Search
70 articles found
HCE
Tokenization generates secure data from a credit card number, using specific algorithms, for use during authorization. In CNP transactions, it removes the risk of storing or compromising the original card number.
EMV
The Application Block command is sent to invalidate the selected application on a card after the card has been issued. Unlike Card Block, it can be reversed.
Payment Institutions & E-Money
A payment institution is a legal entity authorized under the Law to provide and execute payment services. It must be a joint stock company meeting the conditions in Article 14 of Law No. 6493. This post sets out the services listed in Article 12 and the exclusions.
Merchant & POS
AUC (Application Usage Control) specifies restrictions that limit an application by geography or by specific transaction types. It is a 2-byte data element in Tag 9F07. If present, the terminal performs checks such as whether the transaction is at an ATM.
Merchant & POS
Introduction: When a card (credit card/debit card/prepaid card) is used at an ATM or POS, data must be carried securely between systems. For example, in a store sale, the POS initiates the transaction, which must reach the cardholder's bank intact.
Credit Card
CVV is a very critical 3-digit value used during a card's authorization process. The CVV value is encoded in the card's magnetic stripe data (Track 1 and Track 2). Is it generated by an algorithm or chosen at random?
Payment Institutions & E-Money
The Law defines e-money as monetary value issued in exchange for funds accepted by the issuer, stored electronically, used for payment transactions and accepted as a payment instrument by persons other than the issuer. This post explains e-money institutions and the services they may provide.
Payment Systems
After switching to response code 70 for contactless limit-exceeded cases, we found that some overseas POS devices and acquirers did not handle it as expected. This post covers why the problem lies in the ecosystem and how to address it.
ISO 8583
F90 - ORIGINAL DATA ELEMENTS: the data elements from an original message, designed to identify the transaction in correction or reversal transactions. Subfields: Original MTI, Original DE 11 (STAN), Original DE 7, Original DE 32, Original DE 33.
Merchant & POS
Terminal Verification Results (TVR): a sequence of bits produced when a terminal reads an EMV card, based on logical checks such as an expired card. This data object is used to decide whether a payment transaction should be accepted online, declined, or allowed to proceed.
Payment Systems
One of the most notable recent developments in card payments is that contactless limits are no longer fixed and can be managed dynamically per customer. Mastercard and Visa are taking different but complementary approaches, and ISO 8583 may need to evolve with them.
Merchant & POS
Partial authorization lets an issuer approve part of the requested amount when the card lacks the full balance, with the rest paid another way. This post covers the technical, receipt, clearing, reconciliation, merchant and certification requirements for acquirers.