worldline

Documentation

SCA Exemptions

For transactions that aren't out of scope for SCA, it is possible to request for a SCA exemption. In the instances where an exemption is requested and accepted by the cardholder's bank, the liability of fraudulent transactions stay with you as a merchant.

Worldline supports following SCA exemptions and offers you the possibility to use it for Visa and Mastercard transactions.

  1. Low Value : SCA exemption can be requested for the

    • transactions below EUR 30 or equivalent in another currency, and

    • number of consecutive transactions since the last SCA must not exceed five, (or)

    • cumulative value of the consecutive transactions since the last application of SCA must not exceed EUR 100 or equivalent in another currency.

  2. Low Risk/Transaction Risk Analysis (TRA) : You can request for a TRA exemption if the following conditions are met.

    • you as a merchant/partner is registered/agreed with Worldline to use TRA, and

    • the value of the transaction is lesser than the agreed value with Worldline and

    • the transaction must have been assessed to be at low risk of fraud through the use of fraud screening, and

    • Worldline's fraud rate is within the reference fraud rate for the relevant transaction value band.

  3. Trusted Beneficiaries : SCA exemption can be requested if the cardholder has added you (The merchant) to the list of trusted beneficiaries that is held and managed by the issuer.

  4. SCA delegation: Transactions with delegated authentication to a third-party wallet provider or to a merchant.

  5. Secure Corporate Payments (SCP): Payments made using a B2B card (corporate or lodged card) directly between two corporates in a dedicated environment (e.g. access-controlled corporate travel management or corporate purchasing system) will be exempted from SCA. This exemption has low practical usage outside of the travel industry due to its very narrow scope.

Authorization with SCA exemption

To process an authorization with a SCA exemption, you must include following properties in your create payment request.

  • cardPaymentData.cardholderVerificationMethod - Set to "CARD_SECURITY_CODE " if you provide cardPaymentData.cardData.cardSecurityCode in the request else set to "NONE".

  • cardPaymentData.ecommerceData.scaExemptionRequest - Set any of the below given values that is applicable for the transaction

    • LOW_VALUE_PAYMENT

    • TRANSACTION_RISK_ANALYSIS

    • TRUSTED_BENEFICIARY

    • SCA_DELEGATION

    • SECURE_CORPORATE_PAYMENT

Issuer decides on the requested exemption and the outcome of the authorization could either be a approval or decline.