IND NPC Migration of PIN Encryption


On Jun. 7, IND NPC called for cooperation, prompt action re migration.


  • IND NPC said RuPay as well as National Financial Switch (NFS) ATM Network are implementing a migration of PIN encryption from variant to key block method in alignment with Payment card industry data security standard (PCI-DSS) guidelines.
  • Migration Details
  • Aims to enhance the security framework of card-based transactions on these networks.
  • Members must undergo certification with IND NPC for RuPay, NFS transactions enablement of key blocks; issuer certification can be done together/separately.
  • Acquirer certification must be done separately; certification of issuer, acquirer hosts to be completed by Dec. 31, 2024; key block function must be enabled by Jun. 30, 2025.
  • Transition is crucial for maintaining integrity, security on RuPay and NFS network.
  • Effectiveness
  • Dec. 31, 2024 is the deadline for certification of issuer and acquirer hosts.
  • Jun. 30, 2025 is the deadline for enabling key block function.
  • In Jun. 2024, IND NPC wrote about blocking certain card transactions, see #217041.

Regulators IND NPC
Entity Types Bank; MSB
Reference Cir NPCI/2024-25/RuPay/006, 6/7/2024
Functions Compliance; Cyber; Operations; Privacy; Registration/Licensing; Technology
Countries India
Category
State
Products Banking; Cards; Payments
Regions AP
Rule Type Final
Rule Date 6/7/2024
Effective Date 12/31/2024
Rule Id 215175
Linked to Rule :217041
Reg. Last Update 6/7/2024
Report Section International

Last substantive update on 06/12/2024