Card on File Tokenisation

In tokenisation, 16 digit card number is replaced by a 16 digit surrogate value "token" which is a unique combination of card number and token requestor merchant. This token can be stored by merchant and can be used to facitilate ecom transactions in a secure manner.

RBI has mandated that no entity apart from card issuers and payment networks (VISA/Mastercard/etc) should store senstivie card information such as full 16 digit card number, CVV, etc. w.e.f 01st October, 2022. Merchants can now store token number instead of full 16 digit card number after obtaining customer consent and validating the request through second factor authentication (for e.g. OTP)

You can tokenize your saved on the merchant app/website. You might come across an option to tokenize/secure your card at the time of checkout or under manage saved card option. Tokenisation request is always validated through second factor authentication (for e.g. OTP). 

Merchant will store the token and you will be able to use it for online transactions without the need to enter card number everytime you want to make a purchase.

1. Go to merchant app/website

2. Select your IDFC First Bank credit card at the time of checkout. Last 4 digits of the credit card would be visible on checkout page for identification.

3. Enter CVV and OTP as applicable and complete the transaction

If card is not tokenised, you will have to enter the card number every time you do an online transaction w.e.f 01st October, 2022.

Tokenization offers enhanced security for online transactions in following ways

1. Card number is not stored by the merchant

2. Token stored by one merchant cannot be used to do transaction at any other merchant

No. Tokenization is a free of cost service for all cardholders.

Token is a unique combination of merchant and card. Same card can have multiple tokens associated with it depending on the number of merchants on which card has been tokenized.

You may delete the token in real time by deleting your card details under manage saved card/payment option on merchant app/website. Alternatively, you may call IDFC FIRST Bank's customer support and place a request for token deletion.

Yes. You may tokenize multiple credit cards on same merchant.

Yes. You may select any card from the list of tokenised cards. Last 4 digits of the card will be visible to you on the merchant checkout page for identification purpose.

New card has to be tokenized again on merchant app/website.