All the issues listed above by you are not unique to India. I have to enter an extra PIN whenever I use my credit card issued to me by Royal Bank of Canada.Abhijeet wrote:It's not clear to me why online fraud seems to be a big issue in India, given the small number of people who have a credit card that they use online.
Instead of trying to promote e-commerce usage for efficiency reasons, the RBI seems to be firmly in the camp of making it as difficult as possible. It has recently passed a regulation that in order to transact online, users must enter a separate, bank-specified PIN in addition to the credit card and CVV numbers. In practice, this means that when buying something online, you have to enter the credit card number at the merchant's site, and you will then be redirected to the bank site to enter your PIN. If the site is down or slow (which is very likely in India) - tough luck.
HDFC has yet another insane policy called "NetSafe". With them, you cannot use your physical credit card number to transact online. Instead, you are required to generate a temporary card number for each specific transaction, and then enter that virtual number on the merchant's site. So to buy something:
- You select an item at the merchant's site
- Before paying, you have to log in to your HDFC account
- Generate the virtual PIN
- Enter the virtual PIN on the merchant's site
If you are an ecommerce site, this will probably result in lots of customer dropoff at the second step.
In addition, some banks like ICICI also have this thing called "Verified by Visa" or "Mastercard SecureCode" (which I had never heard of before coming to India), where you can shop with your card only on sites that are VBV/MSC enabled. I think there are about 15 sites in India, and even fewer internationally, that actually allow this, so those are the only sites you can use.
I don't get this whole attitude -- it reeks to me of fear of the unknown and putting a cumbersome bureaucracy in place before a problem has even been identified.
I agree that online fraud might be an issue, but the solution should not be to make the whole thing so cumbersome that most people will be discouraged from even attempting to buy things online - especially when ecommerce is in its infancy in India. Countries with far higher volumes of online transactions haven't felt the need to have such procedures in place -- perhaps we could learn from their experiences rather than making stuff up without due diligence?
A slightly old blog post that talks about the same issue:
http://www.watblog.com/2009/07/07/credi ... gulations/
As a consumer, I feel much better about it as it adds an extra layer of security for my online transaction ...