Halyard Pay · Policy Updates Powered by Carver Agents

Mastercard SPME §8.6.1 · Jun 2022 → May 2023

Issuer Submissions

substantive

The updated section removes details about submission methods and introduces a 10-calendar-day timeframe for Issuers to contact the Cardholder to provide specific documentation regarding coercion claims.

Sources Mastercard SPME · Jun 2022 · page 83 PDF Mastercard SPME · May 2023 · page 91 PDF BRAM Response current
Also in §8.x this release substantive §8 Separation control substantive §8.5 Issuer Monitoring Program (IMP) substantive §8.6 Coercion Program substantive §8.6.2 Investigation Process substantive §8.6.5 Chargeback Responsibility substantive §8.7.5 Assessments, Recovery Amounts, and Fees
Why these edits? The update introduces a specific 10-calendar-day timeframe for Issuers to contact Cardholders to obtain documentation regarding coercion claims, altering the timing obligation in the BRAM Investigation Response process.
Mastercard SPME §8.6.1
This section was substantively restructured between versions (4% text overlap). Compare the texts directly below.
Before · Jun 2022 · page 83

Prior to 1 January 2022, an Issuer may submit a Cardholder’s claim of alleged coercion by providing the following documentation (in English or accompanied by an English translation) by either:

  • Email message to coercion@mastercard.com
  • Web-based form at https://form.mastercard.com/jfe/form/ SV_6mvga8UpBcqRP3T Effective 1 January 2022, an Issuer may submit a Cardholder’s claim of alleged coercion by providing the following documentation (in English or accompanied by an English translation) by web-based form at https:// form.mastercard.com/jfe/form/SV_6mvga8UpBcqRP3T.
  • A police report (if available) When a police report is not provided, the Cardholder’s description must address why a police report was not provided. The Cardholder description must include whether an attempt was made to file a police report and, if not, why a police report was not filed.
  • The Cardholder’s detailed description of the alleged coercive event.
  • The Coercion Claim Affidavit Form, completed by the Issuer on the Cardholder’s behalf with the Cardholder’s consent, thereby authorizing Mastercard to contact law enforcement regarding the alleged coercive event. The Coercion Claim Affidavit form is published on Mastercard Connect > Support > Forms.
After · May 2023 · page 91

Security Rules and Procedures—Merchant Edition • 7 February 2023

Cardholder’s claim of coercion that each Issuer has 10 calendar days from the initial notification date to contact the Cardholder, if necessary, and provide:

  • A police report (if available) When a police report is not provided, the Cardholder’s description must address why a police report was not provided. The Cardholder description must include whether an attempt was made to file a police report and, if not, why a police report was not filed. • The Cardholder’s detailed description of the alleged coercive event.
  • The Coercion Claim Affidavit Form, completed by the Issuer on the Cardholder’s behalf with the Cardholder’s consent, thereby authorizing Mastercard to contact law enforcement regarding the alleged coercive event. The Coercion Claim Affidavit form is published on Mastercard Connect > Support > Forms.
Halyard Pay · 2 files
program: BRAM


- authority: Mastercard SPME §10.2


- response_window_days: 180


+ authority: Mastercard SPME 8.6.1, 10.2


+ response_window_days: 10


required_evidence:


-   - transaction_monitoring_records


-   - corrective_action_plan


+   - police_report_or_explanation


+   - detailed_cardholder_description


+   - coercion_claim_affidavit


halt_actions:


  - halt_new_merchant_onboarding


internal_notification_hours: 24


agent_owner: bram_response_agent


+ 


+ # Updated the response_window_days to 10 days to reflect the new required timeframe for Issuers to contact the Cardholder regarding coercion claims per Mastercard SPME §8.6.1.


+ # Added clarity to required_evidence entries to capture the specific documentation and explanations required.


+ # Included updated authority references to reflect the changes in the relevant SPME sections.

BRAM Investigation Response

When Mastercard issues a Business Risk Assessment and Mitigation (BRAM) investigation

notice for one of our merchants, the acquirer must halt new merchant onboarding

immediately and submit an evidence package within one hundred eighty (180) days

of receipt of the notice.

Required actions

  1. Halt new merchant onboarding for the merchant under investigation.

  2. Compile and submit an evidence package containing:

  • Transaction monitoring records covering the prior 180 days.

  • A written corrective action plan.

  1. Notify the Halyard Pay Compliance lead within 24 hours of receipt.

4. If a coercion claim is involved, the issuer must contact the cardholder within 10 calendar days from initial notification to collect necessary documentation, including any police reports or affidavits.

Source authority: Mastercard SPME §10.2.������������������������������������������������������������������������������������������������������� ���������������������������������������������������������������������������������������������������������

Source authority: Mastercard SPME 8.6.19.

policies/bram_response/policy.md — after applying change

BRAM Investigation Response

When Mastercard issues a Business Risk Assessment and Mitigation (BRAM) investigation

notice for one of our merchants, the acquirer must halt new merchant onboarding

immediately and submit an evidence package within one hundred eighty (180) days

of receipt of the notice.

Required actions

  1. Halt new merchant onboarding for the merchant under investigation.

  2. Compile and submit an evidence package containing:

  • Transaction monitoring records covering the prior 180 days.

  • A written corrective action plan.

  1. Notify the Halyard Pay Compliance lead within 24 hours of receipt.

4. If a coercion claim is involved, the issuer must contact the cardholder within 10 calendar days from initial notification to collect necessary documentation, including any police reports or affidavits.

Source authority: Mastercard SPME §10.2.������������������������������������������������������������������������������������������������������� ���������������������������������������������������������������������������������������������������������

Source authority: Mastercard SPME 8.6.19.

Source authority: Mastercard SPME §8.6.1.

--- a/policies/bram_response/rules.yaml
+++ b/policies/bram_response/rules.yaml
@@ -1,10 +1,15 @@
 program: BRAM
-authority: Mastercard SPME §10.2
-response_window_days: 180
+authority: Mastercard SPME 8.6.1, 10.2
+response_window_days: 10
 required_evidence:
-  - transaction_monitoring_records
-  - corrective_action_plan
+  - police_report_or_explanation
+  - detailed_cardholder_description
+  - coercion_claim_affidavit
 halt_actions:
   - halt_new_merchant_onboarding
 internal_notification_hours: 24
 agent_owner: bram_response_agent
+
+# Updated the response_window_days to 10 days to reflect the new required timeframe for Issuers to contact the Cardholder regarding coercion claims per Mastercard SPME §8.6.1.
+# Added clarity to required_evidence entries to capture the specific documentation and explanations required.
+# Included updated authority references to reflect the changes in the relevant SPME sections.
--- a/policies/bram_response/policy.md
+++ b/policies/bram_response/policy.md
@@ -12,5 +12,8 @@
    - Transaction monitoring records covering the prior 180 days.
    - A written corrective action plan.
 3. Notify the Halyard Pay Compliance lead within 24 hours of receipt.
+4. If a coercion claim is involved, the issuer must contact the cardholder within 10 calendar days from initial notification to collect necessary documentation, including any police reports or affidavits.
 
-Source authority: Mastercard SPME §10.2.
+Source authority: Mastercard SPME  
+
+Source authority: Mastercard SPME 8.6.19.