India has indefinitely banned Mastercard from issuing new debit, credit, or prepaid cards over noncompliance with local data storage rules
Reserve Bank of India has indefinitely barred Mastercard from issuing new debit, credit, or prepaid cards to customers in the South Asian market over noncompliance with local data storage rules.
Context & Ripple Effects
This ban lands nearly three years after Visa, Mastercard, Amex, Amazon, and PayPal were first reported to be ignoring the Reserve Bank of India's data-localization rule, which requires foreign card networks to store Indian transaction data domestically. The central bank has now converted that long-standing noncompliance into a hard market-access restriction rather than another deadline.
Mastercard becomes the first major card network actually cut off — a signal that RBI is willing to enforce with issuance suspensions, not just fines or extensions.
First-order effects
- Indian banks and issuers cannot bring new customers onto Mastercard debit, credit, or prepaid cards, freezing Mastercard's portfolio growth in one of its largest markets while existing cards keep working.
Second-order effects
- Issuers redirecting new-card volume will favor Visa and Amex — but those networks were named in the same 2018 reporting as noncompliant, so their upside depends on demonstrating the localization Mastercard failed to prove, under threat of the identical punishment.
- Compliance spending on local data infrastructure shifts from optional to table stakes for every global payments firm operating in India, changing the cost structure of serving the market.
Third-order effects
- If RBI holds the line, data localization stops being negotiable regulatory guidance and becomes a licensing condition for financial infrastructure in India — raising the price of entry for foreign networks and tilting the playing field toward players already storing data locally.
- The episode establishes market access itself as RBI's enforcement instrument, a precedent other regulators weighing data-sovereignty rules for cross-border payment flows can point to.
The trend: India is enforcing data sovereignty by conditioning market access on local data storage, turning compliance failures by global payments firms into issuance bans rather than penalties.