This is an acquirer mandate, below values are sent to the merchant in response, in case the merchant decides to control them.

https://paymentknowledgebase.com/display/PS/Nedbank+via+Postilion+Integration+Sheet

List of Mandates Applicable for Card Connectors (more details here)

Mandates

Supported

Comments and Approval Certificate, if the case
Visa/ Mastercard Acquirer Merchant Advice Code(tick)

This is an acquirer mandate, below values are sent to the merchant in response, in case the merchant decides to control them.

For both Visa and Mastercard brand families, the Acquirer Merchant Advice Code is received by the merchant in the field "resultDetails.MerchantAdviceCode", with the below possible values:

Code
Description
Merchant Advice

00

Others

Check the field "resultDetails.AcquirerResponse" in Connector Details and, depending on the response, update the transaction details before reattempting

01

New/ Updated Account Information is available

Check the field "resultDetails.AcquirerResponse" in Connector Details and, depending on the response, obtain new account information (card number/ expiration date/ transactions amount/ others) before reattempting. Or retry using 3D Secure authentication.

02

Try again later

The transaction cannot be approved at this time. Retry the transaction 48 hours later.

03

Do not try again

Do not resubmit the payment due to either account being closed or fraudulent reasons. Obtain another form of payment from the cardholder.

21

Recurring Payment Cancellation Service

The cardholder canceled the recurring agreement and instructed the merchant and acquirer to not retry the transaction. Obtain another form of payment from the cardholder and de-register the card token.



https://paymentknowledgebase.com/display/PS/Mandates

Here is a list of Mandates applicable for Card Connectors (for further details, check each Connector Integration Sheet).

VISA

Mandate/ Announcement RegionEffective dateOverviewMandate materials
Mandate/ Announcement RegionEffective dateOverviewMandate materials
Visa Support Will End After October 2023 for Interim Transaction Identifier Issued in EEA and UK for PSD2 Regulatory Requirements Relative to MITs

EEA & UK                      


Global                          

As previously announced, effective April 22, 2022, Visa will launch the Visa Network Merchant-Initiated Transaction (MIT) Service, which assists merchants and acquirers in managing the Original Transaction Identifier requirements for processing MITs.

Any merchant or acquirer still using an Interim Transaction Identifier to indicate transactions as MITs may consider the use of this service to enable their migration towards the use of valid transaction identifiers.

Merchants that already follow the MIT framework may also consider this new service to optimize processing of MITs.

Notably for issuers, effective July 15, 2022 Visa, will implement changes to allow issuers to subscribe and receive value-added data associated with the Original Transaction Identifier sent in MITs processed by the Network MIT Service. This value-added data can be used to specify the card validation and cardholder authentication result of the initial transaction. More details can be found in the attached Visa Business News.

Visa Will Discontinue Support of 3-D Secure 1.0.2Global

 

Effective October 15, 2022, Visa will discontinue support of 3-D Secure 1.0.2 and related technology.
Visa 8-digit BINGlobal

 

Visa is updating the applications and systems to accommodate eight-digit BINs in addition to the current six-digit BINs.
Visa will start re-assigning existing and issuing new eight-digit BINs to card issuers from 22 April 2022.

New Message Purchase Return Authorization

(Online Refunds)

Global except Europe      

Europe                              

Refund transactions to a VISA card do not involve issuer authorization, and such authorization requests are only rarely submitted by merchants.
To encourage faster refund processing and reduce refund-related customer service burdens on merchants, acquirers, and issuers, VISA is introducing refund authorization support to the VISA network.

AI09079 Clarifications & Risk Mitigation.pdf

AI09311 Credit Voucher & Merchandise 09.2019.pdf

AI09312 Stand-In Processing.pdf

Credit Voucher & Merchandise 12.2019.docx

Improve the Customer Return Process.pdf

Merchandise-return-guide 01.2020.pdf

AI09882_Visa Operational Business Response to COVID19 (26Mar2020).pdf

AI09916 waver for Europe.pdf

Visa Secure Root Certificate Update

Global 

Visa Secure Access Control Server (ACS), Merchant Plug-in (MPI), 3DS Server (3DSS), and 3DS Software Development Kit (SDK) endpoints use digital certificates for authentication during a Visa Secure online transaction. The Visa Certificate Authority (CA), which issues the digital certificates used, updates the root certificate due to the expiration of the current eCommerce (G1) certificate chain. This change applies to Visa Secure endpoints using 3DS 1.0.2 and EMV® 3DS.
Visa 8 digit BIN

Global 

Visa is updating the applications and systems to accommodate eight-digit BINs in addition to the current six-digit BINs.
Visa will start reassigning existing and issuing new eight-digit BINs to card issuers from April 22, 2022.
Visa will discontinue support of 3DS1 Attempts

 Global

Visa will stop support of 3DS 1.0.2 Visa Attempts Access Control Server (AACS) for non-participating issuers. If a merchant attempts 3DS 1.0.2 authentication with a non-participating issuer, the transaction will be considered as ECI 07.

If the issuer continues to support 3DS 1.0.2 beyond this date, then 3DS 1.0.2 authentication attempts will continue to work.
For merchants to determine which issuers continue to support 3DS 1.0.2 after 15 October 2021, Visa will re-enable the Card Range Request (CRReq) and Card Range Response (CRRes) messages for 3DS 1.0.2 that had been previously disabled.

3D SECURE updates 2.2

3DS 2.0 for EU                

3DS 2.2 for EU                



Note: effective date can be different in specific areas, like UK and others.

3-D Secure is a messaging protocol that enables Cardholders to authenticate themselves with their Issuer when conducting online e-commerce transactions. The main objective of the protocol is to detect and prevent e-commerce fraud and improve the security of online card transactions.
Credential on fileGlobal

 

The schemes have defined mandatory rules and processing specifications for transactions performed using stored card details. This is to increase transparency, consistency, and approval rates for credential-on-file (COF) transactions. The schemes have introduced new identifiers for these transactions.

New Identifiers for COF.pdf

Stored Credential Transaction 10.05.2017.pdf

Visa-clarifications-on COF.pdf

Mandates implemented by customer request because the impact is limited to a small category of merchants/ transaction types
AI12109 Changes to Support the Recurring Payment Transaction Mandate for Cards Issued in IndiaGlobal

 

Visa will implement changes to support the processing of domestic and cross-border recurring payment transactions for cards issued in India.

The changes are mandatory for MDEX endpoints, and acquirers with merchants world wide that offer recurring payments, and for all issuers in India.

AI10936 Partial Authorization Participation Requirements

Brazil                                

Dominican Republic

El Salvador

Guatemala

Panama

Puerto Rico


All other LAC countries      

Visa’s Partial Authorization Service provides an alternative to declining a transaction when the card’s available balance is not sufficient to approve a transaction in full.

AI10936.pdf
AI08978 - Visa is introducing the Acquirer Merchant Advice CodeGlobal

 

For decline code in Category 1 (Issuer will never approve), the merchant is not permitted to reattempt the transaction. In this category, the second attempt will lead to a fee.
AI10155 Visa New Deferred Authorization (VDA) Message Reason Code for Token TransactionsGlobal

 

Deferred authorization occurs when a merchant cannot complete an authorization at the time of the transaction with the cardholder due to connectivity, systems issues, or other limitations, and then later completes the authorization when it is able to do so.
The deferred authorization mandate is applicable for POS transactions.
OCT (Original Credit Transaction)Global

 

To develop opportunities in real-
time push payments, Visa will mandate single message
origination (0200 messages) for all original credit transactions (OCTs) processed through Visa and sunset all batch-only submissions of OCTs .

Visa New Indicator for CryptocurrencyGlobal

 

To maintain payment system integrity, acquirers must properly identify transactions involving the purchase of cryptocurrency. This change introduces a new processing attribute into authorization messages and clearing transactions to provide issuers greater visibility into transactions that involve the purchase of cryptocurrency. This change provides additional detail to allow stakeholders in the payment value chain to more effectively manage risk and fraud.

Visa Business Enhancements.pdf

Visa Payment Account References (PAR)Europe

 

To align with global requirements, each Visa primary account number issued in the Europe region will be required to have an associated PAR.

AI07668 - Payment Account References.pdf

Mastercard

Mandate/ Announcement RegionEffective dateMandate summaryMastercard Details
Mastercard Identity Check Program Letter of Compliance Framework and Sunset of EMV 3DS version 2.1.0

Global 

 

Mastercard is implementing the Identity Check Letter of Compliance (LOC) Framework.
Implementation of this framework is in the spirit of propelling the ecosystem to adopt new features, reduce erroneous transactions, and leverage the most recent updates released by EMVCo and the Identity Check Program.
In addition, Mastercard is announcing some milestones for the sunset of EMV 3DS version 2.1.0.

Mastercard Customer Roadmap to Transition from 3DS 1.0 to EMV 3DS (2.0) - 3DS 1.0.2 SunsettingGlobal

 

Mastercard is providing an update and confirmation to its plan to transition all customers to EMV 3-D Secure (3DS) prior to the decommission date of 3DS 1.0. All customers must begin their transition to the new specification version immediately to ensure no transaction
impact. Mastercard will continue to support 3DS 1.0 transactions on the Mastercard Authentication Network up until the final decommission date. There are no changes to our 3DS liability shift rules with this announcement. Liability shift rules will continue to apply to both EMV 3DS and 3DS 1.0 transactions as they do today. Refer to the Chargeback Guide for more information about the 3DS liability shift.
Mastercard Credential on File - CIT/MIT Indicators

USA                  

Global              

In essence, Mastercard asks merchants to send a set of CIT and MIT indicators for each COF scenario. In addition, Mastercard starts differentiating two flavors of recurring payments: Standing Order (fixed frequency, variable amount) and Subscription (fixed frequency, fixed amount). Each of them requires its own indicator value.

Mastercard 8-digit BINGlobal

 

Mastercard is updating the applications and systems to accommodate eight-digit BINs in addition to the current six-digit BINs.
Mastercard will start reassigning existing and issuing new eight-digit BINs to card issuers from April 22, 2022.
New Message Purchase Return Authorization (Online Refunds)

Global (Except UK & Ireland 


UK &Ireland         

Refund transactions to a Mastercard card do not involve issuer authorization, and such authorization requests are only rarely submitted by merchants.
To encourage faster refund processing and reduce refund-related customer service burdens on merchants, acquirers, and issuers, Mastercard is introducing refund authorization support to the Mastercard network. This is optional for merchants.

AN 1430 revised standards 12-19-2019.pdf

Revised Standards Online Authorization Refund.pdf

Technical Resource Center MyDocs.pdf

AN 3984—20.Q2 Switching Release—Deferral.pdf

AN 3391 Mastercard will discontinue support of 3DS1 AttemptsGlobal

 

Mastercard will decommission its 3DS1 Attempts. 
Issuers that still want to support Attempts must generate from their own ACS solution. 3DS 1.0 fully authenticated transactions will continue to be supported.
3D SECURE updates 2.2

3DS 2.0 for EU      
3DS 2.2 for EU    


Note: The effective date can be different in specific areas, like the UK and others.

3-D Secure is a messaging protocol that enables Cardholders to authenticate themselves with their Issuer when conducting online e-commerce transactions. The main objective of the protocol is to detect and prevent e-commerce fraud and improve the security of online card transactions.
Credential on fileGlobal

 

The schemes have defined mandatory rules and processing specifications for transactions performed using stored card details. This is to increase transparency, consistency, and approval rates for credential-on-file (COF) transactions. The schemes have introduced new identifiers for these transactions.

Mandates implemented by customer request because the impact is limited to a small category of merchants/ transaction types
AN 6038 Mastercard Send Funding and Payment Transaction EnhancementsGlobal

 

Mastercard is enhancing Mastercard Send funding and payment transactions for MoneySend, Gaming and Gambling, and Mastercard Merchant Presented QR (MPQR) payments
AN 6022 Introduction and Standardization of Transaction Data ElementsGlobal

 (IPM MPE changes for Dual Message (Clearing) )

  Dual Message System (Authorization), Dual Message (Clearing), Single Message.

Mastercard is introducing new data elements to align systems and prepare for future payments enhancements, standardizing requirements for key transaction data elements, and updating data element labels.

Acquirers globally must prepare their systems to:

  • Support the new subelements and subfields as detailed in this announcement.
  • Comply with the new requirements for populating existing data elements.
AN 6055 Processing Enhancements for Recurring Payment Transactions in IndiaGlobal

 

Mastercard will implement changes to support the processing of domestic and cross-border recurring payment transactions for cards issued in India.

The changes are mandatory for acquirers with merchants worldwide that offer recurring payments, and for all issuers in India.

AN 6468 Announcing Issuer SCA Delegation in Remote Commerce Token Transactions for the Europe RegionEurope

 

Mastercard is announcing the sunset of the Authentication Express
program and its replacement with a new strong customer authentication
(SCA) delegation program that allows merchants, payment service
providers (PSPs), and digital wallets to authenticate cardholders as an
issuer delegation in remote commerce token transactions, in compliance
with regulations in the Europe region. In the Europe region, Mastercard only
supports delegated authentication solutions on tokenized transactions.

AN 6014 / 6094 Revised Standards for Purchase Account Status Inquiry MessagesGlobal

 

Mastercard is revising its standards relating to Purchase Account Status
Inquiry (ASI) authorization request messages. 

AN 5519 Mastercard Send Enhancement for the MoneySend and Funding Programs and Gaming and Gambling Payments ProgramGlobal

 

Mastercard is extending support of the Mastercard Gaming and Gambling Payments Program globally where such a program is permissible. Mastercard is also reiterating and clarifying standards regarding the definition of area of use specific to the Mastercard Send product.

AN 6094 / 6014 Revised Standards for Purchase Account Status Inquiry MessagesGlobal

 

Acquirers must ensure all authorization request messages sent by the acquirer or a merchant for an account validation with a zero amount are properly identified as ASI messages.

This bulletin announcement applies to customers globally, with the exception of customers in the European Economic Area (EEA) countries, United Kingdom, and Gibraltar which should refer instead to AN 6094 Revised Standards for Purchase Account Status Inquiry Messages for the EEA Countries, United Kingdom, and Gibraltar.

AN5862 / 5528 / 5842 Introducing Mastercard Installment Payment Product CodesUK

 

Mastercard has introduced the Mastercard Installments Program to provide consumers with the flexibility to split the cost of a purchase into equal installments. By default, Mastercard will enable all merchants in the United Kingdom to participate in the Mastercard Installments Program with no enrollment, registration, or technical work required. Merchants may choose to opt out of the Mastercard Installments Program or rejoin the program at any time by informing their acquirer.
AN 5796 - Updated Error Codes and Messages for In Control for Commercial Payments API and In Control for Business TravelGlobal

 

Mastercard is updating error codes and messages in the In Control for
Commercial Payments (ICCP) API to provide clearer information on what has occurred in response messages, clearly indicating any client action required.

AN 6042/ 4810 / AN 4853 / AN 4536 / AN 2921 - Mastercard is introducing the Acquirer Merchant Advice Code - Decline Reason CodeGlobal

 

Mastercard is introducing the Acquirer Merchant Advice Code. This incurs higher fees for the CNP transactions declined with a MAC value of 03 or 21, where in the past 30 days a transaction on the same card, at the same merchant, and with the same transaction amount was declined with MAC 03 or 21.
AN 4224 / AN 4615 Mastercard New Merchant Country of OriginGlobal

 

Mastercard will require acquirers to include the home country code of a government-controlled merchant (for example, embassies), whether such country is the same as or different from the country in which the government-controlled merchant is located or in which the transaction occurs, in authorization and clearing messages.
AN 6766/ 4670 / 3363 / 5843 - Mandatory Use of Digital Payment Data Field for Remote Commerce Transactions with CryptogramsGlobal

 

Mastercard is announcing the mandatory use of data element (DE) 104
(Digital Payment Data) for Digital Remote Commerce transactions
initiated with a token cryptogram.

AN 3405 Mastercard Online Gambling TransactionsGlobal

 

Mastercard is revising rules to expand an existing mandate for online gambling to all applicable gambling card acceptor business codes (MCCs) and to provide additional options for authentication. Mastercard is updating an existing rule that requires acquirers of online gambling transactions to include the card validation code (CVC) 2 value of the Mastercard account in the authorization request message. This update is intended to promote the use of enhanced authentication tools and, in turn, reduce fraud.

Mastercard High-Risk Purchase IdentifierGlobal

 

Mastercard creates the ability for acquirers to notify issuers when a transaction involves the purchase of a cryptocurrency or high-risk securities, when the merchant has notified them of an applicable purchase. New transaction type identifier values will be defined in an existing field that acquirers must provide to issuers in Dual Message Authorization System and Single Message System request messages involving the purchase of cryptocurrency using MCC 6051 (Quasi Cash - Merchant) or high-risk securities using 6211 (Securities - Brokers/Dealers). The new identifier values can be used only with these two MCCs, respectively.

AN 2628 High-Risk Purchase Identifier Enhancement-20190618.pdf
AN 4742 / 1023 / 1476 Mastercard Payment Account References (PAR)Global

 

To align with global requirements, each Mastercard primary account number will be required to have an associated PAR.