HomeCirculars › RBI/2007-2008/95

RBI Guidelines for UCBs Issuing ATM-cum-Debit Cards

Current · Source: Reserve Bank of India · RBI/2007-2008/95 · issued 13 Jul 2007 · ~2 min read
Quick answerRBI has issued detailed guidelines for Primary (Urban) Co-operative Banks to issue ATM-cum-Debit Cards. Banks with Board approval can issue these cards to eligible customers, but offline debit cards and tie-ups with non-bank entities are prohibited. Half-yearly reporting to RBI is mandatory.
The rule, in the simplest words
How it plays out — a real example

Ravi, a co-operative bank branch officer in Indore, is preparing to issue ATM-cum-Debit Cards at his urban co-operative bank. He first gets the Board's approval, then checks that each customer has a savings account and proper KYC documents. He makes sure no offline debit cards are issued and no deals are made with non-bank companies. Every six months, he collects the card usage data and sends a report to RBI, keeping his bank safe and compliant.

What changed

RBI issued a comprehensive circular on July 13, 2007, providing specific guidelines for UCBs to issue ATM-cum-Debit Cards. The circular prohibits offline debit cards and tie-ups with non-bank entities, and mandates half-yearly board reviews and reporting to RBI.

What it means for you

UCBs must now follow a structured framework for issuing ATM-cum-Debit Cards, including Board approval, KYC compliance, and security measures. They cannot issue offline debit cards or partner with non-bank entities for card issuance. Regular half-yearly reviews and reports to RBI are required, increasing compliance burden but ensuring better risk management.

What you must do

Who it affects

All Primary (Urban) Co-operative Banks (UCBs), Board of Directors of UCBs, Compliance and risk management teams of UCBs, Customers holding savings/current/fixed deposit accounts with built-in liquidity features (excluding cash credit/loan account holders)

❓ Common questions

Can UCBs issue offline debit cards under these guidelines?

No, the circular explicitly states that issuance of offline debit cards is not permitted.

Are UCBs allowed to partner with non-bank entities for ATM-cum-Debit Cards?

No, UCBs cannot issue ATM-cum-Debit Cards in tie-up with other non-bank entities.

What is the reporting frequency for these cards to RBI?

UCBs must submit a half-yearly report to RBI's Department of Payment and Settlement Systems and the concerned Regional Office, at the end of March and September every year.

📜 Read the original circular — full text as issued by RBI
RBI/2007-2008/95 UBD (PCB) Cir No. 6 /09.18.300/2007-08 July 13, 2007. The Chief Executive Officers of All Primary (Urban) Co-operative Banks Dear Sir/Madam, Guidelines for issue of ATM-cum-Debit Cards by UCBs. Please refer to our circular  UBD (PCB).BPD.Cir.No.50/09.69.000/05-06 dated April 28, 2006  permitting the banks fulfilling certain eligibility norms to install ATMs and issue ATM-cum-debit cards. 2. It has been now been decided to issue guidelines for issuance of ATM-cum-Debit Cards. Banks which are authorized to install on-site /off-site ATMs, as per the policy in force, may introduce ATM-cum-Debit cards with the approval of their Board keeping in view the guidelines as given in  Annex I .  Issuance of offline debit card is however, not permitted.  The details of the ATM-cum-debit cards introduced may be advised to the Regional Office concerned of the Reserve Bank of India together with a copy each of the agenda note put up to their Board and the resolution passed thereon. 3. UCBs should not issue ATM-cum- debit cards in tie-up with other non-bank entities. 4. UCBs may review operations of these cards and put up review notes to their Boards at half-yearly intervals, at the end of March and September, every year. A report on the operations of these cards issued by banks should be forwarded to the Reserve Bank of India , Department of Payment and Settlement Systems (DPSS) with a copy to the Regional office concerned of Reserve Bank of India on a half yearly basis, say at the end of March and September every year, incorporating information as indicated in  Annex II . Yours faithfully, (N.S.Vishwanathan) Chief General Manager-in-Charge ANNEX I Guidelines for Issuance of ATM-cum- Debit Cards by UCBs- 1.    Coverage The guidelines apply to the cards encompassing all or any of the following operations: Electronic payment involving the use of card, in particular at point of sale and such other places where a terminal / device for the use / access of the card is placed. The withdrawing of bank notes, depositing of bank notes and cheques and connected operations in electronic devices such as cash dispensing machines and ATMs. 2.   Cash Withdrawals No cash transaction, that is, cash withdrawals or deposits should be offered at the Point of Sale, with the ATM-cum-debit cards under any facility, without prior authorization of RBI under Section 23 of the Banking Regulation Act, 1949. 3.   Eligibility of Customers The banks can issue ATM-cum-debit cards to select customers as per their own eligibility criteria subject to compliance with 'Know Your Customer' guidelines. Banks can extend the ATM-cum- debit card facility to those having saving bank account / current account / fixed deposit accounts with built-in liquidity features maintained by individuals, corporate bodies and firms. Debit card facility should not be extended to cash credit / loan account holders. 4.   Security and other aspects (a) The bank shall ensure full security of the card.  (b) No bank shall despatch a card to a customer unsolicited, except in the case where the card is a replacement for a card already held by the customer. (c) Banks shall keep for a sufficient period of time, internal records to enable operations to be traced and errors to be rectified (taking into account the law of limitation for the time barred cases). (d) The cardholder shall be provided with a written record of the transaction after he has completed it, either immediately in the form of receipt or within a reasonable period of time in another form such as the customary bank statement. (e) The cardholder shall bear the loss sustained up to the time of notification to the bank of any loss, theft or copying of the card but only upon a certain limit or fixed amount or a percentage of the transaction agreed upon in advance between the card holder and the bank, except where the card holder acted fraudulently, knowingly or with extreme negligence. (f) Each bank shall provide means whereby its customers may at any time of the day or night notify the loss, theft or copying of their payment devices. (g) On receipt of notification of the loss, theft or copying of the card, the bank shall take all action open to it to stop any further use of the card. 5.  Terms and Conditions for issue The relationship between the bank and the card holder shall be contractual. As such: a)  Each bank shall make available to the cardholders in writing, a set of contractual terms and conditions governing the issue and use of such a card. These terms shall maintain a fair balance between the interests of the parties concerned. b)  The terms and conditions shall be expressed clearly. c) The terms shall specify the basis of any charges, but not necessarily the amount of charges at any point of time. d)  The terms may be altered by the bank, but sufficient notice of the change shall be given to the cardholder to enable him to withdraw if he so chooses. A period shall be specified after which time the cardholder would be deemed to have accepted the terms if he had not withdrawn during the specified period. e) (i) The terms shall put the cardholder under an obligation to take all appropriate steps to keep safe the card and the means (such as PIN or code) which enable it to be used. (ii)  The terms shall put the cardholder under an obligation not to record the PIN or code, in any form that would be intelligible or otherwise accessible to any third party if access is gained to such a record, either honestly or dishonestly. (iii) The terms shall put the cardholder under an obligation to notify the bank immediately after becoming aware: of the loss or theft or copying of the card or the means which enable it to be used; of the recording on the cardholder's account of any unauthorised transaction; of any error or other irregularity in the maintaining of that account by the bank. (iv) The terms shall specify a contact point to which such notification can be made and that such notification can be made at any time of the day or night. (v)  The terms shall put the cardholder under an obligation not to countermand an order which he has given by means of his card. g)  The terms shall specify that the bank shall exercise care when issuing PINs or codes and shall be under an obligation not to disclose the cardholder's PIN or code, except to the cardholders. h)  The terms shall specify that the bank shall be responsible for direct losses incurred by a cardholder due to a system malfunction directly within the bank's control. However, the bank shall not be held liable for any loss caused by a technical breakdown of the payment system if the breakdown of the system was recognizable for the cardholder by a message on the display of the device or otherwise known. The responsibility of the bank for the non-execution or defective execution of the transaction is limited to the principal sum and the loss of interest subject to the provisions of the law governing the terms ANNEX II Reporting Format for the Issue and Operations of ATM-Cum-Debit Cards- 1. Name of the Bank- 2. Period of Reporting- 3. Type of the card with hardware components-(IC Chip) eg., Magnetic strip, CPU, Memory- 4. Type of the software used- 5. Security standards followed- 6. Service provider (Self or otherwise)- 7. Total number of outlets where the ATM-cum-debit card can be used of which- (a) POS Terminal- (b) Merchant Establishment- (c) ATMs- (d) Others please specify. 8. Total number of cards issued-of which- (a) against Currant account- (b) against Savings account- (c) against Float Account- 9. Total Number of Transactions during the period- 10. Amount involved in the Total Number of Transactions- 11. Instances of frauds, if any, during the period. (a) No. of frauds- (b) Amount Involved- (c) Amount of loss to the bank- (d) Amount of loss to the card holder-
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2007-2008/95 · issued 13 Jul 2007. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related
Who does what — compliance checklist
⚙️ Operations
  • Maintain internal records for tracing operations and rectifying errors, considering limitation laws.
📜 Compliance
  • Obtain Board approval before issuing ATM-cum-Debit Cards, adhering to Annex I guidelines.
  • Ensure no offline debit cards are issued and no tie-ups with non-bank entities for card issuance.
  • Submit half-yearly reports to RBI (DPSS and Regional Office) by end of March and September, as per Annex II.
  • Provide customers with written transaction records and a 24/7 loss/theft notification mechanism.
Grouped from the action items above — a single circular may involve more than one team.
Worked example & action-note template

Example: if you are a Compliance officer at a bank this circular applies to (All Primary (Urban) Co-operative Banks (UCBs), Board of Directors of UCBs, Compliance and risk management teams of UCBs, Customers holding savings/current/fixed deposit accounts with built-in liquidity features (excluding cash credit/loan account holders)), your first concrete step on “RBI Guidelines for UCBs Issuing ATM-cum-Debit Cards” is: “Obtain Board approval before issuing ATM-cum-Debit Cards, adhering to Annex I guidelines.” (RBI issued this 13 Jul 2007).

  1. Circular: RBI/2007-2008/95 -- RBI Guidelines for UCBs Issuing ATM-cum-Debit Cards
  2. Issued: 13 Jul 2007
  3. Action required: Obtain Board approval before issuing ATM-cum-Debit Cards, adhering to Annex I guidelines.
  4. Action required: Ensure no offline debit cards are issued and no tie-ups with non-bank entities for card issuance.
  5. Action required: Submit half-yearly reports to RBI (DPSS and Regional Office) by end of March and September, as per Annex II.
  6. Action required: Maintain internal records for tracing operations and rectifying errors, considering limitation laws.
  7. Action required: Provide customers with written transaction records and a 24/7 loss/theft notification mechanism.
  8. Owner: ____________ Target date: ____________
  9. Board/committee approval needed? Y / N
  10. Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 05 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=3717&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗