Data Integrity New Edits and Updates

Transcription

1 Suggested routing: Authorization Contact, Clearing Contact, Debit Contact, Compliance Contact, Data Integrity Contact, Principal Contact Topic(s): Authorization, Clearing Applies to: Acquirers Issuers Processors Summary: MasterCard announces updates to the Data Integrity Monitoring Program. Action Indicator: M Mandate F R A Financial impact Customer must register to have access to product or service Attention warranted Effective Date: As indicated Account Status Inquiry As announced in Global Operations Bulletin No. 10, 1 October 2010, the Account Status Inquiry (ASI) Service allows a zero amount authorization for account status inquiries eliminating the use of account status check authorization requests for any amount greater than zero. Issuers were mandated globally to support the ASI Service message and to respond appropriately. In Global Operations Bulletin No. 8, 1 August 2012, MasterCard announced it will begin auditing issuer responses to the new Account Status Inquiry Service request message in all regions. Acquirers should consider any DE 39 value other than 00 (approved), or 85 (not declined) a decline response. MasterCard began auditing for compliance with the ASI Service in April 2013, as announced in Global Operations Bulletin No. 3, 1 March Issuers and processors with invalid DE 39 response codes and/or unusually high decline rates for Account Status Inquiry request messages are considered noncompliant. ASI reporting will now be available in Data Integrity Online beginning November 2014 for all customers outside of the Europe region. Key Dates Milestones for Account Status Inquiry issuer compliance are as follows. 21

2 Date August 2014 November 2014 May 2015 Milestone Based on compliance audits, MasterCard will assess all noncompliant ASI issuers outside of the Europe region beginning August 2014 on noncompliant July 2014 data. ASI reporting will be available in Data Integrity Online for all customers outside of the Europe region. Data Integrity assessments will begin November 2014 on noncompliant October 2014 data. The Customer Performance Enhancement Program will continue to manage Europe assessments until this date. Issuer ASI compliance in Europe will move to the Data Integrity platform in May New Issuer Dual Message Authorization Edit Account Status Inquiry Response MasterCard is introducing a new Issuer Dual Message Authorization Edit for the Account Status Inquiry. Edit Number 2 Description ASI_APP_RT 2PN2015 ASI_APP_RT is looking at the ASI approval rate. This relates to Maestro and MasterCard transactions. MasterCard only monitors transactions declined by the issuer. Note: MasterCard will monitor the Approval Rate when the issuer has 50 or more ASI transactions. (This relates to issuers outside of the Europe region). 22

3 Edit Criteria An issuer is considered noncompliant if approval rate is below 50% for the month for authorizations where DE 3 subfield 1 (Processing Code) = 00 (Purchase), payment transactions are not monitored. DE 3 subfield 1 (Processing Code) = 00 (Purchase), Payment ASI Transactions are not monitored. DE 61 subfield 7 = 8 (Account Status Inquiry Service). DE 39 Valid approval response codes = 00 (Approved or Completed Successfully) or 85 (Not Declined Valid for all zero amount transactions), issuer response only. Data Element and Subfield DE 3 subfield 1, DE 61 subfield 7, DE 39. Customer Interface Specifications Manual Authorization Manual Edit Number 3 Description Note Edit Criteria ASI_INV_RC 2PN2013 ASI_INV_RC is looking at invalid decline response codes for ASI transactions, this relates to Maestro and MasterCard transactions. MasterCard only monitors transactions declined by the issuer. The issuer must have 50 or more ASI declined transactions to be monitored. The issuer would be considered noncompliant if there are 50 or more failed ASI transactions. ASI transaction identification DE 61 subfield 7 = 8 (Account Status Inquiry Service) DE 3 subfield 1 = 00 (Purchase) (Payment ASI Transactions are not monitored). The transaction is noncompliant if any of the following conditions occur: DE 39 = 12, (Invalid transaction), 13 (Invalid Amount), 30 (Format error), 51 (Insufficient Funds/over credit limit), 57 (Transaction not permitted to issuer/cardholder), or 58 (Transaction not permitted to acquirer/terminal). 23

4 Data Element and Subfield DE 39 subfield 1, DE 61 subfield 7 Customer Interface Specifications Manual Authorization Manual New Issuer Edit Criteria for MoneySend As announced in Global Operations Bulletin No. 4, 1 April 2014, the Data Integrity Monitoring Program is adding two edits for issuer monitoring of MasterCard MoneySend payment transactions to support the changes identified in the article Revised MasterCard MoneySend Rules and Requirements in Global Operations Bulletin No. 2, 3 February As part of the revised rules, all issuers must register with the Data Integrity Online tool by 17 October The following tables outline the criteria for the new edits for MoneySend. Issuer Dual Message Program Edit Number 1 Description MONEYSEND_AR_0100 2PN2160 DE 3 (Processing Code) = 28 and card acceptor business codes (MCCs) DE 18 = 6536 (MoneySend Intracountry) or 6537 (MoneySend Intercountry) has a monthly acceptance rate for qualifying transactions below 75% based on the DE 39 (Response Code) values. Data Element and Subfield DE 3, DE 18, DE 39 Revised MasterCard MoneySend Rules and Requirements, in Global Operations Bulletin No. 2, 3 February 2014 Data Integrity Edits New Issuer Edits and Compliance Criteria for MasterCard MoneySend in Global Operations Bulletin No. 4, 1 April 2014 MoneySend Program Guide Issuer Single Message Program Edit Number 1 MONEYSEND_AR_0200 2PN

5 Description DE 3 (Processing Code) = 28 and card acceptor business codes (MCCs) DE 18 = 6536 (MoneySend Intracountry) or 6537 (MoneySend Intercountry) has a monthly acceptance rate for qualifying transactions below 75% based on the DE 39 (Response Code) values. Data Element and Subfield DE 3, DE 18, DE 39 Revised MasterCard MoneySend Rules and Requirements, in Global Operations Bulletin No. 2, 3 February 2014 Data Integrity Edits New Issuer Edits and Compliance Criteria for MasterCard MoneySend in Global Operations Bulletin No. 4, 1 April 2014 MoneySend Program Guide Key Dates Milestones for the issuer edit criteria for MoneySend are as follows. Date Milestone 1 October 2014 Implementation and monitoring begins November 2014 Noncompliant notifications sent on October data 1 May 2015 Assessments for the new clearing edit criteria occur in May 2015 on April 2015 data New Clearing Edit Criteria DE 22 Updates (Acquirer) The new clearing edit criteria for DE 22 is as follows. Edit Number 7 Description TERM_POS 2PN2122 Card Data Input Capability indicates no terminal was used while the Terminal Operating Environment indicates terminal was used or Card Data Input Mode indicates the mode is not unknown or manually entered PAN. (Unknown is no longer a valid entry). Card/Cardholder Presence Cannot = Unknown. 25

6 Edit Criteria The below conditions will cause a Data Integrity Error: DE 22 subfield 1 is 1 (Manual no terminal; Server) and DE 22, subfield 7 is not 0 (Unspecified data not available), 1 (Manual; no Terminal Input), S Electronic Commerce) DE 22 subfield 1 is 1 (Manual no terminal; Server) and DE 22, subfield 4 is not 0 (No Terminal used In addition the below entries will be invalid: DE 22 subfield 5 (Cardholder Presence) is 9 (unknown; data unavailable) DE 22 subfield 6 (Card Presence) is 9 (unknown; data unavailable) Data Element and Subfield DE 22, subfields 1, 4, 5, 6 and 7 IPM Clearing Formats Key Dates Milestones for the clearing DE 22 updates are as follows. Date Milestone 1 October 2014 Implementation and monitoring begins November 2014 Noncompliant notifications sent on October data 1 May 2015 Assessments for the new clearing edit criteria occur in May 2015 on April 2015 data New Home Page for Data Integrity Online In October 2014, MasterCard will update the appearance of Data Integrity Online. There will be new Issuer and Acquirer tabs to assist customers in selecting the correct program to view their data. Additional information about updates will be provided in the next Data Integrity Monitoring Program manual, which will be published October

7 Registering for Data Integrity Online Customers must have access to MasterCard Connect to use Data Integrity and MasterCard requires that ASI and MoneySend issuers and processors must register with Data Integrity Online by 17 October Acquirers must register for Data Integrity Online to receive their noncompliance notification. Registering for MasterCard Connect If you do not have access to MasterCard Connect, first perform these steps: 1. Go to 2. Click Sign Up. 3. Complete the steps in the registration process and click Submit. 27

8 Requesting Access to Data Integrity Online Once access to MasterCard Connect is granted, customers that do not have access to Data Integrity Online can request this product in the MasterCard Connect Store. To request this: 1. Go to 2. Enter your User ID and Password. 3. Click Store. 4. Locate Data Integrity Online, click Add to Cart. 5. Continue shopping, or click Cart to view items in shopping cart or to Check Out. Using Data Integrity Online Once registered, to use Data Integrity Online, follow these steps: 1. Go to 2. Enter your User ID and Password. 3. Select Applications>Data Integrity Online. 4. The page will open on the Reporting tab. On the drop-down list box, click to select the type of report. Documentation Support For detailed information about Data Integrity Program, customers should refer to the Data Integrity Monitoring Program manual, available via the Publications product on MasterCard Connect. This manual provides customers with detailed information about the Data Integrity Online product and new and revised edit criteria. Refer to Appendix A, Data Integrity Edits List, for additional information about specific edits. For More Information Customers with questions can refer to the Data Integrity Monitoring Program manual is located on MasterCard Connect, in the Publications library, within the category. Customers with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, or: Data Integrity Help Desk Phone: Fax: