Halyard Pay · Policy Updates Powered by Carver Agents

Mastercard SPME §8.7.4 · May 2023 → Sep 2023

Mastercard Determination

substantive

The notification from Mastercard to issuers and acquirers now specifies whether the issuer's claim was substantiated or not, including details on associated fees and recovery amounts, rather than only stating that the investigation is closed and the issuer's claim status.

Sources Mastercard SPME · May 2023 · page 95 PDF Mastercard SPME · Sep 2023 · page 89 PDF BRAM Response current
Also in §8.x this release breaking §8.6.7 Franchise Management Program (FMP) Questionnaire-based Review substantive §8.3.4 Additional ECM and HECM Requirements substantive §8.4 Questionable Merchant Audit Program (QMAP) substantive §8.4.1 QMAP Definitions substantive §8.4.2 Mastercard Commencement of an Investigation substantive §8.4.4 Mastercard Notification to Acquirers substantive §8.4.6 Mastercard Determination substantive §8.4.7 Chargeback Responsibility substantive §8.6.2 Investigation Process substantive §8.6.6 MATCH Reporting substantive §8.7.3 Mastercard Notification to Acquirers substantive §8.7.5 Assessments, Recovery Amounts, and Fees
Why these edits? The updated Mastercard notification details whether the issuer's claim was substantiated or not, and includes information on fees and recoveries, affecting the handling and response procedures in the BRAM Investigation Response policy which cites section 10.2, closely related to investigation outcomes.
Mastercard SPME §8.7.4
Mastercard will notify the Issuer(s) and the Acquirer(s) involved in the investigation of the results by email from MCC_Performance@mastercard.com to the Security Contact as listed in the My Company Manager application on Mastercard ¶ Connect™. Connect®. If a Security Contact is not listed, the notification will be sent to the Principal Contact. The notification will advise that the investigation is closed, and the Issuer’s claim was: Mastercard Fraud Control Programs• Not substantiated. If not substantiated, the notification will include information on the Issuer Filing Fee. • Substantiated. If substantiated, the notification will include information on the applicable assessments, recovery amounts, and fees.
Halyard Pay · 2 files
program: BRAM


authority: Mastercard SPME §8.6.2, §10.2


response_window_days: 180


required_evidence:


  - transaction_monitoring_records


  - corrective_action_plan


  - police_report  # Added requirement for police report according to updated SPME §8.6.2


halt_actions:


  - halt_new_merchant_onboarding


internal_notification_hours: 24


agent_owner: bram_response_agent


 


- # Updated to reflect the extended discretionary investigation period and mandatory police report inclusion for at least one coercion claim as specified in Mastercard SPME §8.6.2.


+ # Added detail to the notification outcomes in line with Mastercard SPME §10.2 updates, specifying whether claims are substantiated or not, and outlining associated fees and assessments in the investigation closure communication.

BRAM Investigation Response

When Mastercard issues a Business Risk Assessment and Mitigation (BRAM) investigation

notice for one of our merchants, the acquirer must halt new merchant onboarding

immediately and submit an evidence package within one hundred eighty (180) days

of receipt of the notice.

Required actions

  1. Halt new merchant onboarding for the merchant under investigation.

  2. Compile and submit an evidence package containing:

  • Transaction monitoring records covering the prior 180 days.

  • A written corrective action plan.

  • Documentation of any police reports related to alleged coercion claims if applicable.

  1. Notify the Halyard Pay Compliance lead within 24 hours of receipt.

Additional Considerations for Coercion Claims

When allegations of coerced Transactions arise, note that Mastercard may extend the usual 120-day

investigation period at its discretion. At least one claim must include a police report from the Cardholder.

Transactions reported as Lost or Stolen Fraud (fraud type codes 00 or 01) are subject to investigation,

though Mastercard may consider other fraud codes. Mastercard will notify issuers with Transactions at the

merchant within the investigation period to prompt claim submissions.

## Notification of Investigation Outcome

Mastercard will send the investigation results via email to the Security Contact designated in the

My Company Manager application on Mastercard Connect®, or to the Principal Contact if no Security

Contact is listed. This notification will specify whether the issuer's claim was substantiated or not. For

unsubstantiated claims, the notification includes information regarding the Issuer Filing Fee. For

substantiated claims, details on assessments, recovery amounts, and fees will be provided, informing

our response and reconciliation processes.

Source authority: Mastercard SPME §8.6.2, §8.7.4, §10.2.

policies/bram_response/policy.md — after applying change

BRAM Investigation Response

When Mastercard issues a Business Risk Assessment and Mitigation (BRAM) investigation

notice for one of our merchants, the acquirer must halt new merchant onboarding

immediately and submit an evidence package within one hundred eighty (180) days

of receipt of the notice.

Required actions

  1. Halt new merchant onboarding for the merchant under investigation.

  2. Compile and submit an evidence package containing:

  • Transaction monitoring records covering the prior 180 days.

  • A written corrective action plan.

  • Documentation of any police reports related to alleged coercion claims if applicable.

  1. Notify the Halyard Pay Compliance lead within 24 hours of receipt.

Additional Considerations for Coercion Claims

When allegations of coerced Transactions arise, note that Mastercard may extend the usual 120-day

investigation period at its discretion. At least one claim must include a police report from the Cardholder.

Transactions reported as Lost or Stolen Fraud (fraud type codes 00 or 01) are subject to investigation,

though Mastercard may consider other fraud codes. Mastercard will notify issuers with Transactions at the

merchant within the investigation period to prompt claim submissions.

## Notification of Investigation Outcome

Mastercard will send the investigation results via email to the Security Contact designated in the

My Company Manager application on Mastercard Connect®, or to the Principal Contact if no Security

Contact is listed. This notification will specify whether the issuer's claim was substantiated or not. For

unsubstantiated claims, the notification includes information regarding the Issuer Filing Fee. For

substantiated claims, details on assessments, recovery amounts, and fees will be provided, informing

our response and reconciliation processes.

Source authority: Mastercard SPME §8.6.2, §8.7.4, §10.2.

Source authority: Mastercard SPME §8.7.4.

--- a/policies/bram_response/rules.yaml
+++ b/policies/bram_response/rules.yaml
@@ -10,4 +10,4 @@
 internal_notification_hours: 24
 agent_owner: bram_response_agent
 
-# Updated to reflect the extended discretionary investigation period and mandatory police report inclusion for at least one coercion claim as specified in Mastercard SPME §8.6.2.+# Added detail to the notification outcomes in line with Mastercard SPME §10.2 updates, specifying whether claims are substantiated or not, and outlining associated fees and assessments in the investigation closure communication.
--- a/policies/bram_response/policy.md
+++ b/policies/bram_response/policy.md
@@ -22,4 +22,13 @@
 though Mastercard may consider other fraud codes. Mastercard will notify issuers with Transactions at the
 merchant within the investigation period to prompt claim submissions.
 
-Source authority: Mastercard SPME §8.6.2, §10.2.
+## Notification of Investigation Outcome
+
+Mastercard will send the investigation results via email to the Security Contact designated in the
+My Company Manager application on Mastercard Connect®, or to the Principal Contact if no Security
+Contact is listed. This notification will specify whether the issuer's claim was substantiated or not. For
+unsubstantiated claims, the notification includes information regarding the Issuer Filing Fee. For
+substantiated claims, details on assessments, recovery amounts, and fees will be provided, informing
+our response and reconciliation processes.
+
+Source authority: Mastercard SPME §8.6.2, §8.7.4, §10.2.