Card Controls: How to Switch Off Online, International, and Contactless Use (RBI Rules)

• Is online shopping switched on for your debit card, or only for the card you actually use?
• Is international usage turned off on every card except when you travel?
• Does your old, unused credit card still allow contactless taps?

Card controls answer all three questions. Since 16 March 2020, the RBI has required every bank and card issuer in India to let you switch each type of card use on or off, and set your own limits, at any hour. Most people never open these settings. This guide explains what the rules say, which switches matter, and a setup that cuts the risk of misuse without making your card a hassle to use.

What the RBI rule says

The RBI circular “Enhancing Security of Card Transactions” (RBI/2019-20/142, 15 January 2020) sets the base rules. It applies to all scheduled commercial banks, regional rural banks, co-operative banks, payments banks, small finance banks, card networks and non-bank prepaid card issuers.

Source: RBI circular RBI/2019-20/142 dated 15 January 2020, effective 16 March 2020. Prepaid gift cards and mass-transit cards are excluded.

The five card controls you should know

1. Domestic online (card not present): covers shopping websites, apps, subscriptions and bill payments in India. OTP authentication still applies on top (see our online payment authentication guide).
2. International online: payments to foreign websites, including many app stores, software subscriptions and overseas airlines. This is the setting fraudsters exploit most, since payments on some foreign sites may not go through the Indian OTP step.
3. International in-store and ATM: needed only when you are physically abroad.
4. Contactless (tap and pay): small payments by tapping the card at the counter without a PIN, within the per-tap limit.
5. Domestic ATM and PoS: the basic use, on by default for a new card.

For each of these, card controls usually also let you set a daily amount limit lower than the bank’s default.

A practical setup for card controls

The idea is simple: keep only what you use switched on, and keep limits close to what you actually spend.

This is an example layout, not a rule. A family that pays most bills online from the debit card may prefer to keep domestic online on with a sensible cap.

Why keep the salary-account debit card tight? A debit card is linked straight to your savings. If it is misused, the money leaves your account at once, and you wait for the bank to reverse it. With a credit card, the disputed amount is the bank’s money until it is settled. That difference is the main reason many people keep online use on a credit card and off on the debit card.

How to change card controls

The exact menu names differ by bank, but the path is similar:

1. Mobile banking app: look under Cards, then “Manage card”, “Card controls” or “Usage settings”. Toggle each channel and set limits.
2. Internet banking: same options under the Cards section.
3. ATM: many banks offer a “card services” or “channel settings” option after you enter your PIN.
4. Phone banking (IVR): call the number on the back of the card. Useful if you lose your phone.

After every change, check that the bank sends an SMS or email. RBI requires an alert whenever the card’s status changes. If you get one you did not trigger, call the bank and block the card.

When card controls help most

• Card details leaked: switching off online use stops further online charges at once while you wait for a replacement card.
• Card misplaced at home: turn everything off temporarily instead of blocking the card permanently. If it turns up, switch it back on.
• Before a trip abroad: switch on international use for the trip dates, with a limit. Switch off when back.
• Children or elderly parents with add-on or linked cards: keep limits small.

Card controls reduce risk, but they do not replace reporting. If money does go out without your consent, report it to the bank at once. RBI’s liability rules reward speed, and you can escalate through the RBI Ombudsman route if the bank does not resolve it.

Common mistakes

• Setting high limits “just in case”. Limits can be raised in seconds from the app when you need them.
• Leaving international use on after a trip, or after a single foreign subscription payment.
• Forgetting old cards. An unused credit card is better closed (see how to close a credit card) or at least kept with every channel off.
• Assuming switched-off cards stop recurring payments already set up. Standing instructions you approved earlier may follow their own rules; check them separately in the app.
• Sharing screenshots of the card control screen. It can show the card number and settings.

Here are the quick answers.

FAQs

My new debit card does not work on Amazon. Why?

RBI rules require new and reissued cards to start with only domestic ATM and PoS use enabled. Turn on domestic online use in your bank’s app.

Can the bank refuse to give me an on/off option?

The RBI circular requires issuers to offer the switch and limit facility 24×7 through multiple channels. If your bank does not, complain to the bank first and then to the RBI Ombudsman.

Do these rules cover prepaid wallets and gift cards?

Non-bank prepaid card issuers are covered, but the provisions are not mandatory for prepaid gift cards and mass-transit cards.

Will switching off online use block UPI?

No. UPI is linked to your bank account, not to the card controls. Card settings apply to card transactions.

Takeaway: Card controls are free and available 24×7 under RBI rules. Keep online, international and contactless use switched on only for the cards that need them, with limits close to your real spending.