Card on File Tokenization
Shop securely online by tokenizing your American Express® Card
In line with RBI Guidelines on saved card transactions to enable safe and secure online transactions, all card data saved on merchants’ website or online apps would have got deleted by September 30,2022. You would now need to enter your full card number to complete an online transaction or tokenize your card.
Tokenization is the process of replacing your Card details with a unique alternate code called a ‘token’. A Token enables a safe and quick payment process without sharing the actual details of your Card.
You can tokenize your American Express Card while initiating a transaction on a merchant’s app or website when you checkout.
Generate a token with merchant:
- Go to merchant website/ app.
- Select the item(s) and add to the cart.
- Then, go to the checkout page.
- Enter your Card details and, then click on secure Card as per RBI guidelines.
- Enter a One Time Password to authenticate.
Once your Card is tokenized successfully, it will be saved on the merchant’s website or app for future transactions.
How to Manage your tokens
After successful tokenization of your American Express Card(s) with merchants, you can view and manage your active tokens through your online account.
- Log in to your Online account
- Go to the Card Management Tab
- Click on ‘Manage your Tokens’
- View all active tokens set up on your American Express Card
You can choose to suspend, delete or set a daily transaction limit on any active tokens.
Frequently Asked Questions
Tokenization is the process of replacing an actual Card number with a unique number called a ‘token’. This enables the processing of payments without sharing your Card details to any entity except the bank/network. Tokens are a unique combination of your Card credentials and the token requestor or merchant, i.e., the merchant or entity that has received your request for tokenizing your Card on their App or website.
Tokenization offers additional security against fraud, as it enables the processing of online payments without exposing your actual Card details.
Effective 1 October 2022, you will not be able to see your saved Card details during checkout with online merchants.
You will need to either tokenize your Card with eligible merchants or enter your complete Card details at checkout each time you want to make an online or in-App purchase.
website or app and during checkout, you can Tokenize your card, as per the steps given below:
- Enter your Card details on the merchant website/ app
- Provide consent to tokenize your Card
- Enter a One Time Password to authenticate
- Your Card will be tokenized successfully and will be saved on the merchant’s platform for future Transactions.
- Go to merchant’s website/app where your Card details are saved
- Select your American Express Card
- Provide consent to tokenize your Card
- Enter a One Time Password to authenticate
- Your Card will be tokenized successfully and will be saved on the merchant’s platform for future transactions.
Tokenizing your Card is optional. However, Card details can no longer be stored on any merchant website or platform. If your Card is not tokenized, according to the RBI guidelines, post 30 September 2022, you will be asked to enter the full Card number, expiry date and 4 digits security code on the Card each time you complete an online transaction.
Yes, your Card details are completely safe, as they will only be shared with the Bank/network for creating a new token with an eligible merchant.
No, each token is a unique combination of your Card credentials and the token requestor, i.e., the merchant or entity that has received your request for tokenizing your Card on their App or website. Once created, this token cannot be used with any other merchant.
Yes, a token will need to be created for each Card, whether it’s a Basic or a Supplementary Card.
Yes, because your Card details change when a replacement or renewal Card is issued, you will need to generate a new token with the merchant(s) as it’s a regulatory requirement.
While your Card details will not be stored, you will be able to see your saved token in the same way you previously saw your saved Card details on the merchant’s website or App. You can identify the token by the Bank’s name.
No, there is no limit on the number of tokens which can be created on one Card.
Tokenizing your Cards is optional. However, if you choose to tokenize more than one Card, a separate token is needed for each Card.
We are pleased to share that we will be introducing a self-servicing portal for you to manage all of your Tokens via you online account. you will be able to view all the tokens you have generated on your Card, by logging in to you online Account, and the going to Account Management Tab, you would need to Click on “Manage my Tokens”
You will also be able to perform the following maintenance on your tokens:
- Delete a token
- Suspend a token (temporarily)
- Resume a token (after Suspending the same)
- Set a daily transaction limit on your Tokens
Please note that Basic and Supplementary Cardmembers will need to log in and manage their tokens separately.
Yes. You can delete your token directly on the merchant’s website or App or by logging in to the online account and deleting the respective merchant token.
The merchant’s name with be displayed along with details about the specific token.
You will see your active and inactive tokens along with the following details about each token:
- Merchant name
- Status
- Updated on (Last time the Token on updated)
- Token Ending in (Last 5 digits)
- Options to manage the token such as Suspend, Delete
- Set Daily Transactions Limit
You will be able to perform the following maintenance on your tokens by logging in to online account:
- Delete a token
- Suspend a token (temporarily)/li>
- Resume a token (after suspending the same)
- Set a daily transaction limit
Simply click on the respective action tab and follow the steps to complete the process.
No, while our Customer Service team will be able to share details about your tokens, they will not be able to perform any maintenance request on your tokens. For maintenance, you will need to log in to your online account.
The deleted Tokens will be removed and same will not be visible after deletion.
Dear Cardmember, due to extension of data storage guidelines issued by the RBI on June 24th that online merchants can store data until Sep 30th 2022. Merchants can continue to store and use card number for transactions instead of tokens. Hence you will not face any disruptions on acceptance. While we are working with the merchant to ensure that the current Token status is reflected on merchant platform and they are working on integrating the same. The same shall take up to 2 -3 weeks’ time. Please be advised that this does not impact usage on your Card account.
Dear Cardmember, due to extension of data storage guidelines issued by the RBI on June 24th that online merchants can store data until Sep 30th, 2022. Merchants can continue to store and use card number for transactions instead of tokens. Hence you will not face any disruptions on acceptance. While we are working with the merchant to ensure that the current Token status is reflected on merchant platform, and they are working on integrating the same. The same shall take up to 2 - 3 weeks’ time. Please be advised that this does not impact usage on your Card account.
Dear Cardmember, due to extension of data storage guidelines issued by the RBI on June 24th that online merchants can store data until Sep 30th 2022. Merchants can continue to store and use card number for transactions instead of tokens. Hence you will not face any disruptions on acceptance. We are working with the merchants to ensure a token is generated when you add your Card on their platform. We anticipate the integration to complete in 2-3 weeks’ time. Please be advised that this does not impact usage on your Card account.