Update
Affiliate outbound links are now signed and logged
Reviewed by Renish Mithani Last reviewed 14 October 2026 Data verified 14 October 2026
When you tap an “Apply” button on a card page, you now go through a signed redirect: each click carries an HMAC signature and a one-time nonce, and the event is logged so we can attribute conversions to the right partner without handing out raw traffic data.
Privacy notes:
- No raw IP addresses are stored. Clicks are logged against an HMAC hash of your IP, not the IP itself.
- No personal data is passed to partners beyond what the issuer’s own application form requires.
- Disclosure is unchanged. FinWiz24 earns a commission on approved applications from some links. That money never touches scoring — the methodology is documented at /legal/review-methodology/.
The change affects every card page and the /go/ endpoint family. Direct links to issuer websites are unaffected.
Sources
- Reserve Bank of India — Master Direction on Credit Card and Debit Card Issuance (verified 5 September 2026).
- FinWiz24 review methodology (verified 5 September 2026).
Related reading
- Best cashback credit cards in India (2026 edition) — leaderboard across the cards most Indian cashback holders stack in 2026
- Card networks explained — Visa vs Mastercard vs Amex vs RuPay — why the network on your card matters more than the bank for acceptance
- Credit card fees and charges — MITC explained — every line in your MITC decoded, including GST on fees
- Reward points valuation: earn rate vs redemption value — earn-rate math, redemption-value math, and the difference between the two