navigating the emv liability shi˜ · april 2013 processors must support emv april 2015 3rd party...

1
April 2013 Processors must support EMV April 2015 3rd party ATM must support EMV October 2015 Liability shiſt of counterfeit transactions October 2017 Liability shiſt for automated fuel dispenser (AFD) Liability shiſt for ATM April 2013 Processors must support EMV International ATM liability shiſt October 2015 Liability shiſt of counterfeit transactions October 2016 Liability shiſt for ATM October 2017 Liability shiſt for AFD April 2013 Processors must support EMV October 2015 Liability shiſt of counterfeit transactions October 2017 Liability shiſt for AFD April 2013 Processors must support EMV October 2015 Liability shiſt of counterfeit transactions October 2017 Liability shiſt for AFD U.S. Liability Flowchart The flowchart below serves as a high level guide to determining liability for disputed transactions under EMV liability rules. It is intended to be used only as a reference tool in association with the card brand’s rules. Was a counterfeit copy of a contact Chip card used? No chargeback rights available under the EMV Liability Shiſt. Was the authorization approved? Did the authorization include valid fallback indicators? ISSUER LIABLE for transaction. YES YES YES YES NO Did the transaction take place using a contact Chip card terminal? Chip card, non- Chip terminal. MERCHANT LIABLE for counterfeit transaction. Was the Chip read? Chip card, Chip terminal. ISSUER LIABLE for transaction. MERCHANT LIABLE for counterfeit transaction. If the issuer would have declined the transaction had the authorization contained valid feedback data, THE ISSUER MAY INITIATE A CHARGEBACK for invalid authorization data. U.S. Liability Scenarios The below scenarios serve as a guide to determining liability and need to be used in association with the card brand’s rules. Fallback Transactions Fallback is the term used when a normal chip transaction cannot be completed at a chip-capable terminal. This occurs when the chip-reading device or terminal is malfunctioning and the transaction is completed using magnetic stripe or key entered. All fallback transactions must be authorized online and properly identified as fallback. The issuer assumes liability for properly formatted fallback transactions, approved by the issuer. Transactions which are declined by the issuer or the card or where all available AIDs on the chip are blocked must not be attempted in fallback. Contact Vantiv for more information about EMV and the October 2015 liability shiſt. Navigating the EMV Liability Shiſt WHAT DOES THAT MEAN FOR MY BUSINESS? You’ve likely heard the noise about the impending liability shiſt surrounding the secure processing of EMV chip cards. Some sources claim you need to implement EMV-enabled payment terminals as soon as possible, while others advise a wait and see approach. Determining the best course of action for your business can be confusing. U.S. Liability Shiſt Chip technology is becoming the global standard for credit card and debit card payments. To increase the adoption of chip technology, Visa, MasterCard, Discover and American Express will implement a liability shiſt for domestic and cross-border counterfeit transactions effective October 2015. Once this goes into effect, merchants who have not made the investment in chip-enabled technology may be held financially liable for card-present fraud that could have been prevented with the use of a chip-enabled POS system. The truth is that the liability shiſt means different things to different businesses. In the past, merchants were not routinely held responsible for fraudulent transactions that occurred through no fault of their own. Aſter the liability shiſt, assigning “fault” is a lot more complicated. We have created this tool to help you understand the basics of the liability shiſt, as well as the finer details of liability aſter October 2015. ! NO NO NO NO YES ! ! ! ! If Issuer has... And Merchant has… Then this party holds the liability For this fraud type Chip card w/PIN Non-Chip Terminal Merchant Lost, Stolen or NRI Chip card w/PIN Chip Terminal with no PIN pad Merchant Lost, Stolen or NRI Chip card Non-Chip Terminal Merchant Counterfeit Non-chip card Chip Terminal Issuer Counterfeit Chip card Chip Terminal with PIN-pad Issuer Counterfeit, Lost, Stolen or NRI MasterCard and Maestro Transactions If Issuer has... And Merchant has… Then this party holds the liability For this fraud type Chip card w/PIN Non-Chip Terminal Merchant* Lost, Stolen or NRI Chip card w/PIN Chip Terminal with no PIN pad Merchant* Lost, Stolen or NRI Chip card Non-Chip Terminal Merchant* Counterfeit Non-chip card Chip Terminal Issuer* Counterfeit Chip card Chip Terminal with PIN-pad Issuer* Counterfeit, Lost, Stolen or NRI American Express If Issuer has... And Merchant has… Then this party For this fraud type holds the liability Chip card w/PIN Non-Chip Terminal Merchant Card-Present Counterfeit Chip card w/PIN Chip Terminal with no PIN pad Issuer* Non-Counterfeit Card-Present Fraudulent Transactions Chip card Non-Chip Terminal Merchant Counterfeit Non-chip card Chip Terminal Issuer Counterfeit Chip card Chip Terminal with PIN-pad Issuer* Non-Counterfeit Card-Present Fraudulent Transactions Visa and Interlink Transactions * Transaction was chip-initiated, correctly processed to completion and correct acceptance procedures have been followed. * This is assumed based on American Express's Fraud Liability Shiſt (FLS) policy transferring liability for fraudulent transactions away from the party that has the most secure form of EMV technology. Merchants should contact their American express account manager for specific details on the Fraud Liability Shiſt (FLS) policy per their contract agreement. If Issuer has... And Merchant has… Then this party holds the liability For this fraud type Chip card w/PIN Non-Chip Terminal Merchant Lost, Stolen or NRI Chip card w/PIN Chip Terminal with no PIN pad Merchant Lost, Stolen or NRI Chip card Non-Chip Terminal Merchant Counterfeit Non-chip card Chip Terminal Issuer Counterfeit Chip card Chip Terminal with PIN-pad Issuer Counterfeit, Lost, Stolen or NRI Discover and Pulse Note: When the same level of network-supported EMV technology is invoked by both parties, or when the Card Transaction is conducted as a Contactless Card Transaction, the EMV fraud liability shiſt policy will not determine liability for the transaction. If Issuer has... And Merchant has… Then this party holds the liability For this fraud type Chip card w/PIN Non-Chip Terminal Merchant* Lost, Stolen or NRI Chip card w/PIN Chip Terminal with no PIN pad Merchant* Lost, Stolen or NRI Chip card Non-Chip Terminal Merchant* Counterfeit Non-chip card Chip Terminal Issuer* Counterfeit Chip card Chip Terminal with PIN-pad Issuer* Counterfeit PIN Debit Networks * This is assumed based on the PIN Debit networks Liability Shiſt policy transferring liability for fraudulent transactions away from the party that has the highest level of available payments security. Liability Shiſt Dates The table below outlines the effective date of the liability shiſt by region and card brand. © 2015, Vantiv, LLC, All Rights Reserved.

Upload: hacong

Post on 17-Sep-2018

214 views

Category:

Documents


0 download

TRANSCRIPT

April 2013Processors must support

EMV

April 20153rd party ATM

must support EMV

October 2015Liability shi� of counterfeit

transactions

October 2017Liability shi� for automated

fuel dispenser (AFD) Liability shi� for ATM

April 2013 Processors must

support EMVInternational ATM

liability shi�

October 2015Liability shi� of

counterfeit transactions

October 2016 Liability shi� for ATM

October 2017 Liability shi� for AFD

April 2013 Processors must

support EMV

October 2015Liability shi� of

counterfeit transactions

October 2017 Liability shi� for AFD

April 2013 Processors must

support EMV

October 2015Liability shi� of

counterfeit transactions

October 2017Liability shi� for AFD

U.S. Liability FlowchartThe flowchart below serves as a high level guide to determining liability for disputed transactions under EMV

liability rules. It is intended to be used only as a reference tool in association with the card brand’s rules.

Was a counterfeit copy of a

contact Chip card used?

No chargeback rights available under the EMV Liability Shi�.

Was the authorization

approved?

Did the authorization include valid

fallback indicators?

ISSUER LIABLEfor transaction.

YES YES YES YESNODid the

transaction take place using a contact Chip

card terminal?

Chip card, non-Chip terminal. MERCHANT

LIABLEfor counterfeit

transaction.

Wasthe Chip

read?

Chip card,Chip terminal.

ISSUER LIABLEfor transaction.

MERCHANT LIABLE

for counterfeit transaction.

If the issuer would have declined the transaction had the authorization

contained valid feedback data, THE ISSUER MAY INITIATE A CHARGEBACK

for invalid authorization data.

U.S. Liability ScenariosThe below scenarios serve as a guide to determining liability and need

to be used in association with the card brand’s rules.

Fallback TransactionsFallback is the term used when a normal chip transaction cannot be completed at a chip-capable terminal. This occurs when the chip-reading device or terminal is malfunctioning and the transaction is completed using magnetic stripe or key entered. All fallback transactions must be authorized online and properly identified as fallback. The issuer assumes liability for properly formatted fallback transactions, approved by the issuer.

Transactions which are declined by the issuer or the card or where all available AIDs on the chip are blocked must not be attempted in fallback.

Contact Vantiv for more information about EMV and the October 2015 liability shi�.

Navigating the EMV Liability Shi�WHAT DOES THAT MEAN FOR MY BUSINESS?

You’ve likely heard the noise about the impending liability shi� surrounding the secure processing of EMV chip cards. Some sources claim you need to implement EMV-enabled payment terminals as soon as possible, while others advise a wait and see approach. Determining the best course of action for your business can be confusing.

U.S. Liability Shi�Chip technology is becoming the global standard for credit card and debit card payments. To increase the adoption of chip technology, Visa, MasterCard, Discover and American Express will implement a liability shi� for domestic and cross-border counterfeit transactions e�ective October 2015. Once this goes into e�ect, merchants who have not made the investment in chip-enabled technology may be held financially liable for card-present fraud that could have been prevented with the use of a chip-enabled POS system.

The truth is that the liability shi� means di�erent things to di�erent businesses. In the past, merchants were not routinely held responsible for fraudulent transactions that occurred through no fault of their own. A�er the liability shi�, assigning “fault” is a lot more complicated.

We have created this tool to help you understand the basics of the liability shi�,as well as the finer details of liability a�er October 2015.

!

NO NO NO NOYES

!! !

!

If Issuer has... And Merchant has… Then this party holds the liability For this fraud type

Chip card w/PIN Non-Chip Terminal Merchant Lost, Stolen or NRI

Chip card w/PIN Chip Terminal with no PIN pad Merchant Lost, Stolen or NRI

Chip card Non-Chip Terminal Merchant Counterfeit

Non-chip card Chip Terminal Issuer Counterfeit

Chip card Chip Terminal with PIN-pad Issuer Counterfeit, Lost, Stolen or NRI

MasterCard and Maestro Transactions

If Issuer has... And Merchant has… Then this party holds the liability For this fraud type

Chip card w/PIN Non-Chip Terminal Merchant* Lost, Stolen or NRI

Chip card w/PIN Chip Terminal with no PIN pad Merchant* Lost, Stolen or NRI

Chip card Non-Chip Terminal Merchant* Counterfeit

Non-chip card Chip Terminal Issuer* Counterfeit

Chip card Chip Terminal with PIN-pad Issuer* Counterfeit, Lost, Stolen or NRI

American Express

If Issuer has... And Merchant has… Then this party For this fraud type holds the liability

Chip card w/PIN Non-Chip Terminal Merchant Card-Present Counterfeit

Chip card w/PIN Chip Terminal with no PIN pad Issuer* Non-Counterfeit Card-Present Fraudulent Transactions

Chip card Non-Chip Terminal Merchant Counterfeit

Non-chip card Chip Terminal Issuer Counterfeit

Chip card Chip Terminal with PIN-pad Issuer* Non-Counterfeit Card-Present Fraudulent Transactions

Visa and Interlink Transactions

* Transaction was chip-initiated, correctly processed to completion and correct acceptance procedures have been followed.

* This is assumed based on American Express's Fraud Liability Shi� (FLS) policy transferring liability for fraudulent transactions away from the party that has the most secure form of EMV technology. Merchants should contact their American express account manager for specific details on the Fraud Liability Shi� (FLS) policy per their contract agreement.

If Issuer has... And Merchant has… Then this party holds the liability For this fraud type

Chip card w/PIN Non-Chip Terminal Merchant Lost, Stolen or NRI

Chip card w/PIN Chip Terminal with no PIN pad Merchant Lost, Stolen or NRI

Chip card Non-Chip Terminal Merchant Counterfeit

Non-chip card Chip Terminal Issuer Counterfeit

Chip card Chip Terminal with PIN-pad Issuer Counterfeit, Lost, Stolen or NRI

Discover and Pulse

Note: When the same level of network-supported EMV technology is invoked by both parties, or when the Card Transaction is conducted as a Contactless Card Transaction, the EMV fraud liability shi� policy will not determine liability for the transaction.

If Issuer has... And Merchant has… Then this party holds the liability For this fraud type

Chip card w/PIN Non-Chip Terminal Merchant* Lost, Stolen or NRI

Chip card w/PIN Chip Terminal with no PIN pad Merchant* Lost, Stolen or NRI

Chip card Non-Chip Terminal Merchant* Counterfeit

Non-chip card Chip Terminal Issuer* Counterfeit

Chip card Chip Terminal with PIN-pad Issuer* Counterfeit

PIN Debit Networks

* This is assumed based on the PIN Debit networks Liability Shi� policy transferring liability for fraudulent transactions away from the party that has the highest level of available payments security.

Liability Shi� DatesThe table below outlines the e�ective date of the liability shi� by region and card brand.

© 2015, Vantiv, LLC, All Rights Reserved.