EPC020-08 SEPA Cards Standardisation Volume v7.1 Book 2
EPC020-08 SEPA Cards Standardisation Volume v7.1 Book 2
2015
BOOK 2
FUNCTIONAL REQUIREMENTS
Abstract This document contains the work on SEPA cards standardisation to date
Circulation Public
Table of Contents
1 GENERAL ....................................................................................................................... 4
2 SCOPE ........................................................................................................................... 6
1 GENERAL
This book defines functional requirements for Local and Remote Card Transactions for the
provision of the Card Services listed in Section 2.
These Card Services,
Involve, in general, a Cardholder and their Issuer, an Acceptor and their Acquirer;
Refer to Services where the Cardholder and the Acceptor interact using a particular
Cardholder Environment within a particular Acceptance Environment supporting
Cardholder Verification Methods and Card Authentication Methods;
Are processed through a succession of Functions which may be executed in the Physical
Card or Consumer Device, in the Physical or Remote POI, in the Terminal to Acquirer
Domain, and in the Acquirer to Issuer domain.
Section 2 describes the scope of this book by presenting an overview in the following Tables:
Table 1: Usage of Acceptance Environments and Cardholder Environments for Local and
Remote Transactions
Table 2: Book 2 Scope
Table 3: Mapping of Acceptance Technologies to Cardholder Environments
Section 3 defines core functional requirements for Cardholder Environments.
Section 4 defines core functional requirements for the POI.
Section 5 lists core functional requirements for protocols.
Details on security requirements may be found in Book 4.
Note: Card and POI Application implementations may support additional functionality, provided
they do not conflict with the Volume requirements.
This new version of Book 2 integrates the functional requirements for Remote Transactions, which
were previously published for consultation as Book 2 Annex and the related changes to
terminology as needed.
It further contains updates in view of the comments received through the consultation on Book 2
Annex.
Finally, the section on functional requirements for Pre-Authorisation Services was revised. In
particular:
A validity period is not used in Pre-Authorisation and Update Pre-Authorisation.
The amount to be authorised by an Update Pre-Authorisation is not the full new amount
to be reserved but the increment or decrement amount.
2 SCOPE
1
For Pre-Authorisation Services, No Show, subsequent transactions of Instalment Payments and Recurring
Payments, Local Transactions may be initiated by the Acceptor based on Stored Card Data.
2
For some Card Services, Remote Transactions may be initiated by the Acceptor based on Stored Card Data,
e.g., No Show, subsequent transactions of Instalment Payments and Recurring Payments.
3
Cardholder only if Semi-Attended
4
Cardholder only if DTMF used
5
Using the Mobile Device for Mobile Contactless
6
This concerns Card Services which are based on Stored Card Data and therefore do not involve any Cardholder Environment, e.g., No Show, subsequent transactions of
Instalment Payments and Recurring Payments.
7
In some scenarios an EMV Authentication Application stored on a Physical Card, in combination with an Additional Authentication Device, may be used.
Table 2 below represents the scope of Book 2 and lists for Local and Remote Transactions which
of the following items are or are not covered by the Volume (this is indicated by a "Y" or "N"
respectively):
Card Services
Cardholder Environments and Acceptance Environments
Acceptance Technologies
(Remote) Cardholder Verification Methods and (Remote) Card Authentication Methods
"N" also indicates that the item is not allowed for a specific transaction type.
"N/A" indicates that the item is not covered in this version of the Volume but may be covered in
future releases.
Definitions of the different Card Services, Cardholder Environments, Acceptance Environments,
Acceptance Technologies, Cardholder Verification Methods, Card Authentication Methods and
Functions are provided in Book 1.
SCS Volume Book 2 Scope
Transactions
Local Remote
e- and m- MOTO
commerce
CARD SERVICES
PAYMENT SERVICES
Payment Y Y Y
Refund (partial or total) Y Y Y
Cancellation Y Y Y
Pre-Authorisation Services
Pre-Authorisation
Y Y Y
Update Pre-Authorisation
Payment Completion
Deferred Payment Y N N
No-Show Y N N
Instalment Payment Y Y Y
Recurring Payment Y Y Y
Quasi-Cash Payment Y Y Y
ACCEPTANCE TECHNOLOGIES
8
Acceptor may also stand for an Attendant in the Acceptor's environment
9
This Acceptance Technology is used for remote transactions
10
Except if a touch-tone facility on a telephone handset is supported for Telephone Orders
CARDHOLDER ENVIRONMENTS
ACCEPTANCE ENVIRONMENTS
Physical POI
Attended13 Y N Y
Unattended Y N N
Remote POI
Virtual POI N Y N
Virtual Terminal N N Y
11
Using the relevant data extracted from the Card
12
Using the Mobile Device for Mobile Contactless
13
According to the definition in Book 1, this Acceptance Technology also comprises Semi-Attended.
14
However, a mail order form contains a cardholder signature
15
The No CVM goes beyond the verification process defined by EMV (see 4.2.3.7.2).
16
Typically the Card Security Code (CSC) is used.
17
This Card Authentication Method is used for remote card payments for secured e-/m-commerce (see section
4.2.3.6.2) and may use EMV authentication methods.
18
Only the Application Profile is selected
19
Cardholder authentication is an important issue in the remote environment. In this environment the
boundaries between authentication and / or verification of the Card and the Cardholder may become blurred.
However, for this version of the Volume, the functions Card Authentication and Cardholder Verification have
been kept separate to respect compatibility with the functions defined for Local Transactions.
20
Only applicable for the subsequent transactions of Instalment and Recurring Payments
ADMINISTRATIVE SERVICE
Table 3 shows which Acceptance Technologies can be used to retrieve Card Data from the
Cardholder Environments.
CARDHOLDER ENVIRONMENTS
ACCEPTANCE TECHNOLOGIES
21
For Acceptance Technology Stored Card Data, PAN and Expiry Date will have been provided earlier. Therefore
no Cardholder Environment is involved, which is denoted as "N/A".
3.1 Introduction
This section defines core functional requirements for Volume conformance for the Cardholder
Environment. The Requirements for Local Transactions are covered in section 3.2, while Remote
Transactions are handled in sections 3.3 (MOTO) and 3.4 (e- and m-commerce).
For Local Transactions, the Cardholder Environments Physical Card or Consumer Device22 are used.
Functional requirements for Card Applications in these Cardholder Environments are defined in
section 3.2.1 for the Acceptance Technology Chip with Contact and in section 3.2.2 for the
Acceptance Technologies Chip Contactless and Mobile Contactless.
Req C1: The Physical Card-to-Reader communication shall be compliant with [EMV B1]. The
functionality (commands and data structure) implemented by Card Applications
shall comply with the relevant requirements in [EMV B1].
Req C2: Physical Cards shall support Application Selection through PSE according to [EMV
B1]23.
Req C3: PSE and Card Applications shall include the Language Preference data element. It is
recommended that this data element also includes English.
Req C4: Card Applications shall support PIN as CVM. Other CVMs as defined by [EMV] may
also be supported.
Card Applications shall support Offline PIN and Online PIN.
Card Applications that support Offline PIN may support either Offline Plaintext PIN
or Offline Enciphered PIN or both. Offline Enciphered PIN is preferred.
The requirement to support PIN may be waived in exceptional circumstances, to
allow Card Transactions by people who, for reasons of disability, are unable to
enter, memorise and/or safeguard a PIN.
Req C5: Card Applications shall support Online Mutual Authentication (OMA).
22
Using the Mobile Device for Mobile Contactless
23
The support of "Payment System Environment" (PSE) by the Physical Card is optional in [EMV B1]. The support
of PSE is mandatory for SEPA compliance as defined in Req C2. Migration considerations are provided in Book
6.
Req C6: Card Applications that support offline transactions shall support Offline Data
Authentication.
Card Applications that support Offline Data Authentication shall support DDA or
CDA or both.
The (Mobile) Contactless Card Application has to support processing corresponding to at least one
of the kernels supported by the contactless POI application for contactless acceptance.
Req C7: The Physical Card or Mobile Device-to-Reader communication shall be compliant
with [EMV D].
Req C8: (Mobile) Contactless Card Applications shall comply with the card requirements in
[EMV A] and [EMV B].
Req C9: The (Mobile) Contactless Card Application shall allow identification of the Form
Factor for use in authorisation and data capture.
Req C10: Physical Cards shall support Combination Selection through PPSE according to the
card requirements in [EMV B].
Req C11: Mobile Contactless Card Applications and Mobile Devices shall be compliant with
[EMV M1], [EMV M2].
Req C12: The PPSE shall include the Language Preference data element. It is recommended
that this data element also includes English.
3.3 MOTO
For e- and m-commerce, Card Data may be entered on a Consumer Device or may be derived from
data stored on a Consumer Device. This may include a (Mobile) Remote Payment Application or
Cardholder Payment Credentials. In addition, the Cardholder Payment Credentials may be
combined with an Authentication Application. Entering Card Data on a Consumer Device may also
require the use of a Physical Card or a Virtual Card.
Req C14: If a (Mobile) Remote Payment Application, Cardholder Payment Credentials or an
Authentication Application is used, they shall be stored in a Secure Environment
accessible via the Consumer Device.
4.1 Introduction
This section defines core functional requirements for Volume conformance for POI Applications
on Physical and Remote POIs including Virtual POIs and Virtual Terminals. This includes ATM
Applications since ATMs are specific Physical POIs. The section is mainly structured according to
the Card Services, Functions and Additional Features, as listed in section 2.
Section 4.2 contains general requirements that apply to all Card Services for Local Transactions
(Physical POI), e- and m-commerce (Virtual POI) and MOTO (Physical POI or Virtual Terminal):
For the POI Application,
For the Configuration Function and
For the Functions used for transaction processing.
Section 4.2 is followed by sections detailing the specific functional requirements for each individual
Card Service.
The sections on the individual Card Services are grouped according to section 2 as follows:
Payment Services (section 4.3),
Cash Services (section 4.4),
Card Inquiry Services (section 4.5) and
Card Electronic Transfer (section 4.6).
These sections contain the following for Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI or Virtual Terminal):
Allowed combinations of Acceptance Technologies and Acceptance Environments for each
Card Service.
Applicability of the Functions for each Card Service in the different Acceptance
Environments.
Card Service dependent requirements for the POI Application and for Configuration, if any.
Card Service dependent requirements for the Functions that are applicable for processing
the Card Service as appropriate.
Section 4.7 contains requirements that apply to the Additional Features.
A functional requirement for POI Applications is only applicable to POI Application
implementations which support the Card Service and/or Function addressed by the requirement.
The term "Contactless" is used to refer to both Acceptance Technologies, the Chip Contactless
Acceptance Technology and the Mobile Contactless Acceptance Technology, unless described
otherwise.
The requirement T6 below provides for the usage of kernels according to [EMV C] as well as any
other kernel that complies with [EMV A] and [EMV B].
This section contains requirements that apply to all or several Card Services. These requirements
are grouped in requirements for the POI Application (section 4.2.1), for the Configuration Function
(section 4.2.2) and for the Functions used for Card Service Processing (section 4.2.3).
The POI Application is an Acquirer dedicated application consisting of software and data used to
perform a Card Service. Depending on the architecture of the POI, the POI Application may be
implemented on one component or distributed on several components.
4.2.1.1 Local Transactions, e- and m-commerce and MOTO (Physical POI, Virtual POI and
Virtual Terminal)
Req T1: The POI Application shall facilitate processing with different acquirers.
The following figure shows the logical relationship between the POI Application, the Card Services,
the Functions and the configuration parameters:
POI parameters configure the POI Application independently of the Card Services, e.g.,
define which of the supported Acceptance Technologies, Acceptance Environments, Card
Services and Functions are available for transaction processing.
Card Service parameters configure the Card Service, e.g., define which of the available
Acceptance Technologies are allowed for a Card Service.
Application Profile parameters configure the Application Profile for a Card Service, e.g.,
define the limits to be used.
POI Parameters
Functions
POI Application
Those Functions which are
(POI software)
implemented in the POI
Application are "supported"
A POI Application shall meet the requirements listed in this section, depending on the Acceptance
Technologies that are supported.
Req T2: The POI Application supporting the Chip with Contact Acceptance Technology shall
be compliant with [EMV].
Req T3: For the Chip with Contact Acceptance Technology, the POI Application shall support
Application Selection through PSE ("Payment System Environment").
Req T4: The POI Application supporting Contactless Technology shall accept any contactless
form factor.
Req T5: The POI Application, supporting the Contactless Acceptance Technologies, shall be
able to identify and react adequately to whichever form factor is presented if the
information is available from the form factor. If the form factor information is not
available, the POI Application shall assume that the Chip Contactless Acceptance
Technology is used. When required by scheme rules the form factor information
shall be included in authorisation and data capture.
Req T6: The POI Application supporting the Contactless Acceptance Technologies shall
support and comply with [EMV A], [EMV B] and [EMV D].
ReqT7: The POI Application shall support at least a local language and English for the
cardholder display. English only is allowed if English is the local language.
Req T8: The POI Application shall support updating of text tables for cardholder display
languages.
Req T9: All POIs, attended and unattended, shall be protected from unauthorised use of the
Card Services Refund, Original Credit and Cancellation.
Req T10: For the unattended POI, independent of the level of integration with the sale
system, the following communications shall be exchanged:
Communication to request a transaction, including the transaction amount and
Transaction Type if applicable, from the sale system to the POI Application.
Communication of the authorisation result, including authorised transaction
amount if applicable, from POI Application to sale system.
In the event the final amount differs from the amount authorised, this event
needs to be communicated from the sale system to the POI Application,
including the final amount if needed to take the appropriate actions.
In addition the following communication should be supported by the unattended
POI:
Communication of presence of a Physical Card and, if the Contactless
Acceptance Technologies are supported, of a Mobile Device from POI
Application to sale system.
Req T11: If the Chip with Contact Acceptance Technology has been tried and failed, and if
subsequently Magnetic Stripe Acceptance Technology is tried, and the magnetic
stripe data indicates that the Chip with Contact Acceptance Technology is
supported, then the POI Application shall check the Application Profile
configuration to determine, whether the magnetic stripe transaction is allowed and
if it has to be considered as a fallback transaction (see T23).
For e- and m-commerce, a Card Acceptor website is involved which typically includes the following
components:
The "shopping" pages;
The checkout page, where the consumer selects the payment method (e.g., through a logo
or brand name) and provides the necessary information for delivery of the goods or
services.
It further may include
A securely connected payment page where the Cardholder provides the relevant payment
related data
For MOTO transactions, the Card Data provided by the Cardholder may be communicated to the
Acceptor in writing or verbally. This Card Data enters the acquiring system via a dedicated POI
Application on a Physical POI or a Virtual Terminal which will be referred to as MOTO Application
in the rest of this book.
A Virtual Terminal facilitates the exchange of Card Data and information between the Acceptor
and the Acquirer. It provides the Acceptor with a secure connection via a web-browser to a third
party that hosts a Payment Page. The third party may be a processor, acquirer, or other third-party
service provider who stores, processes, and/or transmits Card Data to authorise and settle an
Acceptor’s payment transactions.
For Mail Order transactions the Card Data and address data (as needed) are provided by
the Cardholder in writing (e.g., by mail or fax) and the Acceptor enters the data manually
Into a dedicated MOTO application on a Physical POI or
Via a web-browser into a dedicated MOTO application on a Virtual Terminal.
For Telephone Order transactions, the Card Data and address data (as needed) are
provided by the Cardholder
Verbally over a phone to the Acceptor who enters the data manually
In a dedicated MOTO application on a Physical POI or
Via a web-browser in a dedicated MOTO application on a Virtual Terminal.
By Manual Entry using the phone keypad e.g., via Touch Tone facility using Dual-Tone-
Multi-Frequency-encoded technology (DTMF), to automatically populate a dedicated
MOTO application on a Virtual Terminal.
For MOTO the address and Card Data provided by the Cardholder may be used for validation.
"Signature on File", when available, may also be used for dispute resolution.
Req T16: The Acceptor shall be able to confirm the transaction including the transaction
amount to execute the transaction.
4.2.2 Configuration
Configuration is the act and result of setting the parameters for configurable Card Services and
configurable Functions within a POI or MOTO Application.
This section contains requirements for configuration of several or all Services and Functions.
4.2.2.1 Local Transactions, e- and m-commerce and MOTO (Physical POI, Virtual POI and
Virtual Terminal)
Req T17: It shall be possible to configure the Card Services, the Application Profiles and the
Functions, when applicable. In particular it shall be possible to configure the POI
Application to activate or deactivate specific Card Services and/or Functions.
Req T18: It shall be possible to configure which of the supported Acceptance Technologies
are activated per Card Service. Activation of the Contactless Acceptance Technology
shall mean both, activation of Chip Contactless and Mobile Contactless.
Req T19: For Manual Entry, it shall be possible to configure the Physical POI or Virtual
Terminal to prompt for the entry of the CSC. Override shall be supported for No
Show transactions and transactions processed from Stored Card Data for Instalment
or Recurring Payments.
4.2.2.2 Local Transactions and e- and m-commerce (Physical POI and Virtual POI)
Req T20: It shall be possible to configure the supported CVMs per Application Profile.
Req T21: For POIs with a cardholder display it shall be possible to configure the default
language for the cardholder display and there shall always be one language set to
be the default language.
Req T22: As a default, the Chip with Contact Acceptance Technology has priority over the
Magnetic Stripe Acceptance Technology. However, it shall be possible to configure
per Card Service if the Chip with Contact Acceptance Technology is not required to
have priority over the Magnetic Stripe Acceptance Technology.
Req T23: It shall be configurable per Application Profile whether a magnetic stripe transaction
shall be allowed and considered as a fallback transaction in the event the Chip with
Contact Acceptance Technology has been tried and failed, and if the transaction is
afterwards performed based on the Magnetic Stripe Acceptance Technology, and if
magnetic stripe data indicates that the Chip with Contact Acceptance Technology is
supported by the Physical Card.
Req T24: For attended POIs that support referrals it shall be configurable per Application
Profile whether referrals are activated.
Req T25: It shall be configurable per transaction result (approved, declined or aborted) and
per Card Service whether a cardholder receipt shall be printed either never or
always or on request.24
Req T26: It shall be configurable per transaction result (approved, declined or aborted) and
per Card Service, whether a cardholder receipt shall be printed, either never or
always or on request.
24
If there is a legal requirement to print a receipt, the POI shall be configured to do so
The following sections contain the Function specific requirements which are not only applicable to
an individual Card Service but to all or to several Card Services.
Transaction Initialisation is the Function which allows selection of the Card Service for the next
transaction and where the transaction amount is set, transaction data is initialised and processing
of the Card Service is started.
Req T27: The attendant, cardholder or sale system shall be able to select the required Card
Service from the list of Card Services that are activated. If Card Service selection is
not performed, then the default Card Service is the selected Card Service.
Req T28: For transaction initialisation the cardholder display shall always display a message,
called Welcome Message, to the cardholder, the contents of which will depend on
the selected Card Service.
Req T29: The Welcome Message shall be shown only in the selected language if the default
language was overridden. Otherwise the Welcome Message shall be shown in the
default language and English (or in the default language only if it is English). If the
display is not capable of showing the Welcome Message in two different languages
at the same time, it shall alternate between the two.
Req T30: For all Acceptance Technologies with the exception of the Contactless Acceptance
Technologies, the transaction shall be initiated either by attendant action or by
insertion/swiping of a Physical Card or by external activation by the sale system.
Req T31: For contactless transactions, the transaction shall be initialised (i.e. Card Service
selection, amount availability) prior to the activation of the contactless reader of
the POI.
Req T32: For unattended POIs capable of, and configured for, printing a transaction receipt,
if the POI knows in advance that it cannot print a transaction receipt, it shall inform
the cardholder that a receipt cannot be printed and offer the choice to continue or
abort the transaction.
Req T33: If more than one Card Service is available for the transaction, the cardholder shall
be able to select the Card Service from the list of Card Services that are available. If
only one Card Service is available, this Card Service shall be selected by default.
Req T34: The POI shall inform the cardholder upon the payment products accepted for the
Card Service selected. An Application Profile configuration shall be associated with
each payment product.
Req T35: All transactions shall be initiated by the Card Acceptor only.
Requirements T27, T28, T29 and T30 defined above for Physical POIs also apply for MOTO, albeit
it is the Acceptor that is interfacing with the POI.
Req T36: The default Service on a Virtual Terminal shall be the Payment.
Language Selection is the Function which allows selecting one of the languages supported by the
POI for the cardholder display.
Chip with Contact or Contactless and if the card data element Language Preference
is retrieved, the selection of the language for the cardholder display shall be
performed according to [EMV] (Card based Language Selection) and the POI
Application shall use from that moment on the first language in the Language
Preference that it supports.
If the Acceptance Technology is neither Chip with Contact nor Contactless, or if the
card data element Language Preference is not retrieved, or if the POI Application
does not support any of the languages in the Language Preference, the POI
Application shall continue to use the default language without performing any
(additional) language selection.
Req T40: For attended POI, the messages for the attendant shall be displayed in a local
language.
Req T41: If a language is selected on the merchant's website before the start of the
transaction, the POI shall receive this language and the language selected shall be
used for the whole transaction.
Req T42: If the POI does not receive any language from the merchant's website, or if the
language that the POI receives is not supported, the POI shall use its own language
selection. If not, it shall perform the whole transaction in English language as a
minimum.
Technology Selection is a Function of Physical POIs performed only for Local Transactions which
allows for the selection of one of the following Acceptance Technologies for transaction
processing: Chip with Contact, Magnetic Stripe, Chip Contactless, Mobile Contactless or Manual
Entry.
Req T43: If a transaction is processed based on Stored Card Data, Technology Selection shall
not be performed.
Req T44: Technology Selection shall be based on the configuration of the Card Service to be
performed i.e., which Acceptance Technologies are activated for the Service and
whether Chip with Contact has priority over Magnetic Stripe for this Service (see
Reqs. T18 and T22).
Req T45: If an Acceptance Technology is selected, all other Acceptance Technologies shall no
longer be taken into account until Technology Selection is re-started.
Req T46: The POI shall display a message to use the Chip with Contact Acceptance
Technology, if all of the following are true: The Magnetic Stripe Acceptance
Technology is used and the service code within Track 2 indicates that the Chip with
Contact Acceptance Technology is supported by the Physical Card and there has not
been an attempt to use the Chip with Contact Acceptance Technology during the
current transaction and the Chip with Contact Acceptance Technology is activated
for the Service (see Req T18) and the Chip with Contact Acceptance Technology is
configured to have priority (see Req T23).
Req T47: If before any other Acceptance Technology is selected a Chip Card is inserted in the
chip reader of a POI with separate readers or in a hybrid reader and Acceptance
Technology Chip with Contact is activated, the POI Application shall recognise this
and shall initiate reset processing according to [EMV B1].
Req T48: If a Physical Card is inserted in the chip reader of a POI with separate readers or in
the hybrid reader, and if the reset processing is unsuccessful, and if the POI
Application allows for additional re-reading of the chip, a message shall be displayed
to retry the Chip with Contact Acceptance Technology.
Req T49: If a Physical Card is inserted in the chip reader of a POI with separate readers or in
the hybrid reader, and if the Chip with Contact Acceptance Technology does not
work and if the Magnetic Stripe Acceptance Technology is activated, then the POI
Application shall initiate magnetic stripe processing identified as fallback according
to Req T23.
[IFR] only applies to EEA issued cards acquired in the EEA region. For example, all cards issued
outside the EEA area are out of scope, and not under the remit of [IFR].
The technical solution to implement [IFR] shall not impact international interoperability and global
acceptance.
There shall be no impact on interregional (EEA/non EEA) transactions (both incoming and
outgoing) to and from the EEA.
An EEA issued card shall have no detriment to acceptance when used outside of the EEA
region.
A non-EEA issued card shall continue to be accepted when used inside the EEA region.
The technical solution to implement [IFR] shall not impact non-EEA terminals or cards.
The requirements shall not force for international cards to be re-issued.
The requirements shall not force for terminals outside of the EEA to be upgraded.
Note:
There are various contexts where it is not technically feasible to allow the
Cardholder to override a choice (e.g., Environment with no screen and /or
no Pin/touch/key Pad ...).
Acceptor pre-selection can be achieved through various mechanisms.
Implementation guidance is provided in Book 6.
IFR Req T3: If the Acceptor has chosen to implement pre-selection, then the Cardholder shall
be informed of their ability to override the pre-selected application and by the
Acceptor how to override it at the POI so that the Cardholder can select their
preferred application.
IFR Req T4: The method of cancelling a transaction and the method of overriding an Acceptor
pre-selected application shall be clearly distinguishable from each other for the
Cardholder. Both shall be available if an application has been pre-selected by the
Acceptor.
For example, a clear override choice by using the yellow/Correction button or a
specific "Change Choice" button on the POI, in addition to the red/Cancel button.
IFR Req T5: If a Cardholder has chosen a specific payment type and brand, the Acceptor shall
not change neither the payment type nor the payment brand chosen by the
Cardholder for that transaction.
To address Article 10.5 the following requirement shall be met:
IFR Req T6: In order to support electronic product identification:
For Local transactions, a Card resident data element, defined by EMVCo,
shall be used as the target solution. While this data element is not available,
solutions based on BIN tables may be used.
For Remote transactions as currently defined in the Volume, solutions based
on BIN tables shall be used.
Note:
Solutions based on BIN tables can be achieved through various mechanisms.
Selection of the Application is the Function which allows the selection of an:
Application supported by the Chip Card or Mobile Device and the POI, either manually (by
the cardholder) or automatically (without cardholder interaction) to be used to process a
Card Service, for the Chip with Contact, Chip Contactless and Mobile Contactless
Acceptance Technologies,
Application Profile for all Acceptance Technologies.
Req T50: For Selection of the Application for the Chip with Contact Acceptance Technology,
in addition to Application Selection requirements of [EMV B1], the following rules
shall apply in line with the IFR Requirements in Section 4.2.3.4.1.2:
1. The POI shall always construct the list of mutually supported applications
between the Chip Card and the POI.
2. If the list contains only one entry, then proceed according to [EMV B1].
If there is more than one entry in the list, the POI shall proceed according to
Paragraph 3 or 4 or 5.
Paragraph 5 shall apply where it is not technically feasible to allow the
Cardholder to override a choice (e.g., Environment with no screen and /or
no Pin/touch/key Pad ...)
3. The POI shall present without discrimination all mutually supported
applications to enable Cardholder choice. The POI display ergonomics shall
be designed such that the Cardholder is able to choose from the mutually
supported applications in a convenient way.
The Acceptor may put their preferred application on top.
Once the Cardholder decides which application to be used for that
specific transaction, the Acceptor shall not override that decision.
4. The Cardholder will only be presented with the Acceptor pre-selected
application (automatic mechanism according to [IFR], Article 8.6). The
Acceptor pre-selection may use or override the EMV card priority list. If the
Acceptor has chosen to pre-select an application, the Cardholder shall have
the option and the means to either accept or override the Acceptor's pre-
selection.
In order to allow the Cardholder to either accept the Acceptor pre-selection
or to override the Acceptor choice and select their application of choice, the
POI shall always provide an override mechanism to the Cardholder. This
mechanism shall be made available before Card Risk Management is
performed.
If the Cardholder overrides the Acceptor’s preferred application, then
Paragraph 3 shall apply.
5. The POI shall select the first mutually supported application. The Acceptor
may put their preferred application on top.
Req T51: For Selection of the Application for the Chip Contactless and Mobile Contactless
Acceptance Technologies, the Volume currently defines requirements for One Tap
Contactless implementations. Application Selection shall follow [EMV B] without
any possibility for overriding. In addition, the Acceptor may put their preferred
application on top.
Req T52: The Application Profile shall be selected for a transaction based on the Card Service
and on the Payment Product. The selection of the Payment Product is primarily
based on the selected AID for the Chip with Contact Acceptance Technology, on the
Combination for the Contactless Acceptance Technologies and on the PAN for the
Magnetic Stripe, Manual Entry and Stored Card Data Acceptance Technologies.
Selection of the Application is the Function which allows the POI to select an Application Profile,
which is transparent for the Cardholder and the Acceptor.
Req T55: The Application Profile shall be selected for a transaction based on the Card Service
and on the Payment Product.
Card Data Retrieval is the Function which allows Card Data to be retrieved according to the
Acceptance Technology.
4.2.3.5.1 Local Transactions, e- and m-commerce and MOTO (Physical POI, Virtual POI and
Virtual Terminal)
Req T56: All authorisation and completion messages shall identify the Acceptance
Technology used to retrieve Card Data.
Req T57: For Local transactions at a Physical POI, the Acceptance Technology shall be Chip
with Contact, Chip Contactless, Mobile Contactless, Magnetic Stripe, and Manual
Entry by Acceptor or Stored Card Data.
Req T58: When Manual Entry by Acceptor is supported, the Physical POI Application shall
facilitate entering the PAN, the expiration date and, when appropriate, the Card
Security Code.
Req T59: For e- and m-commerce transactions, the Acceptance Technology shall be Manual
Entry by Cardholder, Payment Credentials on Consumer Device, Payment
Credentials on Consumer Device with Authentication Application, (M)RP
Application on Consumer Device, Stored Card Data. Therefore the POI shall display
a payment page to the Cardholder. This page shall facilitate the entry of the PAN,
the Expiration date, and the Card Security Code or shall support automatic reading
of the Card Data from the (M)RP application, Authentication Application or the
Payment Credentials accessed via a Consumer Device.
Req T60: For MOTO transactions, the Acceptance Technology shall be Manual Entry by
Attendant or Stored Card Data. The interface with the cardholder is just to facilitate
the entry of the Card Data via a Telephone keypad when Touch-Tone using DTMF
technology is supported. Therefore the Physical POI and Virtual Terminal shall
facilitate the entry of the PAN, the Expiration date, and the Card Security Code by
the Acceptor and where DTMF is enabled; the Virtual Terminal shall support the
entry of the Card Data by the cardholder via a telephone keypad.
Req T61: The MOTO Application shall also support the entry and transmission of address
data.
Card Authentication for Local Transactions is the Function defined by EMV by which a Card
Application is authenticated to the POI (Offline Data Authentication) and/or the Issuer (Online
Mutual Authentication). Card Authentication applies only to the Chip with Contact and Contactless
Acceptance Technologies.
Req T62: Online-only POI Applications are not required to support Offline Data
Authentication.
Req T63: The POI Application supporting the Chip with Contact Acceptance Technology and
Offline Data Authentication shall support all Offline Data Authentication methods
as defined in [EMV].
Card Authentication is the Function by which Card Data or a Card Application is authenticated to
the Issuer. However, some of the methods described below also facilitate cardholder
authentication (e.g., OTP).
In addition, Passive Authentication may be used by the issuer as an additional method for risk
management, as described in Book 4 section 2.3.2.4.
Req T64: For basic e- and m-commerce transactions the card authentication is performed
using static authentication (e.g., the verification of the Card Security Code by the
issuer). This may involve a redirection from the Virtual POI to an authentication
server in the Issuer domain. For recurring and instalment type transactions the
static authentication may only be performed on the initial transaction, because
storage of the Card Security Code is prohibited.
Req T65: For secured e- and m-commerce transactions the card authentication shall be
performed through a dynamic authentication25 method where a One Time
Password (OTP) or a random challenge / response mechanism is used. This typically
involves a redirection from the Virtual POI to an authentication server in the Issuer
domain.
25 Note that any dynamic authentication method in combination with a CVM results in a "strong customer
authentication" method as defined by the EBA Final Guidelines for the Security of Internet Payments [EBA].
Cardholder Verification is the Function used to verify whether the person using the Cardholder
Environment is the legitimate cardholder.
On the Physical POI, Cardholder Verification is the Function by which a Cardholder Verification
Method (CVM) is determined and performed. If Cardholder is not present, Cardholder Verification
is not applicable.
The CVMs to be used are defined in the EMV specifications and may also be used for other
Acceptance Technologies according to the conditions below:
Offline Plaintext PIN and Offline Enciphered PIN (commonly referred to as "Offline PIN"), if
the Acceptance Technology is Chip with Contact, Chip Contactless or Mobile Contactless,
Online PIN, if the Acceptance Technology is Chip with Contact, Chip Contactless, Mobile
Contactless or Magnetic Stripe,
Mobile Code, if the Acceptance Technology is Mobile Contactless,
Signature and No CVM Required for all Acceptance Technologies.
Req T68: All Physical POI shall have a PIN Entry Device; with the exception of environments
where the interaction with the Cardholder must be minimized for Cardholder or
Acceptor convenience (e.g., low value payments, transaction speed, highway tolls).
Req T69: For POIs that have a PIN Entry Device, the POI Application shall be able to support
PIN as CVM.
Req T70: The POI Application shall not support PIN Bypass.
4.2.3.7.1.2 Cardholder Verification for the Chip with Contact Acceptance Technology
Req T71: POIs with a PIN Entry Device shall meet the following requirements:
For offline-only POIs the POI Application shall support Offline PIN.
For offline with online capability POIs the POI Application shall support Offline
PIN and may support, in addition, Online PIN.
For online-only POIs the POI Application shall support Offline PIN, or Online PIN
or both.
POIs that support Offline PIN shall support both, Offline Plaintext PIN and Offline
Enciphered PIN.
Req T72: POIs supporting a contactless POI Application shall support Online PIN and/or
Signature and/or No CVM Required and/or Mobile Code according to the
requirements of the contactless kernels implemented in that POI.
Req T73: POIs with a PIN Entry Device shall meet the following requirements:
The only PIN CVM supported for magnetic stripe transactions shall be Online
PIN.
The CVMs No CVM Required and Signature may also be supported.
Unattended POIs (including ATMs) shall not support Signature CVM.
In addition, ATMs shall not support No CVM Required.
Req T74: POIs with a PIN Entry Device shall meet the following requirements:
Neither Online PIN nor Offline PIN shall be supported.
Either the CVM No CVM Required or the CVM Signature or both shall be
supported.
On A Virtual POI, Cardholder Verification may be performed with one of the following Cardholder
Verification Methods (CVM):
Personal Code (offline or online),
Mobile Code (offline or online) and
No CVM.
From a Virtual POI perspective it is only involved in online CVMs.
For MOTO Cardholder Verification is not applicable. However, the address and Card Data provided
by the Cardholder may be used for validation. "Signature on File", when available, may also be
used for validation.
4.2.3.8 Authorisation
Authorisation is the Function performed by the POI to help the Acceptor to make a decision to
proceed with a Card Service or not. It can be processed online to Issuer or Acquirer or processed
offline by the Card Application.
Req T78: Magnetic Stripe and Manual Entry transactions shall be sent online for
authorisation. If the magnetic stripe transaction is a fallback transaction, it shall be
identified as a fallback transaction.
Req T79: If the Authorisation Response Code indicates that the Online PIN entered did not
verify correctly ("Wrong PIN"), for the Chip with Contact and Contactless
Acceptance Technologies, the transaction shall be declined and Online PIN re-entry
shall not be allowed within this same transaction.
In this case, if the Acceptance Technology is Chip with Contact, the POI may start a
new transaction transparently for the Cardholder to facilitate the re-entry of the
PIN (i.e. without ejecting the Chip Card, without repeating Language Selection and
Selection of the Application, but with repeating the complete EMV card process
including Online PIN entry).
Req T80: For attended POIs, for all Card Services with exception of the Payment Service (see
Req T116) and the Deferred Payment Service (see Req T186), the attendant shall
not be allowed to force a declined transaction to be accepted.26
Req T81: For e- or m-commerce transaction if a dedicated (Mobile) Remote Application is not
used, the POI shall perform an online authorisation exchange to the issuer. If a
dedicated (Mobile) Remote Application is used, the transaction shall be either
authorised online or offline by this Application.
Req T82: The authorisation message shall include all relevant information related to the Card
Authentication and Cardholder Verification where applicable.
4.2.3.9 Referral
Referral is the Function where a Card Service is completed with a verbal dialogue between the
Acceptor and the Acquirer to obtain an approval code when the Authorisation response contains
a referral response code. This Function does not necessarily involve the Cardholder or the
Cardholder Environment.
Req T86: Only attended POIs shall support referrals. If an unattended POI receives a request
for referral it shall decline the transaction.
Req T87: If the attended POI supports referrals, then it shall support it for all Acceptance
Technologies supported.
If the POI does not support referrals or if referrals are not activated for the
Application Profile and the POI receives a request for referral it shall decline the
transaction.
Req T88: If a Chip with Contact transaction is being processed and a request for referral is
received then chip processing shall be terminated by requesting a decline from the
26
Forcing a declined transaction to be accepted is at merchant risk.
Card Application and a message shall be displayed requesting the removal of the
Chip Card.
Req T89: If a request for referral is received and the attended POI supports referrals, the
following process shall be followed:
The contact number for voice authorisation shall be made available.
If an approval code is received orally during voice authorisation it shall be
manually entered in the POI.
If an approval code is entered, the transaction shall be approved.
If an approval code is not entered, the transaction remains declined.
The approval code shall be stored with the transaction data for data capture.
Req T90: The Referral Function shall be protected against unauthorised use.
All requirements as specified in Section 4.2.3.9.1 shall apply except Req T88.
4.2.3.10 Completion
Completion is the Function which provides information on how the transaction was completed. It
depends on the Card Service and on the Acceptance Environment whether all or some of the
following steps are performed:
Complete the transaction for the Card Application
Inform Cardholder, Attendant and/or Acquirer about the result of the transaction
Deliver a receipt to Cardholder and/or Attendant
4.2.3.10.1 Local Transactions (Physical POI), e- and m-commerce (Virtual POI) and MOTO
(Physical POI and Virtual Terminal)
Req T91: If the transaction (approved, declined or aborted) is not immediately online-
captured, the relevant data for data capture shall be stored in the POI.
Req T92: If the POI is capable of printing receipts, a transaction receipt shall be provided for
the Cardholder if configured for the Application Profile. The receipt for the
Req T93: The POI shall provide a transaction receipt to the Cardholder after a successful
authorisation process. The transaction receipt may be combined with the sales
receipt.
The following are the minimum data that shall be provided. The sequence of the
data elements provided is not mandatory. Additional data may be provided but is
out of scope of this document.
Transaction Date and Transaction Time
Transaction Amount and Transaction Currency
Truncated PAN
Payment product name
27
Provided these requirements are in line with the local laws and regulations
28
For Pre-Authorisation and Update Pre-Authorisation, this is the estimated amount that has been authorised.
29
For transactions with Dynamic Currency Conversion see Req. T311.
Req T98: For Telephone Order transactions, at least a transaction reference shall be provided
to the Cardholder during the call.
Req T99: For MOTO transactions a transaction receipt shall be provided to the Cardholder
with the delivery. The minimum data on the receipt is the same as listed in Section
4.3.1.2.2.
Req T100: In case of partial delivery, the final amount shall be reduced accordingly and a
receipt reflecting the reduced amount shall be provided to the Cardholder.
4.2.3.11 Reversal
Reversal is the Function where the sender informs the receiver that a transaction cannot be
processed as instructed with the intention to partially or completely nullify the effects of this
transaction. This Function involves neither the Cardholder nor the Cardholder Environment.
Reversal can be performed online or offline by removing the transaction data or by storing
cancellation data for capture.
The following requirement applies to Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI and Virtual Terminal):
Req T101: Reversal shall be performed online if Authorisation is performed online and if any
of the following is true:
A correct response is not received or no response (timeout) is received
Or the transaction is declined/aborted after an online (full or partial) approval.
Data Capture is the Function to transfer data captured at a POI to the Acquirer for "Financial
Presentment". Data Capture can be performed either as part of the Authorisation message or after
transaction completion through either a Completion Message or Batch File transfer.
4.2.3.12.1 Local Transactions (Physical POI), e- and m-commerce (Virtual POI) and MOTO
(Physical POI and Virtual Terminal)
Req T102: One of the following methods or combinations thereof, of transferring the
transactions to an Acquirer shall be supported:
Online capture through the authorisation message.
Online capture through a Completion Message sent after each transaction.
Batch capture through file transfer or transaction by transaction.
4.2.3.12.2 MOTO
Req T103: The completion message shall identify that the transaction is MOTO.
4.3.1 Payment
The column "Requirement" in Table 6 shows which Functions are not applicable (N/A) or which
are, mandatory (M), optional (O) or conditional (C) for the Payment Service and for Local
30
On the Virtual Terminal, key entry by cardholder can be performed when a Touch Tone facility, using DTMF,
is supported.
Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C M M
Cardholder Verification M M N/A
Authorisation M M M
Referral O N/A O
Completion M M M
(Partial) Reversal C C C
Data Capture M M M
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Payment Service for Local Transactions (Physical POI), e- and m-commerce (Virtual
POI) and/or MOTO (Physical POI or Virtual Terminal).
4.3.1.1.1 Local Transactions, e- and m-commerce (Physical POI and Virtual POI) and MOTO
(Physical POI or Virtual Terminal)
Req T104: The transaction amount shall be checked against a minimum allowed amount
and/or a maximum allowed amount, if configured for the Application Profile.
Req T105: For Payment, the cardholder shall be able to confirm the transaction amount and
the payment product when performing the CVM.
The only exception is where the CVM is No CVM Required, where the confirmation
of the transaction amount shall be implicit by presenting the Physical Card or Mobile
Device.
Req T106: For unattended POIs, if the transaction amount is defined before the delivery of the
goods or services, the amount used to process the transaction shall be the actual
amount.
Req T107: If the POI supports partial approvals of online authorisations, then it shall support
it for all Acceptance Technologies supported.
Req T108: For e- and m-commerce transactions the Virtual POI shall inform the Cardholder
about the transaction including the transaction amount prior to the initiation of the
Payment.
Req T109: For MOTO transactions the Card Acceptor shall be able to confirm the transaction
including the transaction amount.
4.3.1.2 Configuration
4.3.1.2.1 Local Transactions, and e- and m-commerce (Physical POI and Virtual POI) and MOTO
(Physical POI or Virtual Terminal)
Req T110: It shall be possible to configure per Application Profile, if the transaction amount
shall be checked against a minimum allowed amount and/or a maximum allowed
amount.
Req T111: It shall be configured that the Chip with Contact Acceptance Technology and/or the
Contactless Acceptance Technologies shall be supported (see Req. T18) and that the
Magnetic Stripe Acceptance Technology is subordinate to the Chip with Contact
Acceptance Technology (see Req. T23).
Req T112: For attended POIs that support Payment with increased amount, it shall be possible
to configure the POI to support the addition of a gratuity to be entered and
confirmed by the cardholder.
Req T113: For the specific Unable-to-go-online processing described in Req T123, the POI
Application shall be configurable per Application Profile to either approve the
Req T118: For attended POIs (Physical POI or Virtual Terminal), that support partial approvals
of online authorisations it shall be configurable per Application Profile whether
partial approvals are activated.
The following requirement applies to Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI and Virtual Terminal):
Req T119: For Payment, the transaction amount (i.e. the amount to be authorised, which
includes any additional amount) shall be available to the POI Application at
Transaction Initialisation.
4.3.1.4 Authorisation
4.3.1.4.1 Local Transactions (Physical POI), e- and m-commerce (Virtual POI) and MOTO
(Physical POI and Virtual Terminal)
Req T120: When a (Mobile) EMV Payment Application or (M)RP Application is not involved and
if an online authorisation is required and it is not possible to perform the
authorisation, the transaction shall be declined.
Req T121: For Authorisation, the transaction amount as defined in Req T119 shall be used.
Req T122: For online authorisation, the authorisation response may return a lower authorised
amount (partial approval).
If the POI does not support partial approvals for online authorisation or if partial
approvals are not activated for the Application Profile and the POI receives a partial
approval it shall decline the transaction.
If partial approvals are supported and activated, the POI shall always return the
actual authorised amount to the sale system and/or to the attendant.
Req T123: For Chip with Contact transactions, if it is not possible to perform an online
authorisation, the EMV Unable-to-go-online processing shall be performed with the
following extension. If the POI requests an approval, and the Card Application
approves the transaction, and the amount exceeds the POI floor limit, the POI
Application shall be configured to either approve the transaction (or for attended
POIs perform a voice authorisation according to scheme rules) or decline. Approval,
Voice Authorisation or decline shall be configurable per Application Profile.
Req T124: Forcing a transaction to go online shall not be supported on unattended POIs.
Req T125: For MOTO, if an online authorisation is required and it is not possible to perform an
online or voice authorisation, the transaction shall be declined.
4.3.1.5 Completion
4.3.1.5.1 Local Transactions and e- and m-commerce (Physical POI and Virtual POI)
Req T126: Any POI which is integrated with the sale system shall send a message to the sale
system to indicate the transaction result. In addition, it shall receive the final
transaction amount if different from the authorised amount, from the sale system.
4.3.1.6 Reversal
These Requirements apply to Local Transactions, e- and m-commerce (Physical POI and Virtual
POI) and MOTO:
Req T129: If the actual amount was authorised but goods or service could not be delivered,
the POI shall receive an indication of this from the sale system. If the transaction
was authorised online, the POI shall then perform a reversal to nullify the original
authorisation.
Req T130: If the actual amount was authorised but not all the goods or service could be
delivered; the POI shall receive an indication of this from the sale system, including
the reduced amount. If the transaction was authorised online and capture is not
performed immediately, the POI shall then perform a partial reversal. The captured
data shall always include the final, reduced amount.
4.3.2 Refund
The column "Requirement" in Table 8 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Refund Service and for Local
Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M N/A N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication N/A N/A N/A
Cardholder Verification N/A N/A N/A
Authorisation O O O
Referral N/A N/A N/A
Completion M M M
(Partial) Reversal C C C
Data Capture M M M
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Refund Service for Local Transactions (Physical POI), e- and m-commerce (Virtual POI)
and/or MOTO (Physical POI or Virtual Terminal).
4.3.2.1.1 Local Transactions (Physical POI), e- and m-commerce (Virtual POI) and MOTO
(Physical POI and Virtual Terminal)
Req T131: The transaction amount shall be checked against a maximum allowed amount if
configured for the Application Profile.
Req T132: If Chip with Contact or a Contactless Acceptance Technology is used to retrieve the
Card Data for the Refund transaction, EMV processing shall be followed until the
Card Data Retrieval Function has obtained either the Track 2 equivalent data, or the
PAN together with the Expiry Date. The amount given to the Card Application shall
4.3.2.2 Configuration
The following requirements apply to Local Transactions (Physical POI), e- and m-commerce (Virtual
POI) and MOTO (Physical POI and Virtual Terminal):
Req T133: In addition to Req T9, the Refund Service shall be subject to additional protection
as follows:
The maximum amount shall be configurable.
The allowed maximum amount that can be performed without additional
security (e.g., a supervisor password) shall be configurable.
Req T134: It shall be configurable per Application Profile, whether the Refund is performed
online or not.
The following requirement applies to Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI and Virtual Terminal):
Req T135: The Refund amount shall be available to the POI Application at Transaction
Initialisation. The way to link the Refund transaction to a previous Payment is out
of scope.
4.3.2.4 Authorisation
The following requirement applies to Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI and Virtual Terminal):
Req T136: For Local Transactions, MOTO and e- and m-commerce, if required by the
Application Profile, the Refund shall be processed online.
4.3.3 Cancellation
The column "Requirement" in Table 10 shows which Functions are not applicable (N/A) or which
are, mandatory (M), optional (O) or conditional (C) for the Cancellation Service and for Local
Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M N/A N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication N/A N/A N/A
Cardholder Verification N/A N/A N/A
Authorisation C C31 M
Referral N/A N/A N/A
Completion M M M
(Partial) Reversal O C C
Data Capture C C C
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Cancellation Service for Local Transactions (Physical POI), e- and m-commerce (Virtual
POI) and/or MOTO (Physical POI or Virtual Terminal).
4.3.3.1.1 Local Transactions (Physical POI), e- and m-commerce (Virtual POI) and MOTO
(Physical POI and Virtual Terminal)
Req T137: A Cancellation shall always be performed for the full amount of the original
transaction.
Req T138: When performed for the Pre-Authorisation Services, the Cancellation Service shall
cancel a Pre-Authorisation and all subsequent Update Pre-Authorisation(s).
Req T139: It shall be possible, to cancel a Payment Completion with the Cancellation Service.
31
When there is an (M)RP Application on the consumer device involved, online Authorisation is not mandatory.
Req T140: If Chip with Contact or a Contactless Acceptance Technology is used to retrieve the
Card Data for the Cancellation transaction, EMV processing shall be followed until
the Card Data Retrieval Function has obtained either the Track 2 equivalent data, or
the PAN together with the Expiry Date. The amount given to the Card Application
shall be zero to avoid unnecessary Card Risk Management. If Chip with Contact
Acceptance Technology is used, the EMV process shall be terminated by requesting
a decline from the Card Application.
4.3.3.2 Configuration
The following requirements apply to Local Transactions (Physical POI), e- and m-commerce (Virtual
POI) and MOTO (Physical POI and Virtual Terminal):
Req T141: It shall be configurable per Application Profile which of the Card Services can be
cancelled.
Req T142: It shall be possible to configure for the POI whether Cancellations shall be restricted
to the last transaction processed at the POI or may be extended to previous
transactions.
Req T143: It shall be possible to configure per Application Profile, whether Cancellations shall
be declined or processed online if the original transaction has already been
captured to the Acquirer.
Req T144: It shall be possible to configure per Application Profile, whether Cancellations shall
be declined or processed online if the original transaction cannot be recognised by
the POI.
Req T145: It shall be possible to configure per Application Profile, whether Cancellations shall
be performed offline or processed online if the original transaction was authorised
offline and has not been captured to the Acquirer.
4.3.3.3 Authorisation
The following requirements apply to Local Transactions (Physical POI), e- and m-commerce (Virtual
POI) and MOTO (Physical POI and Virtual Terminal):
Req T146: If the original transaction cannot be recognised by the POI or has been already
captured to the Acquirer, the Cancellation shall either be aborted or be processed
online according to the configuration of the Cancellation Service.
Req T147: If the original transaction can be recognised by the POI and has not been captured
to the Acquirer, Cancellation shall be performed as follows:
If the original transaction was authorised online, Cancellation shall also be
processed online.
The following requirements apply to Local Transactions (Physical POI), e- and m-commerce (Virtual
POI) and MOTO (Physical POI and Virtual Terminal):
Req T148: Data Capture shall be performed according to the conditions described in T147.
Req T149: Every captured Cancellation transaction shall include a (set of) data element(s)
uniquely referencing the original transaction.
Mobile Contactless,
Consumer Device with Payment Credentials and Authentication Application,
Consumer Device with (M)RP Application.
Table 11 shows which combinations of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO are allowed () or not allowed () for
the Pre-Authorisation Services.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
The column "Requirement" in TABLE 12: shows which Functions are not applicable (N/A) or which
are, mandatory (M), optional (O) or conditional (C) for the Pre-Authorisation and Update
Preauthorisation Service and for Local Transactions, e- and m-commerce and MOTO using the
respective Acceptance Environments Physical POI (attended and unattended), Virtual POI and
Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection C O N/A
Transaction Initialisation M M M
Technology Selection C N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C C C
Cardholder Verification C C N/A
Authorisation M M M
Referral O N/A C
Completion M M M
(Partial) Reversal C C C
Data Capture N/A N/A N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Pre-Authorisation Service for Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and/or MOTO (Physical POI or Virtual Terminal).
Req T150: For Local Transactions, if the Cardholder is participating, the Cardholder shall be
able to confirm the transaction amount and the Payment Product when performing
the CVM.
The only exception is when the CVM is No CVM Required, where the confirmation
of the transaction amount shall be implicit by presenting the Physical Card or Mobile
Device.
Req T151: The POI shall either receive the amount from the attendant or the sale system or
use a default amount, which - in both cases - should be an estimated amount (not
single unit currency), or be based on known or expected expenditure.
Req T152: If the cardholder is participating, the cardholder display shall clearly indicate that
the amount to be confirmed is an estimated amount / Pre-Authorisation.
Req T153: A Pre-Authorisation shall be identified as such.
Req T154: Data from approved Pre-Authorisations (e.g., PAN and Expiry Date, amount,
authorisation code and unique reference) needed for performing subsequent steps
(i.e. Update Pre-Authorisation, Payment Completion) shall be stored either in the
POI or in a system external to the POI.
Req T155: If a Card Application is used, the appropriate Card Application data elements from
both the Pre-Authorisation request and response must be retained for the Payment
Completion Service, including the EMV Application Cryptogram(s) (ARQC and, if
generated, TC), because all fields needed to validate the cryptogram must be
included in the Payment Completion record.
4.3.4.1.1.2 Configuration
Req T156: The POI Application shall be configurable to allow the Pre-Authorisation amount to
be received or to be a configurable default amount.
4.3.4.1.1.3 Authorisation
Req T157: A Pre-Authorisation shall be authorised online in order to reserve the funds.
Req T158: For Pre-Authorisation, the authorisation response may return a lower authorised
amount (partial approval).
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Update Pre-Authorisation Service for Local Transactions (Physical POI), e- and m-
commerce (Virtual POI) and/or MOTO (Physical POI or Virtual Terminal).
Acceptance Technology for Update Pre-Authorisation may be different from the Pre-Authorisation
(or previous Update Pre-Authorisation) Acceptance Technology mainly because the card or
cardholder are normally not present when Up-date Pre-Authorisations are being performed.
Req T160: If the Update Pre-Authorisation is performed based on Stored Card Data obtained
in the Pre-Authorisation, then the Card Data for an Update Pre-Authorisation shall
not contain the CSC, because the CSC cannot be stored after authorisation.
If the Update Pre-Authorisation is performed using a Card Application, then the
Card Data retrieved from the Card Application shall be used.
Req T161: For Local Transactions, if the cardholder is participating, the display shall clearly
indicate that the amount to be confirmed is an increment or decrement amount. In
addition the cardholder shall be able to confirm the transaction amount and the
payment product when performing the CVM.
The only exception is when the CVM is No CVM Required, where the confirmation
of the transaction amount shall be implicit by presenting the Physical Card or Mobile
Device.
Req T162: An Update Pre-Authorisation shall be identified as such and shall contain the unique
reference from the original linked Pre-Authorisation.
Req T163: An approved Update Pre-Authorisation shall increment or decrement the amount
of the previously linked Pre-Authorisation and Update Pre-Authorisation(s).
Req T164: Data from approved Update Pre-Authorisations (e.g., amount and authorisation
code) shall be stored either in the POI or in a system external to the POI for future
use as needed.
However, if the Update Pre-Authorisation is performed using a Card Application
then the relevant Card Application data shall be stored for subsequent steps.
Req T165: An Update Pre-Authorisation shall include the increment or decrement amount to
be authorised.
Req T166: If the cardholder is participating, the cardholder display shall clearly indicate that
the amount to be confirmed is the increment or decrement amount.
Req T167: If the Update Pre-Authorisation is declined, the previously linked Pre-Authorisation
(or Update Pre-Authorisation(s)) shall remain unchanged and valid.
Req T168: As soon as it is known that a Pre-Authorisation and any Update Pre-Authorisation
linked to it will not be used, the previously authorised amount(s) must be released
by either a Cancellation or an Update Pre-Authorisation that decreases the
authorised amount(s) to zero. In this case Payment Completion shall not follow.
4.3.4.1.2.2 Authorisation
4.3.4.1.2.3 Completion
Req T171: The transaction receipt, if any, shall clearly show that this is an Update Pre-
Authorisation and shall indicate the increment or decrement amount.
The column "Requirement" in TABLE 13 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Payment Completion Service for
Local Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection C N/A N/A
Transaction Initialisation M M M
Technology Selection C N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication N/A N/A N/A
Cardholder Verification N/A N/A N/A
Authorisation N/A N/A N/A
Referral N/A N/A N/A
Completion M M M
(Partial) Reversal N/A N/A N/A
Data Capture M M M
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Payment Completion Service for Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and/or MOTO (Physical POI or Virtual Terminal).
4.3.4.2.2 Configuration
Req T178: The POI Application shall be configurable to either perform online capture by
sending a completion message immediately after the Payment Completion, or
perform batch capture.
Req T179: If a Card Application was used in one of the Pre-Authorisation Service(s), the Card
Data to be used for the Payment Completion Service shall be the Card Application
data retained from the Pre-Authorisation Service.
Only Local Card Transactions (Physical POI) are allowed for processing the Deferred Payment
Service.
TABLE 14 shows which combinations of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO are allowed () or not allowed () for
the Deferred Payment Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
The column "Requirement" in TABLE 15 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Deferred Payment Service and for
Local Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M N/A N/A
Transaction Initialisation M N/A N/A
Technology Selection M N/A N/A
Selection of the Application M N/A N/A
Card Data Retrieval M N/A N/A
Card Authentication C N/A N/A
Cardholder Verification M N/A N/A
Authorisation M N/A N/A
Referral O N/A N/A
Completion M N/A N/A
(Partial) Reversal C N/A N/A
Data Capture M N/A N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Deferred Payment Service for Local Transactions (Physical POI).
Req T180: For Deferred Payment, the unattended POI shall use as transaction amount for
authorisation either a predefined amount available in the POI Application, or an
amount available and provided by the sale system (e.g., a selected amount). The
predefined amount may be configurable per Application Profile.
Req T181: The transaction amount for authorisation shall be checked against a maximum
allowed amount if configured for the Application Profile.
Req T182: The cardholder shall be able to confirm the transaction amount for authorisation
and the payment product when performing the CVM if confirmation of the
transaction amount is configured for the Application Profile.
If the CVM is No CVM Required, then the confirmation of the transaction amount
shall either be implicit by presenting the Physical Card or Mobile Device or explicit
4.3.5.2 Configuration
Req T183: It shall be configured that the Chip with Contact Acceptance Technology and/or the
Contactless Acceptance Technologies shall be supported (see Req. T18) and that the
Magnetic Stripe Acceptance Technology is subordinate to the Chip with Contact
Acceptance Technology (see Req. T23).
Req T184: It shall be possible to configure per Application Profile, if the transaction amount
shall be checked against a maximum allowed amount.
Req T185: For Deferred Payment, it shall be possible to configure per Application Profile, if the
transaction amount shall be confirmed by the cardholder.
Req T186: For attended POIs, it shall be possible to configure the POI Application to allow/not
allow the attendant to force a declined transaction to be accepted.26
Req T187: It shall be possible to configure for the POI Application the timeframe in which
reception of the delivery result is expected from the sale system.
4.3.5.3 Authorisation
4.3.5.4 Reversal
Req T190: Online Reversal shall not be performed if the transaction is declined/aborted after
an online approval. Instead a notification message with final amount zero shall be
used as described in T192.
4.3.5.5 Completion
Req T191: The POI shall receive the delivery result from the sale system, including the final
amount which must be lower than, or equal to, the authorised amount. The delivery
result may also be a zero amount.
Req T192: A notification of the final amount (e.g., an Advice message) shall be sent online
immediately after the delivery result is received. This notification shall also be sent
to nullify the effects of the authorisation if the final amount is zero (no delivery or
a delivery result is not received in the configured timeframe).
Req T193: The POI shall send a message to the sale system to indicate the transaction result.
Req T194: Data Capture shall be performed either as online capture through a completion
message sent after each transaction (referred to as notification message in T192) or
through batch capture.
Data Capture shall always include the final amount. If the final amount is zero Data
Capture is not required.
4.3.6 No-Show
"No-Show" is a "Card Not present" Service, which can only be performed using recorded Card Data
information including PAN and Expiry Date, because the reservation process (e.g., of a hotel room
or a rental car) does not normally involve the Cardholder Environment being present or the Card
Application being read. This data would have been previously received:
By phone, via a secure fax or from a letter in which case the PAN and Expiry could be
recorded on a manual folio or on a paper booking schedule.
Electronically from a booking agent or via a web service, in which case it would be regarded
as "Stored Card Data", which is commonly thought of as electronically stored.
Therefore, Stored Card Data or Manual Key Entry are the only Acceptance Technologies used for
this Service. In addition, this Service is restricted to the Acceptance Environments Attended
Physical POI or Virtual Terminal.
TABLE 16 shows which combination of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO is allowed () or not allowed () for
the No Show Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
The column "Requirement" in Table 17 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the No Show Service and for Local
Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection N/A N/A N/A
Transaction Initialisation M N/A M
Technology Selection N/A N/A N/A
Selection of the Application M N/A M
Card Data Retrieval M N/A M
Card Authentication N/A N/A N/A
Cardholder Verification N/A N/A N/A
Authorisation M N/A M
Referral O N/A O
Completion M N/A M
(Partial) Reversal C N/A C
Data Capture M N/A M
TABLE 17: FUNCTIONS USED FOR NO SHOW
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the No Show Service for Local Transactions (Attended Physical POI) and MOTO (Attended
Physical POI or Virtual Terminal).
4.3.6.1 Authorisation
Req T195: No Show transactions shall be authorised online and shall be identified as No Show.
Req T196: No Show transactions shall be identified as No Show when they are captured.
The Instalment Payment Service is initiated by a first transaction from the POI which is a Payment
transaction and contains specific information which identifies it as an Instalment Payment
transaction and which shall describe the payment schedule and conditions.
The subsequent transactions of an Instalment Payment are "Card Not present" transactions where
the Card Data used is extracted from Stored Card Data or is manually entered. In addition,
subsequent transactions of an Instalment Payment are not necessarily initiated by the POI that
performed the first Instalment Payment transaction.
In particular, for the first transaction Card Authentication and Cardholder Verification may be
performed whereas in subsequent transactions these Functions will not be performed.
The requirements for the first transaction of an Instalment Payment are described in section
4.3.7.1.
The requirements for the subsequent transactions of an Instalment Payment are described in
section 4.3.7.2.
Magnetic Stripe
TABLE 18: INSTALMENT PAYMENT: ACCEPTANCE TECHNOLOGIES AND ACCEPTANCE ENVIRONMENTS FOR FIRST TRANSACTION
The column "Requirement" in TABLE 19 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the first transaction of an Instalment
32
On the Virtual Terminal, key entry by cardholder can be performed when a Touch Tone facility, using DTMF,
is supported.
Payment and for Local Transactions, e- and m-commerce and MOTO using the respective
Acceptance Environments Physical POI (attended and unattended), Virtual POI and Virtual
Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C M M
Cardholder Verification M M N/A
Authorisation M M M
Referral O N/A O
Completion M M M
(Partial) Reversal C C C
Data Capture M M M
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the first transaction of an Instalment Payment for Local Transactions (Physical POI), e- and
m-commerce (Virtual POI) and MOTO (Physical POI or Virtual Terminal)
Req T197: The first transaction of an Instalment Payment shall follow the same process as the
Payment Service for all available Acceptance Technologies, but using its own
configuration.
4.3.7.1.2 Configuration
Req T198: The allowed maximum total Instalment amount shall be configurable.
4.3.7.1.3 Authorisation
Req T199: The first transaction of an Instalment Payment shall be online and shall include the
information which identifies it as the first transaction of an Instalment Payment and
how many Payments shall be made in the payment plan, e.g., 1:6 to indicate that
this is the first of 6 Payment transactions.
Req T200: The data captured for clearing of the first transaction of an Instalment Payment shall
additionally include the information which identifies it as the first transaction of an
Instalment Payment and how many transactions shall be made in the payment plan
(e.g., 1:6 to indicate the first of 6 transactions).
Regardless what Acceptance Technology or Acceptance Environment was used for the first
transaction, subsequent transactions will use Stored Card Data and may be processed by the
Acceptor or entirely in the environment of the PSP. The Cardholder will not be involved.
The column "Requirement" in Table 20 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the subsequent transactions of an
Instalment Payment for all Acceptance Environments.
Function Requirement
Language Selection N/A
Transaction Initialisation M
Technology Selection N/A
Selection of the Application M
Card Data Retrieval M
Card Authentication N/A
Cardholder Verification N/A
Authorisation M
Referral O
Completion M
(Partial) Reversal C
Data Capture M
TABLE 20: FUNCTIONS USED FOR SUBSEQUENT TRANSACTIONS OF AN INSTALMENT PAYMENT
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the subsequent transactions of an Instalment Payment.
4.3.7.2.1 Authorisation
Req T201: Subsequent Instalment Payment transactions shall be authorised online using only
PAN and Expiry Date and shall include the information which identifies the
instalment number being processed from the payment plan (e.g., 3:6 to indicate the
third of 6 Instalment Payments).
Req T202: The data captured for clearing of subsequent Instalment Payment transactions shall
include the information which identifies the instalment number being processed
from the payment plan (e.g., 3:6 to indicate the third of 6 Instalment Payments).
The Recurring Payment Service is initiated by a first transaction from the POI which is a Payment
transaction and contains specific information which identifies it as a Recurring Payment
transaction.
The subsequent transactions of a Recurring Payment are "Card Not present" transactions where
the Card Data used is extracted from Stored Card Data or is manually entered. In addition,
subsequent transactions of a Recurring Payment are not necessarily initiated by the POI that
performed the first Recurring Payment transaction.
In particular, for the first transaction Card Authentication and Cardholder Verification may be
performed whereas in subsequent transactions these Functions will not be performed.
The requirements for the first transaction of a Recurring Payment are described in section 4.3.8.1.
The requirements for the subsequent transactions of a Recurring Payment are described in section
4.3.8.2.
TABLE 21: RECURRING PAYMENT: ACCEPTANCE TECHNOLOGIES AND ACCEPTANCE ENVIRONMENTS FOR FIRST TRANSACTION
The column "Requirement" in TABLE 22 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the first transaction of a Recurring
Payment and for Local Transactions, e- and m-commerce and MOTO using the respective
Acceptance Environments Physical POI (attended and unattended), Virtual POI and Virtual
Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C M M
Cardholder Verification M M N/A
Authorisation M M M
Referral O N/A O
Completion M M M
(Partial) Reversal C C C
Data Capture M M M
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the first transaction of a Recurring Payment for Local Transactions (Physical POI), e- and
m-commerce (Virtual POI) and MOTO (Physical POI or Virtual Terminal).
Req T203: The first transaction of a Recurring Payment shall follow the same process as the
Payment Service for all available Acceptance Technologies, but using its own
configuration.
4.3.8.1.2 Authorisation
Req T204: The first transaction of a Recurring Payment shall be online and it shall contain
specific information which identifies it as a Recurring Payment transaction.
Req T205: The data captured for clearing of the first transaction of a Recurring Payment shall
additionally contain specific information which identifies it as a Recurring Payment
transaction.
Regardless what Acceptance Technology or Acceptance Environment was used for the first
transaction, subsequent transactions will use Stored Card Data and may be processed by the
Acceptor or entirely in the environment of the PSP. The Cardholder will not be involved.
The column "Requirement" in TABLE 23 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the subsequent transactions of a
Recurring Payment for all Acceptance Environments.
Function Requirement
Language Selection N/A
Transaction Initialisation M
Technology Selection N/A
Selection of the Application M
Card Data Retrieval M
Card Authentication N/A
Cardholder Verification N/A
Authorisation M
Referral O
Completion M
(Partial) Reversal C
Data Capture M
TABLE 23: FUNCTIONS USED FOR SUBSEQUENT TRANSACTIONS OF A RECURRING PAYMENT
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the subsequent transactions of a Recurring Payment.
4.3.8.2.1 Authorisation
Req T206: Subsequent Recurring Payment transactions shall be authorised online using only
PAN and Expiry Date and shall contain specific information which identifies it as a
Recurring Payment transaction.
Req T207: The data captured for clearing of subsequent Recurring Payment transactions and
shall contain specific information which identifies it as a Recurring Payment
transaction.
The column "Requirement" in TABLE 25 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Quasi-Cash Payment Service and
for Local Transactions, e- and m-commerce and MOTO using the respective Acceptance
Environments Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C M M
Cardholder Verification M M N/A
Authorisation M M M
Referral O N/A O
Completion M M M
(Partial) Reversal C C C
Data Capture M M M
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Quasi-Cash Payment Service for Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI or Virtual Terminal).
Req T208: The Quasi-Cash Payment shall follow the same process as the Payment Service for
all available Acceptance Technologies, but using its own configuration.
Req T209: 'No CVM Required' is not allowed as a CVM for Quasi-Cash Payment transactions.
4.3.9.3 Authorisation
Req T210: The Quasi-Cash Payment shall be authorised online and it shall be identified as a
Quasi-Cash Payment.
4.3.9.4 Reversal
Req T211: If the actual amount was authorised but items could not be delivered, the POI shall
receive an indication of this from the sale system. The POI shall then perform a
reversal to nullify the original authorisation.
Req T212: If the actual amount was authorised but not all items could be delivered; the POI
shall receive an indication of this from the sale system, including the reduced
amount. The POI shall then perform a partial reversal. The captured data shall
always include the final amount.
Req T213: The data captured for clearing of a Quasi-Cash Payment shall identify it as a Quasi-
Cash Payment.
Only Local Card Transactions (Physical POI) are allowed for processing the Cash Services.
An ATM is a specific Unattended POI supporting the ATM Cash Withdrawal Card Service. In this
section, "Application" refers to a POI Application that supports the ATM Cash Withdrawal Service.
TABLE 26 shows which combinations of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO are allowed () or not allowed () for
the ATM Cash Withdrawal Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
TABLE 26: ATM CASH WITHDRAWAL: ACCEPTANCE TECHNOLOGIES AND ACCEPTANCE ENVIRONMENTS
The column "Requirement" in TABLE 27 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the ATM Cash Withdrawal Service and
for Local Transactions, e- and m-commerce and MOTO using the respective Acceptance
Environments Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M N/A N/A
Transaction Initialisation M N/A N/A
Technology Selection M N/A N/A
Selection of the Application M N/A N/A
Card Data Retrieval M N/A N/A
Card Authentication C N/A N/A
Cardholder Verification M N/A N/A
Authorisation M N/A N/A
Referral N/A N/A N/A
Completion M N/A N/A
(Partial) Reversal M N/A N/A
Data Capture M N/A N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the ATM Cash Withdrawal Service for Local Transactions (Physical POI).
4.4.1.1 Configuration
Req T214: It shall be configured that the Chip with Contact Acceptance Technology shall be
supported (see Req. T18) and that the Magnetic Stripe Acceptance Technology is
subordinate to the Chip with Contact Acceptance Technology (see Req. T23).
Req T215: The Welcome Screen shall be shown initially in the default language and English (or
in the default language only if it is English).
Req T216: Transactions on the ATM shall be initiated by insertion of a Physical Card or by
Cardholder interaction.
4.4.1.4 Authorisation
Req T218: ATM Cash Withdrawal transactions shall be authorised online. Otherwise ATM
transactions shall be declined.
4.4.1.5 Completion
Req T219: To minimise the risk of the cardholder leaving the Physical Card in the ATM; if the
Cardholder did not confirm proceeding with more transactions after the Cash
Withdrawal, then the card removal shall always be prompted prior to the cash
delivery.
Req T220: If the Physical Card is inserted in the reader of an ATM with capture card capability
and if the Cardholder does not retrieve his Card, the Card shall be retained.
Req T221: If the Physical Card is retained in response to the authorisation response message,
an appropriate message shall be displayed to inform the Cardholder.
Req T222: An ATM shall not allow a declined transaction to be accepted.
Req T223: For ATM Cash Withdrawal transactions using a Contactless Acceptance Technology
further transactions after the Cash Withdrawal are not allowed without new
presentment of the Physical Card or Mobile Device.
4.4.1.6 Reversal
Req T224: If the actual amount was authorised but cash could not be delivered, a reversal shall
be performed to nullify the original authorisation.
Req T225: If the actual amount was authorised but only part of the requested cash could be
prepared for delivery and if the ATM supports detection of partial delivery of cash,
the ATM shall then perform a partial reversal. The captured data shall always
include the final, reduced amount.
The column "Requirement" in TABLE 29 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Cash Advance Service and for
Local Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M N/A N/A
Transaction Initialisation M N/A N/A
Technology Selection M N/A N/A
Selection of the Application M N/A N/A
Card Data Retrieval M N/A N/A
Card Authentication C N/A N/A
Cardholder Verification M N/A N/A
Authorisation M N/A N/A
Referral O N/A N/A
Completion M N/A N/A
(Partial) Reversal C N/A N/A
Data Capture M N/A N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Cash Advance Service for Local Transactions (Physical POI).
Req T226 The Cash Advance Service shall follow the same process as the Payment Service for
all available Acceptance Technologies, but using its own configuration.
4.4.2.2 Configuration
Req T227: For Cash Advance, it shall be configured that the Chip with Contact Acceptance
Technology and/or the Contactless Acceptance Technologies shall be supported
(see Req. T18) and that the Magnetic Stripe Acceptance Technology is subordinate
to the Chip with Contact Acceptance Technology (see Req. T23).
Req T228: It shall be possible to configure per Application Profile, if the transaction amount
shall be checked against a minimum allowed amount and/or a maximum allowed
amount.
Req T229: For Cash Advance, the transaction amount (i.e. the authorised amount) shall be
available to the POI Application at Transaction Initialisation.
Req T230: No CVM Required shall not be supported for the Cash Advance Service.
4.4.2.5 Authorisation
Req T231: Cash Advance transactions shall be authorised online. If the Referral Function is
activated and a Referral is received in the Authorisation Response message, the
Voice Authorisation process shall be followed. Otherwise Cash Advance
transactions shall be declined.
4.4.2.6 Reversal
Req T232: If the actual amount was authorised but cash could not be delivered, a reversal shall
be performed to nullify the original authorisation.
TABLE 30: CARD VALIDITY CHECK: ACCEPTANCE TECHNOLOGIES AND ACCEPTANCE ENVIRONMENTS
The column "Requirement" in TABLE 31 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Card Validity Check Service and
for Local Transactions, e- and m-commerce and MOTO using the respective Acceptance
Environments Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C C N/A
Cardholder Verification O O N/A
Authorisation M M M
Referral N/A N/A N/A
Completion M M M
(Partial) Reversal N/A N/A N/A
Data Capture N/A N/A N/A
TABLE 31: FUNCTIONS USED FOR CARD VALIDITY CHECK
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Card Validity Check Service for Local Transactions (Physical POI), e- and m-commerce
(Virtual POI) and MOTO (Physical POI or Virtual Terminal).
Req T233: A Card Validity Check transaction shall be performed like a Payment transaction,
but using its own configuration and without displaying and printing the transaction
amount.
Req T234: For Card Validity Check, the authorised amount sent to the Card Application shall
be set to zero.
4.5.1.3 Authorisation
Req T235: Card Validity Check transactions shall be authorised online. Otherwise Card Validity
Check transactions shall be declined.
Req T236: Card Validity Check transactions shall be identified as such in the online
authorisation request.
Req T237: Card Validity Check transactions shall not be captured for "Financial Presentment".
Only Local Card Transactions (Physical POI) are allowed for processing the Balance Inquiry Service.
TABLE 32 shows which combinations of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO are allowed () or not allowed () for
the Balance Inquiry Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
The column "Requirement" in TABLE 33 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Balance Inquiry Service and for
Local Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M N/A N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Balance Inquiry Service for Local Transactions (Physical POI).
Req T238: A Balance Inquiry transaction shall be performed like a Payment transaction, but
using its own configuration and without displaying and printing the transaction
amount.
Req T239: For Balance Inquiry, the authorised amount sent to the Card Application shall be set
to zero.
4.5.2.3 Authorisation
Req T240: Balance Inquiry transactions shall be authorised online. Otherwise Balance Inquiry
transactions shall be declined.
Req T241: Balance Inquiry transactions shall be identified as such in the online authorisation
request.
Req T242: The balance of the Card Account shall only be retrieved from a positive
authorisation response.
4.5.2.4 Completion
Req T243: If the balance of the Card Account is retrieved from a positive authorisation
response, it shall be displayed to the cardholder and printed on the cardholder
receipt, if any.
Req T244 If Balance Inquiry is performed in an attended Acceptance Environment, the
balance shall not be displayed to the attendant or printed on a merchant receipt.
For the Card Funds Transfer Service it has to be distinguished whether the Card Account is credited
or debited.
A credit of the Card Account is only allowed from an account that may be accessed by the
Cardholder of the Card Account to be credited. Such an account is called Funding Account. There
may be more than one Funding Account for a Card Account. If several Funding Accounts are
defined for a Card Account, one of these accounts shall be defined as default. The entity that
processes authorisations for the Card Account shall know the Funding Account(s) defined for the
Card Account and which is the default Funding Account. In addition, this entity shall be able to get
authorisation for debiting the Funding Account(s). It is out of scope how this is achieved.
Card Funds Transfer is a Card Present transaction. The Acceptor for the Card Funds Transfer is not
involved in the funds transfer to or from the Card Account but may receive a fee for offering the
Service.
Only Local Card Transactions (Physical POI) and e- and m-commerce (Virtual POI) are allowed for
processing the Card Funds Transfer Service.
TABLE 34 shows which combinations of Acceptance Technologies for the funding card and used in
Local Transactions, e- and m-commerce and MOTO Acceptance Environments are allowed () or
not allowed () for the Card Funds Transfer Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
TABLE 34: CARD FUNDS TRANSFER: ACCEPTANCE TECHNOLOGIES AND ACCEPTANCE ENVIRONMENTS
The column "Requirement" in TABLE 35 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Card Funds Transfer Service and
for Local Transactions, e- and m-commerce and MOTO using the respective Acceptance
Environments Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Authorisation M M N/A
Completion M M N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Card Funds Transfer Service for Local Transactions (Physical POI) and e- and m-
commerce (Virtual POI).
Req T245: The Card Funds Transfer shall follow the same process as the Payment Service for
all available Acceptance Technologies, but using its own configuration.
Req T246: The cardholder shall be able to select whether funds shall be transferred to the Card
Account from another account (Funding Account) or whether funds shall be
transferred from the Card Account to another account.
Req T247: The cardholder shall be able to select the transaction amount to be credited to or
debited from the Card Account.
Req T248: In the case of a (Mobile) EMV Payment Application based or (M)RP Application
based Card Funds Transfer transaction, the amount given to the Card Application
during the Card Funds Transfer shall be set to zero to avoid unnecessary Card Risk
Management.
Req T249: If funds shall be transferred to the Card Account from a Funding Account the
cardholder shall have the opportunity either to select the default Funding Account
or to provide information to identify one of the other Funding Accounts, if any. If a
(Mobile) EMV Payment Application or (M)RP Application is used to process the Card
Funds Transfer transaction, this information may be retrieved from the Card
Application.
Req T250: If funds shall be transferred from the Card Account to another account the
cardholder shall have the opportunity to provide information to identify the
account to be credited.
Req T251: After the Card Data Retrieval Function has obtained either the relevant Card Data
(e.g., the Track 2 equivalent data), or the PAN together with the Expiry Date, the
Card Acceptor may decide to raise a fee for the Card Funds Transfer Service.
The cardholder shall be informed of any fee to be paid to the card acceptor for the
Card Funds Transfer and the cardholder shall have the opportunity to accept or
decline the conditions of the Card Funds Transfer.
4.6.1.4 Authorisation
Req T252: Card Funds Transfer transactions shall be authorised online and shall be identified
as Card Funds Transfer.
Req T253: The authorisation message shall identify the amount to be credited to or debited
from the Card Account, the account to be debited or credited, and any fee raised by
the card acceptor as an additional amount.
Req T254: Data Capture for "Financial Presentment" is required only if the card acceptor raises
a fee for the Card Funds Transfer.
Only Local Card Transactions (Physical POI) and e- and m-commerce (Virtual POI) are allowed for
processing the Original Credit Service.
TABLE 36 shows which combinations of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO are allowed () or not allowed () for
the Original Credit Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
The column "Requirement" in TABLE 37 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Original Credit Service and for
Local Transactions, e- and m-commerce and MOTO using the respective Acceptance Environments
Physical POI (attended and unattended), Virtual POI and Virtual Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M N/A
Technology Selection M N/A N/A
Selection of the Application M M N/A
Card Data Retrieval M M N/A
Card Authentication N/A N/A N/A
Cardholder Verification N/A N/A N/A
Authorisation O O N/A
Referral N/A N/A N/A
Completion M M N/A
(Partial) Reversal C C N/A
Data Capture M M N/A
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Original Credit Service for Local Transactions (Physical POI) and e- and m-commerce
(Virtual POI).
Req T255: If Chip with Contact or a Contactless Acceptance Technology is used to retrieve the
Card Data for the Original Credit transaction, EMV processing shall be followed until
the Card Data Retrieval Function has obtained either the Track 2 equivalent data, or
the PAN together with the Expiry Date. If Chip with Contact Acceptance Technology
is used, the EMV process shall be terminated by requesting a decline from the card.
In the case of an (M)RP Application based Original Credit transaction, the (M)RP
Application process shall be terminated after the Card Data Retrieval Function has
obtained either the relevant card data (e.g., the Track 2 equivalent data), or the PAN
together with the Expiry Date.
If the Card Application requires entry of an amount, the amount given to the Card
Application during the Original Credit should be zero to avoid unnecessary Card Risk
Management.
Req T256: The transaction amount shall be checked against a maximum allowed amount if
configured for the Application Profile.
4.6.2.2 Configuration
Req T257: The maximum amount and the allowed maximum amount that can be performed
without additional security (e.g., a supervisor password) shall be configurable for
the Original Credit Service.
Req T258: It shall be configurable per Application Profile, whether the Original Credit is
performed online or not.
Req T259: The Original Credit amount shall be available to the POI Application at Transaction
Initialisation.
4.6.2.4 Authorisation
Req T260: If required by the Application Profile, the Original Credit shall be authorised online.
The Prepaid Card Loading Service requires that the Cardholder has provided funds to the issuer of
the Prepaid Card which is subsequently used to fund the load transaction. The Prepaid Card
Unloading Service requires that the issuer of the prepaid card has agreed which cardholder
account shall be used to unload the prepaid Card Account.
The Acceptor for the Prepaid Card Loading/Unloading is not involved in the funds transfer to or
from the prepaid Card Account but may receive a fee for offering the Service.
TABLE 38 shows which combinations of Acceptance Technologies and Acceptance Environments
used in Local Transactions, e- and m-commerce and MOTO are allowed () or not allowed () for
the Prepaid Card Loading/Unloading Service.
Local Transactions e- and MOTO
Physical POI m-commerce Physical POI or
Virtual POI Virtual Terminal
Attended Unattended
Chip with Contact
Magnetic Stripe
Manual Entry (by Acceptor)
Contactless (Chip and Mobile)
Manual Entry (by Cardholder)
Consumer Device with Payment
Credentials
Consumer Device with Payment
Credentials and Authentication
Application
Consumer Device with (M)RP
Application
Stored Card Data
TABLE 38: PRE-PAID CARD LOADING: ACCEPTANCE TECHNOLOGIES AND ACCEPTANCE ENVIRONMENTS
The column "Requirement" in TABLE 39 shows which Functions are not applicable (N/A) or which
are either mandatory (M), optional (O) or conditional (C) for the Prepaid Card Loading/Unloading
Service and for Local Transactions, e- and m-commerce and MOTO using the respective
Acceptance Environments Physical POI (attended and unattended), Virtual POI and Virtual
Terminal.
Requirement
Local e- and MOTO
Transactions m-commerce Physical POI or
Function Physical POI Virtual POI Virtual Terminal
Language Selection M O N/A
Transaction Initialisation M M M
Technology Selection M N/A N/A
Selection of the Application M M M
Card Data Retrieval M M M
Card Authentication C M M
Cardholder Verification M M M
Authorisation M M M
Referral N/A N/A N/A
Completion M M M
(Partial) Reversal C C C
Data Capture C C C
In addition to the general requirements listed in section 4.2, the following specific requirements
apply to the Prepaid Card Loading/Unloading Service for Local Transactions (Physical POI), e- and
m-commerce (Virtual POI) and MOTO (Physical POI or Virtual Terminal).
Req T261: The Prepaid Card Loading/Unloading shall follow the same process as the Payment
Service for all available Acceptance Technologies, but using its own configuration.
Req T262: The cardholder shall be able to select whether the prepaid card shall be loaded or
unloaded.
Req T263: The cardholder shall be able to select the transaction amount to be loaded to or
unloaded from the prepaid Card Account.
Req T264: In the case of a Prepaid Card Loading/Unloading transaction based on a (Mobile)
EMV Payment Application or an (M)RP Application the amount given to the Card
Application during the Prepaid Card Loading/Unloading shall be set to zero to avoid
unnecessary Card Risk Management.
Req T265: After the Card Data Retrieval Function has obtained either the relevant card data
(e.g., the Track 2 equivalent data), or the PAN together with the Expiry Date, the
Card Acceptor may decide to raise a fee for the Prepaid Card - Loading/Unloading
Service.
The cardholder shall be informed of any fee to be paid to the card acceptor for the
Prepaid Card Loading/Unloading and the cardholder shall have the opportunity to
accept or decline the conditions of the Prepaid Card Loading/Unloading.
4.6.3.4 Authorisation
Req T266: Prepaid Card Loading/Unloading transactions shall be authorised online and shall
be identified as Prepaid Card Loading/Unloading.
Req T267: The authorisation message shall identify the amount to be loaded or unloaded and
any fee raised by the card acceptor as an additional amount.
Req T268: Data Capture for "Financial Presentment" is required only if the card acceptor raises
a fee for the Prepaid Card Loading/Unloading.
Req T269: Payment with Increased Amount shall be restricted to the Payment Service at the
attended Physical POI.
Req T270: Any extra amount shall be included in the transaction amount before or during
Transaction Initialisation.
Req T271: The extra amount shall be displayed separately for transaction confirmation and
printed on the receipt, if any.
Req T272: All requirements applicable to the Payment Service shall also apply to Payment with
Cashback. Requirements that are specific for Payment with Cashback are listed
below (separately).
Req T273: Payment with Cashback shall be restricted to the Payment Service at the attended
Physical POI.
Req T274: For a Payment with Cashback, the transaction amount shall be the sum of the
payment amount and the Cashback amount.
Req T275 The Cashback amount shall be identified separately in the authorisation and
settlement messages.
Req T276: For a Payment with Cashback transaction, the Cashback amount to be confirmed
shall be displayed (with its unique label) to the cardholder in one of the following
ways:
Payment amount, Cashback amount and (total) transaction amount shall be
displayed in this order. This method is preferred and shall be used if the display
size permits.
Cashback amount and (total) transaction amount shall be displayed.
Only (total) transaction amount shall be displayed.
Req T277: Cardholder confirmation of the Cashback amount shall be implicit with the
confirmation of the transaction amount.
Req T278: For attended POIs that support Payment with Cashback, it shall be possible to
configure per Application Profile to support the addition of a Cashback amount or
not.
Req T279: For attended POIs that support Payment with Cashback, it shall be possible to
configure per Application Profile a maximum Cashback amount.
Req T280: For attended POIs that support Payment with Cashback, it shall be possible to
configure whether the POI Application supports magnetic stripe processing for
Payment with Cashback.
Req T281: Payment with Cashback transactions shall be authorised online.
Req T282: The POI Application shall support handling of an authorisation response indicating
the payment part is authorised but the Cashback is not.
Req T283: If a receipt is printed for a Payment with Cashback transaction, then in addition to
the data listed in Req T92 the following data shall also be printed:
Payment amount
Cashback amount
Req T284: For a POI Application that supports Payment with Purchasing or Corporate Card
Data it shall be configurable per Application Profile whether this additional feature
is activated for Payment.
Req T285: If a POI Application supports Payment with Purchasing or Corporate Card Data and
if this additional feature is activated the POI shall be able to distinguish a purchasing
or corporate Card Data, from Card Data of other products in that scheme.
Req T286: If a Payment transaction is performed with Card Data for which the Payment with
Purchasing or Corporate Card Data is activated in the POI Application, the additional
data required for clearing of Payments with Purchasing or Corporate Card Data shall
be stored and captured at the POI.
Req T287: When batch capture is used, if allowed by scheme rules, the Payment transactions
may be aggregated by the acceptor before sending the transactions to the acquirer
for capture.
Req T288: When online capture methods are used, if allowed by scheme rules, only the
Acquirer may aggregate the Payment transactions.
Req T289: The maximum amount of the aggregated Payment transactions shall be defined by
Scheme rules.
Req T290: (Mobile) EMV Payment Application and (M)RP Application based Payment
transactions shall be aggregated separately from Payment transactions based on
other Acceptance Technologies.
Req T291: For aggregated (Mobile) EMV Payment Application or (M)RP Application based
Payment transactions, the cryptogram of the last aggregated (Mobile) EMV
Req T293: With the exception of Completion and Data Capture, all requirements applicable to
the Payment Service shall also apply to Payment with Deferred Authorisation.
Requirements that are specific for Payment with Deferred Authorisation are listed
below (separately).
Req T294: Payment with Deferred Authorisation shall be restricted to the Payment Service at
the Physical or Virtual POI.
Req T295: It shall be configurable which of the Acceptance Technologies supported for
Payment are allowed for Deferred Authorisation.
Req T296: It shall be configurable whether Deferred Authorisation is initiated automatically or
only on request of an attendant.
Req T297: It shall be possible to activate/deactivate Deferred Authorisation for Payment per
Application Profile.
Req T298: A minimum and a maximum amount for Payment with Deferred Authorisation shall
be configurable per Application Profile.
Req T299: It shall be configurable per Application Profile which of the CVMs supported for
Payment are allowed for Deferred Authorisation. Online PIN shall never be allowed
for Payment with Deferred Authorisation.
Req T300: It shall be configurable per Application Profile whether Deferred Authorisation shall
only be allowed for Card Application based transactions if Offline Card
Authentication was successfully performed.
Req T301: For POIs that support Payment with Deferred Authorisation, the configuration of
the POI shall be checked during Completion, whether Deferred Authorisation is to
be performed for the transaction in the following case: The Payment transaction
shall be authorised online but the POI is (temporarily) unable to go online and the
transaction is not authorised offline by a Card Application.
If necessary according to the Application Profile configuration, confirmation of an
attendant shall be requested for Deferred Authorisation.
Req T302: If Deferred Authorisation cannot be performed according to the Application Profile
configuration the transaction shall be declined, and Completion and Data Capture
for a declined Payment transaction shall be performed. Note that if configured for
the Completion function this process may include forcing acceptance by an
attendant.
Req T303: If Deferred Authorisation can be performed according to the Application Profile
configuration, Completion of an approved transaction shall be performed for the
cardholder (display and receipt, if any).
Req T304: If Deferred Authorisation can be performed according to the Application Profile
configuration, the transaction shall be stored in the POI and authorised online when
the POI is again able to go online. In case of a (Mobile) EMV Payment Application or
(M)RP Application based transaction, the cryptogram of the original transaction
together with the data elements used for its calculation shall be stored and used for
the deferred online authorisation.
Req T305: If Deferred Authorisation has been performed for a (Mobile) EMV Payment
Application or (M)RP Application based transaction, the cryptogram of the original
transaction together with the data elements used for its calculation shall also be
used for Data Capture.
DCC is an additional feature which may be used for Payment and Cash Services.
Req T306: It shall be configurable per Application Profile, whether DCC is supported.
Req T307: To perform DCC, the POI or attendant shall give the cardholder the choice of
currency to be used, the cardholder billing currency or the card acceptor's currency.
To make this choice, before confirming the Payment, the cardholder shall be
informed of
The original transaction amount in the card acceptor's currency,
The transaction amount in the cardholder billing currency and
The conversion rate (ratio) between these two amounts.
Req T308: If the POI is used to offer the choice to the cardholder the following items shall be
displayed to the cardholder:
The original transaction amount in the card acceptor's currency together with
an indication of the currency,
The transaction amount in the cardholder billing currency together with an
indication of the currency and
The conversion rate (ratio) between these two amounts,
And the cardholder shall have the opportunity to select the currency the transaction
will be performed in.
Req T309: If the cardholder selects the transaction amount in the cardholder billing currency,
then the total transaction amount and, if applicable, a Cashback amount shall be in
the cardholder billing currency. Cash obtained from the card acceptor in the process
of Cashback shall be in the card acceptor's currency.
Req T310: If the cardholder has selected the transaction amount in the cardholder billing
currency, the amounts shall be conveyed to the cardholder in both the cardholder
billing currency and the card acceptor's currency. The conversion rate used shall
also be included.
Req T311: If the cardholder has selected the transaction amount in the cardholder billing
currency and if a transaction receipt is being produced, the amounts shown on the
receipt shall be expressed in the cardholder billing currency and in the card
acceptor's currency. The conversion rate used shall also be included.
Req T312: If for a Contact EMV Payment Application or (M)RP Application based transaction
data from the Contact EMV Payment Application or (M)RP Application are needed
to determine the cardholder billing currency, then the transaction shall be started
with the card acceptor's currency. If after the retrieval of the necessary data the
cardholder has selected the transaction amount in the cardholder billing currency,
then the Contact EMV Payment Application or (M)RP application based transaction
shall be re-started without further cardholder interaction with the previously
selected application.
4.7.7 Surcharging/Rebate
Surcharging/Rebate is an additional feature which may be used for Payment and Cash Services.
Req T313: For Payment Services, any kind of surcharge/rebate will be part of the agreed total
sales amount. Therefore the POI Application shall not support any specific handling
of surcharging/rebate for Card Services33.
Req T314: If a surcharge/rebate is applied at the ATM for a Cash Withdrawal, the
surcharge/rebate shall be displayed to the cardholder prior to authorisation, and
the cardholder shall have the opportunity to abort the transaction or to continue
with the understanding of a surcharge/rebate being applied.
Req T315: For a Cash Withdrawal with surcharge/rebate, the transaction amount shall be the
total of the withdrawal amount and the surcharge/rebate amount.
33
Note that surcharging/rebate is subject to scheme or legal regulations.
This section defines core functional requirements for Volume conformance for protocols. The term
protocol is used to mean the data exchange messages that are used to perform the different
functions covered in this document ("Authorisations", "Financial Presentments", "Reversals" …).
The term T2A protocol denotes the data exchange messages that are used between POI and
acquirer. There are many different configurations how a POI may be connected to one or more
acquirers. The configuration depends on the infrastructure. Data elements in messages can be
populated at the POI or in some cases by an intermediate host (terminal provider host, merchant
host etc.) before the messages reach the acquirer.
Some examples of different configurations are given below. Other configurations are possible.
However, the requirements for the T2A protocol stated in this section apply to all such
configurations (see Req. P7 below).
POI Acquirer
POI Acquirer
Acquirer
Acquirer
Environment of
large retailer
POI
POI
Environment of
terminal provider
POI
Terminal
POI Acquirer
provider host
POI
Intermediate
POI Acquirer
agent
Intermediate Acquirer
POI
agent Acquirer
Acquirer
Req P1: The T2A protocols shall support the Card Services as described in this document.
Req P2: For implemented services, the protocols shall support all corresponding Data
Elements as defined in Book 3.
Req P3: The protocols shall be independent of the communication channel.
Req P4: The protocols shall support SEPA conformant schemes but should not exclude non
SEPA conformant schemes.
Req P5: The protocols and the communication layers shall support the security
requirements on integrity and confidentiality of the information conveyed as
defined in Book 4.
Req P6: The protocols shall support a unique message identification, so to be able to detect
duplicate messages.
Req P7: The T2A protocols shall be designed to accommodate all types of POI architectures
relevant to the Acceptance Environment.
Req P8: The T2A protocols shall support one of the following capture modes for
transactions:
Online capture through the authorisation message
Online capture through a separate completion message
Batch capture through file transfer, or transaction by transaction
Req P9: The T2A protocols shall support sending an online message which notifies the result
of the successful online authorisation, either never, or always, or only if requested
by an entity in the online approval.
Req P10: The T2A protocols shall be designed to allow POIs to process transactions with
different acquirers.
Table 1: Usage of Acceptance Environments and Cardholder Environments for Local and Remote
Transactions ................................................................................................................................ 7
Table 2:Book 2 Scope .......................................................................................................................13
Table 3:Mapping of Acceptance Technologies to Cardholder Environments .................................13
Figure 4:POI Application - Logical Structure and Configuration Parameters ..................................19
Table 5:Payment: Acceptance Technologies and Acceptance Environments .................................42
Table 6:Functions used for Payment ............................................................................................... 43
Table 7:Refund: Acceptance Technologies and Acceptance Environments ....................................47
Table 8:Functions used for Refund ..................................................................................................48
Table 9:Cancellation: Acceptance Technologies and Acceptance Environments ........................... 50
Table 10:Functions used for Cancellation ........................................................................................51
Table 11:Pre-Authorisation Services: Acceptance Technologies and Acceptance Environments ..54
Table 12:Functions used for Pre-Authorisation and Update Preauthorisation ............................... 55
Table 13:Functions used for Payment Completion..........................................................................58
Table 14:Deferred Payment: Acceptance Technologies and Acceptance Environments ................60
Table 15:Functions used for Deferred Payment ..............................................................................61
Table 16:No Show: Acceptance Technology and Acceptance Environments ..................................64
Table 17:Functions used for No Show ............................................................................................. 65
Table 18: ... Instalment Payment: Acceptance Technologies and Acceptance Environments for First
Transaction ................................................................................................................................ 66
Table 19:Functions used for first Transaction of an Instalment Payment .......................................67
Table 20:Functions used for Subsequent Transactions of an Instalment Payment ........................68
Table 21: ..... Recurring Payment: Acceptance Technologies and Acceptance Environments for First
Transaction ................................................................................................................................ 70
Table 22:Functions used for First Transaction of a Recurring Payment ..........................................71
Table 23:Functions used for Subsequent Transactions of a Recurring Payment ............................ 72
Table 24:Quasi-Cash Payment: Acceptance Technologies and Acceptance Environments ............73