Terminal verification results (TVR) or Tag '95' [1] is an EMV data object . The TVR is a series of bits set by the terminal reading an EMV card, based on logical tests (for example has the card expired). This data object is used in the terminal's decision whether to accept, decline or go on-line for a payment transaction. The format of the TVR is as follows: [2] [3]
b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
---|---|---|---|---|---|---|---|---|
1 | Offline data authentication was not performed | |||||||
1 | SDA failed | |||||||
1 | ICC data missing | |||||||
1 | Card number appears on hotlist | |||||||
1 | DDA failed | |||||||
1 | CDA failed | |||||||
1 | SDA was selected | |||||||
0 | RFU | |||||||
b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
---|---|---|---|---|---|---|---|---|
1 | Card and terminal have different application versions | |||||||
1 | Expired application | |||||||
1 | Application not yet effective | |||||||
1 | Requested service not allowed for card product | |||||||
1 | New card | |||||||
0 | RFU | |||||||
0 | RFU | |||||||
0 | RFU | |||||||
b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
---|---|---|---|---|---|---|---|---|
1 | Cardholder verification was not successful | |||||||
1 | Unrecognised CVM | |||||||
1 | PIN try limit exceeded | |||||||
1 | PIN entry required, but no PIN pad present or not working | |||||||
1 | PIN entry required, PIN pad present, but PIN was not entered | |||||||
1 | On-line PIN entered | |||||||
0 | RFU | |||||||
0 | RFU | |||||||
b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
---|---|---|---|---|---|---|---|---|
1 | Transaction exceeds floor limit | |||||||
1 | Lower consecutive offline limit exceeded | |||||||
1 | Upper consecutive offline limit exceeded | |||||||
1 | Transaction selected randomly of on-line processing | |||||||
1 | Merchant forced transaction on-line | |||||||
0 | RFU | |||||||
0 | RFU | |||||||
0 | RFU | |||||||
b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
---|---|---|---|---|---|---|---|---|
1 | Default TDOL Used | |||||||
1 | Issuer authentication failed | |||||||
1 | Script processing failed before final Generate AC | |||||||
1 | Script processing failed after final Generate AC | |||||||
1 | Relay resistance threshold exceeded (Contactless Kernel 2) | |||||||
1 | Relay resistance time limits exceeded (Contactless Kernel 2) | |||||||
0 | 0 | Relay resistance protocol not supported (Contactless Kernel 2) | ||||||
0 | 1 | Relay resistance protocol not performed (Contactless Kernel 2) | ||||||
1 | 0 | Relay resistance protocol performed (Contactless Kernel 2) | ||||||
1 | 1 | RFU | ||||||
A debit card, also known as a check card or bank card, is a payment card that can be used in place of cash to make purchases. The card usually consists of the bank's name, a card number, the cardholder's name, and an expiration date, on either the front or the back. Many new cards now have a chip on them, which allows people to use their card by touch (contactless), or by inserting the card and keying in a PIN as with swiping the magnetic stripe. Debit cards are similar to a credit card, but the money for the purchase must be in the cardholder's bank account at the time of the purchase and is immediately transferred directly from that account to the merchant's account to pay for the purchase.
Electronic Funds Transfer at Point Of Sale, abbreviated as EFTPOS, is the technical term referring to a type of payment transaction where electronic funds transfers (EFT) are processed at a point of sale (POS) system or payment terminal usually via payment methods such as payment cards. EFTPOS technology was developed during the 1980s.
A smart card (SC), chip card, or integrated circuit card, is a card used to control access to a resource. It is typically a plastic credit card-sized card with an embedded integrated circuit (IC) chip. Many smart cards include a pattern of metal contacts to electrically connect to the internal chip. Others are contactless, and some are both. Smart cards can provide personal identification, authentication, data storage, and application processing. Applications include identification, financial, public transit, computer security, schools, and healthcare. Smart cards may provide strong security authentication for single sign-on (SSO) within organizations. Numerous nations have deployed smart cards throughout their populations.
Electronic cash was, until 2007, the debit card system of the German Banking Industry Committee, the association that represents the top German financial interest groups. Usually paired with a transaction account or current account, cards with an Electronic Cash logo were only handed out by proper credit institutions. An electronic card payment was generally made by the card owner entering their PIN at a so-called EFT-POS-terminal (Electronic-Funds-Transfer-Terminal). The name "EC" originally comes from the unified European checking system Eurocheque. Comparable debit card systems are Maestro and Visa Electron. Banks and credit institutions who issued these cards often paired EC debit cards with Maestro functionality. These combined cards, recognizable by an additional Maestro logo, were referred to as "EC/Maestro cards".
Near-field communication (NFC) is a set of communication protocols that enables communication between two electronic devices over a distance of 4 cm or less. NFC offers a low-speed connection through a simple setup that can be used for the bootstrapping of capable wireless connections. Like other proximity card technologies, NFC is based on inductive coupling between two electromagnetic coils present on a NFC-enabled device such as a smartphone. NFC communicating in one or both directions uses a frequency of 13.56 MHz in the globally available unlicensed radio frequency ISM band, compliant with the ISO/IEC 18000-3 air interface standard at data rates ranging from 106 to 848 kbit/s.
EMV is a payment method based on a technical standard for smart payment cards and for payment terminals and automated teller machines which can accept them. EMV stands for "Europay, Mastercard, and Visa", the three companies that created the standard.
Mastercard Maestro is a brand of debit cards and prepaid cards owned by Mastercard that was introduced in 1991. Maestro is accepted at around fifteen million point of sale outlets in 93 countries.
Visa Electron was a debit card product that used the Visa payment system. It was offered by issuing banks in every country with the exception of Canada, Australia, Argentina, Ireland and the United States. The difference between Visa Electron and Visa Debit, a similar product, is that payments with Visa Electron always require on-line electronic authorisation, and typically require that all the funds be available at the time of transfer, i.e., Visa Electron card accounts may not normally be overdrawn. Most Visa Debit cards, on the other hand, may be processed offline, without online authorisation, and may allow transfers exceeding available funds up to a certain limit. For that reason, Visa Electron cards are more commonly issued to younger customers or customers that have poor credit. Online stores and all offline terminals do not support Visa Electron because their systems cannot check for the availability of funds. In addition to point of sale debit payments, the card also allows the holder to withdraw cash from automated teller machines (ATMs) using the Plus interbank network.
The CharlieCard is a contactless smart card used for fare payment for transportation in the Boston area. It is the primary payment method for the Massachusetts Bay Transportation Authority (MBTA) and several regional public transport systems in the U.S. state of Massachusetts. It is used on the MBTA's subway and bus services, but is not currently accepted on the MBTA Commuter Rail and ferries.
Payment cards are part of a payment system issued by financial institutions, such as a bank, to a customer that enables its owner to access the funds in the customer's designated bank accounts, or through a credit account and make payments by electronic transfer with a payment terminal and access automated teller machines (ATMs). Such cards are known by a variety of names, including bank cards, ATM cards, client cards, key cards or cash cards.
A contactless smart card is a contactless credential whose dimensions are credit card size. Its embedded integrated circuits can store data and communicate with a terminal via NFC. Commonplace uses include transit tickets, bank cards and passports.
Contactless payment systems are credit cards and debit cards, key fobs, smart cards, or other devices, including smartphones and other mobile devices, that use radio-frequency identification (RFID) or near-field communication (NFC) for making secure payments. The embedded integrated circuit chip and antenna enable consumers to wave their card, fob, or handheld device over a reader at the point-of-sale terminal. Contactless payments are made in close physical proximity, unlike other types of mobile payments which use broad-area cellular or Wi-Fi networks and do not involve close physical proximity.
The payment card industry (PCI) denotes the debit, credit, prepaid, e-purse, ATM, and POS cards and associated businesses.
A payment terminal, also known as a point of sale (POS) terminal, credit card machine, card reader, PIN pad, EFTPOS terminal, is a device which interfaces with payment cards to make electronic funds transfers. The terminal typically consists of a secure keypad for entering PIN, a screen, a means of capturing information from payments cards and a network connection to access the payment network for authorization.
The Chip Authentication Program(CAP) is a MasterCard initiative and technical specification for using EMV banking smartcards for authenticating users and transactions in online and telephone banking. It was also adopted by Visa as Dynamic Passcode Authentication (DPA). The CAP specification defines a handheld device (CAP reader) with a smartcard slot, a numeric keypad, and a display capable of displaying at least 12 characters (e.g., a starburst display). Banking customers who have been issued a CAP reader by their bank can insert their Chip and PIN (EMV) card into the CAP reader in order to participate in one of several supported authentication protocols. CAP is a form of two-factor authentication as both a smartcard and a valid PIN must be present for a transaction to succeed. Banks hope that the system will reduce the risk of unsuspecting customers entering their details into fraudulent websites after reading so-called phishing emails.
A card security code is a series of numbers that, in addition to the bank card number, is printed on a credit or debit card. The CSC is used as a security feature for card not present transactions, where a personal identification number (PIN) cannot be manually entered by the cardholder. It was instituted to reduce the incidence of credit card fraud. Unlike the card number, the CSC is deliberately not embossed, so that it is not read when using a mechanical credit card imprinter which will only pick up embossed numbers.
RuPay is an Indian multinational financial services and payment service system, conceived and owned by the National Payments Corporation of India (NPCI). It was launched in 2012, to fulfil the Reserve Bank of India's (RBI) vision of establishing a domestic, open and multilateral system of payments. RuPay facilitates electronic payments at almost all Indian banks and financial institutions. NPCI has partnered with Discover Financial and JCB to help the RuPay network gain international acceptance.
Payanywhere is a payments platform and app that allows merchants in the United States to accept credit and debit card payments while building customer relationships in-store, online, or on the go. Merchants may accept payments on their smartphone via a Bluetooth card reader or on an in-store “Storefront” solution featuring a tablet and stand, which was introduced on April 8, 2014. PayAnywhere offers credit card readers and apps that are compatible with both Apple and Android devices.
Apple Pay is a mobile payment service by Apple Inc. that allows users to make payments in person, in iOS apps, and on the web. Supported on iPhone, Apple Watch, iPad, Mac, and Vision Pro, Apple Pay digitizes and can replace a credit or debit card chip and PIN transaction at a contactless-capable point-of-sale terminal. It does not require Apple Pay–specific contactless payment terminals; it can work with any merchant that accepts contactless payments. It adds two-factor authentication via Touch ID, Face ID, Optic ID, PIN, or passcode. Devices wirelessly communicate with point of sale systems using near field communication (NFC), with an embedded secure element (eSE) to securely store payment data and perform cryptographic functions, and Apple's Touch ID and Face ID for biometric authentication.
Google Pay is a mobile payment service developed by Google to power in-app, online, and in-person contactless purchases on mobile devices, enabling users to make payments with Android phones, tablets, or watches. Users can authenticate via a PIN, passcode, or biometrics such as 3D face scanning or fingerprint recognition.