From 1 October 2022, the RBI has directed all payment wallets, online merchants, and aggregators to tokenise sensitive customer card-related information instead of storing it in their database.