Mastercard SPME §10.3.2 · Feb 2024 → Sep 2024

Ongoing Procedures for ADC Events and Potential ADC Events

breaking
⚠ Extraction warning — review against source PDF. One side of the Mastercard SPME text below appears to contain only the page-running header, not body content. This usually means the section heading fell on a page boundary and the body was attributed to a neighbouring section in the source PDF. The AI summary and proposed edit below may be misleading. Verify in: Feb 2024 · page 119 ↗ · Sep 2024 · page 123 ↗.

The section previously listing specific responsibilities for cooperation with investigations and remediation plans related to ADC Events has been entirely removed without replacement.

Sources Mastercard SPME · Feb 2024 · page 119 PDF Mastercard SPME · Sep 2024 · page 123 PDF Chargeback Handling current
Also in §10.x this release breaking §10.2 Policy Concerning Account Data Compromise Events and Potential Account Data breaking §10.3.1 Time-Specific Procedures for ADC Events and Potential ADC Events breaking §10.5 Alternative Acquirer Investigation (AAI) Standards substantive §10 Should the responsible Customer cause a PFI to conduct an examination, the responsible substantive §10.1 Applicability and Defined Terms substantive §10.3 Responsibilities in Connection with ADC Events and Potential ADC Events substantive §10.4 Forensic Report substantive §10.6 Mastercard Determination of ADC Event or Potential ADC Event substantive §10.6.2 Potential Reduction of Financial Responsibility substantive §10.6.4 Determination of Operational Reimbursement (OR) substantive §10.7 Assessments and/or Disqualification for Noncompliance
Why these edits? Section 10.3.2 covered merchant obligations to cooperate with investigations and remediation of ADC Events, which falls under the chargeback handling processes that involve managing fraudulent or disputed transactions. The removal of these specific responsibilities means Halyard Pay's 'chargeback_handling' policy needs updating to reflect the absence of these mandated cooperation procedures.
Mastercard SPME §10.3.2
This section was substantively restructured between versions (14% text overlap). Compare the texts directly below.
Before · Feb 2024 · page 119

Security Rules and Procedures—Merchant Edition • 6 February 2024

  • Consent to, and cooperate with, any effort by Mastercard to engage and direct a PFI to perform an investigation and prepare a forensic report concerning the ADC Event or Potential ADC Event, in the event that the Customer fails to satisfy any of the foregoing responsibilities.
  • Ensure that the compromised entity develops a remediation action plan, including implementation and milestone dates related to findings, corrective measures, and recommendations identified by the PFI and set forth in the final forensic report.
  • Monitor and validate that the compromised entity has fully implemented the remediation action plan, recommendations, and corrective measures.
After · Sep 2024 · page 123

Security Rules and Procedures—Merchant Edition • 6 August 2024

Halyard Pay · 2 files
program: Chargeback Handling
authority: Mastercard SPME §10.1, §10.3, §10.4, and §11.5
acknowledgement_business_days: 1
lifecycle_states:
- first_presentment
- chargeback
- second_presentment
- pre_arbitration
- arbitration
evidence_requirements:
first_presentment:
- transaction_receipt
- authorization_record
chargeback:
- merchant_rebuttal_letter
- delivery_confirmation
- customer_communication
- fraud_and_chargeback_data_analysis
second_presentment:
- compelling_evidence
- signed_cardholder_agreement
pre_arbitration:
- full_dispute_record
- prior_correspondence
arbitration:
- full_dispute_record
- arbitration_filing
agent_owner: chargeback_agent
 
- # Added evidence requirement for fraud and chargeback data analysis to address new MATCH reason codes
- # related to excessive chargebacks and fraud ratios as introduced in Mastercard SPME §11.5 update,
- # supporting compliance with chargeback management standards per Mastercard SPME §10.1 and §10.3.
+ # Note: Removed references to merchant cooperation requirements for ADC Event investigations and remediation as these have been eliminated in Mastercard SPME §10.3.2, reflecting current obligations in chargeback handling processes.

Chargeback Handling

Chargebacks are cardholder-initiated disputes against a transaction. Halyard Pay, acting as the acquirer, manages disputes from initial presentment through potential arbitration, adhering to Mastercard's requirements to protect all parties involved.

Lifecycle overview

Disputes progress through defined phases: first presentment, chargeback, second presentment (re-presentment), pre-arbitration, and arbitration. Compliance with evidence standards and timelines at each step is essential to prevent adverse rulings.

Required actions

  1. Acknowledge incoming chargebacks within one business day.

  2. Gather necessary evidence relevant to the dispute stage.

  3. Submit second presentments when liability is disputable, supported by strong documentation.

  4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.

  5. Retain comprehensive case documentation for auditing and reporting purposes.

  6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections 10.3 and 10.4 of the Mastercard SPME. SPME, noting that section 10.3.2 merchant investigation cooperation requirements have been removed.

Monitoring and Risk Factors

Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:

  • Laundering: Merchant presenting invalid transaction records rather than bona fide sales.

  • Excessive Chargebacks: Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000. 6 5,000 USD.

  • Excessive Fraud: Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling 5,000 USD 5,000+ or more in a calendar month.

These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.

Source authority: Mastercard SPME §§10.1, 10.3, 10.3 (excluding 10.3.2), 10.4, 11.5.

policies/chargeback_handling/policy.md — after applying change

Chargeback Handling

Chargebacks are cardholder-initiated disputes against a transaction. Halyard Pay, acting as the acquirer, manages disputes from initial presentment through potential arbitration, adhering to Mastercard's requirements to protect all parties involved.

Lifecycle overview

Disputes progress through defined phases: first presentment, chargeback, second presentment (re-presentment), pre-arbitration, and arbitration. Compliance with evidence standards and timelines at each step is essential to prevent adverse rulings.

Required actions

  1. Acknowledge incoming chargebacks within one business day.

  2. Gather necessary evidence relevant to the dispute stage.

  3. Submit second presentments when liability is disputable, supported by strong documentation.

  4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.

  5. Retain comprehensive case documentation for auditing and reporting purposes.

  6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections 10.3 and 10.4 of the Mastercard SPME. SPME, noting that section 10.3.2 merchant investigation cooperation requirements have been removed.

Monitoring and Risk Factors

Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:

  • Laundering: Merchant presenting invalid transaction records rather than bona fide sales.

  • Excessive Chargebacks: Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000. 6 5,000 USD.

  • Excessive Fraud: Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling 5,000 USD 5,000+ or more in a calendar month.

These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.

Source authority: Mastercard SPME §§10.1, 10.3, 10.3 (excluding 10.3.2), 10.4, 11.5.

Source authority: Mastercard SPME §10.3.2.

--- a/policies/chargeback_handling/rules.yaml
+++ b/policies/chargeback_handling/rules.yaml
@@ -27,6 +27,4 @@
     - arbitration_filing
 agent_owner: chargeback_agent
 
-# Added evidence requirement for fraud and chargeback data analysis to address new MATCH reason codes
-# related to excessive chargebacks and fraud ratios as introduced in Mastercard SPME §11.5 update,
-# supporting compliance with chargeback management standards per Mastercard SPME §10.1 and §10.3.
+# Note: Removed references to merchant cooperation requirements for ADC Event investigations and remediation as these have been eliminated in Mastercard SPME §10.3.2, reflecting current obligations in chargeback handling processes.

--- a/policies/chargeback_handling/policy.md
+++ b/policies/chargeback_handling/policy.md
@@ -13,16 +13,16 @@
 3. Submit second presentments when liability is disputable, supported by strong documentation.
 4. Escalate to pre-arbitration and arbitration only after issuer rejection of second presentment.
 5. Retain comprehensive case documentation for auditing and reporting purposes.
-6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections 10.3 and 10.4 of the Mastercard SPME.
+6. Provide all requested documentation promptly to Mastercard during investigations or appeals as governed by sections 10.3 and 10.4 of the Mastercard SPME, noting that section 10.3.2 merchant investigation cooperation requirements have been removed.
 
 ## Monitoring and Risk Factors
 
 Halyard Pay evaluates merchant risk using updated Mastercard MATCH Listing Reason Codes, including new, specific definitions for elevated chargeback and fraud concerns:
 
 - **Laundering:** Merchant presenting invalid transaction records rather than bona fide sales.
-- **Excessive Chargebacks:** Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks ≥ USD 5,000.
-- **Excessive Fraud:** Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling USD 5,000+ in a calendar month.
+- **Excessive Chargebacks:** Monthly Mastercard chargebacks exceed 1% of sales transactions with total chargebacks 6 5,000 USD.
+- **Excessive Fraud:** Fraud-to-sales ratio of 8% or more, with at least 10 fraudulent transactions totaling 5,000 USD or more in a calendar month.
 
 These clarified definitions, part of Mastercard's updated SPME MATCH Listing Reason Codes (see section 11.5), guide Halyard Pay’s risk assessments and chargeback management protocols to align with Mastercard’s evolving standards.
 
-Source authority: Mastercard SPME §§10.1, 10.3, 10.4, 11.5.+Source authority: Mastercard SPME §§10.1, 10.3 (excluding 10.3.2), 10.4, 11.5.