Mandates and Requirements

GLOBAL MANDATES

G L O B A L   B R A N D S

8 Digit BINs

Region: All

  • Verifone will still process 8 Digit BINs as normal transactions
  • Clients not supporting a BIN look up process will behave as before without issue
  • Clients with BIN look up process with encryption/truncation will need to review their solution and determine if there is any hard coded BIN logic.

Effective:

April 2022

C A R D   B R A N D :   D I S C O V E R

Coding Empty Candidate List transactions as Fallback instead of Magnetic Stripe 

Region: All

Discover Global Network is announcing that effective January 15, 2021, for Chip Card Terminal deployments where end to end certification has not commenced, Empty Candidate List (ECL) transactions should be coded with a Fallback indicator (see table below) instead of Magnetic Stripe (POS entry mode 02). Clients/Participants must code ECL/Unknown AID transactions as Fallback. 

Effective:

January 2021

C A R D   B R A N D :   D I S C O V E R

Contactless Acceptance Support Requirements 

Region: All

Effective January 15, 2021, all new Chip Card Terminals deployed with Contactless D-PAS support must disable support for Contactless MS Mode by setting Terminal Transaction Qualifiers (TTQ, Tag ‘9F66’) Byte 1, bit 8 to 0. Existing deployed Chip Card Terminals that support Contactless D-PAS may continue to support Contactless MS Mode.


Acquirers whose existing POS Devices support only Contactless MS Mode for Discover contactless acceptance must not disable support for Contactless MS Mode until they enable Contactless EMV Mode by setting TTQ Byte 1, bit 6 to 1.

Effective:

January 2021

C A R D   B R A N D :   D I S C O V E R

D-PAS Connect Available and D-PAS Sunset Dates Reminder

Region: All

As chip technology and data storage capabilities grow, Discover® Global Network is delivering a more advanced solution that conforms to current EMV® specifications and enables value-added business solutions that extend beyond payments. With the introduction of D-PAS Connect, Discover Global Network is bringing an enhanced level of security and utility to chip cards and payment devices.

Effective:

December 31, 2021, December 31, 2023

Level 2 DFS Type Approvals for New and Existing Chip Products and Terminal Kernels

D-PAS v1 Sunset Date

Valid

Renewal

All New Product Certifications

31-DEC-2021

3 years

N/A

All Existing Product Renewals

31-DEC-2023

N/A

1 year

C A R D   B R A N D :   M A S T E R C A R D

Mastercard Outlines Roadmap to Transition 3DS 1.0 to EMV 3DS 2.0

Region: All

Mastercard’s plan to transition all 3DS customer to EMV 3DS 2.0. Current liability shift rules apply to both 3DS 1.0 and EMV 3DS 2.0. 3DS 1.0 will still be accepted up to decommission date.

Actions

Effective Date

Impact

Mastercard will start monthly notification to customers of their need to transition to EMV / 3DS

October 1, 2020

Merchants, Acquirers, Issuers

Mastercard will no longer accept SHA1 server certificates for 3DS 1.0 transactions. All transactions using SHA1 server certificates by this date will results in an error from the Mastercard Directory Server.

February 1, 2021

Service Providers

Mastercard will no longer allow 3DS 1.0 account range of merchant ID enrollments unless the customer is already enrolled onto EMV 3DS.

April 30, 2021

Merchants, Acquirers, Issuers

Mastercard will no longer generate Attempts transactions from the Merchant 3DS 1.0 network. Issuers that still want to support Attempts muse generate from their own ACS solution. 3DS 1.0 fully authenticated transactions will continue to be supported.

October 1, 2021

Merchants, Acquirers, Issuers

Mastercard will no longer allow 3DS 1.0 account range or Merchant ID enrollment.

April 30, 2022

Merchants, Acquirers, Issuers

Mastercard will no longer process any 3DS 1.0 transactions for cardholder authentication. Any transaction submitted to the Mastercard 3DS 1.0 Directory Server will result in an error response.

October 14, 2022

Merchants, Acquirers, Issuers, Service Providers

C A R D   B R A N D :   M A S T E R C A R D

Revised Standards—Global Support of Partial Approval and Balance Response

Region: All

20 October 2020—any attended POS terminal that is EMV certified and identified with 12 specified MCCs listed must support partial approval for all card-present transactions conducted at that attended POS terminal with a Mastercard or Maestro-branded prepaid or debit account range.


1 April 2023—all other attended POS terminals identified with specified MCCs must comply with the above


Effective immediately, Mastercard is no longer mandating global customer support for account balance response in authorization messages for prepaid cards.

  • This mandate was rolled out in the U.S. (2008) and Canada (2015) regions and included more than 12 MCCs.

Effective:

October 20, 2020, April 1, 2023

MCC

Descriptions

5310

Discount Stores

5311

Department Stores

5411

Grocery Stores, Supermarkets

Newly Added MCCs Globally

5541

Service Stations (with and without Ancillary Services)

5542

Fuel Dispenser, Automated

5621

Women's Ready to Wear Stores

5691

Men's and Women's Clothing Stores

5732

Electronic Sales

5812

Eating Places, Restaurants

5814

Fast Food Restaurants

5912

Drug Stores, Pharmacies

5999

Miscellaneous and Specialty Retail Stores

C A R D   B R A N D :   V I S A

Visa 3DS 1.0.2 Will No Longer Receive Fraud Liability Protection

Region: All

Visa will remove fraud liability protection for all 3DS v1.0.2 fully authenticated or attempted authentication (ECI = 05, 06) but will continue to support.


Migration to EMV 3DS 2.0 will require Issuers to support CAVV Usage 3 v7.

Effective:

October 17, 2021

Visa Secure Using 3DS 1.0.2

Prior to October 17, 2021

Prior to October 17, 2021

Fully Authenticated ECI 05

Merchant receives fraud-related dispute protection

Merchants are liable for fraud related disputes

Attempted Authentication ECI 06

Merchant receives fraud-related dispute protection

Merchants are liable for fraud related disputes

C A R D   B R A N D :  V I S A

Declined Transaction Resubmission and Use of Authorization Response Codes 

Region: All

Visa will update its rules for declined transaction resubmission and the use of authorization response codes. Response code descriptions will be aligned with descriptions in the V.I.P. System technical specifications and some response codes will move to different categories. Additionally, the new rules will consolidate the issuer and acquirer requirements into one table. 

Effective:

April 17, 2021

C A R D   B R A N D :   V I S A

Printing MID/TID on Transaction Receipts Will No Longer Be Permitted 

Region: All

The printing of MID/TID and card acceptor ID on transaction receipts not permitted as part of ongoing efforts to promote payment security system.

Exception that applies to POS acceptance devices and payment gateways connected to a processor host using payment card industry-validated point-to-point encryption (P2PE) or cryptographic keys for all host connectivity. These offer appropriate protection against merchant cloning.

  • It is however still advised to refrain from printing live MIDs, CAIDs and TIDs as a best practice.

Effective:

October 15, 2022

Copyright 2021©. Verifone, Inc. All Rights Reserved.