"risk scenarios"

15 articles found

Illustration for the amended Communiqué on information systems and data sharing services of payment and e-money institutions

Payment Institutions & E-Money

Amendments Made to the Communiqué on Information Systems of Payment and Electronic Money Institutions and Data Sharing Services of Payment Service Providers

On 7 October 2023, the CBRT amended the Communiqué on Information Systems of Payment and E-Money Institutions and Data Sharing Services of Payment Service Providers, first published on 1 December 2021. Links to the new text, a comparison table and a detailed summary of changes follow.

December 3, 2023

Diagram of the online authorization flow for below-CVM-limit contactless transactions

Payment Systems

Domestic Flow Change Made for Below-CVM-Limit Online Contactless Transactions

The domestic authorization flow for below-CVM-limit online contactless transactions has changed. Issuers can now ask the cardholder for a PIN or request card insertion instead of simply approving or declining. This post explains the CVM list and the new DE48 PDS22 and DE39 = 65 message flows.

December 29, 2024

Illustration representing Strong Customer Authentication (SCA) under PSD2

Payment Systems

What is Strong Customer Authentication (SCA)?

Strong Customer Authentication (SCA) is a security requirement introduced under the EU's Payment Services Directive 2 (PSD2) to increase security and reduce fraud in online payment transactions. SCA requires two of three independent authentication factors.

May 4, 2020