Payment Card Security Elements and Card Acceptance

Payment Card
Security Elements
and Card Acceptance
Instruction
–1–
Content
Internetbank
1. General requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2. Use of Card in payment terminal. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
3. Transaction cancellation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
4. Personal identification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
5. Transaction refusal codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
6.Annex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
This instruction is a tutorial designed to assist merchants in ensuring acceptance of payment
cards through the terminal. This document, which the merchant undertakes to adhere to, is
an integral part of the Card Acquiring Agreement.
–2–
1. General requirements
and punctures, whether the Card number and signature
panel have not been modified;
• whether the Card’s validity term has not expired;
• whether the person wishing to use the Card matches
the Cardholder information (male/female) if such
information is shown on the Card;
• whether there is an indication “Valid only in…” on the
Card which means that the Card is valid only in a certain
country.
1.1. The Merchant’s employees undertake to allow
Cardholders to pay for goods or services by Card via
Terminal.
1.2. Only the Cardholder may carry out transactions with
the Card.
The Merchant has a duty to refuse to accept the Card if
a person other than the Cardholder wishes to carry out a
transaction with the Card.
1.3. The Merchant has a duty to accept the Card payment
in the presence of the Cardholder unless agreed otherwise
with the Bank.
1.5. The Merchant undertakes:
• to visually verify the authenticity of the Card and
whether it matches the description of the relevant type
of Card. If the Card does not meet the requirements, the
transaction must be discontinued and the Merchant
must refuse to accept the Card as a means of payment
• to execute Transactions in accordance with the
Terminal’s or cash register’s user instruction.
1.4. Prior to executing a Transaction, the Merchant must
check:
• whether logos and symbols on the Cards are clearly
visible, weather the hologram and images are clear and
of high quality;
• whether the Card is free of any mechanical damages
2. Use of Card in payment terminal
Transaction value stated in this paragraph by giving the
Merchant a one-month prior notice thereof. The document
issuance country and the document number must be
shown on the Transaction receipt.
2.1. Execution of payment with a magnetic stripe
Card
2.1.1. The Merchant undertakes to keep hold of the
Card until, and not return it to the Cardholder before,
completion of the Transaction.
2.1.6. The Merchant undertakes to issue a receipt for the
Cardholder to sign.
2.1.2. If the Terminal displays a notification that the last
four digits of the card number entered for verification
purposes do not match those retrieved from the Card’s
magnetic stripe, the Card must be withheld, identification
of the person using the Card must be carried out, and
police must be called. The printed Terminal receipt must
be saved.
2.1.7. If the Cardholder’s signature on the Card does
not match the signature on the receipt, the Merchant
must contact the Bank’s Authentication Service and
perform the “Authentication Code 10” operation. If
there is no signature on the Card, the Merchant must
try and identify the Customer’s person by asking to
present an identity document. The Cardholder must sign
on the Card, following which the Transaction may be
authenticated.
2.1.3. If negative or prohibitive code is shown for the
Transaction, then the Transaction must be discontinued
and appropriate steps must be taken.
2.1.8. The Merchant may not continue with the
Transaction if the Cardholder refuses to sign the
Card. In such an event, the Merchant must cancel the
authentication.
2.1.4. The Merchant must make sure the Card number and
the Card type shown on the Terminal receipt matches the
Card used.
2.1.9. After completing the Transaction, the Merchant
must issue to the Cardholder a copy of the Terminal’s
receipt or the second receipt (incl. a transaction refusal
receipt) and return the Card and the identity document
(if such was requested). If the Transaction was refused
on the grounds of the code “Withhold card”, then the
Merchant must keep the receipt and the Card.
2.1.5. If the Card Transaction value is EUR 215 (two
hundred fifteen euros) or more and the specific Card
type does not require input of the PIN code, then: the
Merchant must identify the Cardholder by asking to
present an identity document and the Merchant must
contact the Bank’s Authentication Service and perform
the “Authentication Code 10” operation. The Bank may
alter the mandatory Cardholder identification threshold
–3–
2.3. Requirements in respect of PIN entry device
(“PED”) installation at points of sale
2.2. Execution of payment with a chip Card
2.2.1. The Merchant has a duty to insert the Card in the
chip reader and, after a relevant notification is shown on
the Terminal’s screen, to allow the Cardholder to input
the Card PIN code; if more than one payment function
is enabled on the Card’s chip and the Terminal’s screen
offers a choice of functions, then the Cardholder must be
allowed to select the payment function.
2.3.1. PEDs may not be installed within the visibility area
of video surveillance cameras and must be placed on the
counter in the proximity of the customer.
2.3.2. The PEDs must be positioned with the keypad
facing the customer and the device must have viewobstructing walls to keep the PIN code out of sight of
other people.
2.2.2. If the Cardholder is identified by PIN but the
identification fails due to the PIN being blocked as a
result of repeated inputting of a wrong PIN, then the
Transaction must be discontinued and the Merchant must
refuse to accept the Card as a means of payment.
2.3.3. The Merchant may not remove the viewobstructing walls of the device which are essential
elements of the PIN entry device and keep the PIN out of
sight of other people. No person may in any way see or
find out the PIN code.
2.2.3. If Cardholder’s identification by PIN is successful,
then the Merchant must issue a copy of the Terminal’s
receipt or the second receipt and return the Card. Note:
if the Transaction is executed on the basis of PIN input,
then the Cardholder’s signature is not required and
the Cardholder does not need to present an identity
document.
2.3.4. The Merchant must ensure that the PED cannot be
stolen or replaced. If the Merchant installs any additional
devices, it must immediately notify the Bank thereof.
3. Transaction cancellation
fails and unless other arrangement is in place, then the
Bank will refund the Transaction value based on the
Merchant’s written application and the original Terminal
receipt which can be delivered to the Bank by e-mail to
[email protected] or by fax to +371 67 446 962.
3.1. Transactions may be cancelled according to the
Terminal user guide until such time as the Transaction
reconciliation certificate is sent to the Bank.
3.2. If a report on the Transaction has already been sent
to the Bank or cancellation of Transaction in the Terminal
4. Personal identification
• whether the Cardholder’s name on the identity
document matches the name on the Card;
• whether the signature on the receipt matches the
Cardholder’s signature on the identity document and on
the Card.
4.1. The Merchant must require the Cardholder to present
an identity document if:
• the Transaction value exceeds EUR 215 (two hundred
fifteen euros) and the Transaction is confirmed by the
Cardholder’s signature on the receipt;
• suspicion arises as to the identity of the Cardholder;
• the Cardholder’s signature on the Card differs from the
signature on the Terminal’s receipt.
4.3. Valid identity documents include passport, driver’s
licence and ID card. The document type, issuance country,
document number and expiration date must be specified
in the Transaction receipt.
4.2. If there is information on the Card about the
Cardholder, the following must be checked:
• whether the photograph on the identity document
depicts the Cardholder;
–4–
5. Transaction refusal codes
The most common transaction refusal codes are the following:
Code
Explanation
Merchant’s action
100–180
Card acceptance refused
Return the Card to the Cardholder
101
Card expired
103–105, 107
Call the authentication centre
106
Permitted PIN input attempts exceeded
115
Transaction not allowed
116
Insufficient funds
117
Incorrect PIN
121
Limit exceeded
125
Card not working
200–210
Withhold the card
201
Card expired
208
Card lost
209
Card stolen
210
Possible forgery
900–914
Transaction refused, system error
Withhold the Card, call security or police
Repeat the Transaction
The Merchant has a duty to withhold all Cards, which
have come into possession of a third party through fraud,
loss or otherwise, by taking them away from the person
attempting to use the Card and to send such Cards to the
Bank.
For the purposes of personal safety of the Merchant,
security or police should be called before taking away
the Card. If possible, the Card user’s identity must be
established.
A complete list of refusal codes is provided in the Terminal
user guide. If the Terminal displays a code not listed here,
proceed as follows:
• if the code starts with “1”, this means that the
Transaction cannot be made;
• if the code starts with “2”, this means that the Card must
be withheld;
• if the code starts with “9”, this means there is a system
error.
–5–
Annex
MasterCard
Maestro
Visa
VISA smooth
9
9
9
8
9
3
3
3
2
3
5
4
7
6
1
5
4
8
1
5
4
6
77
7
1
9
3
3
5
4
4
6
10
1.
Logo
The MasterCard logo is in the card’s
right top or bottom corner above or
below the card’s hologram. A border line
runs around the logo and includes the
hologram.
The logo must be printed unto the card.
Cards issued in USA or Canada may also
have Diners Club logo on them at the
card’s top edge with the text “Diners Club
International”.
2. Hologram
The MasterCard hologram depicts
two hemispheres of the globe and is
positioned on the front or reverse side of
the card.
A hologram is a multidimensional image
and, when viewed from an angle, one can
see two hemispheres of a globe and the
text “MasterCard” in the background.
If the hologram is on the front side of the
card, the card number’s last 4 digits are
relief-embossed on it.
3.
Card number
MasterCard card numbers start with digit
“5” and consist of 16 digits.
The card number is relief-embossed.
The first 4 digits of the card number are
imprinted on the card separately under
the number.
Maestro card numbers start with digit “5”
or “6” and consist of 12 till 19 digits.
The card number may be imprinted or
relief-embossed.
4.
Cardholder
The Cardholder’s forename and surname
are relief-embossed on the card.
The Cardholder’s forename and surname
may be imprinted or relief-embossed.
The Maestro logo is in the card’s right top
or bottom corner.
1
1
6
10
88
5
7
2
Visa Electron
5
4
6
1
6
10
8
5
7
8
2
2
The VISA logo is in the card’s right top or
bottom corner.
The new type of the VISA logo is in the
card’s right top or bottom corner.
The new type of the VISA logo is in the
card’s right top or bottom corner.
VISA card numbers start with digit “4”
and consist of 13 till 16 digits.
The card number is relief-embossed.
The first 4 digits of the card number are
imprinted on the card separately under
the number.
The smooth VISA card number is
imprinted on the card material and
consists of 16 digits. The first 4 digits
of the card number are imprinted on the
card separately under the number.
The smooth VISA card number is
imprinted on the card material. The first
4 digits of the card number are imprinted
on the card separately under the number.
The Cardholder’s forename and surname
are relief-embossed on the card.
The Cardholder’s forename and surname
are imprinted on the card material.
The Cardholder’s forename and surname
are imprinted on the card material on the
front or reverse side.
The VISA hologram depicts a flying
dove and is positioned on the front or
reverse side of card or is merged with the
magnetic stripe.
A hologram is a multidimensional image.
When view from an angle, one can see
a flying dove. The card number’s last
4 digits are relief-embossed on the
hologram if it is on the front side of the
card.
–6–
MasterCard
Maestro
Visa
9
9
3
3
4
7
6
1
5
4
8
1
9
3
2
3
5
4
6
77
7
1
3
5
4
4
6
5.
Expiry date
The card’s expiry date is reliefembossed.
10
The card’s expiry date may be imprinted
or relief-embossed.
1
1
6
10
88
5
7
2
Visa Electron
8
9
9
3
5
VISA smooth
5
4
6
1
6
10
8
5
7
8
2
2
The card’s expiry date is reliefembossed.
The card’s expiry date is imprinted on
the card material.
The card’s expiry date is imprinted on
the card material.
An image of a flying dove is visible in UV
light on the card with the old type of logo. Letter “V” is visible on the card’s logo in
On cards with the new type of logo, letter UV light.
“V” is visible.
Letter “V” is visible on the card’s logo in
UV light.
For example, 01/15 means that the card is valid until the end of January 2015.
6.
Symbols
visible in UV
light
7.
Signature
panel
Letters “M” and “C” are visible on the card
in UV light
A horizontal inscription “Visa” is visible in UV light on the signature panel on cards with the new type of logo.
There is text “MasterCard” written in
blue, red and yellow diagonally across the
signature panel.
May not be damaged or with scratches.
There is text “VISA” written in blue
and yellow across the signature panel
diagonally. A horizontal inscription “Visa”
is visible in UV light on cards with the
new type of logo.
A horizontal inscription “VISA” is visible
The card number, or part thereof, is
in UV light on cards with the new type
imprinted on the signature panel. The
of logo.
security code is imprinted in reverse
italics.
The last four digits of the card number are
imprinted at the top right corner of the
signature panel.
There is text “Electron” written in blue,
red and yellow diagonally across the
signature panel on cards with the old
type of logo. A horizontal inscription
“VISA” is visible in UV light on the
signature panel on cards with the new
type of logo.
The security code is the last three digits
on the card’s signature panel or a special
white field, imprinted in reverse italics.
The security code is the last three digits
on the card’s signature panel or a special
white field, imprinted in reverse italics.
The security code is the last three digits
on the card’s signature panel or a special
white field, imprinted in reverse italics.
A chip may be embedded in the card.
A chip may be embedded in the card.
A chip may be embedded in the card.
There must be inscription “ELECTRONIC
USE ONLY” on the card.
There must be inscription “ELECTRONIC
USE ONLY” on the card.
The signature panel may not be tampered with and must not have the word “Void” on it.
8.
Security code
The security code is the three digits on
the card’s signature panel or a special
white field, imprinted in reverse italics.
9.
Chip
A chip may be embedded in the card.
10.
Other features
A chip may be embedded in the card.
There may be Maestro symbols on the
back of the card.
–7 –
Phone: + 371 67 444 444
E-mail: [email protected]
–6–