Halyard Pay · Policy Updates Powered by Carver Agents

Mastercard SPME §11.1.2 · May 2023 → Sep 2023

How does MATCH search when conducting an inquiry?

substantive

The detailed tables and examples explaining exact and phonetic MATCH search criteria were removed. Instead, the section now briefly states that MATCH searches for matches based on data from the past five years and inquires from the past 360 days, covering exact and phonetic matches without specifics.

Sources Mastercard SPME · May 2023 · page 142 PDF Mastercard SPME · Sep 2023 · page 130 PDF KYB Acquirer current
Also in §11.x this release breaking §11.4 Merchant Removal from MATCH substantive §11.1 MATCH Overview substantive §11.2.1 Certification substantive §11.2.3 Inquiring about a Merchant substantive §11.5 MATCH Reason Codes substantive §11.5.1 Reason Codes for Merchants Listed by the Acquirer
Why these edits? The section on MATCH search criteria was simplified to a general description without detailed field-level matching rules, which affects Acquirer KYB obligations that rely on specific MATCH search methodologies to verify merchant identities.
Mastercard SPME §11.1.2
This section was substantively restructured between versions (2% text overlap). Compare the texts directly below.
Before · May 2023 · page 142

Security Rules and Procedures—Merchant Edition • 7 February 2023

Field + Field + Field = Match Doing Business as (DBA) Name = √ Phone Number (Merchant) = √ Alternate Phone Number (Merchant) = √ Merchant National Tax ID + Country = √ Merchant State Tax ID + State = √ Merchant Street Address + City + State1 = √ Merchant Street Address + City + Country2 = √ Merchant URL Website Address + City + Country = √ Principal Owner’s (PO) First Name + Last Name = √ PO Phone Number = √ Alternate Phone Number (PO) = √ PO Social Security Number1 = √ PO National ID2 = √ PO Street Address (lines 1 and 2) + PO City + PO State1 = √ PO Street Address (lines 1 and 2) + PO City + PO Country2 = √ PO Driver’s License (DL) Number + DL State1 = √ PO Driver’s License Number + DL Country2 = √ NOTE: MATCH uses Street, City, and State if the Merchant’s country is USA; otherwise, Street, City, and Country are used. 1 If country is USA. 2 If country is not USA. MATCH System 11.1.2.2 Exact Possible Matches Security Rules and Procedures—Merchant Edition • 7 February 2023

NOTE: Acquirers must populate the Merchant URL Website Address field when performing an inquiry of an electronic commerce (e-commerce) Merchant. 11.1.2.3 Phonetic Possible Matches The MATCH system converts certain alphabetic data, such as Merchant Name and Principal Owner Last Name to a phonetic code. The phonetic code generates matches on words that sound alike, such as “Easy” and “EZ.” The phonetic matching feature of the system also matches names that are not necessarily a phonetic match but might differ because of a typographical error, such as “Rogers” and “Rokers,” or a spelling variation, such as “Lee,” “Li,” and “Leigh.” MATCH evaluates the following data to determine a phonetic possible match. Table 11.2—Phonetic Possible Match Criteria Field + Field + Field = Match Merchant Name = √ Doing Business As (DBA) Name = √ Merchant Street Address + City + State3 = √ Merchant Street Address + City + Country4 = √ Principal Owner’s (PO) First Name + Last Name = √ PO Street Address (lines 1 and 2) + PO City + PO State3 = √ PO Street Address (lines 1 and 2) + PO City + PO Country4 = √ NOTE: MATCH uses Street, City, and State if the Merchant’s country is USA; otherwise, Street, City, and Country are used.

After · Sep 2023 · page 130

MATCH searches the database for possible matches between the information provided in the inquiry and the following:

  • Information reported and stored during the past five years
  • Other inquiries during the past 360 days MATCH searches for exact possible matches and phonetic possible matches. MATCH System
Halyard Pay · 2 files
program: Acquirer KYB


authority: Mastercard SPME 2.1, 11.2.6


required_documents:


  - incorporation


  - beneficial_ownership


  - aml_screen


  - license_verification


min_review_cycle_days: 365


suspension_trigger: document_collection_failure


record_retention_years: 7


aml_watchlist_sources:


  - ofac_sdn


  - eu_consolidated


agent_owner: kyb_agent


- # The Acquirer must specifically retain all MATCH records concerning any Merchant, Sponsored Merchant, or ATM owner for at least two years following the termination or expiration of the related agreement, per Mastercard SPME 11.2.6.


- # This retention requirement updates prior guidance by imposing a defined minimum retention period beyond the MATCH system's internal data purging schedule.


+ # The Acquirer must retain all MATCH records related to any Merchant, Sponsored Merchant, or ATM owner for at least two years after termination or expiration of the related agreement, as required by Mastercard SPME 11.2.6.


+ # Mastercard's updated guidance simplifies the MATCH search criteria to focus on data reported within the past five years and inquiries within the past 360 days, covering both exact and phonetic matches.


+ # This simplification clarifies the scope of merchant identity verification but does not change the retention or review obligations.

Acquirer KYB (Know Your Business) Obligations

Acquirers processing transactions on the Mastercard network are required to perform Know Your Business (KYB) due diligence on merchants before onboarding and on a ¶ recurring basis periodically thereafter. Halyard Pay, as an acquirer, must collect and verify a ¶ minimum set of required documents for each merchant to establish business legitimacy, confirm beneficial ownership, and satisfy meet anti-money laundering screening requirements.

When this policy applies

This policy applies to all new merchant onboarding and to all periodic re-verification reviews. Merchants that fail to supply required documentation within the stipulated ¶ period timeframe must be suspended from processing until compliance is restored. processing.

Required actions

  1. Collect all required KYB documents at onboarding prior to approval.

  2. Conduct AML screening against applicable watchlists before approval.

  3. Verify business licenses for regulated merchant categories.

  4. Schedule a full re-verification review reviews at least once every 365 days. annually.

  5. Document all verification outcomes and retain records for audit purposes. audit.

  6. Use MATCH system inquiries to identify exact and phonetic possible matches with previously reported information and inquiries within the past five years and 360 days respectively, as part of verifying merchant identities. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for a minimum of at least two years after termination or expiration of the applicable agreement, to comply agreement termination, complying with Mastercard's explicit record retention requirements. policies.

Source authority: Mastercard SPME ��������2.1, §§11.1.2, 11.2.1, 11.2.6.

policies/kyb_acquirer/policy.md — after applying change

Acquirer KYB (Know Your Business) Obligations

Acquirers processing transactions on the Mastercard network are required to perform Know Your Business (KYB) due diligence on merchants before onboarding and on a ¶ recurring basis periodically thereafter. Halyard Pay, as an acquirer, must collect and verify a ¶ minimum set of required documents for each merchant to establish business legitimacy, confirm beneficial ownership, and satisfy meet anti-money laundering screening requirements.

When this policy applies

This policy applies to all new merchant onboarding and to all periodic re-verification reviews. Merchants that fail to supply required documentation within the stipulated ¶ period timeframe must be suspended from processing until compliance is restored. processing.

Required actions

  1. Collect all required KYB documents at onboarding prior to approval.

  2. Conduct AML screening against applicable watchlists before approval.

  3. Verify business licenses for regulated merchant categories.

  4. Schedule a full re-verification review reviews at least once every 365 days. annually.

  5. Document all verification outcomes and retain records for audit purposes. audit.

  6. Use MATCH system inquiries to identify exact and phonetic possible matches with previously reported information and inquiries within the past five years and 360 days respectively, as part of verifying merchant identities. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for a minimum of at least two years after termination or expiration of the applicable agreement, to comply agreement termination, complying with Mastercard's explicit record retention requirements. policies.

Source authority: Mastercard SPME ��������2.1, §§11.1.2, 11.2.1, 11.2.6.

Source authority: Mastercard SPME §11.1.2.

--- a/policies/kyb_acquirer/rules.yaml
+++ b/policies/kyb_acquirer/rules.yaml
@@ -12,5 +12,6 @@
   - ofac_sdn
   - eu_consolidated
 agent_owner: kyb_agent
-# The Acquirer must specifically retain all MATCH records concerning any Merchant, Sponsored Merchant, or ATM owner for at least two years following the termination or expiration of the related agreement, per Mastercard SPME 11.2.6.
-# This retention requirement updates prior guidance by imposing a defined minimum retention period beyond the MATCH system's internal data purging schedule.+# The Acquirer must retain all MATCH records related to any Merchant, Sponsored Merchant, or ATM owner for at least two years after termination or expiration of the related agreement, as required by Mastercard SPME 11.2.6.
+# Mastercard's updated guidance simplifies the MATCH search criteria to focus on data reported within the past five years and inquiries within the past 360 days, covering both exact and phonetic matches.
+# This simplification clarifies the scope of merchant identity verification but does not change the retention or review obligations.

--- a/policies/kyb_acquirer/policy.md
+++ b/policies/kyb_acquirer/policy.md
@@ -1,24 +1,18 @@
 # Acquirer KYB (Know Your Business) Obligations
 
-Acquirers processing transactions on the Mastercard network are required to perform
-Know Your Business (KYB) due diligence on merchants before onboarding and on a
-recurring basis thereafter. Halyard Pay, as an acquirer, must collect and verify a
-minimum set of documents for each merchant to establish business legitimacy, confirm
-beneficial ownership, and satisfy anti-money laundering screening requirements.
+Acquirers processing transactions on the Mastercard network are required to perform Know Your Business (KYB) due diligence on merchants before onboarding and periodically thereafter. Halyard Pay, as an acquirer, must collect and verify required documents to establish business legitimacy, confirm beneficial ownership, and meet anti-money laundering screening requirements.
 
 ## When this policy applies
 
-This policy applies to all new merchant onboarding and to all periodic re-verification
-reviews. Merchants that fail to supply required documentation within the stipulated
-period must be suspended from processing until compliance is restored.
+This policy applies to all new merchant onboarding and to periodic re-verification reviews. Merchants that fail to supply required documentation within the stipulated timeframe must be suspended from processing.
 
 ## Required actions
 
 1. Collect all required KYB documents at onboarding prior to approval.
-2. Conduct AML screening against applicable watchlists before approval.
+2. Conduct AML screening before approval.
 3. Verify business licenses for regulated merchant categories.
-4. Schedule a full re-verification review at least once every 365 days.
-5. Document all verification outcomes and retain records for audit purposes.
-6. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for a minimum of two years after termination or expiration of the applicable agreement, to comply with Mastercard's explicit record retention requirements.
+4. Schedule re-verification reviews at least annually.
+5. Document verification outcomes and retain records for audit.
+6. Use MATCH system inquiries to identify exact and phonetic possible matches with previously reported information and inquiries within the past five years and 360 days respectively, as part of verifying merchant identities. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for at least two years after agreement termination, complying with Mastercard's record retention policies.
 
-Source authority: Mastercard SPME 2.1, 11.2.6.+Source authority: Mastercard SPME §§11.1.2, 11.2.1, 11.2.6.