HomeCirculars › RBI/2013-14/296

RBI's Final Deadline for POS Terminal Security: No More Extensions

Live · in forceNo withdrawal recorded as of 19 Jun 2026. Reviewed by Vikram Jain; always verify against the official RBI source below.
Issued by RBI: 27 Sep 2013  ·  Decoded by BankPulse: 19 Jun 2026, 17:15 IST
⏱ ~2 min read
📄 Official RBI source ↗
Quick answerRBI has denied further extensions for POS terminal security compliance (UKPT/DUKPT/TLE) beyond September 30, 2013. Non-compliant banks must compensate cardholders for fraud losses within 7 working days, with Rs.100 per day penalty for delays.

What changed

RBI rejected all requests for extending the September 30, 2013 deadline for implementing UKPT/DUKPT/TLE on POS terminals. Issuing banks must now verify terminal compliance within 3 working days of a fraud complaint and pay the disputed amount within 7 working days, with a Rs.100 per day penalty for delays. Acquiring banks must reimburse issuing banks within 3 working days or face RBI debiting their account.

What it means for you

Banks and lenders face strict liability for fraud at non-compliant POS terminals after September 30, 2013. Issuers must quickly process customer claims and recover from acquirers, while acquirers must ensure all terminals are compliant or bear losses. Non-compliance may also invite penal action under the Payment and Settlement Systems Act, 2007.

What you must do

Who it affects

All scheduled commercial banks including RRBs, Urban Co-operative Banks, State Co-operative Banks, District Central Co-operative Banks, Authorised Card Payment Networks, Issuing banks, Acquiring banks

What happens if a bank fails to comply with the September 30, 2013 deadline?

Non-compliant banks must compensate cardholders for any fraudulent POS transactions occurring after that date. The issuing bank pays the customer within 7 working days, with a Rs.100 per day penalty for delays, and recovers from the acquiring bank.

How quickly must an issuing bank respond to a fraud complaint?

The issuing bank must ascertain POS terminal compliance within 3 working days of the customer approaching them, and pay the disputed amount within 7 working days, or face a Rs.100 per day penalty from the 8th working day.

What are the consequences for acquiring banks that delay reimbursement?

Acquiring banks must pay the issuing bank within 3 working days of the claim. If they fail, RBI may debit their account to compensate the issuing bank, and penal provisions under the Payment and Settlement Systems Act, 2007 may be invoked.

Track this rule
⏳ How this rule evolved — History Map →Full RBI rulebook crosswalk →
AI-drafted · 3-model AI consensus fact-check · under the editorial review of Vikram Jain · decoded & published by BankPulse · 19 Jun 2026, 17:15 IST
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=8469&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by Vikram Jain. Independent platform, not affiliated with the Reserve Bank of India; never reproduces RBI text verbatim.