10 Things To Remember on new debit card PIN rule

  Payment through cards has become increasingly popular in India. To maintain security and keep up with the changing times, the Reserve Bank of India has mandated debit card holders to punch in their PIN numbers during every transaction from December 1.

Here are some things you need to know about debit card usage:

1) The RBI rule was first enforced in June 2013 to act as an additional layer of security in transactions. However, banks had requested for some time to update the back-end infrastructure. The RBI had then extended the deadline to November 30.

2) As part of the rule, customers will now to have punch in the PIN number after the card has been swiped or inserted in the small point-of-sales (PoS) terminal. This is the small machine that shops and merchants use for the payment. Once the PIN has been entered, you will get the transaction charge slip, which has to be signed.

3) If the PoS terminal is not updated to ask for PIN, and the transaction proceeds without it, then the bank will decline the transaction.

4) The PIN being used here is the same that a customer uses at an ATM or Automated Teller Machine to withdraw money. Do not get confused with the ‘transaction password’ used for online banking.

5) You will get only three chances at punching the right PIN number. After that, your transaction will automatically be cancelled. If you manage to remember your PIN number after three attempts, you can still use your debit card. However, the transaction will have to be started all over again from scratch.

6) If you have forgotten your PIN number, call your bank to order for a duplicate PIN number. You will, however, have to verify your personal details like address, email id, date of birth, etc., for security purposes. This will be posted to your address within 7-10 working days.

7) This rule is mainly for debit cards being used for physical transactions only. There is no change in the way internet transactions are undertaken. The rules for credit cards too remain unchanged.

8) This is part of the measures undertaken to deal with frauds and security breaches. Other measures include addition of an Europay, MasterCard or Visa chip on the card, establishment of real-time fraud monitoring system, limit on transactions, immediate notifications, etc.

9) There are over 36 crore debit cards being used in India to conduct as many as 5.54 crore merchandise transactions per month amounting to Rs 8,017.86 crore. There are as many as 52 crore transactions being conducted using ATMs in a month, as per the latest RBI data.

10) In contrast, there are 1.8 million credit cards in use. The total number of transactions being conducted at PoS counters too is less at 4.14 crore. However, the total value of transactions is higher than that for debit cards at Rs 10,748 crore.

Source: Simplus Information Services | Yahoo Finance India

Read more ...

New Norms for Credit Cards :Reserve Bank of India

All new debit and credit cards to be issued only for domestic usage unless international use is specifically sought by the customer.

Reserve Bank of India (RBI) vide Circular dated 28.02.2013 on “Security and Risk Mitigation Measures for Electronic Payment Transactions” has directed banks to put in place the following safety measures for Credit and Debit Card Transactions :

• All new debit and credit cards to be issued only for domestic usage unless international use is specifically sought by the customer. Such cards enabling international usage will have to be essentially EMV Chip and Pin enabled. (By June 30, 2013).

                                   Sample of EMV Chip and PIN enabled card

• Issuing banks should convert all existing Magstripe cards to EMV Chip card for all customers who have used their cards internationally at least once (for/through e-commerce/ATM/POS) (By June 30, 2013).

Backside of Existing Megastrip card(Sample)

• All the active Magstripe international cards issued by banks should have threshold limit for international usage. The threshold should be determined by the banks based on the risk profile of the customer and accepted by the customer (By June 30,2013).

• Banks should ensure that the terminals installed at the merchants for capturing card payments (including the double swipe terminals used) should be certified for PCI-DSS (Payment Card Industry – Data Security Standards) and PA-DSS (Payment Applications – Data Security Standards) (By June 30,2013).

• Bank should frame rules based on the transaction pattern of the usage of cards by the customers in coordination with the authorized card payment networks for arresting fraud (By June 30, 2013).

• Banks should ensure that all acquiring infrastructure that is currently operational on IP (internet protocol) based solutions are mandatorily made to go through PCI-DSS and PA-DSS certification. This should include acquirers, processors/aggregators and large merchants (By June 30, 2013).

• Banks should move towards real time fraud monitoring system at the earliest.

• Banks should provide easier methods (like SMS) for the customer to block his card and get a confirmation to that effect after blocking the card.

• Banks should move towards a system that facilitates implementation of additional facilitates implementation of additional factor of authentication for cards issued in India and used internationally (transactions acquired by banks located abroad).

After discussions with Banks, the RBI had issued the above guidelines vide Circular dated 28.02.2013 on “Security and Risk Mitigation Measures for Electronic Payment Transactions”.

Read more ...