Search
69 articles found
Online & Authorization
Cardholder verification in EMV is specific to chip cards. One goal of EMV is to minimize card fraud. To do this, three parties must be verified: the bank, the cardholder, and the terminal. One of the data items taken from the card to prove identity is...
Payment Systems
The domestic authorization flow for below-CVM-limit online contactless transactions has changed. Issuers can now ask the cardholder for a PIN or request card insertion instead of simply approving or declining. This post explains the CVM list and the new DE48 PDS22 and DE39 = 65 message flows.
Payment Systems
In payment or cash withdrawal transactions, the TR QR Code is generated by the POS or ATM. The card issuing bank must build its systems to read and act on this code. Errors usually stem from mishandling the long and short QR code flows, which are explained here.
HCE
The basic offline transaction rules applied in HCE transactions include the CVM limit for contactless payments, standby mode payments, and PIN entry requirements above the limit.
Online & Authorization
In EMV, data is stored in Tag-Length-Value (TLV) format, and it is carried between the card, the POS terminal, and the authorization system in this same format. This post lists every EMV Tag, its type, and its description.
Online & Authorization
These are codes that communicate the issuer's conditions for approving a transaction online (IAC-Online), for declining it (IAC-Denial), or for declining it when the terminal cannot go online (IAC-Default).
Merchant & POS
BKM has changed the domestic transaction flows for contactless transactions above and below the CVM limit. For above-limit transactions, the issuer can now ask the cardholder to re-enter the PIN instead of terminating the transaction after an incorrect PIN (DE39 = 55).
Merchant & POS
Terminal Verification Results (TVR): a sequence of bits produced when a terminal reads an EMV card, based on logical checks such as an expired card. This data object is used to decide whether a payment transaction should be accepted online, declined, or allowed to proceed.
Credit Card
CVV and CVV2 values are often confused by cardholders. CVV is printed on the magnetic stripe and used for card verification when the card is physically swiped through a POS; CVV2 is printed on the back of the card for e-commerce authorization.
Credit Card
First, let's briefly explain CVV/CVC. CVV stands for Card Verification Value, a term used for Visa. CVC stands for Card Verification Code, a term used for MasterCard. The CVV/CVC code is used for cardholder verification and to reduce fraud risk.
Credit Card
CVV is short for Card Verification Value, a term used by Visa. CVC is short for Card Verification Code, a term used by MasterCard. The CVV/CVC code is used for cardholder verification and to reduce fraud risk.
Payment Systems
One of the most notable recent developments in card payments is that contactless limits are no longer fixed and can be managed dynamically per customer. Mastercard and Visa are taking different but complementary approaches, and ISO 8583 may need to evolve with them.