Paytm launches card tokenisation for online transactions

[ad_1]

Read More/Less


Paytm Payments Services Ltd (PPSL), a wholly-owned subsidiary of Paytm, is offering ‘card on file’ tokenisation service through the launch of Paytm Token Gateway. It has partnered with platforms such as Myntra, Oyo, Domino’s and others for this service, as also payment giants like Visa, Mastercard and RuPay.

The card-on-file tokenisation service will be available for all Paytm consumers and merchants. It is aligned with Reserve Bank of India guidelines, which says the “saved cards” feature will not be allowed on a merchant network anymore.

The tokenisation service allows a user’s card details to be stored as a unique, irreversible ‘digital token’ for secure transactions. It offers seamless digital card payments by ensuring customers don’t have to remember their card details for every transaction.

Paytm Payments Bank rolls out ‘Paytm Transit card’

Praveen Sharma, MD and CEO, Paytm Payments Services Ltd, said, “Tokenisation is the future of digital payments and also ensures safety, as a user’s card details are not shared with anyone. Our merchant partners can now offer seamless, secure payments to their users.”

A tokenised card transaction is considered safer as the card details are not shared with the merchant.

The details are only shared with the issuing bank and the affiliated network. It will also require explicit customer consent via additional authentication.

WhatsApp gets NPCI nod for doubling payments user base

This will allow e-commerce companies to offer customers the ease of tokenising debit and credit cards. End-customers can thus continue to shop via the saved cards feature, which allows faster checkouts.

As per RBI guidelines, all merchants and/or ecommerce stores have to comply with the new card-on-file tokenisation feature by December 31, 2021.

[ad_2]

CLICK HERE TO APPLY

PayU launches tokenisation solution ‘PayU Token Hub’, BFSI News, ET BFSI

[ad_1]

Read More/Less


PayU today launched its tokenisation solution ‘PayU Token Hub‘, which allows issuing banks to generate their own tokens. This solution is built by PayU and Wibmo, in partnership with Visa, MasterCard and leading banks.

“We welcome the new RBI guidelines. PayU Token Hub is fully interoperable, providing best of network and issuer tokens for card-on-file use cases extensible to device tap-and-pay.” said Manas Mishra, chief product officer.

‘PayU Token Hub’ will enable businesses to comply with RBI’s latest guidelines on online card data storage, and will soon expand to enable businesses to safely store and create tokens across other popular payment modes like UPI and Net Banking.

Follow and connect with us on , Facebook, Linkedin



[ad_2]

CLICK HERE TO APPLY

Is tokenisation the way forward? Here’s what the industry thinks, BFSI News, ET BFSI

[ad_1]

Read More/Less


Tokenisation will help bring huge value to the digital payments space, and is likely to gain momentum in the coming months, said Ravi Varma Datla, Mastercard‘s vice president – digital products, South Asia.

Last month, the Reserve Bank of India issued guidelines, allowing card-on-file tokenisation. Tokenisation helps consumers to enter and save a 16-digit token on e-commerce or merchant platforms, instead of storing their card details.

“Card-on-File tokenisation enhances the safety and security of the entire transaction value chain in e-commerce payments. It builds trust and can significantly increase convenience for consumers and create efficiencies for merchants. It means there is no need for a consumer to enter his card number every time he transacts, or to login to an online shopping account to update their details due to redundant card credentials,” Datla said.

Last week, National Payments Corporation of India (NPCI) announced the tokenisation system for RuPay cards. The NPCI Tokenisation system will support tokenisation of cards as an alternative to storing card details with merchants.

“We are confident that the NPCI Tokenisation System (NTS) for the tokenisation of RuPay cards will instill further trust in the millions of RuPay cardholders to carry out their day-to-day transactions securely,” said Kunal Kalawatia, chief of products at NPCI.

Also read: What is tokenisation, and how can it ensure safe transactions?

When buying a product or service online, consumers are usually forced to store their credit or debit card details. This is where tokenisation plays a significant role in ensuring consumers’ safety.

“What makes this type of token unique is that it can be used just like your normal card for online payments but only by the merchant that requested it. This means that if a bad-guy or hacker gets their hands on a token – it simply cannot be used. For the sake of identification and reconciliation, RBI has permitted merchants to display the last 4 digits of the original card number to the consumers,” Datla said.

Datla added that as of today, customers have no single view of all the merchants where they have saved their card number. With tokenisation, customers can reach out to their respective banks and view the list of all the tokens saved at merchants and also request to delete or update them.

Recently, Visa launched its card-on-file tokenisation service in India. The company has enabled its tokenisation services across 130 countries. As a large number of shoppers make the shift to online payments, Sujai Raina, Visa’s India business development head, believes it will ensure a frictionless checkout experience for consumers, and drive higher payment success rates for merchants and issuers.

“We believe the RBI’s directive to roll out card-on-file tokenisation in addition to the earlier device-based tokenisation protocols, will help build a safe, secure and seamless environment for digital payments, thus enhancing consumer trust across digital platforms,” he said.

When asked Mastercard about its plan to launch its tokenisation services in India, Datla said the company is working with its partner banks, merchants, payment aggregators, and other stakeholders towards a smooth rollout.

So far, Mastercard has rolled out tokenisation for consumers in over 2,500 banks across the globe. The company has found that the tokenisation has enabled a safer payment ecosystem, and has also increased transaction volume across the digital channel to return greater revenue for merchants, Datla said.

Datla also believes that tokenisation will help make digital payments seamless. “By replacing sensitive payment data with digital tokens, a superior ecommerce experience is created which provides increased security, approval rates and a frictionless consumer experience,” Datla said.



[ad_2]

CLICK HERE TO APPLY

NPCI launches tokenisation of RuPay cards as safety measure, BFSI News, ET BFSI

[ad_1]

Read More/Less


New Delhi, Oct 20 (PTI) The National Payments Corporation of India (NPCI) on Wednesday announced the tokenisation system for RuPay cards to enhance the safety of card data. The NPCI Tokenisation System (NTS) is to support tokenisation of cards as an alternative to storing card details with merchants, NCPI said.

It will further enhance the safety of customers and provide a seamless shopping experience to them.

NPCI said the sensitive customer information will be stored in the form of an encrypted ‘token’ to help secure transactions, in accordance with RBI guidelines.

These tokens will allow payments to be processed without disclosing the customer details or allowing the payment intermediaries to store customer data that could breach security and privacy, it said.

With NTS, acquiring banks, aggregators, merchants and others can get themselves certified with NPCI and can play the role of token requestor to help save the token reference number against all card numbers saved.

All these businesses can maintain their RuPay consumer base utilising token reference on file (TROF) for future transactions initiated by their respective RuPay consumers, NPCI said.

The fool-proof and transparent system will ensure that no customer-sensitive information is leaked. Tokenisation will also help in reducing the friction in the payment process by providing a faster check-out experience to the customers.

“The RBI’s guidelines on card tokenisation is to enhance the safety of the digital payments ecosystem in the country.

“We are confident that the NPCI Tokenization System (NTS) for the tokenisation of RuPay cards will instill further trust in the millions of RuPay cardholders to carry out their day-to-day transactions securely,” Kunal Kalawatia, chief of products, National Payments Corporation of India, said.

He hoped that the unique card-on-file tokenisation solution will not only safeguard customers’ confidential data but will also further strengthen the overall digital payments environment. PTI KPM HRS hrs



[ad_2]

CLICK HERE TO APPLY

What is tokenisation, and how can it ensure safe transactions?, BFSI News, ET BFSI

[ad_1]

Read More/Less


When buying a product online, we are often forced to store our credit or debit card details on the e-commerce platform. To ensure safety of this, the Reserve Bank of India issued guidelines last month, allowing card-on-file tokenisation.

Recently, Visa, a digital payments platform, launched its card-on-file tokenisation service in India.

Here’s what you need to know about the upcoming advancement in India’s digital payments system:

What is tokenisation?

As per guidelines, tokenisation is when credit or debit card details can be replaced with an alternate code, called “token”, which can be generated by the holder to make payments without entering their account details.

This devaluation of card details reduces risk and vulnerability of sensitive data, thereby reducing the chances of fraud arising from sharing card details.

Furthermore, if the customer wants to convert its token back to their actual card details, they can do so. This process is known as de-tokenisation.

What is a token, and how can it be used?

The 16-character “token” generated is free-of-cost, and can be used to perform contactless card transactions at point-of-sale (PoS) terminals, QR code payments, and now for card-on-file (CoF) transactions.

A customer can make a CoF transaction, after authorising a token to their merchant. The merchant can store the token, and use that to bill the customer’s products. Merchants here can be refered to e-commerce companies, airlines and supermarket chains.

The RBI has directed merchants not to store customers’ card details in their systems from January 1, 2022.

How do you generate a token?

The cardholder can generate a token by first requesting for a token on the app provided by the token requestor – the entity that accepts request from the customer for tokenisation of a card. Then, the company will pass the request on to the card network to issue a token. The card network, after seeking consent of the card issuer, will issue a token, which will have a combination of the card, the token requestor, and the device.

This process can be done through mobile phones or tablets for all use cases and channels like contactless card transactions, payments through QR codes and apps.

Tokens are generated by payment companies, which act like Token Service Providers (TSPs). They will provide tokens to mobile payment or e-commerce platforms so that the token can be used during transactions.

If a customer enters their card details in a virtual wallet like Google Pay, these platforms ask one of these TSPs for a token. Only after the TSPs get the go-ahead from the customer’s bank, a code is generated and sent to the user’s device. Once the token has been generated, it remains linked to the device and cannot be replaced.
Consequently, each time a customer uses their device to make a payment, the payments platform can authorise the transaction by simply sharing the token.

How can you register for tokenisation, and is it mandatory?

The ability to tokenise and de-tokenise card data will be with the same TSP, and if a customer wishes to register their card for tokenisation, they will have to first give their consent through Additional Factor of Authentication (AFA), RBI says. Tokenisation is not mandatory, and the customer will be given a choice of selecting the use case and setting-up of limits. The stakeholders involved in a tokenised card transaction are the merchant, the merchant’s acquirer, card network, token requestor, issuer and customer.



[ad_2]

CLICK HERE TO APPLY

Visa launches CoF tokenisation service for Grofers, BigBasket and MakeMyTrip

[ad_1]

Read More/Less


Visa has launched a Card-on-File tokenisation service for e-commerce players Grofers, BigBasket and MakeMyTrip. The Reserve Bank of India’s CoF tokenisation guidelines mandate replacing the actual card data with encrypted digital tokens, which are then used to facilitate and authenticate transactions.

“Card-on-File (CoF) tokenisation provides two key benefits — consumer and ecosystem security and an enhanced checkout experience. Launched in partnership with Juspay, India’s first CoF tokenisation service is now available across e-commerce leaders such as Grofers, BigBasket and MakeMyTrip,” it said in a statement on Wednesday.

Secure payments

“Having launched CoF tokenisation services in over 130 countries globally, we are confident of the technology’s ability to build a safe, secure and seamless environment for digital payments. This will be critical in building consumer trust on merchant platforms and reassure them of the safety of their payment credentials on these platforms,” said TR Ramachandran, Group Country Manager, India and South Asia, Visa.

Also see: ADIF is hopeful of further consultation with RBI on tokenisation

Visa has enabled all its banking partners for tokenisation and is working closely with merchants, payment aggregators and gateways to ready the ecosystem for CoF tokenisation rollout, he added.

Tokenisation guidelines have to be met by January 1, 2022.

[ad_2]

CLICK HERE TO APPLY

Industry view: Tokenisation circular modifications give banks more control over card data

[ad_1]

Read More/Less


The facility of tokenisation shall be offered by TSPs only for the cards issued by them, and the ability to tokenise and de-tokenise card data shall be with the same TSP.

The modifications made on Tuesday to the guidelines on tokenisation of card-based transactions allow banks a greater control over their customers’ data, said industry players.

The Reserve Bank of India (RBI) on Tuesday issued a set of relaxations with respect to its earlier mandate of tokenisation of card transactions. The regulator permitted card issuers to offer tokenisation services and become token service providers (TSPs). The facility of tokenisation shall be offered by TSPs only for the cards issued by them, and the ability to tokenise and de-tokenise card data shall be with the same TSP.

The tokenisation or encryption of card data shall be done with explicit customer consent with an additional factor of authentication (AFA) validation by the card issuer.

This means while card users can still choose to store their card details with a payment aggregator if they choose to, they will not be able to do so by checking a box, as was the case thus far. Instead, they will have to provide their explicit consent through an OTP or some similar instrument. The new rules kick in from January 1, 2022.

Madhusudanan P, co-founder and CEO, YAP by M2P Solutions, said with the latest relaxation, the RBI has given a fresh lease of life to tokenisation by payment aggregators. “The crux of it lies in enabling banks to be in control of the whole tokenisation service, which was earlier limited to third-party intermediaries. Now, if a large bank wants to be in control of their customers’ data because they see it as an important function, they can do the tokenisation themselves,” he said.

Sanjeev Moghe, EVP & head — cards & payments, Axis Bank, said the regulation will help prevent instances of unauthorised usage of customer data, theft and misuse of cards. “With tokenisation, a card-specific token is generated. Going forward, that token can be used for all online transactions. This will ensure an enhanced security. In case of any data breach or hacking attempt at the merchant’s end, the customer’s card details will still be protected,” Moghe said.

The mandate to tokenise all card information while carrying out transactions had become a sticky point for the payments industry, as they saw the new guidelines to be detrimental to the experience of smooth checkouts. Last month, industry body Payments Council of India had said the industry was working in alignment with the RBI on possible secure card-on-file tokenisation (CoFT) solutions to ensure a smooth customer experience for online purchases while enhancing the security of the storage of card credentials.

“It may be noted that introduction of CoFT, while improving customer data security, will offer customers the same degree of convenience as now,” the RBI said on Tuesday, adding, “Contrary to some concerns expressed in certain sections of the media, there would be no requirement to input card details for every transaction under the tokenisation arrangement.”

“The regulator has expanded the scope of tokenisation to include things like wearables and other devices. Eventually, we could even see tokenisation rules applied to payments for transit systems,” said an expert on condition of anonymity.

Get live Stock Prices from BSE, NSE, US Market and latest NAV, portfolio of Mutual Funds, Check out latest IPO News, Best Performing IPOs, calculate your tax by Income Tax Calculator, know market’s Top Gainers, Top Losers & Best Equity Funds. Like us on Facebook and follow us on Twitter.

Financial Express is now on Telegram. Click here to join our channel and stay updated with the latest Biz news and updates.



[ad_2]

CLICK HERE TO APPLY

RBI extends scope of tokenisation to laptops, wearable devices, BFSI News, ET BFSI

[ad_1]

Read More/Less


The Reserve Bank on Wednesday extended the scope of ‘tokenisation‘ to several consumer devices, including laptops, desktops, wearables like wristwatches and bands, as well as Internet of Things (IoT) devices. Tokenisation, which aims at improving the safety and security of the payment system, refers to the replacement of actual card details with a unique alternate code called the ‘token’, which is unique for a combination of card, token requestor and identified device.

The RBI had earlier permitted ‘tokenisation’ services, under which a unique alternate code is generated for transaction purposes, on mobile phones and tablets of cardholders.

“On a review of the framework and keeping in view stakeholder feedback, it has been decided to extend the scope of tokenisation to include consumer devices — laptops, desktops, wearables (wristwatches, bands, etc.), Internet of Things (IoT) devices, etc,” the RBI said in a circular.

The initiative is expected to make card transactions more safe, secure and convenient for the users, it added.

In January, 2019 the RBI had issued guidelines on “Tokenisation – Card transactions”, permitting authorised card networks to offer card tokenisation services to any token requestor, subject to conditions.

Prior to the latest circular, the facility was available only for mobile phones and tablets of interested cardholders.

RBI also noted that there has been an uptake in the volume of tokenised card transactions during recent months.



[ad_2]

CLICK HERE TO APPLY

Tokenised card transactions: RBI extends scope of devices

[ad_1]

Read More/Less


The Reserve Bank of India has extended the scope of permitted devices for undertaking tokenised card transactions to include consumer devices such as laptops, desktops, wearables (wrist watches, bands, etc.), and Internet of Things (IoT) devices.

This is in view of uptake in the volume of such transactions during the recent months.

The RBI, in a circular to authorised card networks, said this initiative is expected to make card transactions more safe, secure, and convenient for the users.

Hitherto, the tokenised card transaction facility was available only for mobile phones and tablets of interested cardholders.

Tokenisation means the replacement of actual card details with a unique alternate code called the “token”, which will be unique for a combination of card, token requestor and device.

Authorised networks

In January 2019, the central bank had permitted authorised card payment networks to offer card tokenisation services to any token requestor (that is third-party app provider), subject to the conditions.

There are five authorised card payment networks — American Express Banking Corp, Diners Club International Ltd, MasterCard Asia/ Pacific Pte Ltd, National Payments Corporation of India and Visa Worldwide Pte Ltd — operating in India.

In the January 2019 circular, the RBI said its permission to card networks for tokenisation in card transactions extends to all use cases/channels [for example: near field communication/ magnetic secure transmission-based contactless transactions, in-app payments, QR code-based payments, etc.] or token storage mechanisms (cloud, secure element, trusted execution environment, etc.).

All extant instructions of RBI on safety and security of card transactions, including the mandate for Additional Factor of Authentication (AFA)/PIN entry, are applicable for tokenised card transactions also.

[ad_2]

CLICK HERE TO APPLY

Piyush Gupta, CEO, DBS, BFSI News, ET BFSI

[ad_1]

Read More/Less


Digital currencies and tokenisation of assets are a reality and may be a dominant factor in the future, but that doesn’t necessarily mean that Bitcoin could replace fiat currency as a medium of exchange, said Piyush Gupta, CEO of DBS. “We launched the first bank-sponsored digital exchange in December, which lets you tokenise assets and securities,” said Gupta, ET’s Global Indian of the Year.

“So by our action we are creating capabilities for crypto, digital currencies and tokenisation for the future. But Bitcoin as a replacement for money is still challenging. Money is a medium of exchange, a unit of account and store of value.’’ The world is divided on the future of cryptocurrencies with regulators like the Reserve Bank of India (RBI) opposing them as a medium of exchange, while billionaire entrepreneurs like Elon Musk are backing them.

While cryptocurrencies have become a craze, the volatility of Bitcoin has made administrations nervous.

“Bitcoin is not a good medium of exchange because even though Elon Musk says he will take it for Tesla, it is very hard to do transactions because you can only do nine transactions per second while Visa and Mastercard can do hundreds of thousands,” said Gupta.

Gupta of DBS, which became the first international bank to acquire a domestic, troubled lender in recent memory, said that Lakshmi Vilas Bank fits into our strategy. He visualised the growth path a few years ago through the subsidiarisation of DBS in India to gain equal footing with domestic banks. “We were mentally prepared and had done some homework around a range of possibilities and that allowed us to respond very quickly,” he said. DBS India took over Lakshmi Vilas Bank last year



[ad_2]

CLICK HERE TO APPLY

1 2