Terminology & Glossary

Full NameAcronymWhat is it?Examples/Used for:
3 Domain Server3DSAn online payment security protocol used by credit card networks like Visa (Verified by Visa), Mastercard (Mastercard SecureCode), and others. It adds an authentication step (like a one-time password or biometric verification) to ensure that the transaction is being made by the authorized cardholderA fraud prevention measure added to online transactions.
Account Authentication ValueAAVA cryptographic value used in online payment transactions.It serves as proof that the cardholder authentication process has been successfully completed and helps ensure the security and integrity of the transaction.
Account UpdaterA service that automatically updates stored card details when a card is renewed or replaced.Prevents payment disruptions in subscription services or recurring payments.
Acquiring BankA bank or financial institution that processes card payments on behalf of a merchant.Works with payment processors to authorize and settle transactions for merchants.
Application IdentifierAIDA unique identifier used to determine the application on a chip card that will process a transaction.Selecting the right app on EMV cards for transactions (e.g., Visa Credit vs. Visa Debit).
Application Programming InterfaceAPICollection of requests that facilitate real-time automated or system-to-system communication between a source and destination platform. For payment cards, a fully functional API supports monetary (eg. load, reload, unload, withdraw) and non-monetary (eg. suspend, activate) transactions. APIs are a protocol or file format that facilitate exchange of data between two systemsSubmitting data to create and / or to retrieve previously submitted data
Authorisation HoldA temporary hold placed on a cardholder's funds during transaction authorisation.Commonly used by hotels, gas stations, and car rentals to reserve funds until the final charge is processed.
Automated Clearing HouseACHACH is a US based electronic fund transfer to send credits and debits from one account to another. ACH files are also used to reject payments returning funds back to the originating source. It is also the mechanism to return funds to the originating source where it cannot be applied ie closed account, load limits have been exceededProcessing of Debits, Credits and managing funds within the US banking system
Anti-Money LaunderingAMLAnti-money laundering (AML) refers to the activities financial institutions perform to achieve compliance with legal requirements to actively monitor for and report suspicious activities.Enables a regulated entity to identify potential illegal activities from tax evasion to drug trafficking and public corruption
AuthorisationThe process through which a payment system verifies and approves a transaction made using a credit card, debit card, or similar payment method.Amongst other checks this process ensures that the cardholder has sufficient funds or credit available, and it helps protect against fraud
Authorisation CodeA numeric or alphanumeric code returned by the card issuer after an authorisation request, verifying that a purchase has been authorised (approved) .
Bank Identification NumberBINThe first "6-digit" or "8-digit" of the Primary Account Number used by the card issuer to identify their institution.See also Issuer Identification Number
BehaviourA Behaviour is a set of Criteria and their associated Actions that define, control, limit or trigger various operations/functions against an activity initiated by a card or account.
CardholderThe individual to whom the card is issued or who is authorised to use an issued card.
Card Not PresentCNPA transaction where the physical card is not present, requiring alternative verification.Online, phone, or mail-order purchases.
Card Verification ValueCVV2/CVC2The card verification value is the 3-digit security code that is printed on the back of physical card or alternatively it can be allocated and communicated via other channels for virtual cards.These numbers provide extra security against unauthorised use during card not present transactions. If merchants input the Card Verification Value as part of authorising an MOTO transaction, the card issuer will respond that there is a match or no match with what the have on file for this card.
ChargebackA transaction returned by an issuing bank to an acquiring bank.A transaction may be returned because it was non-compliant with association rules and regulations or because it was disputed by the cardholder.
Close-LoopThis means the Card and associated funds can only used/spent at an agreed set/group of specific merchants. Usually outside the Mastercard/Visa/Other networks
Common Vulnerabilities and ExposuresCVEA catalog and classification of publicly known cybersecurity vulnerabilities
Credit (refund)A transaction where the merchants sends money to the cardholder's account, usually because the cardholder has returned the merchandise.Credit (refund) transactions appear on the cardholder transaction history as a credit to their balance and available to spend.
Digital Wallet/WalletA software-based system that securely stores tokenised versions of users payment information and passwords.Apple Pay, Google Pay, Samsung Pay.
Dynamic Currency ConversionDCCA service that allows international cardholders to pay in their home currency instead of the local currency.Offers convenience but may impact exchange rates or fees.
EncryptionThe scrambling of sensitive information for security purpose.For example PIN numbers are encrypted prior to transmission to prevent unauthorised access to the true value.
Fraud MonitoringSystems or services that analyze transactions in real-time to detect potentially fraudulent activity.Identifying suspicious activity like unusual spending patterns or transactions from unexpected locations.
GatewayA gateway provides an interface between different entities/services in the payments value chain .
Interchange FeeThe predetermined amount that the merchant bank pays the issuing bank for a transaction.Visa and Mastercard set Interchange fees based on a variety of categories such as card types, industry types, and processing environment.
Issuer Identification NumberIINThe first 6 to 8 digits of the PAN that identify the card issuer.Helps Networks route transactions to the correct issuing bank/processor. See also Bank Identification Number.
Issuing BankA financial institution that issues payment cards to consumers and businesses.
MastercardAn association of financial institutions set up to both issue cards to consumers and businesses and accept cards for payment of goods and services by businesses and to facilitate the flow of authorisation and settlement messages and subsequent clearing of funds
Merchant Category CodeMCCThis is a 4-digit number that all major credit/debit card companies assign to classes of business e.g. Fast Food, Airlines etc
Merchant Identification NumberMIDA unique identifier assigned to a merchant by their acquirer.Used to track transactions and identify merchants during processing.
Mutual Transport Layer SecuritymTLSa security protocol that extends the standard TLS (Transport Layer Security) by adding mutual authentication, where both the client and the server authenticate each other to ensure secure communication.
Near Field CommunicationNFCShort-range wireless technology used for contactless payments.Enables tap-to-pay at terminals and mobile wallet usage.
On-Us TransactionA transaction where the acquirer and issuer are the same institution.Reduces processing time and costs, as no external network is involved.
Payment NetworkA system that facilitates communication between merchants, acquirers, issuers, and card networks.Visa, Mastercard, American Express, and Discover.
Personal Identification NumberPINThe secret code that cardholder uses to identify themselves during a financial transaction usually at a POS or ATM
Primary Account NumberPANThe account number is given to a cardholder's card account. The PAN is typically printed or embossed on the cardholder's physical card.
Private Label CardA Private Label Card and associated funds can only used/spent at an agreed set/group of specific merchants. Usually in a Closed-Loop scenario
ReconciliationThe process of ensuring transaction records align with bank records.Used by businesses to verify sales, deposits, and fees.
Retrieval RequestA request made by the card issuer to the acquirer for a copy of transaction details.Often a precursor to a chargeback when a cardholder disputes a transaction.
SettlementThe process of funds transfer between merchants, processors, acquiring financial institutions, and issuing financial institutions during which each party sends or receives funds to settlecleared transactions
Soft DeclineA temporary decline where the card issuer advises retrying the transaction.Can occur due to insufficient funds, incorrect CVV, or temporary technical issues.
Strong Customer AuthenticationSCAA regulatory requirement that adds multi-factor authentication to online payments.Required in the EU under PSD2 to reduce fraud in online transactions.
Terminal Identification NumberTIDAn identifying number assigned to a merchant POS, APTm, Ecomm device that has captured details of a card and initiated an authorisation transaction .
Three-Factor Authentication3FAA security process that uses three distinct authentication factors to verify identity.Common factors include something you know (password), something you have (card), and something you are (biometric).
TokenA unique, non-sensitive identifier that replaces the PAN during some paymentsUsed in mobile wallets (Apple Pay, Google Pay) and online transactions to protect card data from exposure.
TokenisationThe process of replacing sensitive data, such as a card number, with a unique, non-sensitive identifier called a "token." Tokens are used in place of actual PANs, reducing the risk of fraud.Used in mobile wallets (Apple Pay, Google Pay) and online transactions to protect card data from exposure.
Virtual Card NumberVCNA tokenised card number linked to the primary account for secure online transactions.Protects the real PAN from exposure during online purchases.
VisaAn association of financial institutions set up to both issue cards to consumers and businesses and accept cards for payment of goods and services by businesses and to facilitate the flow of authorisation and settlement messages and subsequent clearing of funds