As per RBI mandate, starting October 01, 2022, sensitive customer information like complete card number, CVV & Expiry date or any other sensitive information related to cards cannot be stored by merchants for processing online transactions. The merchants will have to remove all details stored, by June 30, 2022. They will be allowed to store the customer’s card details only through tokenization post taking an AFA (Additional factor authentication, eg: OTP) from the customer. This means that as per the new guidelines, you can now safely secure your card details using tokenisation while you shop with the online merchants.