State Bank of Pakistan on Tuesday issued new guidelines for retain or disable Automated Teller Machine (ATM) card. SBP in its circular PSD No 1 said that ATMs have been providing important e-banking facility to customers.
ATMs may, however, retain cards on certain occasions due to technical reason or disable the card if a cardholder makes three attempts with invalid PIN.
In order to provide convenience to cardholders, SBP, in consultation with the stakeholders, has developed new guidelines.
Regarding cards retention SBP has instructed the banks that banks are required to change program/system software. When a card is captured by ATM it should provide message that card has been captured or card can be collected from a certain branch within two working days,or from Issuing Branch within next 8 working days. A replacement card will be issued for which the bank may charge fee.
SBP said that acquiring branches need to check ATMs once a day for card capture. This activity may be performed while carrying out cash balancing and reconciliation to avoid undue inconvenience to the customers.
Acquiring branches are to log all retained cards under dual control immediately upon removal from the ATM and arrange return of such cards to the concerned cardholders within the time frame prescribed above after proper identity check through the presentation of original CNIC. In case of doubt or as advised by the issuing bank / branch, the acquiring branch may decline the delivery and forward the card to Card Facilitation Centre (CFC) of Issuing Bank stating the reasons of refusal of delivery to the card holder.
Acquiring Branches are also required to get a disposition log or signed receipt (with date and time) along with the photocopy of original CNIC.
Cards retained at the request of an issuing bank must be returned to the issuing bank by acquiring bank on the following working day of card capture.
If the card holder does not collect his / her card from issuing branch within the prescribed time, the issuing branch must cut the card into half vertically through the magnetic stripe. In such cases, issuing bank may charge for a replaced card issued to the card holder.
Acquiring branch must report to its Customers Facilitation Centre (CFC) details of number of cards retained, number of cards returned to cardholders and number of cards returned to issuing bank on daily basis.
Acquiring bank's CFC is to intimate the actual status of the captured cards to the issuing bank's CFC and its Primary and Secondary switches on daily basis. The intimation process must be automated and system driven.
Central bank said that any retained card that appears "suspicious" (for example, plain white plastic card, cardboard card or any other card that is unusual in nature) is to be preserved. Details of such cards should be reported to SBP each quarter. These cards may also be handed over to Law Enforcement Agency when demanded, in consultation with their legal departments and with proper documentation.
As per new guidelines acquiring bank will not incur liability for fraudulent or unauthorised transactions initiated with a card which was returned to the card holder following its retention at an ATM, provided that acquiring bank acted in accordance with the guidelines of this Circular.
Acquiring bank, however, will be liable for the losses sustained by the Issuing Bank for any fraudulent or unauthorised transactions made subsequent to card retention, if acquiring bank failed to comply with all the guidelines of this Circular.
Regarding disabled cards central bank stated the system marks the card as Warm (Disabled) upon exhausting PIN retry attempts or any other cardholder error and returns the card to the cardholder. ATM must display the message regarding disabling.
Issuing bank/branch to re-enable the card within 24 hours of the request (which may be either through call at customer support centre or in writing) of the cardholder; fully complying with the risk management procedures of the bank.
SBP has instructed to the issuing banks to maintain the proper record of retained/returned/cut/re-enabled cards for at least 6 months for the purpose of investigation of crimes related to cards.
Commercial banks need to develop standardised forms and documented procedures to manage the processes mentioned above. Staff responsible to manage the processes at branch level should also be appropriately trained.
This circular will apply on all cards issued by banks operating in Pakistan for local currency transactions, SBP said.
The above guidelines shall be effective from April 2008 and their compliance will be monitored under the relevant provisions of Payment Systems and Electronic Fund Transfer Act 2007.