Skip to content

Search

"payment messaging"

65 articles found

Diagram of a first credential-on-file transaction using stored card data

Security

What is the First Credential-On-File transaction?

The first transaction made after a customer's card data is stored with a merchant is called the First Credential-On-File transaction. BKM expects it to be flagged with the value "C" in switch message field DE48.PDS86, and BRSA draft rules govern how card data may be stored.

Illustration of a Zone PIN Key (ZPK) protecting PIN data in a payment network

HSM & Security

What is ZPK (Zone PIN Key)?

ZPK, also known as the PIN Protection Key, is a data encryption key that is distributed automatically and used to encrypt PINs. It is also referred to as the 'Working Key'. This key allows PIN information to be carried securely across the network.

Diagram showing an authorized card transaction that expires before reaching the clearing file

Credit Card

What does it mean for a card transaction to expire?

Due to how payment systems work, authorization is obtained for a transaction first. For a Not Onus transaction (different card and POS banks), the system waits for it to arrive via the clearing incoming file. If it does not arrive within about a week, the transaction expires.

ATM PIN pad used for entering a card PIN

ATM

How is PIN verification performed at an ATM?

At payment points such as ATMs and POS terminals, the most critical step is PIN verification or verifying the customer through their identity information. However, since ATMs cannot verify a customer's identity, PIN verification becomes more important. So how is it performed?

POS terminal used for EMV card payment processing

Merchant & POS

TVR (Terminal Verification Results)

Terminal Verification Results (TVR): a sequence of bits produced when a terminal reads an EMV card, based on logical checks such as an expired card. This data object is used to decide whether a payment transaction should be accepted online, declined, or allowed to proceed.