Mastercard SPME §8.6.7 · Sep 2023 → Feb 2024

Franchise Management Program (FMP) Questionnaire-based Review

substantive

The updated section introduces mandatory and conditional requirements for acquirers to have merchants complete a Coercion Program FMP questionnaire based on the number of coercion identifications within specified timeframes, and states that questionnaire responses may trigger an on-site review.

Sources Mastercard SPME · Sep 2023 · page 87 PDF Mastercard SPME · Feb 2024 · page 85 PDF KYB Acquirer current
Also in §8.x this release breaking §8.6.5 Chargeback Responsibility substantive §8.4 Questionable Merchant Audit Program (QMAP) substantive §8.4.2 Mastercard Commencement of an Investigation substantive §8.4.3 of this manual, or substantive §8.4.6 Mastercard Determination substantive §8.4.8 Fraud Recovery substantive §8.6 Coercion Program substantive §8.6.1 Issuer Submissions substantive §8.6.2 Investigation Process substantive §8.7.1 Definitions substantive §8.7.3 Mastercard Notification to Acquirers substantive §8.8 Business Risk Assessment and Mitigation (BRAM) Program substantive §8.8.1 BRAM Investigation Process substantive §8.8.2 Acquirer Response Requirements substantive §8.8.4 Noncompliance Assessment Mitigation substantive §8.9 Merchant Monitoring Program (MMP) substantive §8.9.1 MMP Participation Requirements
Why these edits? The update mandates acquirers to require merchants to complete a Coercion Program FMP questionnaire based on coercion identification frequency, enhancing Know Your Business (KYB) due diligence and oversight obligations for acquirers.
Mastercard SPME §8.6.7
This section was substantively restructured between versions (3% text overlap). Compare the texts directly below.
Before · Sep 2023 · page 87

Security Rules and Procedures—Merchant Edition • 1 August 2023

An Incomplete, Invalid or Inappropriate MCC An MCC which:

  1. Is reserved for future use in the Quick Reference Booklet; or
  2. Is missing numerical characters; or
  3. Does not describe the Merchant’s primary business or does not conform to the Mastercard Rules, Rule 5.8.1 Acceptor Business Code (MCC) Information Qualifying Merchant A Brazil-based Merchant, Payment Facilitator, or Staged Digital Wallet Operator that has submitted at least BRL 250,000 in Transaction Volume and ten Transactions for processing through GCMS with an Incomplete, Invalid or Inappropriate MCC during the Case Scope Period.
After · Feb 2024 · page 85

Completion of a Coercion Program FMP questionnaire:

  • May be required by the Acquirer of a Merchant with two or more Coercion Program identifications within a 12-month period.
  • Will be required by the Acquirer of a Merchant with three or more Coercion Program identifications within an 18-month period. Questionnaire responses may be used as an escalation point by the Customer Engagement & and Performance Team to determine if an on-site FMP review is warranted. For information on the FMP, refer to Chapter 13 of this manual.
Halyard Pay · 2 files
program: Acquirer KYB
- authority: Mastercard SPME 2.1, 11.2.3, 11.2.6
+ authority: Mastercard SPME 2.1, 8.6.7, 11.2.3, 11.2.6
required_documents:
- incorporation
- beneficial_ownership
- aml_screen
- license_verification
min_review_cycle_days: 365
suspension_trigger: document_collection_failure
record_retention_years: 7
aml_watchlist_sources:
- ofac_sdn
- eu_consolidated
agent_owner: kyb_agent
# Acquirers must perform a MATCH inquiry prior to entering into any Merchant Agreement or enabling a Merchant to accept transactions, as detailed in Mastercard SPME §11.2.3. This inquiry must be conducted using the correct Member ID/ICA Number associated with the Merchant to ensure proper compliance reporting.
# Failure to adhere to these requirements may result in noncompliance assessments.
# The Acquirer is also required to retain all MATCH records related to any Merchant, Sponsored Merchant, or ATM owner for a minimum of two years post-agreement termination, as per Mastercard SPME §11.2.6.
+ # Additionally, per Mastercard SPME §8.6.7, acquirers must require Merchants to complete a Coercion Program FMP questionnaire if the Merchant has been identified in two or more coercion events within 12 months, or must require it after three or more identifications within 18 months. This questionnaire assists in escalation decisions regarding potential onsite FMP reviews as part of enhanced KYB due diligence obligations.

Acquirer KYB (Know Your Business) Obligations

Acquirers processing transactions on the Mastercard network are required to perform

Know Your Business (KYB) due diligence on merchants before onboarding and on a

recurring basis thereafter. Halyard Pay, as an acquirer, must collect and verify a

minimum set of documents for each merchant to establish business legitimacy, confirm

beneficial ownership, and satisfy anti-money laundering screening requirements.

When this policy applies

This policy applies to all new merchant onboarding and to all periodic re-verification

reviews. Merchants that fail to supply required documentation within the stipulated

period must be suspended from processing until compliance is restored.

Required actions

  1. Collect all required KYB documents at onboarding prior to approval.

  2. Conduct AML screening against applicable watchlists before approval.

  3. Verify business licenses for regulated merchant categories.

  4. Schedule a full re-verification review at least once every 365 days.

  5. Document all verification outcomes and retain records for audit purposes.

  6. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for a minimum of two years after termination or expiration of the applicable agreement, to comply with Mastercard's explicit record retention requirements.

  7. Before entering into a Merchant Agreement or enabling a Merchant to accept transactions, Halyard Pay must conduct a MATCH inquiry using the proper Member ID/ICA Number assigned to Halyard Pay to ensure compliance. Failure to perform this check or to use the correct Member ID/ICA may result in noncompliance and assessments by Mastercard.

8. Require completion of a Coercion Program FMP questionnaire from Merchants who have two or more Coercion Program identifications within a 12-month period, and mandate it for those with three or more identifications within an 18-month period. Responses to this questionnaire will aid in escalation decisions, potentially prompting an on-site FMP review.

Source authority: Mastercard SPME §§2.1, 7.1, 8.6.7, 11.2.3, 11.2.6.

policies/kyb_acquirer/policy.md — after applying change

Acquirer KYB (Know Your Business) Obligations

Acquirers processing transactions on the Mastercard network are required to perform

Know Your Business (KYB) due diligence on merchants before onboarding and on a

recurring basis thereafter. Halyard Pay, as an acquirer, must collect and verify a

minimum set of documents for each merchant to establish business legitimacy, confirm

beneficial ownership, and satisfy anti-money laundering screening requirements.

When this policy applies

This policy applies to all new merchant onboarding and to all periodic re-verification

reviews. Merchants that fail to supply required documentation within the stipulated

period must be suspended from processing until compliance is restored.

Required actions

  1. Collect all required KYB documents at onboarding prior to approval.

  2. Conduct AML screening against applicable watchlists before approval.

  3. Verify business licenses for regulated merchant categories.

  4. Schedule a full re-verification review at least once every 365 days.

  5. Document all verification outcomes and retain records for audit purposes.

  6. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for a minimum of two years after termination or expiration of the applicable agreement, to comply with Mastercard's explicit record retention requirements.

  7. Before entering into a Merchant Agreement or enabling a Merchant to accept transactions, Halyard Pay must conduct a MATCH inquiry using the proper Member ID/ICA Number assigned to Halyard Pay to ensure compliance. Failure to perform this check or to use the correct Member ID/ICA may result in noncompliance and assessments by Mastercard.

8. Require completion of a Coercion Program FMP questionnaire from Merchants who have two or more Coercion Program identifications within a 12-month period, and mandate it for those with three or more identifications within an 18-month period. Responses to this questionnaire will aid in escalation decisions, potentially prompting an on-site FMP review.

Source authority: Mastercard SPME §§2.1, 7.1, 8.6.7, 11.2.3, 11.2.6.

Source authority: Mastercard SPME §8.6.7.

--- a/policies/kyb_acquirer/rules.yaml
+++ b/policies/kyb_acquirer/rules.yaml
@@ -1,5 +1,5 @@
 program: Acquirer KYB
-authority: Mastercard SPME 2.1, 11.2.3, 11.2.6
+authority: Mastercard SPME 2.1, 8.6.7, 11.2.3, 11.2.6
 required_documents:
   - incorporation
   - beneficial_ownership
@@ -15,3 +15,4 @@
 # Acquirers must perform a MATCH inquiry prior to entering into any Merchant Agreement or enabling a Merchant to accept transactions, as detailed in Mastercard SPME §11.2.3. This inquiry must be conducted using the correct Member ID/ICA Number associated with the Merchant to ensure proper compliance reporting.
 # Failure to adhere to these requirements may result in noncompliance assessments.
 # The Acquirer is also required to retain all MATCH records related to any Merchant, Sponsored Merchant, or ATM owner for a minimum of two years post-agreement termination, as per Mastercard SPME §11.2.6.
+# Additionally, per Mastercard SPME §8.6.7, acquirers must require Merchants to complete a Coercion Program FMP questionnaire if the Merchant has been identified in two or more coercion events within 12 months, or must require it after three or more identifications within 18 months. This questionnaire assists in escalation decisions regarding potential onsite FMP reviews as part of enhanced KYB due diligence obligations.

--- a/policies/kyb_acquirer/policy.md
+++ b/policies/kyb_acquirer/policy.md
@@ -21,5 +21,6 @@
 5. Document all verification outcomes and retain records for audit purposes.
 6. Retain all MATCH system records related to Merchants, Sponsored Merchants, or ATM owners for a minimum of two years after termination or expiration of the applicable agreement, to comply with Mastercard's explicit record retention requirements.
 7. Before entering into a Merchant Agreement or enabling a Merchant to accept transactions, Halyard Pay must conduct a MATCH inquiry using the proper Member ID/ICA Number assigned to Halyard Pay to ensure compliance. Failure to perform this check or to use the correct Member ID/ICA may result in noncompliance and assessments by Mastercard.
+8. Require completion of a Coercion Program FMP questionnaire from Merchants who have two or more Coercion Program identifications within a 12-month period, and mandate it for those with three or more identifications within an 18-month period. Responses to this questionnaire will aid in escalation decisions, potentially prompting an on-site FMP review.
 
-Source authority: Mastercard SPME §§2.1, 7.1, 11.2.3, 11.2.6.+Source authority: Mastercard SPME §§2.1, 7.1, 8.6.7, 11.2.3, 11.2.6.