entire transaction value chain in e-commerce payments. It builds trust and can significantly increase convenience for consumers and create efficiencies for merchants. It means there is no need for a consumer to enter his card number every time he transacts, or to login to an online shopping account to update their details due to redundant card credentials,” Datla said.

Last week, National Payments Corporation of India (NPCI) announced the tokenisation system for RuPay cards. The NPCI Tokenisation system will support tokenisation of cards as an alternative to storing card details with merchants.

“We are confident that the NPCI Tokenisation System (NTS) for the tokenisation of RuPay cards will instill further trust in the millions of RuPay cardholders to carry out their day-to-day transactions securely,” said Kunal Kalawatia, chief of products at NPCI.

Also read: What is tokenisation, and how can it ensure safe transactions?

When buying a product or service online, consumers are usually forced to store their credit or debit card details. This is where tokenisation plays a significant role in ensuring consumers’ safety.

“What makes this type of token unique is that it can be used just like your normal card for online payments but only by the merchant that requested it. This means that if a bad-guy or hacker gets their hands on a token – it simply cannot be used. For the sake of identification and reconciliation, RBI has permitted merchants to display the last 4 digits of the original card number to the consumers,” Datla said.

Datla added that as of today, customers have no single view of all the merchants where they have saved their card number. With tokenisation, customers can reach out to their respective banks and view the list of all the tokens saved at merchants and also request to delete or update them.

Recently, Visa launched its card-on-file tokenisation service in India. The company has enabled its tokenisation services across 130 countries. As a large number of shoppers make the shift to online payments, Sujai Raina, Visa’s India business development head, believes it will ensure a frictionless checkout experience for consumers, and drive higher payment success rates for merchants and issuers.

“We believe the RBI’s directive to roll out card-on-file tokenisation in addition to the earlier device-based tokenisation protocols, will help build a safe, secure and seamless environment for digital payments, thus enhancing consumer trust across digital platforms,” he said.

When asked Mastercard about its plan to launch its tokenisation services in India, Datla said the company is working with its partner banks, merchants, payment aggregators, and other stakeholders towards a smooth rollout.

So far, Mastercard has rolled out tokenisation for consumers in over 2,500 banks across the globe. The company has found that the tokenisation has enabled a safer payment ecosystem, and has also increased transaction volume across the digital channel to return greater revenue for merchants, Datla said.

Datla also believes that tokenisation will help make digital payments seamless. “By replacing sensitive payment data with digital tokens, a superior ecommerce experience is created which provides increased security, approval rates and a frictionless consumer experience,” Datla said.



[ad_2]

CLICK HERE TO APPLY

What is tokenisation, and how can it ensure safe transactions?, BFSI News, ET BFSI

[ad_1]

Read More/Less


When buying a product online, we are often forced to store our credit or debit card details on the e-commerce platform. To ensure safety of this, the Reserve Bank of India issued guidelines last month, allowing card-on-file tokenisation.

Recently, Visa, a digital payments platform, launched its card-on-file tokenisation service in India.

Here’s what you need to know about the upcoming advancement in India’s digital payments system:

What is tokenisation?

As per guidelines, tokenisation is when credit or debit card details can be replaced with an alternate code, called “token”, which can be generated by the holder to make payments without entering their account details.

This devaluation of card details reduces risk and vulnerability of sensitive data, thereby reducing the chances of fraud arising from sharing card details.

Furthermore, if the customer wants to convert its token back to their actual card details, they can do so. This process is known as de-tokenisation.

What is a token, and how can it be used?

The 16-character “token” generated is free-of-cost, and can be used to perform contactless card transactions at point-of-sale (PoS) terminals, QR code payments, and now for card-on-file (CoF) transactions.

A customer can make a CoF transaction, after authorising a token to their merchant. The merchant can store the token, and use that to bill the customer’s products. Merchants here can be refered to e-commerce companies, airlines and supermarket chains.

The RBI has directed merchants not to store customers’ card details in their systems from January 1, 2022.

How do you generate a token?

The cardholder can generate a token by first requesting for a token on the app provided by the token requestor – the entity that accepts request from the customer for tokenisation of a card. Then, the company will pass the request on to the card network to issue a token. The card network, after seeking consent of the card issuer, will issue a token, which will have a combination of the card, the token requestor, and the device.

This process can be done through mobile phones or tablets for all use cases and channels like contactless card transactions, payments through QR codes and apps.

Tokens are generated by payment companies, which act like Token Service Providers (TSPs). They will provide tokens to mobile payment or e-commerce platforms so that the token can be used during transactions.

If a customer enters their card details in a virtual wallet like Google Pay, these platforms ask one of these TSPs for a token. Only after the TSPs get the go-ahead from the customer’s bank, a code is generated and sent to the user’s device. Once the token has been generated, it remains linked to the device and cannot be replaced.
Consequently, each time a customer uses their device to make a payment, the payments platform can authorise the transaction by simply sharing the token.

How can you register for tokenisation, and is it mandatory?

The ability to tokenise and de-tokenise card data will be with the same TSP, and if a customer wishes to register their card for tokenisation, they will have to first give their consent through Additional Factor of Authentication (AFA), RBI says. Tokenisation is not mandatory, and the customer will be given a choice of selecting the use case and setting-up of limits. The stakeholders involved in a tokenised card transaction are the merchant, the merchant’s acquirer, card network, token requestor, issuer and customer.



[ad_2]

CLICK HERE TO APPLY