The Reserve Bank of India today has introduced new rules to enhance the security features of debit cards and credit cards. While issuing and reissuing the debit and credit cards, banks must ensure that all the debit cards and credit cards are enabled only for domestic transactions at ATMs and point of sale (PoS) terminals, RBI said in a notification.
"At the time of issue/re-issue, all cards (physical and virtual) shall be enabled for use only at contact based points of usage within India," RBI said.
If customers want to use their cards for online transaction, international transactions and contactless transactions, they have to separately apply for these services.
If any individual has not used his or her cards for online transaction, international transactions and contactless transactions before, their card will be disabled for these services, said the regulator. Customers have to apply to the bank for availing these services. For existing card users, banks can also take a decision whether to disable the card for domestic and international transactions, online and contactless transaction rights based on their risk perception.
"Existing cards which have never been used for online (card not present) / international/contactless transactions shall be mandatorily disabled for this purpose," the central bank said.
Banks must ensure that cardholders can 'switch on' or 'switch off' the online transaction, international transactions and contactless transactions at ATMs and PoS terminals. One can also their own limit for all kind of transactions at ATMs. Customers should also have an option of opting in these services via 24X7 mobile applications, net banking. Banks should inform the customers about any change in status of the card through SMS or email alerts.
These rules will not be applicable for prepaid gift cards and those cards used at mass transit system, the central bank added. This new rule for debit and credit cards will come into effect from March 16.