Вы находитесь на странице: 1из 820

Issuer On-behalf Services

—Test Cases
9 August 2018

XX4j
Summary of Changes, 9 August 2018

Summary of Changes, 9 August 2018


This document reflects changes since the initial publication on 15 February 2018.

Description of Change Where to Look

Added Table 0900853—Issuer On-behalf Services - DMS Auth—MSR Table 0900853—Issuer On-behalf Services - DMS Auth—MSR Product
Product and Services—CVC 1 Validation Stand-In Service— and Services—CVC 1 Validation Stand-In Service — Authorization
Authorization Advices Advices

Added Table 0901146—Issuer On-behalf Services - DMS Auth—MSR Table 0901146—Issuer On-behalf Services - DMS Auth—MSR Product
Product and Services—MDES (Non-DSRP UCAF - Cloud-Based Payments and Services—MDES (Non-DSRP UCAF - Cloud-Based Payments Token)-
Token)-Authorization Requests Authorization Requests

Added Table 0901147—Issuer On-behalf Services - DMS Auth—MSR Table 0901147—Issuer On-behalf Services - DMS Auth—MSR Product
Product and Services—MDES (Non-DSRP UCAF - Secure Element Token) and Services—MDES (Non-DSRP UCAF - Secure Element Token)-
—Authorization Requests Authorization Requests

Added Table 0903535—Issuer On-behalf Services - DMS Auth—MSR Table 0903535—Issuer On-behalf Services - DMS Auth—MSR Product
Product and Services—Masterpass QR Refund Transactions (Non-token and Services—Merchant Presented QR Refund Transactions (Non-token
PAN)—Authorization Requests PAN)—Authorization Requests

Added Table 0903536—Issuer On-behalf Services - DMS Auth—MSR Table 0903536—Issuer On-behalf Services - DMS Auth—MSR Product
Product and Services—Masterpass QR Refund Transactions (Tokenized) and Services—Merchant Presented QR Refund Transactions (Tokenized)
—Authorization Requests —Authorization Requests

Added Table 3500853—Issuer On-behalf Services - SMS Auth—MSR Table 3500853—Issuer On-behalf Services - SMS Auth—MSR Product
Product and Services—CVC 1 Validation Stand-In Service—Financial and Services—CVC 1 Validation Stand-In Service—Financial Transaction
Transaction Advices Advices

Added Table 3501146—Issuer On-behalf Services - SMS Auth—MSR Table 3501146—Issuer On-behalf Services - SMS Auth—MSR Product
Product and Services—MDES (Non-DSRP UCAF - Cloud-Based Payments and Services—MDES (Non-DSRP UCAF - Cloud-Based Payments Token)-
Token)—Financial Transaction Requests Financial Transaction Requests

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 2
Summary of Changes, 9 August 2018

Description of Change Where to Look

Added Table 3501147—Issuer On-behalf Services - SMS Auth—MSR Table 3501147—Issuer On-behalf Services - SMS Auth—MSR Product
Product and Services—MDES (Non-DSRP UCAF - Secure Element Token) and Services—MDES (Non-DSRP UCAF - Secure Element Token)-
—Financial Transaction Requests Financial Transaction Requests

Added Table 3503535—Issuer On-behalf Services - SMS Auth—MSR Table 3503535—Issuer On-behalf Services - SMS Auth—MSR Product
Product and Services—Masterpass QR Refund Transactions (Non-token and Services—Merchant Presented QR Refund Transactions (Non-token
PAN)—Financial Transaction Requests PAN)—Financial Transaction Requests

Added Table 3503536—Issuer On-behalf Services - SMS Auth—MSR Table 3503536—Issuer On-behalf Services - SMS Auth—MSR Product
Product and Services—Masterpass QR Refund Transactions (Tokenized) and Services—Merchant Presented QR Refund Transactions (Tokenized)
—Financial Transaction Requests —Financial Transaction Requests

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 3
Contents

Contents

Summary of Changes, 9 August 2018.......................................................................................................................... 2

Chapter 1: Dual Message Authorization—Issuer On-behalf Services........................................................ 14


Introduction................................................................................................................................................................................ 20
TRIC Table Notations.............................................................................................................................................................. 21
Test Cases—Magnetic Stripe-based Operations........................................................................................................................... 22
Base Testing........................................................................................................................................................................... 22
Table 0901902—Issuer On-behalf Services - DMS Auth—MSR Base—MoneySend Payment Transaction—Authorization
Requests, Advices and Reversals.........................................................................................................................................22
Products and Services............................................................................................................................................................. 37
Table 0900801—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode AAV
Verification Service—Authorization Requests and Advices.................................................................................................. 38
Table 0900802—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic
AAV Verification in Stand-In Service—Authorization Advices.............................................................................................. 43
Table 0900852—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Authorization Requests and Advices...................................................................................................................................48
Table 0900853—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service
— Authorization Advices................................................................................................................................................... 51
Table 0900910—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Installment Payment
Service (Point-of-Interaction)—Authorization Requests....................................................................................................... 53
Table 0901140—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic
Stripe - Cloud-Based Payments Tokens)—Authorization Request, Advices, and Reversals.................................................... 60
Table 0901141—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic
Stripe - Secure Element Tokens)—Authorization Request, Advices, and Reversals................................................................78
Table 0901142—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Authorization Request, Advices, and Reversals.....................................................................................96

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 4
Contents

Table 0901143—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure
Element Tokens)—Authorization Request, Advices, and Reversals.....................................................................................113
Table 0901145—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe -
Secure Element Tokens)—Authorization Request, Advices, and Reversals..........................................................................132
Table 0901146—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-
Based Payments Token)-Authorization Requests............................................................................................................... 148
Table 0901147—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure
Element Token)-Authorization Requests........................................................................................................................... 154
Table 0901149—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES for Merchants and
Commerce Platforms—Authorization Requests................................................................................................................ 160
Table 0901152—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices............................................................................................. 163
Table 0901201—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Authorization Requests............................................................................... 178
Table 0901202—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Authorization Advices................................................................................. 181
Table 0901301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
Validation Service—Authorization Requests......................................................................................................................189
Table 0901302—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Authorization Advices........................................................................................................................ 191
Table 0901402—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3
Validation in Stand-in—Authorization Advices (System-generated)................................................................................... 197
Table 0901903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Funding Transactions
—Authorization Requests and Advices............................................................................................................................. 204
Table 0901904—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Cash2ATM and
MoneySend Cash2Card in Poland—Authorization Requests............................................................................................. 209
Table 0901911—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Issuer Transaction
Controls—Authorization Requests and Advices................................................................................................................ 210
Table 0902301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Pre-validation Service—
Authorization Requests.................................................................................................................................................... 224

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 5
Contents

Table 0902305—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Validation in Stand-In—
Authorization Advices...................................................................................................................................................... 226
Table 0902502—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for
Commercial Payments—Authorization Requests, Reversal, and Advice............................................................................. 227
Table 0902504—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for
Commerical Payments—Authorization Advices (System-generated)..................................................................................229
Table 0902505—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Requests...............................................................................................................233
Table 0902506—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Advices (System-generated).................................................................................. 238
Table 0902507—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Advices (Acquirer-generated)................................................................................ 242
Table 0902510—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual
Card Service—Authorization Requests and Reversal......................................................................................................... 243
Table 0902511—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual
Card Service—Authorization Advices (Acquirer-generated)............................................................................................... 246
Table 0902512—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual
Card Service—Authorization Advices (System-generated).................................................................................................247
Table 0902520—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Optional
Partial Approval Processing—Authorization Requests....................................................................................................... 252
Table 0902560—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services
Platform for Mastercard In Control Processing (Virtual Card Service)—Mastercard In Control Service Requests and
Responses........................................................................................................................................................................254
Table 0902565—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services
Platform for Mastercard In Control Processing (Account Level Spend)—Mastercard In Control Service Requests and
Responses........................................................................................................................................................................268
Table 0902901—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Expert Monitoring Real-time
Fraud Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Authorization Requests..................... 275
Table 0902903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Safety
Net—Authorization Advice.....................................................................................................................................276

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 6
Contents

Table 0902906—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Spend Alerts or Spend
Controls Services—Authorization Requests and Advices................................................................................................... 277
Table 0902921—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services
Platform (Expert Monitoring Real-time Fraud Scoring Service / Decision Intelligence, Assurance IQ, Authorization IQ and
Spend Alerts)—Service Requests and Responses...............................................................................................................285
Table 0903525—Issuer On-behalf Services - DMS Auth—MSR Product and Services— Merchant Presented QR Payment
Transactions (Non-token PAN)—Authorization Requests and Advices................................................................................288
Table 0903526—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Authorization Requests and Advices........................................................................................ 296
Table 0903535—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Authorization Requests................................................................................................... 300
Table 0903536—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Authorization Requests........................................................................................................... 301
Table 0903555—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests........................................................................................................... 304
Table 0903556—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests...................................................................................................311
Table 0904101—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Pay with Rewards
Service—Authorization Requests and Advices.................................................................................................................. 312
Table 0906161—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests..................................................................................................................................316
Test Cases—ICC-based Operations............................................................................................................................................ 318
Products and Services........................................................................................................................................................... 318
Table 0950201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe
Conversion Service With DE22 Conversion—Authorization Requests................................................................................319
Table 0950206—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe
Conversion Service Without DE22 Conversion—Authorization Requests.......................................................................... 320
Table 0950251—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Shared Key—Authorization Requests........................................................................................................... 322
Table 0950252—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Shared Key—Authorization Advices (System-generated)...............................................................................325

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 7
Contents

Table 0950261—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Unique Key—Authorization Requests...........................................................................................................328
Table 0950262—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Unique Key—Authorization Advices (System-generated).............................................................................. 331
Table 0950400—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Authorization Advices (System-generated)......................................................................................................... 336
Table 0950401—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation
Service—Authorization Requests......................................................................................................................................337
Table 0950402—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Authorization Advices (System-generated)......................................................................................................... 342
Table 0950403—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Risk Management Testing
(Authorization Request)................................................................................................................................................... 344
Table 0950501—Issuer On-behalf Services - DMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In
Processing Service—Authorization Advices (System-generated)........................................................................................ 344
Table 0951140—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip -
Cloud-Based Payments Tokens)—Authorization Requests, Advices, and Reversal.............................................................. 347
Table 0951141—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip -
Secure Element Tokens)—Authorization Requests, Advices, and Reversal..........................................................................365
Table 0951142—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Cloud-Based Payments Tokens)—Authorization Requests, Advices, and Reversal......................................383
Table 0951143—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Secure Element Tokens—Authorization Requests, Advices, and Reversal.................................................. 398
Table 0951152—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices............................................................................................. 416
Table 0951201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Authorization Request, Reversal and Advice..............................................................................................421
Table 0953555—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests........................................................................................................... 423
Table 0953556—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests...................................................................................................424

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 8
Contents

Table 0956161—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests..................................................................................................................................425

Chapter 2: Single Message System—Issuer On-behalf Services................................................................. 428


Introduction.............................................................................................................................................................................. 433
TRIC Table Notations............................................................................................................................................................ 433
Test Cases—Magnetic Stripe-based Operations......................................................................................................................... 434
Base Testing......................................................................................................................................................................... 434
Table 3501401—Issuer On-behalf Services - SMS Auth—MSR Base—MoneySend Payment Transactions—Financial
Transaction Requests, Advices and Reversals.................................................................................................................... 434
Products and Services—Debit............................................................................................................................................... 449
Table 3500402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode AAV
Verification Service—Financial Transaction Request.......................................................................................................... 450
Table 3500802—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic
AAV Verification in Stand-In Service—Financial Transaction Request................................................................................. 455
Table 3500852—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Financial Transaction Requests and Advices...................................................................................................................... 460
Table 3500853—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service
—Financial Transaction Advices........................................................................................................................................ 463
Table 3501105—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Financial Transaction Requests.....................................................................465
Table 3501106—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Financial Transaction Advices.......................................................................468
Table 3501140—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic
Stripe - Cloud-Based Payments Tokens) Financial Transaction Request, Advices, and Reversals.......................................... 475
Table 3501141—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic
Stripe - Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals................................................... 494
Table 3501142—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Financial Transaction Request, Advices, and Reversals........................................................................ 513

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 9
Contents

Table 3501143—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure
Element Tokens)—Financial Transaction Request, Advices, and Reversals.......................................................................... 531
Table 3501145—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe -
Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals............................................................... 551
Table 3501146—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-
Based Payments Token)-Financial Transaction Requests.....................................................................................................567
Table 3501147—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure
Element Token)-Financial Transaction Requests................................................................................................................. 573
Table 3501149—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES for Merchants and
Commerce Platforms—Financial Transaction Requests......................................................................................................579
Table 3501152—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES Device Token Without
Cryptogram—Financial Transaction Requests and Advices................................................................................................ 582
Table 3501202—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Financial Transaction Requests........................................................................................................... 597
Table 3501203—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Financial Transaction Advices............................................................................................................. 600
Table 3501205—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3
Validation in Stand-in—Financial Transaction Advices (System-generated).........................................................................605
Table 3501301—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud
Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Financial Transaction Requests.....................612
Table 3501303—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Safety Net—Financial
Transaction Advice........................................................................................................................................................... 614
Table 3501306—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MasterCard Spend Alerts or Spend
Controls Services—Financial Transaction Requests and Advices.........................................................................................614
Table 3501402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Funding Transactions
—Financial Transaction Requests and Advices.................................................................................................................. 622
Table 3501411—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Issuer Transaction
Controls—Financial Transaction Requests and Advices......................................................................................................628
Table 3501601—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service —Financial Transaction Requests and Reversals..............................................................................642

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 10
Contents

Table 3501602—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Advices (Acquirer-generated)......................................................................645
Table 3501603—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Advices (System-generated)........................................................................646
Table 3501604—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Financial Transaction Requests and Reversal....................................................................................................... 650
Table 3501605—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Financial Transaction Advices (Acquirer-generated).............................................................................................653
Table 3501606—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service— Financial Transaction Advices (System-generated)..............................................................................................654
Table 3501620—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Optional
Partial Approval Processing—Financial Transaction Requests.............................................................................................659
Table 3503525—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Non-token PAN)—Financial Transaction Requests and Advices..................................................................... 661
Table 3503526—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Financial Transaction Requests and Advices..............................................................................669
Table 3503535—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Financial Transaction Requests........................................................................................ 674
Table 3503536—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Financial Transaction Requests................................................................................................. 675
Table 3503555—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests................................................................................................. 678
Table 3503556—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests........................................................................................ 685
Table 3504900—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Maestro Switching of Visa
Tokenized Transactions—Financial Transaction Requests, Advices, and Reversals...............................................................686
Table 3506161—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests....................................................................................................................... 693
Test Cases—ICC-based Operations............................................................................................................................................ 695
Products and Services........................................................................................................................................................... 695

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 11
Contents

Table 3550201—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe
Conversion Service With DE22 Conversion—Financial Transaction Requests..................................................................... 696
Table 3550203—Issuer On-behalf Services - SMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In
Processing Service—Financial Transaction Advices (System-generated)..............................................................................698
Table 3550206—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe
Conversion Service Without DE22 Conversion—Financial Transaction Requests................................................................ 700
Table 3550250—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Shared Key—Financial Transaction Requests.................................................................................................703
Table 3550253—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Shared Key—Financial Transaction Advices (System-generated).................................................................... 705
Table 3550260—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Unique Key—Financial Transaction Requests................................................................................................ 710
Table 3550263—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion
Service With Unique Key—Financial Transaction Advices (System-generated)....................................................................713
Table 3550300—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Financial Transaction Advices (System-generated)...............................................................................................719
Table 3550301—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation
Service—Financial Transaction Requests........................................................................................................................... 720
Table 3550302—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Financial Transaction Advices (System-generated)...............................................................................................726
Table 3550403—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Risk Management Testing (Financial Transaction Requests)................................................................................. 727
Table 3550504—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Financial Transaction Request and Reversal............................................................................................... 728
Table 3551140—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip -
Cloud-Based Payments Tokens)—Financial Transaction Requests, Advices, and Reversals.................................................. 729
Table 3551141—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Financial Transaction Requests, Advices, and Reversals......................................................................... 749
Table 3551142—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Cloud-Based Payments Tokens)—Financial Transaction Request, Advices, and Reversals........................... 766

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 12
Contents

Table 3551143—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Secure Element Tokens)—Financial Transaction Requests, Advices, and Reversals..................................... 784
Table 3551152—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Financial Transaction Requests and Advices.................................................................................. 803
Table 3553555—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests................................................................................................. 808
Table 3553556—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests........................................................................................ 810
Table 3554900—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Maestro Switching of Visa
Tokenized Transactions—Financial Transaction Requests, Advices, and Reversals...............................................................811
Table 3556161—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests....................................................................................................................... 816

Notices..................................................................................................................................................................................... 819

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 13
Dual Message Authorization—Issuer On-behalf Services

Chapter 1 Dual Message Authorization—Issuer On-behalf Services


This chapter describes the test cases for conducting individual application testing and validation of a customer's Dual Message
authorization application.

Introduction.............................................................................................................................................................................................20
TRIC Table Notations........................................................................................................................................................................... 21
Test Cases—Magnetic Stripe-based Operations........................................................................................................................................ 22
Base Testing........................................................................................................................................................................................ 22
Table 0901902—Issuer On-behalf Services - DMS Auth—MSR Base—MoneySend Payment Transaction—Authorization
Requests, Advices and Reversals..................................................................................................................................................... 22
Products and Services.......................................................................................................................................................................... 37
Table 0900801—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode AAV Verification
Service—Authorization Requests and Advices................................................................................................................................. 38
Table 0900802—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic AAV
Verification in Stand-In Service—Authorization Advices...................................................................................................................43
Table 0900852—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Authorization Requests and Advices............................................................................................................................................... 48
Table 0900853—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service —
Authorization Advices.....................................................................................................................................................................51
Table 0900910—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Installment Payment Service
(Point-of-Interaction)—Authorization Requests............................................................................................................................... 53
Table 0901140—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Cloud-Based Payments Tokens)—Authorization Request, Advices, and Reversals............................................................................. 60
Table 0901141—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Secure Element Tokens)—Authorization Request, Advices, and Reversals........................................................................................ 78
Table 0901142—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Authorization Request, Advices, and Reversals................................................................................................. 96

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 14
Dual Message Authorization—Issuer On-behalf Services

Table 0901143—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure Element
Tokens)—Authorization Request, Advices, and Reversals............................................................................................................... 113
Table 0901145—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe - Secure
Element Tokens)—Authorization Request, Advices, and Reversals..................................................................................................132
Table 0901146—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-Based
Payments Token)-Authorization Requests...................................................................................................................................... 148
Table 0901147—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure Element
Token)-Authorization Requests..................................................................................................................................................... 154
Table 0901149—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES for Merchants and Commerce
Platforms—Authorization Requests...............................................................................................................................................160
Table 0901152—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices..........................................................................................................163
Table 0901201—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping Service
with Dynamic CVC 3 Pre-validation—Authorization Requests....................................................................................................... 178
Table 0901202—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping Service
with Dynamic CVC 3 Pre-validation—Authorization Advices......................................................................................................... 181
Table 0901301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-Validation
Service—Authorization Requests.................................................................................................................................................. 189
Table 0901302—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-validation
Service—Authorization Advices.................................................................................................................................................... 191
Table 0901402—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Validation in
Stand-in—Authorization Advices (System-generated)....................................................................................................................197
Table 0901903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Funding Transactions—
Authorization Requests and Advices............................................................................................................................................. 204
Table 0901904—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Cash2ATM and MoneySend
Cash2Card in Poland—Authorization Requests............................................................................................................................. 209
Table 0901911—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Issuer Transaction Controls—
Authorization Requests and Advices............................................................................................................................................. 210
Table 0902301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Pre-validation Service—Authorization
Requests.......................................................................................................................................................................................224

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 15
Dual Message Authorization—Issuer On-behalf Services

Table 0902305—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Validation in Stand-In—Authorization
Advices.........................................................................................................................................................................................226
Table 0902502—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for Commercial
Payments—Authorization Requests, Reversal, and Advice............................................................................................................. 227
Table 0902504—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for Commerical
Payments—Authorization Advices (System-generated).................................................................................................................. 229
Table 0902505—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card Spend
Control Service—Authorization Requests...................................................................................................................................... 233
Table 0902506—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card Spend
Control Service—Authorization Advices (System-generated)......................................................................................................... 238
Table 0902507—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card Spend
Control Service—Authorization Advices (Acquirer-generated)....................................................................................................... 242
Table 0902510—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card Service
—Authorization Requests and Reversal......................................................................................................................................... 243
Table 0902511—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card Service
—Authorization Advices (Acquirer-generated)...............................................................................................................................246
Table 0902512—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card Service
—Authorization Advices (System-generated)................................................................................................................................ 247
Table 0902520—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Optional Partial
Approval Processing—Authorization Requests.............................................................................................................................. 252
Table 0902560—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform for
Mastercard In Control Processing (Virtual Card Service)—Mastercard In Control Service Requests and Responses.......................... 254
Table 0902565—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform for
Mastercard In Control Processing (Account Level Spend)—Mastercard In Control Service Requests and Responses........................ 268
Table 0902901—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud Scoring
Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Authorization Requests........................................................ 275
Table 0902903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Safety
Net—Authorization Advice................................................................................................................................................. 276
Table 0902906—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Spend Alerts or Spend
Controls Services—Authorization Requests and Advices................................................................................................................277

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 16
Dual Message Authorization—Issuer On-behalf Services

Table 0902921—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
(Expert Monitoring Real-time Fraud Scoring Service / Decision Intelligence, Assurance IQ, Authorization IQ and Spend Alerts)—
Service Requests and Responses................................................................................................................................................... 285
Table 0903525—Issuer On-behalf Services - DMS Auth—MSR Product and Services— Merchant Presented QR Payment
Transactions (Non-token PAN)—Authorization Requests and Advices............................................................................................ 288
Table 0903526—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Authorization Requests and Advices.....................................................................................................296
Table 0903535—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Authorization Requests................................................................................................................300
Table 0903536—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Authorization Requests........................................................................................................................ 301
Table 0903555—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests........................................................................................................................ 304
Table 0903556—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests............................................................................................................... 311
Table 0904101—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Pay with Rewards Service—
Authorization Requests and Advices............................................................................................................................................. 312
Table 0906161—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests.............................................................................................................................................. 316
Test Cases—ICC-based Operations.........................................................................................................................................................318
Products and Services........................................................................................................................................................................ 318
Table 0950201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion Service
With DE22 Conversion—Authorization Requests.......................................................................................................................... 319
Table 0950206—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion Service
Without DE22 Conversion—Authorization Requests..................................................................................................................... 320
Table 0950251—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Authorization Requests................................................................................................................................... 322
Table 0950252—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Authorization Advices (System-generated)....................................................................................................... 325

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 17
Dual Message Authorization—Issuer On-behalf Services

Table 0950261—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Authorization Requests................................................................................................................................... 328
Table 0950262—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Authorization Advices (System-generated)...................................................................................................... 331
Table 0950400—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation Service
—Authorization Advices (System-generated)................................................................................................................................ 336
Table 0950401—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation Service
—Authorization Requests............................................................................................................................................................. 337
Table 0950402—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation Service
—Authorization Advices (System-generated)................................................................................................................................ 342
Table 0950403—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Risk Management Testing (Authorization
Request)....................................................................................................................................................................................... 344
Table 0950501—Issuer On-behalf Services - DMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In Processing
Service—Authorization Advices (System-generated)...................................................................................................................... 344
Table 0951140—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Cloud-Based
Payments Tokens)—Authorization Requests, Advices, and Reversal............................................................................................... 347
Table 0951141—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Authorization Requests, Advices, and Reversal..................................................................................................365
Table 0951142—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment
EMV - Cloud-Based Payments Tokens)—Authorization Requests, Advices, and Reversal.................................................................383
Table 0951143—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment
EMV - Secure Element Tokens—Authorization Requests, Advices, and Reversal............................................................................. 398
Table 0951152—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES Device Token PAN Mapping Without
Cryptogram—Authorization Requests and Advices....................................................................................................................... 416
Table 0951201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Authorization Request, Reversal and Advice...........................................................................................................421
Table 0953555—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests........................................................................................................................ 423
Table 0953556—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests............................................................................................................... 424

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 18
Dual Message Authorization—Issuer On-behalf Services

Table 0956161—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests.............................................................................................................................................. 425

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 19
Dual Message Authorization—Issuer On-behalf Services
Introduction

Introduction
This chapter contains details about the test cases applicable in the Issuer On-behalf Services business profile during individual
application testing and validation of a customer's issuer Dual Message authorization application.
Separate test cases are provided for magnetic stripe-based operations and for upgrading to integrated circuit card (ICC)-based
operations. Depending on the nature of customers’ proposed operations, test cases must be selected as follows:
• For customers undergoing testing and validation for magnetic stripe-based operations, only those test cases described in the Test
Cases—Magnetic Stripe-based Operations section need be conducted.
• For customers undergoing testing and validation for both magnetic stripe-based operations and ICC-based operations, the test
cases described in both the Test Cases—Magnetic Stripe-based Operations section and in the Test Cases—ICC-based Operations
section must be conducted.
• For customers that have been validated for magnetic stripe-based operations and are now undergoing upgrade testing and
validation to additionally conduct ICC-based operations, only those test cases provided in the Test Cases—ICC-based Operations
section need be conducted.
Within the Test Cases—Magnetic Stripe-based Operations and the Test Cases—ICC-based Operations sections, test cases are
described for both contact operations and contactless operations. Depending on the nature of a customer's proposed operations,
test cases must be selected as follows:
• For customers undergoing testing and validation for contact operations, only those test cases described for contact operations
need be conducted.
• For customers undergoing testing and validation for both contact operations and contactless operations, the test cases described
for both contact operations and contactless operations must be conducted.
• For customers that have been validated for contact operations and are now undergoing upgrade testing and validation to
additionally conduct contactless operations, only those test cases described for contactless operations need be conducted.

NOTE:
If customers intend to support contactless magnetic stripe-based operations, they must have previously been validated for contact
magnetic stripe-based operations. If customers intend to support contactless ICC-based operations, they must have previously been
validated for upgrade to standard ICC-based operations.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 20
Dual Message Authorization—Issuer On-behalf Services
Introduction

The following manuals in the Testing Reference Information Center (TRIC) document set provide references to these test cases,
indicating when they should be conducted:
• Offline Validation
• Online Validation

TRIC Table Notations


This table defines notations that appear in tables throughout this chapter.

TRIC Table Notations

Notation Definition

M Indicates a Mandatory business transaction.

C Indicates a Conditional business transaction.

Where it appears in a DE 52 column, indicates a Valid PIN value.


V
Where it appears in an RC column, indicates any valid response or any specified response provided.

IV Where it appears in a DE 52 column, indicates an Invalid PIN value.

b Indicates a blank space when used in DE 48, subelement 71 fourth position.

N/A Indicates Not Applicable.

x For addenda messages, indicates No Information.

1 Where it appears in a SIM or MTF column, indicates testing is recommended for that environment.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 21
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Notation Definition

0 Where it appears in a SIM or MTF column, indicates testing is available for that environment.

Test Cases—Magnetic Stripe-based Operations


The test cases listed in this section are applicable to standard magnetic stripe-based operations only. Select the appropriate business
transactions from the following tables and conduct the associated test cases.

Base Testing
The following test cases are the base set recommended for issuers participating in Issuer On-behalf Services processing.

Table 0901902—Issuer On-behalf Services - DMS Auth—MSR Base—MoneySend Payment Transaction—Authorization


Requests, Advices and Reversals
The following test cases will test whether an issuer's Dual Message authorization application can receive Mastercard MoneySend
Payment Transactions in Authorization Requests, Advices and Reversals; process them, and return correctly formatted Authorization
Responses.

NOTE: Issuers must comply with MoneySend Payment Transaction processing requirements including the following:

1. Validate funds are available in Debit and Prepaid accounts within 30 minutes of the approval of the authorization request.
2. Validate a pending transaction is posted or funds are available in Credit accounts within 30 minutes of authorization.
3. Validate that the amount posted to the card account is the same as the amount indicated in DE 4 (Amount, Transaction) when the
transaction currency in DE 49 matches the currency of the card account.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 22
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901902—Issuer On-behalf Services - DMS Auth—MSR Base—MoneySend Payment Transaction—Authorization


Requests, Advices and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200001 1 1 NO CVM 28 01 0 001-010 00

0400 1 1 DE 39 = 06 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is present.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
1 0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match
to names on the applicable screening lists, while lower scores indicate a less likely match.
0100: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
0400: Full reversal, DE 39 = 06 (Error)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 23
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200002 1 1 NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
2 0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match
to names on the applicable screening lists, while lower scores indicate a less likely match.
0100: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 24
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200003 1 1 NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score cannot be determined.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
3
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains sender Sanction Screening score value 999 indicating unable to obtain a score.
0100: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 25
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200004 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction unable to process Mastercard Blocking; Sanction Screening score not provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
4
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67 sanction screening score not provided.
0100: DE 48, SE 71 = 33Ub (MoneySend Blocking Service; Unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 26
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200005 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score not provided for non-participating
country.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
5
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67 not present.
0100: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 27
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200014 1 1 NO CVM 28 01 0 001-010 00

0400 1 1 DE 39 = 06 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is present.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
6 0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains data in all subelements and subfields.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match
to names on the applicable screening lists, while lower scores indicate a less likely match.
0100: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
0400: Full reversal; DE 39 = 06 (Error),

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 28
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200006 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
7 values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Gb (MoneySend Blocking; Transaction limit not allowed for the MoneySend Payment type and
Country)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000064.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 29
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200007 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

8 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Hb (MoneySend Blocking; Merchant not allowed for the MoneySend Payment type)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000067.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 30
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200008 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

9 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Ib (MoneySend Blocking; Cross-border not allowed for the MoneySend Payment type)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000072.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 31
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200009 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

10 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Jb (MoneySend Blocking: MoneySend Transaction Count exceeded)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000077.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 32
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200010 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

11 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Kb (MoneySend Blocking; Aggregate transaction amount limit exceeded)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000065.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 33
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200011 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score (if applicable) is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

12 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score (if applicable).
0120: DE 48, SE 71 = 33Wb (MoneySend MasterCard Blocking; Country not allowed for the MoneySend Transaction)
0120: DE 39 = 12 (Invalid Transaction); DE 60 = 2000072 (Reject: Geographic Restriction).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 34
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090190200013 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking - Product code invalid for the Transaction Type indicator; Sanction
Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
13 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Sb (MoneySend Blocking; Product code invalid for the Transaction Type indicator)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000071 (Reject: Decline other).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 35
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200021 1 1 NO CVM 28 01 0 001-010 V

Account Status Inquiry for a MoneySend Payment Transaction


DE 3, SF 1 = 28 (Payment Transaction) and DE 4 = zero amount; and DE 14 (Expiration Date) not present
DE 18 = MCC 6537 (MoneySend intercountry) or MCC 6536 (MoneySend intracountry)
DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match to
14 names on the applicable screening lists, while lower scores indicate a less likely match.
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 61, SF 7 = 8 (Account Status Inquiry Service)
DE 124 contains mandated MoneySend Payment subfields.
DE 108 (MoneySend Reference Data) contains only the mandated data.

NOTE: Issuers have the option to use 85 (Not declined) or 05 (Do not honor) in DE 39.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 36
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090190200022 1 1 NO CVM 28 01 0 001-010 V

Account Status Inquiry for a MoneySend Payment Transaction


DE 3, SF 1 = 28 (Payment Transaction; DE 4 = non-zero amount; and DE 14 (Expiration Date) not present
DE 18 = MCC 6537 (MoneySend intercountry) or MCC 6536 (MoneySend intracountry)
DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match to
15 names on the applicable screening lists, while lower scores indicate a less likely match.
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 61, SF 7 = 8 (Account Status Inquiry Service)
DE 124 contains mandated MoneySend Payment subfields.
DE 108 (MoneySend Reference Data) contains only the mandated data.

NOTE: Issuers have the option to use 85 (Not declined) or 05 (Do not honor) in DE 39.

Products and Services


The following test cases will test whether a customer’s issuer Dual Message authorization application can receive authorization
requests, process them, and return correctly formatted authorization responses under conditions that are specific to all additional
features available.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 37
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0900801—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode AAV
Verification Service—Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message authorization application can receive Authorization Requests and
Advices that contain Mastercard SecureCode results when issuer is participating in Mastercard SecureCode AAV Verification Service,
process them, and return correctly formatted Authorization Responses.
Issuers will also receive DE 48, SE 66 (Authentication Data) if provided by acquirer.
Test cases 1-3 are for SPA and test cases 4-14 are for SPA2 algorithm.

NOTE: Mastercard SecureCode AAV Verification service is mandatory on every authorization transaction for all issuers unless issuer
provides evidence of self-validation which excuses them from validating the Mastercard attempts AAV values.

Table 0900801—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode AAV
Verification Service—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090080100001 1 N/A PURCHASE NO CVM 00 81 6 001-010 00
1
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results) and DE 48, SE 42 and 43 are present
DE 48, SE 66 (Authentication Data), SF 1 = 1 (3DS 1.0), and SF 2 (Directory Server Transaction ID) is present

ELECTRONIC COMMERCE
0100 090080100002 1 N/A PURCHASE NO CVM 00 81 6 001-010 V
2
DE 48, SE 71 = 05Ib (Invalid SecureCode AAV results) and DE 48, SE 42 and 43 are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 38
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
3 0100 080080100003 1 N/A PURCHASE NO CVM 00 81 6 001-010 V

DE 48, SE 71 = 05Ub (SecureCode AAV unable to process) and DE 48, SE 42 and 43 are present

ELECTRONIC COMMERCE
0100 090080100011 1 1 PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction successfully validated by Mastercard SecureCode AAV
Verification Service
4
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

ELECTRONIC COMMERCE
0100 090080100012 1 1 PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Challenge transaction successfully validated by Mastercard SecureCode AAV
5 Verification Service
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kH
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 39
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090080100013 1 1 PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Frictionless transaction successfully validated by Mastercard SecureCode AAV
6 Verification Service
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kJ
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

ELECTRONIC COMMERCE
0100 090080100014 1 1 PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Challenge transaction successfully validated by Mastercard SecureCode AAV
7 Verification Service
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kK
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

ELECTRONIC COMMERCE
0100 090080100015 1 1 PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Attempts)-Frictionless transaction successfully validated by Mastercard SecureCode AAV Verification
Service
8
DE 48, SE 42, SF 1 = 211 and DE 48, SE 43 containing first two values = kL
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 40
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090080100021 1 1 PURCHASE NO CVM 00 81 6 001-010 V

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates forward results in request message
9
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Kb (No matching key file for this PAN, PAN expiry date and KDI combination)
DE 39 issuer decision

ELECTRONIC COMMERCE
0100 090080100022 1 1 PURCHASE NO CVM 00 81 6 001-010 V

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates forward results in request message
10
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Xb (Security platform time out)
DE 39 issuer decision

ELECTRONIC COMMERCE
0100 090080100023 1 1 PURCHASE NO CVM 00 81 6 001-010 V

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates forward results in request message
11
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Zb (Security platform processing error)
DE 39 issuer decision

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 41
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080100031 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates decline request and forward results in advice message
12
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Kb (No matching key file for this PAN, PAN expiry date and KDI combination)
DE 39 = 05 (Do not honor) and DE 60 = 1150037 (Transaction Processed via On-behalf Service Decision: Reject)

ELECTRONIC COMMERCE
0120 090080100032 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates decline request and forward results in advice message
13
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Xb (Security platform time out)
DE 39 = 05 (Do not honor) and DE 60 = 1150038 (Transaction Processed via On-behalf Service Decision: Reject)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 42
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080100033 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates decline request and forward results in advice message
14
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Zb (Security platform processing error)
DE 39 = 05 (Do not honor) and DE 60 = 1150040 (Transaction Processed via On-behalf Service Decision: Reject)

Table 0900802—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic
AAV Verification in Stand-In Service—Authorization Advices
The following test cases will test whether an issuer's Dual Message authorization application can receive Authorization Advices that
contain Mastercard SecureCode Accountholder Authentication Value (AAV) results when issuer is participating in Mastercard
SecureCode AAV Verification in Stand-In Service, process them, and return correctly formatted Authorization Responses.
Issuers will also receive DE 48, SE 66 (Authentication Data) if provided by acquirer.

NOTE: All issuers globally that participate in Stand-In processing must have Mastercard SecureCode Dynamic AAV Verification in
Stand-In Processing performed during Stand-In processing. Issuers are required to perform each of the first two test cases.

Test cases 1-3 are for SPA and test cases 4-11 are for SPA2 algorithm.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 43
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0900802—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic
AAV Verification in Stand-In Service—Authorization Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080200001 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

1 DE 39 = 00 (Approved); DE 48, SE 71 = 06Vb (Valid SecureCode AAV results); and DE 48, SE 42 and 43 are present
DE 48, SE 66 (Authentication Data), SF 1 = 1 (3DS 1.0), and SF 2 (Directory Server Transaction ID) are present
DE 60 = 1010000 (IPS signed out; approval)

ELECTRONIC COMMERCE
0120 090080200002 1 N/A PURCHASE NO CVM 00 81 6 013 00
2
DE 39 = 05 (Do not honor); DE 48, SE 71 = 06Ib (Invalid SecureCode AAV results); and DE 48, SE 42 and 43 are present
DE 60 = 1010003 (IPS signed out; not approved)

ELECTRONIC COMMERCE
0120 090080200003 1 N/A PURCHASE NO CVM 00 81 6 013 00
3
DE 39 = 05 (Do not honor); DE 48, SE 71 = 06Ub (Unable to process); and DE 48, SE 42 and 43 are present
DE 60 = 1010003 (IPS signed out; not approved)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 44
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080200031 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and successfully validated by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
4 DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

ELECTRONIC COMMERCE
0120 090080200032 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Challenge transaction routed to Stand-in and successfully validated by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
5
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kH
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 45
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080200033 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Frictionless transaction routed to Stand-in and successfully validated by
Mastercard SecureCode Dynamic AAV Verification in Stand-In Processing
6
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kJ
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

ELECTRONIC COMMERCE
0120 090080200034 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Challenge transaction routed to Stand-in and successfully validated by
Mastercard SecureCode Dynamic AAV Verification in Stand-In Processing
7
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kK
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 46
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080200035 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Attempts)-Frictionless transaction routed to Stand-in and successfully validated by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
8 DE 48, SE 42, SF 1 = 211 and DE 48, SE 43 containing first two values = kL
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

ELECTRONIC COMMERCE
0120 090080200041 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and validation failed by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
9
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 06Kb (No matching key file for this PAN, PAN expiry date and KDI combination)
DE 39 = 05 (Do not honor) and DE 60 = 1010037 (IPS signed out: Reject)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 47
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090080200042 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and validation failed by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
10
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 06Xb (Security platform time out)
DE 39 = 05 (Do not honor) and DE 60 = 1010038 (IPS signed out: Reject)

ELECTRONIC COMMERCE
0120 090080200043 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and validation failed by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
11
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 06Zb (Security platform processing error)
DE 39 = 05 (Do not honor) and DE 60 = 1010040 (IPS signed out: Reject)

Table 0900852—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message authorization application that is participating in the optional CVC
1 Pre-Validation Service can receive OBS 11 validation results in DE 48, SE 71 of Authorization Requests and Advices; process them,
and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 48
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0900852—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090085200001 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 00
1
CVC 1 Pre-Validation Service successfully performed and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Vb indicating the OBS result

MSR PURCHASE
0100 090085200002 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 V
2
CVC 1 Pre-Validation Service invalid cryptogram and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Ib indicating the OBS result

MSR PURCHASE
0100 090085200003 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 V
3
CVC 1 Pre-Validation Service no matching key file and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Kb indicating the OBS result

MSR PURCHASE
0100 090085200004 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 V
4
CVC 1 Pre-Validation Service unable to process and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Ub indicating the OBS result

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 49
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090085200011 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 00

5 CVC 1 Pre-Validation Service successfully performed and routed to Stand-In due to issuer signed out
DE 48, SE 71 = 11Vb indicating the OBS result
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out; approval)

MSR PURCHASE
0120 090085200012 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

6 CVC 1 Pre-Validation Service invalid cryptogram and Issuer decision matrix indicates 'decline'
DE 48, SE 71 = 11Ib indicating the OBS result
DE 39 = 05 (Do not honor); DE 60 = 1600028 (Reject: Invalid CVC 1); and DE 48, SE 87 = Y (Invalid CVC 1)

MSR PURCHASE
0120 090085200013 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

CVC 1 Pre-Validation Service no matching key file and Issuer decision matrix indicates 'decline'
7
DE 48, SE 71 = 11Kb indicating the OBS result
DE 39 = 05 (Do not honor) and DE 60 = 1600047 (Reject: CVC 1 No matching key file for this PAN, PAN expiry date
combination; status unknown)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 50
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090085200014 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

8 CVC 1 Pre-Validation Service unable to process and Issuer decision matrix indicates 'decline'
DE 48, SE 71 = 11Ub indicating the OBS result
DE 39 = 05 (Do not honor) and DE 60 = 1600036 (Reject:CVC 1 Unable to process)

Table 0900853—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service —
Authorization Advices
The following test cases will test whether an issuer's Dual Message authorization application that is participating in the optional CVC
1 Validation Stand-In Service can receive OBS 10 validation results in DE 48, SE 71 of Authorization Advices; process them, and send
correctly formatted Authorization Responses.

NOTE: Effective 1 March 2017 per Global Operations Bulletin No. 4, 1 April 2016, Revised Standards for Validation Services During
Stand-In Processing, all issuers globally that participate in Stand-In processing must have Card Validation Code 1 (CVC 1) Verification
performed during Stand-In processing.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 51
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0900853—Issuer On-behalf Services - DMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service —
Authorization Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090085200001 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 00

1 CVC 1 Validation Stand-In Service successfully performed


DE 48, SE 71 = 10Vb indicating the OBS result
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out; approval)

MSR PURCHASE
0120 090085200002 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

2 CVC 1 Validation Stand-In Service result invalid cryptogram and issuer decision matrix indicates 'decline'
DE 48, SE 71 = 10Ib indicating the OBS result
DE 39 = 05 (Do not honor); DE 60 = 1010028 (IPS Signed out; Reject: Invalid CVC 1); and DE 48, SE 87 = Y (Invalid CVC 1)

MSR PURCHASE
0120 090085200003 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

3 CVC 1 Validation Stand-In Service unable to process and issuer decision matrix indicates 'decline'
DE 48, SE 71 = 10Ub indicating the OBS result
DE 39 = 05 (Do not honor) and DE 60 = 1010036 (IPS Signed Out; Reject: CVC 1 Unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 52
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0900910—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Installment Payment
Service (Point-of-Interaction)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in the MasterCard
Installment Payment Service with the Point-of-Interaction Service and shares the installment parameters with MasterCard can receive
the Mastercard on-behalf service results in DE 48, SE 71 in Authorization Requests, process them, and send correctly formatted
Authorization Responses.
Test cases 1-4 apply to Issuer Financed Model and test cases 5-8 apply to Issuer Merchant Co-Financed Model. Test cases 9-15 are
for transactions that do not qualify for either model. All test cases may also be processed as DE 3, SF 1 = 01 (Withdrawal), 09
(Purchase with Cash Back), and/or 17 (Cash Disbursement).

Table 0900910—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Installment Payment
Service (Point-of-Interaction)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000001 1 N/A SIGNATURE 00 90 0 001-010 00

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service for Issuer Financed Model installment type. Issuer approves transaction.
1
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 20B (Issuer Financed; Pay in Full or Pay in
Installments); and SE 022 (Installment Payment Data 2) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer provides desired values in DE 112, SE 021 and SE 022; issuer optionally provides DE 123 (Receipt Free Text).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 53
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000002 1 N/A SIGNATURE 00 90 0 001-010 00

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service for Issuer Financed Model installment type. Issuer approves transaction.
2
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 20B (Issuer Financed; Pay in Full or Pay in
Installments); and SE 023 (Installment Payment Data 3) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer provides desired values in DE 112, SE 021 and SE 023; issuer optionally provides DE 123 (Receipt Free Text).

MSR PURCHASE
0100 090091000003 1 N/A SIGNATURE 00 90 0 001-010 00

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service for Issuer Financed Model installment type. Issuer approves transaction but does not offer installments.
3
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 20B (Issuer Financed; Pay in Full or Pay in
Installments); and SE 022 (Installment Payment Data 2) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer does not provide DE 112 or DE 123.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 54
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000004 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service for Issuer Financed Model installment type. Issuer declines transaction.
4
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 20B (Issuer Financed; Pay in Full or Pay in
Installments); and SE 023 (Installment Payment Data 3) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer does not provide DE 112 or DE 123.

MSR PURCHASE
0100 090091000011 1 N/A SIGNATURE 00 90 0 001-010 00

Installment payment transaction from terminal that is capable of installments. Mastercard performs Mastercard Installment
Payment Service for Issuer Merchant Co-Financed Model installment type. Issuer approves transaction.
5
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 24B (Issuer Merchant Co-Financed; Pay in Full
or Pay in Installments); and SE 022 (Installment Payment Data 2) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer provides desired values in DE 112, SE 021 and SE 022; issuer optionally provides DE 123 (Receipt Free Text).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 55
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000012 1 N/A SIGNATURE 00 90 0 001-010 00

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service for Issuer Merchant Co-Financed Model installment type. Issuer approves transaction.
6
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 24B (Issuer Merchant Co-Financed: Pay in Full
or Pay in Installments); and SE 023 (Installment Payment Data 3) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer provides desired values in DE 112, SE 021 and SE 023; issuer optionally provides DE 123 (Receipt Free Text).

MSR PURCHASE
0100 090091000013 1 N/A SIGNATURE 00 90 0 001-010 00

Installment payment transaction from terminal that is capable of installments. Mastercard performs Mastercard Installment
Payment Service for Issuer Merchant Co-Financed Model installment type. Issuer approves transaction but does not offer
installments and does not provide DE 112 in response
7
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 24B (Issuer Merchant Co-Financed; Pay in Full
or Pay in Installments); and SE 022 (Installment Payment Data 2) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer does not provide DE 112 or DE 123.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 56
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000014 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service for Issuer Merchant Co-Financed Model installment type. Issuer declines transaction and does not provide DE 112 or
DE 123 in response.
8
0100: DE 48, SE 95 = MCINST; DE 112, SE 021 (Installment Payment Data 1) = 24B (Issuer Merchant Co-Financed: Pay in Full
or Pay in Installments); and SE 023 (Installment Payment Data 3) inserted by Mastercard from issuer parameters.
0100: DE 48, SE 71 = 26Vb (Qualified for Installment).
0110: Issuer does not provide DE 112 or DE 123.

MSR PURCHASE
0100 090091000021 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service.
9
0100: DE 48, SE 71 = 26Ab (Amount does not qualify for Installment).
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer processes as a non-installment transaction and provides applicable DE 39 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 57
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000022 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service.
10
0100: DE 48, SE 71 = 26Fb (PAN does not qualify for Installment).
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer processes as a non-installment transaction and provides applicable DE 39 response.

MSR PURCHASE
0100 090091000023 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service.
11
0100: DE 48, SE 71 = 26Mb (MCC does not qualify for Installment).
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer processes as a non-installment transaction and provides applicable DE 39 response.

MSR PURCHASE
0100 090091000024 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service.
12
0100: DE 48, SE 71 = 26Nb (Record not found).
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer decision whether or not to offer installment to cardholder and issuer provides applicable DE 39 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 58
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000026 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service.
13
0100: DE 48, SE 71 = 26Ub (Unable to Process).
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer processes as a non-installment transaction and provides applicable DE 39 response.

MSR PURCHASE
0100 090091000027 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service.
14
0100: DE 48, SE 71 = 26Eb (Merchant ID does not qualify for installment).
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer processes as a non-installment transaction and provides applicable DE 39 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 59
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090091000028 1 N/A SIGNATURE 00 90 0 001-010 V

Installment payment transaction from terminal that is capable of installments. Mastercard performs Point-of-Interaction
Service. Authorization request is not eligible for Mastercard Installment Payment Service due to exceeding the maximum
number of active and open/inflight installments for the PAN or account range that the issuer allows for the cardholder
15
0100: DE 48, SE 71 = 26I b(Point-of-Interaction Service; Does not qualify for installment as the installment plan count exceeds
the allowed limit)
0100: DE 48, SE 95 = MCINST (Mastercard Installment).
0110: Issuer processed as a non-installment transaction and provides applicable DE 39 response.

Table 0901140—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Cloud-Based Payments Tokens)—Authorization Request, Advices, and Reversals
The following test cases will test whether an issuer's Dual Message authorization application can receive Mastercard Cloud-Based
Payment contactless magnetic stripe Authorization Requests and Advices when the Mastercard Digital Enablement Service (MDES)
was performed for PAN mapping and cryptographic validation, process them, and send correctly formatted Authorization Responses.

NOTE: See table 0901152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 60
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901140—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Cloud-Based Payments Tokens)—Authorization Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000001 1 0 OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 35/45 track data (if opt-in to receive crypto data) is present.
1 DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 61
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000002 1 0 OR NO CVM 00 91 0 322 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed cryptogram validation (invalid MD AC and invalid UMD AC). Issuer Decision Matrix indicates
forward request with results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 62
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000003 1 0 OR NO CVM 00 91 0 323 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed due to invalid UMD AC (invalid mobile PIN). Issuer Decision Matrix indicates forward request with
results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 63
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000004 1 0 OR NO CVM 00 91 0 324 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed due to invalid MD AC. Issuer Decision Matrix indicates forward request with results if OBS 62 not
successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 64
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000005 1 0 OR NO CVM 00 91 0 316 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed due to Unpredictable Number Length Indicator Mismatch. Issuer Decision Matrix indicates forward
request with results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Nb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 65
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000006 1 0 OR NO CVM 00 91 0 313 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service unable to process. Issuer Decision Matrix indicates forward request with results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 66
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114000011 1 N/A OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out; Accept).

7 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 67
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114000012 1 N/A OR NO CVM 00 91 0 322 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Magnetic Stripe
Prevalidation Service cryptogram validation (invalid MD AC and invalid UMD AC). Issuer decision matrix to decline (issuer
selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
8
DE 48, SE 71 = 50Cb62Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])

NOTE: Issuers may also receive the following for decline (issuer selection) per simulator setup:

DE 48.71 = 62K and DE 60 = 1410207 for invalid UMD AC


DE 48.71 = 62L and DE 60 = 1410208 for invalid MD AC
DE 48.71 = 62N and DE 60 = 1410210 for unpredictable number length indicator mismatch
DE 48.71 = 62U and DE 60 = 1410212 for unable to process
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 68
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114000013 1 N/A OR NO CVM 00 91 0 319 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Magnetic Stripe
Prevalidation Service cryptogram validation (ATC replay). Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
9 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Eb for the on-behalf service results.
DE 60 = 1410205 (Reject: ATC replay)

NOTE: Issuers may also receive the following for decline (mandatory default) per simulator setup:

DE 48.71 = 62D and DE 60 = 1410204 for invalid ATC


DE 48.71 = 62M and DE 60 = 1410209 for mobile PIN try counter max limit reached, token suspended.
DE 48.71 = 62P and DE 60 = 1410206 for invalid mobile PIN.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 69
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114000014 1 N/A OR NO CVM 00 91 0 016 00

MDES successfully performed PAN mapping but failed CVC cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 35/45 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 035.
10
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Fb for the on-behalf service results.
DE 60 = 1410054 (MDES Advice to Issuer: Reject: Track Data Format Error [for MDES magstripe validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 70
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000040 1 0 OR NO CVM 00 91 0 311 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
11 Prevalidation Service without incurring any failed transaction analysis validations.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 71
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000041 1 N/A OR NO CVM 00 91 0 312 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue
processing (send authorization request to issuer).
12
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 72
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000042 1 N/A OR NO CVM 00 91 0 312 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue
processing (send authorization request to issuer).
13
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 73
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114000043 1 N/A OR NO CVM 00 91 0 322 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe Pre-
validation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline
(send authorization advice to issuer).
DE 39 = 05 (Do not honor).
14
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service.
DE 60 = 141215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 74
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114000044 1 N/A OR NO CVM 00 91 0 322 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe Pre-
validation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline
(send authorization advice to issuer).
DE 39 = 05 (Do not honor).
15
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 75
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114000051 1 0 OR NO CVM 00 91 0 311 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe Prevalidation Service (if applicable).
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.

16 0100: DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.


0100 and 0400: DE 35/45 track data (if opt-in to receive crypto data) is present.
0100 and 0400: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 76
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS ATM


BALANCE INQUIRY
0100 090114000061 1 0 ONLINE PIN 30 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 35/45 track data (if opt-in to receive crypto data) is present.
17
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

MSR CONTACTLESS ATM


WITHDRAWAL ONLINE
0100 090114000062 1 0 PIN 01 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 35/45 track data (if opt-in to receive crypto data) is present.
18
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 77
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901141—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Secure Element Tokens)—Authorization Request, Advices, and Reversals
The following test cases will test whether an issuer's Dual Message authorization application can receive contactless magnetic stripe
Authorization Requests or Advices for transactions when the Mastercard Digital Enablement Service (MDES) was performed for PAN
mapping and cryptographic validation, process them, and send correctly formatted Authorization Responses.

NOTE: See table 0901152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

Table 0901141—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Secure Element Tokens)—Authorization Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100001 1 0 OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 78
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100002 1 N/A OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation; and then Stand-in
approved due to issuer signed out.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 39 = 00 (Approved).
2 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 Dynamic CVC3 ATC
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 79
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100005 1 N/A OR NO CVM 00 91 0 317 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).

3 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC outside allowed range).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 80
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100007 1 N/A OR NO CVM 00 91 0 319 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).

4 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC replay).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 81
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100008 1 N/A OR NO CVM 00 91 0 312 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 48, SE 87 = Y (Invalid).
DE 60 = 1410044 (Mastercard Digital Enablement Service; Reject: CVC 3 invalid).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 82
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100009 1 N/A OR NO CVM 00 91 0 316 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology.
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 48, SE 87 = E (Length of unpredictable number was not a valid length).
DE 60 = 1410045 (Mastercard Digital Enablement Service; Reject: CVC 3 Unpredictable number mismatch).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 83
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100010 1 N/A OR NO CVM 00 91 0 313 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform dynamic CVC 3 validation.
Issuer decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).

7 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 60 = 1410042 (Mastercard Digital Enablement Service; Reject: CVC 3 unable to process).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 84
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
0100 090114100011 1 0 PURCHASE ONLINE PIN 00 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation transaction with
PIN.
DE 35/45 track data (if opt-in to receive crypto data) is present.
8 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF 6
(Token Requestor ID), and SF 8 (Storage Technology.
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100021 1 0 OR NO CVM 00 91 0 318 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is out of
range. Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
9
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 85
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100022 1 0 OR NO CVM 00 91 0 319 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is replayed.
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
10
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 86
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100023 1 0 OR NO CVM 00 91 0 312 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Invalid CVC 3).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
11
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 87
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100024 1 0 OR NO CVM 00 91 0 316 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Unpredictable
number mismatch). Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
12
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 88
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100025 1 0 OR NO CVM 00 91 0 313 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (unable to process).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
13
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 89
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100051 1 0 OR NO CVM 00 91 0 311 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and dynamic CVC 3 validation (if applicable) on acquirer 0100 request and
acquirer-generated 0400 reversal request.
0100 and 0400: DE 35/45 track data (if opt-in to receive crypto data) is present.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
14 Information.
0100: DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
0100 and 0400: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 90
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS ATM


BALANCE INQUIRY
0100 090114100061 1 0 ONLINE PIN 30 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
15
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

MSR CONTACTLESS ATM


WITHDRAWAL ONLINE
0100 090114100062 1 0 PIN 01 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
16
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 91
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100071 1 0 OR NO CVM 00 91 0 327 V

MDES successfully performed PAN mapping and issuer decision matrix indicates forward request if dynamic CVC 3 validation
results are security platform time out.
DE 35/45 track data (if opt-in to receive crypto data) is present.
17
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Xb for the on-behalf service results
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 92
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090114100072 1 0 OR NO CVM 00 91 0 328 V

MDES successfully performed PAN mapping and issuer decision matrix indicates forward request if dynamic CVC 3 validation
results are security platform system error.
DE 35/45 track data (if opt-in to receive crypto data) is present.
18
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Zb for the on-behalf service results
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 93
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100073 1 N/A OR NO CVM 00 91 0 327 00

MDES successfully performed PAN mapping and issuer decision matrix indicates decline request if dynamic CVC 3 validation
results are security platform time out.
DE 2 containing PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor)

19 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Xb for the on-behalf service results
DE 60 = 1410038 (MDES; Reject: Security Platform Time Out)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 94
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100074 1 N/A OR NO CVM 00 91 0 328 00

MDES successfully performed PAN mapping and issuer decision matrix indicates decline request if dynamic CVC 3 validation
results are security platform system error.
DE 2 containing PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor)

20 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Zb for the on-behalf service results
DE 60 = 1410040 (MDES; Reject: Security Platform System Errort)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 95
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090114100075 1 N/A OR NO CVM 00 91 0 329 00

MDES successfully performed PAN mapping and issuer decision matrix indicates decline request if dynamic CVC 3 validation
results are no matching key file for this PAN, PAN expiration date, and KDI combination.
DE 2 containing PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor)

21 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Kb for the on-behalf service results
DE 60 = 1410037 (MDES; Reject: No matching key file for this PAN, PAN expiration date, and KDI combination)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 0901142—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Authorization Request, Advices, and Reversals
The following test cases will test whether an issuer's Dual Message authorization application can receive Digital Secure Remote
Payment (DSRP) transactions with Mastercard Cloud-Based Payment tokens in Authorization Requests and Advices when the
Mastercard Digital Enablement Service (MDES) was performed for PAN mapping and cryptographic validation, process them, and
send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 96
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

NOTE: See table 0901152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

Table 0901142—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Authorization Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200021 1 0 PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation
Service on a Digital Secure Remote Payment UCAF transaction.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 97
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200022 1 0 PURCHASE NO CVM 00 81 6 422 V

MasterCard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC. Issuer Decision
Matrix indicates forward request with results if OBS 61 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 98
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200023 1 0 PURCHASE NO CVM 00 81 6 423 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to ATC invalid. Issuer Decision Matrix indicates forward
request with results if OBS 61 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Db for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 99
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200024 1 0 PURCHASE NO CVM 00 81 6 424 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 100
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200025 1 0 PURCHASE NO CVM 00 81 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid TVR/CVR. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 101
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200026 1 0 PURCHASE NO CVM 00 81 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to unable to process. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 102
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114200031 1 N/A PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation
Service on a Digital Secure Remote Payment transaction; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
7 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 103
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114200032 1 N/A PURCHASE NO CVM 00 81 6 422 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC). Issuer decision
matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
8
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology.
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 104
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114200033 1 N/A PURCHASE NO CVM 00 81 6 419 00

MasterCard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to ATC replay. Issuer decision matrix to decline
(mandatory default).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
9
DE 48, SE 26 contains Wallet Identifier and DE 48, SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Eb for the on-behalf service results.
DE 60 = 1410205 (Reject: ATC Replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 105
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114200034 1 N/A PURCHASE NO CVM 00 81 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 48, SE 42 present and SE 43 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 048.

10 DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer: Reject: DE 55 Format Error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 106
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200040 1 0 PURCHASE NO CVM 00 81 6 412 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction without incurring any failed transaction analysis validations.
11 DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27 (Transaction Analysis) not present.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 107
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200041 1 0 PURCHASE NO CVM 00 81 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer)
12 DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 108
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200042 1 0 PURCHASE NO CVM 00 81 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer)
13 DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 109
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114200043 1 N/A PURCHASE NO CVM 00 81 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
14 DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 110
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114200044 1 N/A PURCHASE NO CVM 00 81 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Transaction Disposition) and SF 2 (Test Results) as well as test
values in DE 48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
15 DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 111
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114200051 1 0 PURCHASE NO CVM 00 81 6 412 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service (if applicable) on a Digital
Secure Remote Payment UCAF transaction on acquirer 0100 request and acquirer-generated 0400 reversal request.
0100: DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
16 Information.
0100: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
0100 and 0400: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date),
SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 112
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090114200061 1 0 NO CVM 28 81 6 412 00

MDES successfully performed PAN mapping and DSRP cryptographic pre-validation on a Mastercard Cloud-based Payment
device token for a DSRP Payment Transaction with cryptographic data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); DE 48, SE 30 (Token Transaction Identifier); and SE 34
(ATC Information).
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payment Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
17 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP - Issuer Authenticated) and DE 48, SE 43 only present if issuer opt-in to receive.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transaction.

Table 0901143—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure Element
Tokens)—Authorization Request, Advices, and Reversals
The following test cases will test whether an issuer's Dual Message authorization application can receive Mastercard Digital Secure
Remote Payment (DSRP) transactions with Secure Element tokens in Authorization Requests and Advices when the MasterCard
Digital Enablement Service (MDES) was performed for PAN mapping and cryptographic validation, process them, and send correctly
formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 113
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

NOTE: See table 0901152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

Table 0901143—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure Element
Tokens)—Authorization Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300001 1 0 PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID, and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 114
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300002 1 0 PURCHASE NO CVM 00 81 6 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
2 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID, and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 115
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300006 1 N/A PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction and then Stand-In approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
3 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 116
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300007 1 N/A PURCHASE NO CVM 00 81 6 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction and then Stand-In approved due
to issuer signed out.
DE 39 = 00 (Approved).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 117
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300011 1 N/A PURCHASE NO CVM 00 81 6 414 00

Mastercard Digital Enablement Service successfully performed PAN mapping but invalid M/Chip cryptogram validation on a
Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
5 DE 48, SE 26 contains Wallet Identifier, and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3(Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 60 = 1410034 (Mastercard Digital Enablement Service; Reject: Chip validation failed)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 118
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300012 1 N/A PURCHASE NO CVM 00 81 6 417 00

Mastercard Digital Enablement Service successfully performed PAN mapping but TVR/CVR invalid for M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
6 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID, and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 60 = 1410035 (Mastercard Digital Enablement Service; Reject: TVR/CVR validation failed)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 119
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300013 1 N/A PURCHASE NO CVM 00 81 6 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
7 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID, and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 60 = 1410032 (Mastercard Digital Enablement Service; Reject: Chip technical failure)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 120
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300014 1 N/A PURCHASE NO CVM 00 81 6 418 00

Mastercard Digital Enablement Service successfully performed PAN mapping but ATC outside allowed range for M/Chip
cryptogram validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
8 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: ATC outside allowed range)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 121
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300015 1 N/A PURCHASE NO CVM 00 81 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping but ATC replay for M/Chip cryptogram validation
on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
9 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID, and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 122
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300016 1 N/A PURCHASE NO CVM 00 81 6 425 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed cryptogram validation for no matching
key file for this PAN, PAN expiry date and KDI combination on a Digital Secure Remote Payment transaction. Issuer decision
matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
10 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID, and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 60 = 1410037 (Mastercard Digital Enablement Service; Reject: No matching key File for this PAN, PAN expiry date and KDI
combination)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 123
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090114300017 1 N/A PURCHASE NO CVM 00 81 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 48, SE 42 present and SE 43 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 048.

11 DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer: Reject: DE 55 Format Error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 124
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300021 1 0 PURCHASE NO CVM 00 81 6 418 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is out of range. Issuer Decision Matrix indicates forward request with results if OBS 51
not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
12
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology.
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 125
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300022 1 0 PURCHASE NO CVM 00 81 6 419 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is a replay. Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
13
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 126
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300023 1 0 PURCHASE NO CVM 00 81 6 414 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Invalid cryptogram). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
14
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 127
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300024 1 0 PURCHASE NO CVM 00 81 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Valid ARQC/TC; TVR/CVR invalid). Issuer Decision Matrix indicates forward request with results if
OBS 51 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
15
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology.
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 128
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300025 1 0 PURCHASE NO CVM 00 81 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (unable to process). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
16
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 129
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300026 1 0 PURCHASE NO CVM 00 81 6 425 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but failed cryptography validation due to no matching key file for this PAN, PAN expiry date and KDI combination. Issuer
Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
17
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 130
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114300051 1 0 PURCHASE NO CVM 00 81 6 412 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and M/Chip cryptogram validation (if applicable) on acquirer 0100 request and
acquirer-generated 0400 reversal request.
0100: DE 48, SE 42 was forwarded and SE 43 (if opt-in to receive crypto data) is present.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
18 Information.
0100: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0100 and 0400: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 131
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090114300061 1 0 NO CVM 28 81 6 412 00

MDES successfully performed PAN mapping and DSRP cryptographic pre-validation on a Secure Element device token for a
DSRP Payment Transaction with cryptographic data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); DE 48, SE 30 (Token Transaction Identifier); and SE 34
(ATC Information).
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
19 Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP - Issuer Authenticated) and DE 48, SE 43 only present if issuer opt-in to receive.
DE 48, SE 71 = 50Cb 51Vb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transactions.

Table 0901145—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe -
Secure Element Tokens)—Authorization Request, Advices, and Reversals
The following test cases will test whether an issuer's Dual Message authorization application can receive tokenized (via Secure
Element) magnetic stripe transactions initiated by a device capable of passing dynamic data in Authorization Requests and Advices
when the MasterCard Digital Enablement Service (MDES) was performed for PAN mapping and cryptographic validation, process
them, and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 132
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

NOTE: See table 0901152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

Table 0901145—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe -
Secure Element Tokens)—Authorization Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090114500001 1 0 SIGNATURE OR NO CVM 00 90 0 511 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
1 49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 133
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090114500002 1 N/A SIGNATURE OR NO CVM 00 90 0 511 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation; and then Stand-in
approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
2
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 134
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090114500005 1 N/A SIGNATURE OR NO CVM 00 90 0 517 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
3 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC outside allowed range).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 135
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090114500007 1 N/A SIGNATURE OR NO CVM 00 90 0 519 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
4 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC replay).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 136
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090114500008 1 N/A SIGNATURE OR NO CVM 00 90 0 512 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
5
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 48, SE 87 = Y (Invalid).
DE 60 = 1410044 (Mastercard Digital Enablement Service; Reject: CVC 3 invalid).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 137
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090114500009 1 N/A SIGNATURE OR NO CVM 00 90 0 516 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
6
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 48, SE 87 = E (Length of unpredictable number was not a valid length).
DE 60 = 1410045 (Mastercard Digital Enablement Service; Reject: CVC 3 Unpredictable number mismatch).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 138
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 080114500010 1 N/A SIGNATURE OR NO CVM 00 90 0 513 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform dynamic CVC 3 validation.
Issuer decision matrix to decline (issuer selection).
DE 2 containing the PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
7
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 48, SE 87 = P (Unable to process)
DE 60 = 1410042 (Mastercard Digital Enablement Service; Reject: CVC 3 unable to process).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 139
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE ONLINE


0100 090114500011 1 0 PIN 00 90 0 V 511 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation transaction with
PIN.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
8
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 140
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 080114500021 1 0 SIGNATURE OR NO CVM 00 90 0 518 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is out of
range. Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
9
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 141
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 080114500022 1 0 SIGNATURE OR NO CVM 00 90 0 519 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is replayed.
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
10
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 142
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090114500023 1 0 SIGNATURE OR NO CVM 00 90 0 512 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Invalid CVC 3).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
11
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 143
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090114500024 1 0 SIGNATURE OR NO CVM 00 90 0 516 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Unpredictable
number mismatch). Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
E 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
12
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 144
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090114500025 1 0 SIGNATURE OR NO CVM 00 90 0 513 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (unable to process).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
13
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 145
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090114500020 1 0 SIGNATURE OR NO CVM 00 90 0 511 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
Information.
14 DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 49 contains the Time Validation Information, SF 3 = 02 (Positive value outside time validation window). Issuer
decision matrix to continue processing if outside the time validation window.
DE 48, SE 71 = 50Cb52Hb (Invalid Time) for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 146
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090114500021 1 N/A SIGNATURE OR NO CVM 00 90 0 512 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation, Issuer decision
matrix to reject transaction if outside the time validation window.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
15 Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48 SE 49 contains the Time Validation Information, SF 3 = 04 (Negative Value outside time validation window
DE 48, SE 71 = 50Cb52Hb (Invalid time validation) for the on-behalf service results.
DE 60 = 1410009 (Reject:Invalid Time Validation)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 147
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090114500051 1 0 SIGNATURE OR NO CVM 00 90 0 511 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and dynamic CVC 3 validation (if applicable) on acquirer 0100 request and
acquirer-generated 0400 reversal request.
0100: DE 35/45 track data (if opt-in to receive crypto data) is present.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information;
16 and SE 49 contains Time Validation Information.
0100: DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
0100 and 0400: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

Table 0901146—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-
Based Payments Token)-Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Mastercard
Digital Enablement Service (MDES) for Mastercard Cloud-Based Payment tokens can receive and process Authorization Requests
containing electronic commerce transactions with various Mastercard SecureCode (Mastercard Identity Check) and Masterpass
Security Level Indicator (SLI) values and, if applicable, validate the Accountholder Authentication Value (AAV); and send properly
formatted Authorization Response messages.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 148
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

These MDES token e-commerce transactions were submitted by acquirers containing a Dynamic Expiration Date and Dynamic Token
Verification Code as provided by merchants instead of a DSRP UCAF cryptogram. Mastercard used the dynamic data to perform the
MDES cryptography validation service. Issuers will receive the cardholder PAN in DE 2, PAN expiration date in DE 14, and PAN CVC 2
code in DE 48, SE 92 for a successful MDES mapping and cryptography service.

Table 0901146—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-
Based Payments Token)-Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114600001 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
1
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 (SecureCode no UCAF).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 149
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114600002 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
2
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 220 (Masterpass no UCAF).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 150
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114600003 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
3
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 211 (SecureCode merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 151
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114600004 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
4
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 221 (Masterpass merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 152
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114600005 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
5
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 153
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114600006 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
6
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 222 (Masterpass fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 0901147—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure
Element Token)-Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Mastercard
Digital Enablement Service (MDES) for Secure Element tokens can receive and process Authorization Requests containing electronic
commerce transactions with various Mastercard SecureCode (Mastercard Identity Check) and Masterpass Security Level Indicator (SLI)
values and, if applicable, validate the Accountholder Authentication Value (AAV); and send properly formatted Authorization
Response messages.
These MDES token e-commerce transactions were submitted by acquirers containing a Dynamic Expiration Date and Dynamic Token
Verification Code as provided by merchants instead of a DSRP UCAF cryptogram. Mastercard used the dynamic data to perform the
MDES cryptography validation service. Issuers will receive the cardholder PAN in DE 2, PAN expiration date in DE 14, and PAN CVC 2
code in DE 48, SE 92 for a successful MDES mapping and cryptography service.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 154
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901147—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure
Element Token)-Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114700001 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
1
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 (SecureCode no UCAF).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 155
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114700002 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
2
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 220 (Masterpass no UCAF).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 156
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114700003 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
3
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 211 (SecureCode merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 157
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114700004 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
4
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 221 (Masterpass merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 158
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114700005 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
5
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 159
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114700006 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
6
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 222 (Masterpass fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 0901149—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES for Merchants and Commerce
Platforms—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in MasterCard
Digital Enablement Service (MDES) can receive MDES for Merchants Digital Secure Remote Payment (DSRP) with UCAF card-on-file
token transactions in Authorization Requests indicating the mapping and cryptography validation service was performed, process
them, and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 160
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901149—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES for Merchants and Commerce
Platforms—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114900001 1 0 PURCHASE NO CVM 00 81 6 412 00

DSRP with UCAF (merchant liability) MDES cloud-based token original transaction was successfully mapped and validated.
0100: DE 48, SE 42 = 246 and SE 43 only present if issuer opt-in to receive.
0100: DE 48, SE 26 (Wallet Identifier) = 327 (MDES for merchants Program) or a unique WID assigned to the commerce
1 platform and SE 30 (Token Transaction Identifier)
0100: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100: DE 48, SE 71 = 50Cb61Vb contains successful on-behalf service results.
0100: DE 56 (Payment Account Data) inserted by Mastercard as BIN Controller.
0100: DE 61, SF 3 = 2 (Off premises) or 4 (On premises).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 161
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

CREDENTIAL ON FILE
0100 090114900003 1 0 PURCHASE NO CVM 00 10 0 412 00

DSRP with UCAF (retains liability of original transaction) MDES cloud-based token subsequent recurring payment transaction
was successfully mapped.
0100: DE 48, SE 42 = 247 and SE 43 not present.
0100: DE 48, SE 26 (Wallet Identifier) = 327 (MDES for merchants Program) or a unique WID assigned to the commerce
2 platform and SE 30 (Token Transaction Identifier).
0100: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100: DE 48, SE 71 = 50Cb contains successful on-behalf service results.
0100: DE 56 (Payment Account Data) inserted by Mastercard as BIN Controller.
0100: DE 61, SF 3 = 2 (Off premises) and DE 61, SF 4 = 4 (Recurring Payments).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 162
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090114900004 1 0 PURCHASE NO CVM 00 81 6 412 00

DSRP with UCAF (retains liability of original transaction) MDES cloud-based token subsequent partial shipment transaction
was successfully mapped.
0100: DE 48, SE 42 = 247 and SE 43 not present.
0100: DE 48, SE 26 (Wallet Identifier) = 327 (MDES for merchants Program) or a unique WID assigned to the commerce
3 platform and SE 30 (Token Transaction Identifier).
0100: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100: DE 48, SE 71 = 50Cb contains successful on-behalf service results.
0100: DE 56 (Payment Account Data) inserted by Mastercard as BIN Controller.
0100: DE 61, SF 3 = 2 (Off premises) and DE 61, SF 4 = 5 (Electronic Commerce).

Table 0901152—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Mastercard
Digital Enablement Service (MDES) can receive MDES device token Authorization Requests and Advices that have undergone MDES
mapping but for various reasons do not contain any cryptographic on-behalf service results; process them, and send correctly
formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 163
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901152—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090115200001 1 0 PURCHASE NO CVM 00 81 6 414 V

MDES successfully performed PAN mapping on a SecureCode issuer authenticated transaction.


DE 48, SE 42 = 212 and SE 43 forwarded to issuer.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
1
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 164
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090115200003 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
original transaction from SecureCode merchant who chose not to undertake SecureCode on this transaction.
DE 2 and DE 14 contain PAN data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
2
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 and SE 43 SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 165
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090115200004 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent partial shipment transaction from SecureCode merchant who chose not to undertake SecureCode on original
transaction.
DE 2 and DE 14 contain PAN data.

3 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 3 (Token expiry date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 217 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 166
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

CREDENTIAL ON FILE
0100 090115200005 1 0 PURCHASE NO CVM 00 10 0 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent recurring payment transaction from SecureCode merchant who chose not to undertake SecureCode on original
transaction.
DE 2 and DE 14 contain PAN data.

4 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 217; SE 43 not present; and DE 61, SF 4 = 4 (Recurring payment).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 167
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090115200011 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
original transaction from Masterpass merchant who does not support DSRP with full UCAF.
DE 2 and DE 14 contain PAN data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
5
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 220 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 168
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090115200012 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent partial shipment transaction from Masterpass merchant who did not support DSRP with full UCAF on original
transaction.
DE 2 and DE 14 contain PAN data.

6 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 227 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 169
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

CREDENTIAL ON FILE
0100 090115200013 1 0 PURCHASE NO CVM 00 10 0 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent recurring payment transaction from Masterpass merchant who does not support DSRP with full UCAF on original
transaction.
DE 2 and DE 14 contain PAN data.

7 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 227; SE 43 not present; and DE 61, SF 4 = 4 (Recurring payment).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 170
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090115200014 1 N/A PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping on a Digital Secure Remote Payment UCAF subsequent partial shipment
transaction.
DE 48, SE 42 = 247 and SE 43 is not present.
8 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 (Account Type Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

CREDENTIAL ON FILE
0100 090115200015 1 N/A PURCHASE NO CVM 00 10 0 412 00

MDES successfully performed PAN mapping on a Digital Secure Remote Payment UCAF subsequent recurring payment
transaction.
DE 48, SE 42 = 247 and SE 43 is not present.
9 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 (Account Type Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 171
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090115200016 1 0 NO CVM 28 81 6 425 00

MDES successfully performed PAN mapping on a Mastercard device token for a Payment Transaction without cryptographic
data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).

10 DE 48, SE 42 = 210 (UCAF data collection is not supported by the merchant or a SecureCode merchant has chosen not to
undertake SecureCode on this transaction) and DE 48, SE 43 not present. Issuers may also initiate sending of SE 42 value 247
(DSRP).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transaction.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 172
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090115200017 1 0 NO CVM 28 81 6 425 00

MDES successfully performed PAN mapping on a Mastercard device token for a Masterpass Payment Transaction without
cryptographic data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
11
DE 48, SE 42 = 220 (Masterpass - UCAF data collection is not supported by the merchant) and DE 48, SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transaction.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 173
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0100 090115200021 1 0 PURCHASE NO CVM 00 01 0 001-010 00

Mastercard Digital Enablement Service successfully performed PAN mapping on a device token for an incremental
authorization.
DE 48, SE 26, SF 1 (Wallet Identifier) and DE 48, SE 30 (Token Transaction Identifier).
12 DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
assurance level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 63 indicates an incremental authorization.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

MANUAL ENTRY REFUND


0100 090115200022 1 0 NO CVM 20 01 0 001-010 00

Mastercard Digital Enablement Service successfully performed PAN mapping on a device token for a refund authorization.
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
13
assurance level), SF 6 (Token requestor ID), and SF 8 (Storage technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 174
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090115200031 1 N/A OR NO CVM 00 91 0 515 00

Mastercard Digital Enablement Service unsuccessfully performed PAN mapping.


DE 2 containing the token and DE 14.
14
DE 39 = 14 (Invalid card number).
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090115200032 1 N/A OR NO CVM 00 91 0 513 00

Mastercard Digital Enablement Service unable to perform PAN mapping.


DE 2 containing the token and DE 14 as applicable.
15
DE 39 = 96 (System error).
DE 48, SE 71 = 50Ub for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 175
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090115200033 1 N/A OR NO CVM 00 91 0 515 00

Mastercard Digital Enablement Service rejected request for suspended token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted Card).
16 DE 48, SE 26, SF 1 (Wallet Identifier) and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ub for the on-behalf service results.
DE 60 = 1410202 (Mastercard Digital Enablement Service Reject:Token in suspended status)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 176
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090115200034 1 N/A OR NO CVM 00 91 0 515 00

Mastercard Digital Enablement Service rejected request for deactivated token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted card).
17 DE 48, SE 26, SF 1 (Wallet Identifier) and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410203 (Mastercard Digital Enablement Service Reject: Token deactivated)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090115200035 1 N/A OR NO CVM 00 91 0 016 00

MDES failed PAN mapping due to format error.


DE 2 and DE 14 (if applicable) contain token information.
18
DE 35/45 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 002.
DE 48, SE 71 = 50Fb for the on-behalf service results.
DE 60 = 1410201 (MDES Advice to Issuer; Reject: Invalid Token-Primary Account Number mapping relationship).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 177
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0420 090115200039 1 N/A OR NO CVM 00 91 0 311 00

MDES successfully performed PAN mapping on system-generated 0420 reversal advice due to Masterecard unable to deliver
0400 reversal request to issuer.

19 DE 39 = 17 (Customer Cancellation), DE 48, SE 63 (Trace ID), and DE 60, SF 1 = 403 (Issuer signed out).
DE 48, SE 33, SF 1 (Account Type Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller in issuer reversal advice and need not be inserted
by issuer as BIN Controller in issuer response.

Table 0901201—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Authorization Requests
All issuers enrolling in the Mastercard Contactless Mapping Service specify whether they choose to have the Dual Message System
decline transactions when CVC 3 Validation fails, or if they choose to receive all transactions.
Issuers that choose the Optional Non-valid CVC 3 Processing Service should run test case 1 in the table below.
For Issuers not using the Optional Non-valid CVC 3 Processing Service should run all test cases.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 178
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901201—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100001 1 N/A OR NO CVM 00 91 0 311 00

All users - valid CVC 3


DE 48, SE 33 contains PPAN information
1
DE 48, SE 34, SF 1 = ATC value
DE 48, SE 34, SF 2 = no discrepancy
DE 48, SE 34, SF 3 = W (ATC within limits)
DE 48, SE 71 = 14Cb15Vb for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100002 1 N/A OR NO CVM 00 91 0 312 V
2 Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
DE 48, SE 33 contains PPAN information
DE 48, SE 71 = 14Cb15Ib for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 179
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100003 1 N/A OR NO CVM 00 91 0 313 V
3 Issuer does not use optional non-valid CVC 3 processing - CVC 3 unable to process
DE 48, SE 33 contains PPAN information
DE 48, SE 71 = 14Cb15Ub for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100004 1 N/A OR NO CVM 00 91 0 316 V
4 Issuer does not use optional non-valid CVC 3 processing - CVC 3 unpredictable number mismatch
DE 48, SE 33 contains PPAN information
DE 48, SE 71 = 14Cb15Nb for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100005 1 N/A OR NO CVM 00 91 0 317 V

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC outside of valid range
5
DE 48, SE 33 contains PPAN information
DE 48, SE 71 = 14Cb15Ab for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = discrepancy, SF 3 = G (ATC greater than limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 180
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100006 1 N/A OR NO CVM 00 91 0 318 V

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC outside of valid range
6
DE 48, SE 33 contains PPAN information
DE 48, SE 71 = 14Cb15Ab for the on-behalf service results
DE 48, SE 34, SF 1 contains ATC value, SF 2 contains discrepancy, SF 3 = L (ATC less than limit)

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090120100007 1 N/A OR NO CVM 00 91 0 319 V

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC replay
7
DE 48 SE 33 contains PPAN information
DE 48 SE 71 = 14Cb15Eb for the on-behalf service results
DE 48, SE 34, SF 1 contains ATC value, SF 2 contains no discrepancy, SF 3 = W (ATC within limits)

Table 0901202—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Authorization Advices
Issuers using the Contactless Mapping Service with Dynamic CVC 3 Pre-validation Service should select and run a subset of the test
cases below based upon the options they select when enrolling in this service, as described below:
• All Issuers should run test case 1.
• Issuers that choose the Optional Non-valid CVC 3 Processing Service should run test cases 2-3 in the table below.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 181
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

• For Issuers not using the Optional Non-valid CVC 3 Processing Service should run test cases 4-7. These test cases represent
advices that they would receive when Mastercard authorizes transactions when standing in for the issuer system.
• Test cases 4-5 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to approve the transaction even
though the CVC 3 validation failed.
• Test cases 6-7 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to decline the transaction in the event
of a specific CVC 3 validation failure.
• Issuers may need to run a mixed subset of the test cases in the 4-5 (approve) and 6-7 (decline) ranges, depending on the mix of
instructions they send to Mastercard.
• Test case 8 should be run by all issuers that use the Contactless Mapping Service.

NOTE: These outcomes are a representative sampling of those that may be received by issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 182
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901202—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Authorization Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200001 1 N/A OR NO CVM 00 91 0 311 00

Valid CVC 3
DE 39 = 00 in 0120 message
1 DE 48, SE 33 = PPAN information
DE 48, SE 34, SF 1 = ATC value; SF 2 = No discrepancy; and SF 3 = W (ATC within limits)
DE 48, SE 71 = 14Cb15Vb for the on-behalf service results
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SE 2 = 0000 (Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 183
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200002 1 N/A OR NO CVM 00 91 0 312 00

Issuer uses optional non-valid CVC 3 processing - invalid CVC 3


DE 39 = 05 (Do not honor) in 0120 message
2 DE 48, SE 33 = PPAN information
DE 48, SE 71 = 14Cb15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200005 1 N/A OR NO CVM 00 91 0 317 00

Issuer uses optional non-valid CVC 3 processing - CVC 3 ATC out of valid range
DE 39 = 05 (Do not honor) in 0120 message
DE 48, SE 33 = PPAN information
3
DE 48, SE 71 = 14Cb15Ab for the on-behalf service results
DE 48, SE 34 = ATC value, SE 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0043 (ATC outside of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 184
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200009 1 N/A OR NO CVM 00 91 0 312 00

Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
Issuer instructs MasterCard to approve on invalid CVC 3 result
DE 39 = 00 in 0120 message
4
DE 48, SE 33 = PPAN information
DE 48, SE 71 = 14Cb15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 185
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200012 1 N/A OR NO CVM 00 91 0 317 00

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC out of valid range
Issuer instructs MasterCard to approve on ATC out of range result
DE 39 = 00 in 0120 message
5 DE 48, SE 33 = PPAN information
DE 48, SE 71 = 14Cb15Ab for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC outside of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 186
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200015 1 N/A OR NO CVM 00 91 0 312 00

Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
Issuer instructs MasterCard to decline on invalid CVC 3
DE 39 from 0110 based on issuer decision decision matrix
6
DE 48, SE 33 = PPAN information
DE 48, SE 71 = 14Cb15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 187
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200020 1 N/A OR NO CVM 00 91 0 319 00

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC replay
DE 39 from 0110 based on issuer decision matrix
DE 48, SE 33 = PPAN information
7
DE 48, SE 71 = 14Cb15Eb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC within limits)
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0046 (ATC replay)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090120200022 1 N/A OR NO CVM 00 91 0 315 00

System-generated 0120 from an 0100 due to account number to be mapped is not on file.
8
DE 39 = 14 (Invalid account number)
DE 48, SE 71 = 14Ib for the on-behalf service results
DE 60, SF 1 = 140 (Unable to convert PayPass account number)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 188
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
Validation Service—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that uses the Mastercard Dynamic CVC
3 Pre-validation Service can receive CVC 3 normal and exception results, and send the correct responses.
Issuers that choose the Optional Non-valid CVC 3 Processing Service should run test case 1 in the table below.
For Issuers not using the Optional Non-valid CVC 3 Processing Service should run all test cases.

Table 0901301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
Validation Service—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100001 1 N/A OR NO CVM 00 91 0 311 00
1 All users - valid CVC 3
DE 48, SE 34, SF 1 = ATC value, SF 2 = No discrepancy, SF 3 = W (ATC within range)
DE 48, SE 71 = 15Vb for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100002 1 N/A OR NO CVM 00 91 0 312 V
2
Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
DE 48, SE 71 = 15Ib for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 189
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100003 1 N/A OR NO CVM 00 91 0 313 V
3
Issuer does not use optional non-valid CVC 3 processing - unable to process
DE 48, SE 71 = 15Ub for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100004 1 N/A OR NO CVM 00 91 0 316 V
4
Issuer does not use optional non-valid CVC 3 processing - unpredictable number mismatch
DE 48, SE 71 = 15Nb for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100005 1 N/A OR NO CVM 00 91 0 317 V
5 Issuer does not use optional non-valid CVC 3 processing - ATC out of valid range
DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 190
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100006 1 N/A OR NO CVM 00 91 0 318 V
6 Issuer does not use optional non-valid CVC 3 processing - ATC out of valid range
DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = L (ATC less than limit)

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090130100007 1 N/A OR NO CVM 00 91 0 319 V
7 Issuer does not use optional non-valid CVC 3 processing - ATC replay
DE 48, SE 71 = 15Eb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC within range)

Table 0901302—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Authorization Advices
Issuers that use the Mastercard Dynamic CVC 3 Pre-validation service should be prepared to receive Authorization Advice messages
from Mastercard Stand-In systems that contain data generated by the Dynamic CVC 3 Pre-validation service. The following are the
CVC 3 Authorization Advices for issuers implementing this service.
Mastercard Issuers using the Dynamic CVC 3 Pre-validation Service should select and run a subset of the test cases below based on
the options they select when enrolling in this service, as described below:
• All Issuers should run test case 1.
• Issuers that choose the Optional Non-valid CVC 3 Processing Service should run test cases 2-3 in the table below.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 191
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

• Test cases 4-5 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to approve the transaction even
though the CVC 3 validation failed for any reason.
• Test cases 6-10 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to decline the transaction in the
event of a specific CVC 3 validation failure.
Issuers may need to run a mixed subset of the test cases in the 4-5 (approve) and 6-7 (decline) ranges, depending on the mix of
instructions they send to Mastercard.
Issuers choose decline codes for each non-valid CVC 3 result and place those in a decision matrix in their On-behalf Key
Management file.

NOTE: These outcomes are a representative sampling of those that may be received by issuers.

Table 0901302—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Authorization Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200001 1 N/A OR NO CVM 00 91 0 311 00

Issuer uses optional non-valid CVC 3 processing - Valid CVC 3


DE 39 = 00 (Approved) in 0120 message
1
DE 48, SE 71 = 15Vb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC within range)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SE 2 = 0000 (Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 192
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200002 1 N/A OR NO CVM 00 91 0 312 00

Issuer uses optional non-valid CVC 3 processing - invalid CVC 3


DE 39 = 05 (Do not honor) in 0120 message
2
DE 48, SE 71 = 15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200005 1 N/A OR NO CVM 00 91 0 317 00

Issuer uses optional non-valid CVC 3 processing - ATC out of valid range
DE 39 = 05 (Do not honor) in 0120 message
3
DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0043 (ATC out of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 193
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200009 1 N/A OR NO CVM 00 91 0 312 00

Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
Issuer instructs Mastercard to approve on invalid CVC 3
4 DE 39 = 00 (Approved) in 0120 message
DE 48, SE 71 = 15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200012 1 N/A OR NO CVM 00 91 0 317 00

Issuer does not use optional non-valid CVC 3 processing - ATC out of valid range
Issuer instructs Mastercard to approve on ATC out of range
DE 39 = 00 in 0120 message
5
DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC out of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 194
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200015 1 N/A OR NO CVM 00 91 0 312 00

Issuer does not use optional non-valid CVC 3 processing - Invalid CVC 3
Issuer instructs Mastercard to decline on invalid CVC 3
6 DE 39 = from 0110 based on issuer decision matrix
DE 48, SE 71 = 15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200020 1 N/A OR NO CVM 00 91 0 319 00

Issuer does not use optional non-valid CVC 3 processing - ATC replay
Issuer instructs Mastercard to decline on ATC replay
7 DE 39 = from 0110 based on issuer decision matrix
DE 48, SE 71 = 15Eb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0046 (ATC replay)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 195
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200021 1 N/A OR NO CVM 00 91 0 327 00

Dynamic CVC 3 Pre-validation with issuer decision matrix indicating decline request if results are security platform time out
DE 39 = 05 (Do not honor)
8
DE 48, SE 71 = 15Xb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0038 (Reject: Security Platform Time Out)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200022 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Pre-validation with issuer decision matrix indicating decline request if results are security platform system
error
9 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 15Zb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0040 (Reject: Security Platform System Error)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 196
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090130200023 1 N/A OR NO CVM 00 91 0 329 00

Dynamic CVC3 Pre-validation with issuer decision matrix indicating decline request if results are no matching key file for this
PAN, PAN expiration date, and KDI combination
10 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 15Kb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0037 (Reject: No matching key file for this PAN, PAN expiration date, and KDI combination)

Table 0901402—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3
Validation in Stand-in—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application using Dynamic CVC 3 Validation in
Stand-In can receive Authorization Advices with CVC 3 normal and exception results and send the resulting Authorization
Responses.
Issuers must select and run a subset of the test cases below based upon the options they select when enrolling in this service.
• Test case 1 is an approval advice, which all issuers must run.
• Test cases 2-3 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to approve the transaction even
though the CVC 3 validation failed.
• Test cases 4-10 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to decline the transaction in the
event of a specific CVC 3 validation failure.
Issuers may need to run a mixed subset of the test cases in the 2-3 (approve) and 4-5 (decline).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 197
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Issuers choose decline codes for each non-valid CVC 3 result and place those in a decision matrix in their On-behalf Key
Management file.
Issuers may choose from the following decline codes:
• 01 Refer to Issuer
• 04 Pickup card
• 05 Do Not Honor
• 08 Honor with Identification
• 12 Invalid Transaction
• 57 Transaction not permitted to cardholder

NOTE: These outcomes are a representative sampling of those that may be received by issuers.

NOTE: Effective 1 March 2017 per Global Operations Bulletin No. 4, 1 April 2016, Revised Standards for Validation Services During
Stand-In Processing, all issuers globally that participate in Stand-In processing must have Dynamic CVC 3 Validation in Stand-In
Processing performed during Stand-In processing. Issuers are required to perform test cases 1 and either 2 or 4.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 198
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901402—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3
Validation in Stand-in—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200001 1 N/A OR NO CVM 00 91 0 311 00

Valid CVC 3
DE 39 = 00 (Approved) in 0120 message
1
DE 48, SE 71 = 16Vb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC in range)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0000 (Valid dynamic CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200002 1 N/A OR NO CVM 00 91 0 312 00

Invalid CVC 3 - Issuer instructs Mastercard to approve on invalid CVC 3


DE 39 = 00 (Approved) in 0120 message
2
DE 48, SE 71 = 16Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 199
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200005 1 N/A OR NO CVM 00 91 0 317 00

ATC out of valid range - Issuer instructs Mastercard to approve on ATC out of range.
DE 39 = 00 (Approved) in 0120 message.
3 DE 48, SE 71 = 16Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC out of range)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200008 1 N/A OR NO CVM 00 91 0 312 00

Invalid CVC 3 - Issuer instructs Mastercard to decline on invalid CVC 3


DE 39 from 0110 based on issuer decision matrix
4
DE 48, SE 71 = 16Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 200
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200012 1 N/A OR NO CVM 00 91 0 318 00

ATC out of valid range - Issuer instructs Mastercard to decline on ATC out of range
DE 39 from 0110 based on issuer decision matrix
5
DE 48, SE 71 = 16Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC out of range)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200014 1 N/A OR NO CVM 00 91 0 327 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating approve request if results are security
platform time out
6
DE 39 = 00 (Approved)
DE 48, SE 71 = 16Xb for the on-behalf service results
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out
DE 60, SF 2 = 0000 (Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 201
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200015 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating approve request if results are security
platform system error
7
DE 39 = 00 (Approved)
DE 48, SE 71 = 16Zb for the on-behalf service results
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0000 (Accept)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200016 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating decline request if results are security
platform time out
8 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 16Xb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out
DE 60, SF 2 = 0038 (Reject: Security Platform Time Out)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 202
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200017 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating decline request if results are security
platform system error
9 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 16Zb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0040 (Reject: Security Platform System Error)

MSR CONTACTLESS
PURCHASE SIGNATURE
0120 090140200018 1 N/A OR NO CVM 00 91 0 329 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating decline request if results are no
matching key file for this PAN, PAN expiration date, and KDI combination
10 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 16Kb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0037 (Reject: No matching key file for this PAN, PAN expiration date, and KDI combination)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 203
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Funding Transactions—
Authorization Requests and Advices
The following test case will test whether an issuer's Dual Message online application can receive any appropriate DE 48, SE 77
(Funding/Payment Transaction Type Indicator) value and DE 48, SE 71 Mastercard Blocking results in MoneySend Funding
Transactions in Authorization Requests and Advices; process them, and return properly formatted Authorization Responses.

Table 0901903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Funding Transactions—
Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0100 090190300001 1 1 PURCHASE SIGNATURE 00 01 0 001-010 00

MoneySend Funding Transaction


1 DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 108 and DE 124 present with minimal required
data.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

MSR CAT LEVEL 1 ATM


0100 090190300002 1 1 PURCHASE ONLINE PIN 00 90 1 V 001-010 00

MoneySend Funding Transaction


2
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 124 is present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 204
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CAT LEVEL 2


0100 090190300003 1 1 PURCHASE NO CVM 00 90 2 001-010 00

MoneySend Funding Transaction


3
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 108 is present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

ELECTRONIC COMMERCE
0100 090190300004 1 1 PURCHASE NO CVM 00 81 6 001-010 00

MoneySend Funding Transaction


4
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = T (Phone, Mail, or Electronic Commerce Order).
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

MSR PURCHASE
0100 090190300005 1 1 SIGNATURE 00 90 0 001-010 00

MoneySend Funding Transaction


5
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail).
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 205
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CAT LEVEL 1 ATM


0100 090190300006 1 N/A PURCHASE ONLINE PIN 00 90 1 V 001-010 V

MoneySend Funding Transaction where Mastercard Blocking unable to process.

6 DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail).


DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Ub (MoneySend Blocking Service; Unable to Process)
0210: DE 39 response is issuer decision

MANUAL ENTRY
PURCHASE
0120 090190300007 1 N/A TRANSACTION NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails Mastercard Blocking.


0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6538 (MoneySend Funding)
7
0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: optional DE 124 (Member-defined Data) is present.
0120: DE 48, SE 71 = 33Tb (MoneySend MasterCard Blocking; Transaction Amount limit not allowed for the MoneySend
Funding transaction type)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000064 (Reject: Transaction Amount Limit Check.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 206
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PURCHASE
0120 090190300008 1 N/A TRANSACTION NO CVM 00 01 0 001-010 00

MoneySend Funding transaction where Mastercard Blocking not applied due to internal system error.
0120: DE 14 (Date, Expiration) is optional.

8 0120: DE 18 = MCC 6538 (MoneySend Funding)


0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: optional DE 108 (MoneySend Reference Data) is present.
0120: DE 48, SE 71 = 33Ub (Unable to Process)
0120: DE 39 = 96 (System error); DE 60 = 2000071 (Reject: Decline Other)

MANUAL ENTRY
PURCHASE
0120 090190300009 1 N/A TRANSACTION NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails Issuer Transaction Controls Block All rule.
0120: DE 14 (Date, Expiration) is optional.
9
0120: DE 18 = MCC 6538 (MoneySend Funding)
0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 48, SE 71 = 33Rb (MoneySend Issuer Blocking-Invalid Card)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000071 (Reject: Decline Other).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 207
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PURCHASE
0120 090190300010 1 N/A TRANSACTION NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails MasterCard Blocking - Product code invalid for the Transaction Type indicator.
0120: DE 14 (Date, Expiration) is optional.
10
0120: DE 18 = MCC 6538 (MoneySend Funding)
0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 48, SE 71 = 33Sb (MoneySend MasterCard Blocking; Product code invalid for the Transaction Type indicatorype)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000071 (Reject: Decline Other).

MANUAL ENTRY
PURCHASE
0120 090190300011 1 N/A TRANSACTION NO CVM 00 01 0 001-010 00

MoneySend Funding cross-border transaction is blocked by Mastercard


0120: DE 14 (Date, Expiration) is optional
11
0120: DE 18 = MCC 6538 (MoneySend Funding)
0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) or C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values)
0120: DE 48, SE 71 = 33Wb (MoneySend MasterCard Blocking; Country not allowed for the MoneySend Transaction)
0120: DE 39 = 05 (Do not honor); DE 60 = 1500072 (Reject: Geographic Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 208
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901904—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Cash2ATM and
MoneySend Cash2Card in Poland—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application for an issuer of cards within Poland can
receive MoneySend Cash2ATM and MoneySend Cash2Card transactions in Authorization Request message; process them, and
returned correctly formatted Authorization Response messages.

Table 0901904—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Cash2ATM and
MoneySend Cash2Card in Poland—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR ATM PAYMENT


TRANSACTION ONLINE
0100 090190400001 1 N/A PIN 28 90 0 V 001-010 00

MoneySend Cash2ATM transaction within Poland


1 DE 18 = 6538 (MoneySend intracountry) and DE 48tcc = P (Payment Transaction)
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
DE 48, SE 77 = C58 (MoneySend Cash2ATM)
DE 108 and DE 124 containing mandatory MoneySend data

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 209
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PAYMENT
TRANSACTION ONLINE
0100 090190400002 1 N/A PIN 28 90 0 V 001-010 00

MoneySend Cash2Card transaction within Poland


2 DE 18 = 6538 (MoneySend intracountry) and DE 48tcc = P (Payment Transaction)
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
DE 48, SE 77 = C59 (MoneySend Cash2Card)
DE 108 and DE 124 containing mandatory MoneySend data

Table 0901911—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Issuer Transaction
Controls—Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message online application can receive Mastercard MoneySend Payment
Transactions and applicable Funding Transactions in Authorization messages containing the results of MoneySend Issuer Transaction
Controls services as well as the Sanctions Screening score (if provided); process them, and send correctly formatted Authorization
Responses. Mastercard currently provides score on all cross border transactions and applicable domestic transactions.

NOTE: These test cases apply only to issuers participating in the optional MoneySend Issuer Transaction Controls service. Issuers
need only complete those test cases for which they have established monitoring or blocking controls. Issuers must comply with
MoneySend Payment Transaction processing requirements.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 210
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0901911—Issuer On-behalf Services - DMS Auth—MSR Product and Services—MoneySend Issuer Transaction
Controls—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090191100001 1 1 NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes optional Issuer Transaction Controls, and Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
1
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0100: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 211
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090191100002 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
2
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0100: DE 48, SE 71 = 33Nb (MoneySend Issuer Monitoring-MoneySend Transaction Count exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 212
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090191100003 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
3
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0100: DE 48, SE 71 = 33Ob (MoneySend Issuer Monitoring-Aggregate transaction amount limit exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 213
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090191100004 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
4
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0100: DE 48, SE 71 = 33Pb (MoneySend Issuer Monitoring-Transaction amount limit exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 214
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0100 090191100005 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0100: DE 14 (Date, Expiration) is optional.
0100: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
5
0100: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0100: DE 124 (Member-defined Data) contains all MoneySend subfields.
0100: DE 108 (MoneySend Reference Data) contains only the mandated data.
0100: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0100: DE 48, SE 71 = 33Qb (MoneySend Issuer Monitoring-Sanction Screening Score exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 215
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100006 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

6 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Ab (MoneySend Issuer Blocking-Transaction limit not allowed for the MoneySend Payment type)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000064.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 216
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100007 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

7 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Bb (MoneySend Issuer Blocking-Merchant not allowed for the MoneySend Payment type)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000067.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 217
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100008 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

8 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Db (MoneySend Issuer Blocking-Country not allowed for the MoneySend Payment type)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000072.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 218
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100009 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

9 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Eb (MoneySend Issuer Blocking-Domestic activity only allowed)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000072.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 219
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100010 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

10 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Fb (MoneySend Issuer Blocking-Sanction Screening Score limit exceeded)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000076.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 220
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100011 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

11 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Lb (MoneySend Issuer Blocking-MoneySend Transaction Count exceeded)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000077.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 221
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100012 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

12 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0120: DE 48, SE 71 = 33Mb (MoneySend Issuer Blocking-Aggregate transaction amount limit exceeded)
0120: DE 39 = 05 (Do not honor) and DE 60 = 2000065.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 222
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0120 090191100013 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Issuer Transaction Controls Block All rule; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.
0120: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

13 0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 124 (Member-defined Data) contains all MoneySend subfields.
0120: DE 108 (MoneySend Reference Data) contains only the mandated data.
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Rb (MoneySend Issuer Blocking-Invalid Card)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000071 (Reject: Decline Other).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 223
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PURCHASE
0120 090191100014 1 N/A TRANSACTION NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails Issuer Transaction Controls Block All rule; Sanction Screening score is provided.
0120: DE 14 (Date, Expiration) is optional.

14 0120: DE 18 = MCC 6538 (MoneySend Funding)


0120: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0120: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0120: DE 48, SE 71 = 33Rb (MoneySend Issuer Blocking-Invalid Card)
0120: DE 39 = 05 (Do not honor); DE 60 = 2000071 (Reject: Decline Other).

Table 0902301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Pre-validation Service—
Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application can receive Authorization Requests
including the results of PIN Pre-validation Service, process them, and return correctly formatted Authorization Responses.

NOTE: PIN Pre-validation Service is currently only available to issuers in the Europe region.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 224
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902301—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Pre-validation Service—
Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE ONLINE


1 0100 090230100001 1 N/A PIN 00 90 0 001-010 00

DE 48, SE 71 = 08Vb (Valid online PIN pre-validation)

MSR CAT LEVEL 1 ATM


WITHDRAWAL ONLINE
2 0100 090230100002 1 N/A PIN 01 90 1 035 55

DE 48, SE 71 = 08Ib (Invalid online PIN pre-validation)

MSR PURCHASE ONLINE


3 0100 090230100003 1 N/A PIN 00 90 0 028 75

DE 48, SE 71 = 08Rb (Online PIN pre-validation; PIN retry exceeded)

MSR CAT LEVEL 1 ATM


WITHDRAWAL ONLINE
4 0100 090230100004 1 N/A PIN 01 90 1 029 86

DE 48, SE 71 = 08Pb (Online PIN pre-validation; missing mandatory PVV file)

MSR CAT LEVEL 1 ATM


WITHDRAWAL ONLINE
5 0100 090230100005 1 N/A PIN 01 90 1 029 86

DE 48, SE 71 = 08Ub (Online PIN pre-validation; unable to process PIN)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 225
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902305—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Validation in Stand-In—
Authorization Advices
The following test cases will test whether an issuer's Dual Message authorization application can receive Authorization Advices
including the results of PIN Validation in Stand-In service, process them, and return correctly formatted Authorization Responses.

NOTE: PIN Validation in Stand-In service is currently only available to issuers in the Europe region.

Table 0902305—Issuer On-behalf Services - DMS Auth—MSR Product and Services—PIN Validation in Stand-In—
Authorization Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE ONLINE


1 0120 090230500001 1 N/A PIN 00 90 0 001-010 00

DE 39 = 00 (Approved); DE 48, SE 71 = 09Vb (Valid PIN); DE 60 = 1010000 (IPS signed out, approved)

MSR CAT LEVEL 1 ATM


WITHDRAWAL ONLINE
2 0120 090230500002 1 N/A PIN 01 90 1 035 00

DE 39 = 55 (Invalid PIN); DE 48 SE 71 = 09Ib (Invalid PIN); DE 60 = 1010051 (IPS signed out; invalid PIN)

MSR PURCHASE ONLINE


0120 090230500003 1 N/A PIN 00 90 0 028 00
3
DE 39 = 75 (Allowable number of PIN tries exceeded); DE 48, SE 71 = 09Rb (PIN retry exceeded)
DE 60 = 1010052 (IPS signed out; PIN retry exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 226
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR ATM WITHDRAWAL


0120 090230500004 1 N/A ONLINE PIN 01 90 0 029 00
4
DE 39 = 86 (PIN Validation not possible); DE 48, SE 71 = 09Pb (Missing PVV file)
DE 60 = 1010052 (IPS signed out; mandatory PVV not on file)

MSR PURCHASE ONLINE


0120 090230500005 1 N/A PIN 00 90 0 029 00
5
DE 39 = 86 (PIN Validation not possible); DE 48, SE 71 = 09Ub (Unable to process)
DE 60 = 1010050 (IPS signed out; unable to process)

Table 0902502—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for
Commercial Payments—Authorization Requests, Reversal, and Advice
Offline testing of Mastercard In Control for Commercial Payments between simulator and issuer host is supported. The simulator
allows setup of mapping between virtual card number (VCN) and real card number (RCN). The simulator will map any authorization
message that contains a VCN to the RCN, as well as create the DE 48, subelement 33 (PAN Mapping File Information) VCN
information and DE 48, subelement 71 (On-behalf Services) results indicating successful mapping. Issuers may also initiate store-and-
forward (SAF) 0120 advices for each of the supported advice reasons.
Online testing consists of integrated testing between the issuer host system, the Mastercard In Control platform, and the Dual
Message System. Issuers must setup issuer and corporation controls. Issuers must then obtain VCN and set up controls for the
obtained VCNs according to testing specifications provided by Mastercard. The issuer may then provide the VCNs to Mastercard for
inclusion in authorization messages to test receipt of RCN in DE 2 (Primary Account Number [PAN]), DE 48, subelement 33 VCN
information, and DE 48, subelement 71 results. The online system will initiate SAF 0120 advices for each declined authorization
request that did not pass the controls established for the particular VCN.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 227
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

The following test cases will test whether an issuer's Dual Message authorization application can receive and process Authorization
Requests that contain DE 48, subelement 33 with virtual card number (VCN) information and DE 48, subelement 71 = 17V,
indicating successfully processed by Mastercard In Control, and return correctly formatted Authorization Responses.

NOTE: Mastercard In Control for Commerical Payments is currently only available to commercial card issuers.

Table 0902502—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for
Commercial Payments—Authorization Requests, Reversal, and Advice

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN001,


0100 090250200001 1 1 PURCHASE NO CVM 00 81 6 RCN091 00
1
Passes purchase controls
DE 48, SE 71 = 17Vb (Mastercard In Control Purchase Control Service - Valid)

MANUAL ENTRY MO/TO VCN002,


0100 090250200002 1 1 PURCHASE NO CVM 00 01 0 RCN091 00
2
Passes purchase controls
DE 48, SE 71 = 17Vb (Mastercard In Control Purchase Control Service - Valid)

ELECTRONIC COMMERCE VCN014,


0100 090250200014 1 1 PURCHASE NO CVM 00 81 6 RCN091 00

3 Passes purchase controls


DE 48, SE 71 = 17Vb (Mastercard In Control Purchase Control Service - Valid)
DE 61, SF 7 = 4 (Preauthorized request)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 228
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN014,


0100 090250200014 1 1 PURCHASE NO CVM 00 81 6 RCN091 00

0400 1 1 DE 39 = 32 00

4 Passes purchase controls


DE 48, SE 71 = 17Vb (Mastercard In Control Purchase Control Service - Valid)
DE 61, SF 7 = 0 (Normal request) processed after preceding pre-authorization request)
0400: DE 39 = 32 (Partial reversal)

ELECTRONIC COMMERCE VCN021


0120 090250200011 1 1 PURCHASE NO CVM 00 81 6 RCN091 00

5 Passes purchase controls


DE 48, SE 71 = 17Vb (Mastercard In Control Purchase Control Service - Valid)
DE 60 = 190 (APS approved)

Table 0902504—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for
Commerical Payments—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application can receive and process Authorization
Advices that contain DE 48, subelement 33 (PAN Mapping File Information) with VCN information, and DE 48, subelement 71 (On-
behalf Services) results indicating processing by Mastercard In Control, and return correctly formatted Authorization Responses.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.
Testing online to create Authorization Advices for transactions to be rejected for failing Purchase Controls must be carefully planned
with the Customer Implementation Specialist to achieve the desired results. The issuer—s test cards must be set up with knowledge

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 229
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

of the content of the Authorization Request test transaction to cause Mastercard In Control to reject Authorization Request
transactions for failing Purchase Controls.
The Customer Implementation Specialist must first initiate processing of Authorization Requests for each of the Authorization Advice
business descriptions described below.

Table 0902504—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control for
Commerical Payments—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN060,


0120 090250400001 1 N/A PURCHASE NO CVM 00 81 6 RCN091 00

Fails virtual expiration date controls


1
DE 48, SE 71 = 17Ab (Mastercard In Control Purchase Control Service VCN expiration date does not match)
DE 39 = 05 (Do not honor)
DE 60 = 2000060 (Reject: VCN expiration date does not match)

MANUAL ENTRY MO/TO VCN061,


0120 090250400002 1 N/A PURCHASE NO CVM 00 00 0 RCN091 00

Fails virtual expiration date controls


2
DE 48, SE 71 = 17Bb (Mastercard In Control Purchase Control Service VCN expiration date expired)
DE 39 = 54 (Expired card)
DE 60 = 2000061 (Reject: VCN expiration date expired)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 230
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY MO/TO VCN062,


0120 090250400003 1 N/A PURCHASE NO CVM 00 00 0 RCN091 00

Fails virtual CVC 2 controls


3
DE 48, SE 71 = 17Cb (Mastercard In Control Purchase Control Service Virtual CVC 2 does not match)
DE 39 = 05 (Do not honor)
DE 60 = 2000062 (Reject: Virtual CVC 2 does not match)

MANUAL ENTRY VCN063,


0120 090250400004 1 N/A PURCHASE NO CVM 00 01 0 RCN091 00

Fails validity period limit controls


4
DE 39 = 54 (Expired card)
DE 48, SE 71 = 17Db (Mastercard In Control Purchase Control Service - Validity Period Limit)
DE 60 = 2000063 (Reject: Validity Period Limit)

ELECTRONIC COMMERCE VCN064,


0120 090250400005 1 N/A PURCHASE NO CVM 00 81 6 RCN091 00

Fails transaction amount limit controls


5
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 17Eb (Mastercard In Control Purchase Control Service - Transaction Amount Limit Check)
DE 60 = 2000064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 231
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY MO/TO VCN065,


0120 090250400006 1 N/A PURCHASE NO CVM 00 00 0 RCN091 00

Fails cumulative amount limit controls


6
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 17Fb (Mastercard In Control Purchase Control Service - Cumulative Amount Limit Check)
DE 60 = 2000065 (Reject: Cumulative Amount Limit Check)

MANUAL ENTRY MO/TO VCN066,


0120 090250400007 1 N/A PURCHASE NO CVM 00 00 0 MCC091 00

Fails transaction number usage controls


7
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Gb (Mastercard In Control Purchase Control Service - Transaction Number Usage)
DE 60 = 2000066 (Reject: Transaction Number Usage)

MANUAL ENTRY VCN067,


0120 090250400008 1 N/A PURCHASE NO CVM 00 01 0 RCN091 00

Fails merchant ID limit controls


8
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Hb (Mastercard In Control Purchase Control Service - Merchant ID Limit)
DE 60 = 2000067 (Reject: Merchant ID Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 232
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY MO/TO VCN069,


0120 090250400009 1 N/A PURCHASE NO CVM 00 01 0 RCN091 00

Fails MCC limit controls


9
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Jb (Mastercard In Control Purchase Control Service - MCC Limit)
DE 60 = 2000069 (Reject: MCC Limit)

MANUAL ENTRY MO/TO VCN070,


0120 090250400010 1 N/A PURCHASE NO CVM 00 01 0 RCN091 00

Fails database status bad


10
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Kb (Mastercard In Control Purchase Control Service - Database Status Bad)
DE 60 = 2000070 (Reject: Database Status Bad)

Table 0902505—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Mastercard In
Control Real Card Spend Control Service can receive and process Authorization Requests that contain the results of Real Card Spend
Control Service in DE 48, subelement 71 (On-behalf Services) and return correctly formatted Authorization Responses.
Transactions that fail cardholder-specified restrictions may either be forwarded to the issuer (as indicates in this table) and an
optional alert sent to the cardholder, or rejected to the acquirer (as indicated in next table) and an optional alert sent to the
cardholder.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 233
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902505—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090250500001 1 1 SIGNATURE 00 90 0 RCN_101-109 00
1
Passes spend controls
DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid)

MSR PURCHASE
0100 090250500002 1 0 SIGNATURE 00 90 0 RCN_115 54

Fails validity period limit controls and alert sent

2 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 54 (Expired card)
DE 48, SE 71 = 20Db (inControl RCN Spend Control Service - inControl Validity Period Limit)
DE 60 = 2000063 (inControl - Reject: Validity Period Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 234
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090250500005 1 0 SIGNATURE 00 90 0 RCN_116 51

Fails transaction amount limit controls and alert sent

3 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 51 (Insufficient Funds)
DE 48, SE 71 = 20Eb (inControl RCN Spend Control Service - inControl Transaction Amount Limit Check)
DE 60 = 2000064 (inControl - Reject: Transaction Amount Limit Check)

MSR PURCHASE
0100 090250500004 1 0 SIGNATURE 00 90 0 RCN_113 51

Fails transaction cumulative amount limit controls and alert sent


Mastercard sends Issuer 0120 advice message containing the following:
4 DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 20Fb (inControl RCN Spend Control Service - inControl Cumulative Amount Limit Check)
DE 60 = 2000065 (inControl - Reject: Cumulative Amount Limit Check)

NOTE: Transaction may need to be re-executed until cumulative amount limit is exceeded.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 235
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090250500005 1 0 SIGNATURE 00 90 0 RCN_117 05

Fails transaction number usage controls and alert sent


Mastercard sends Issuer 0120 advice message containing the following:
5 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Gb (inControl RCN Spend Control Service - inControl Transaction Number Usage)
DE 60 = 2000066 (inControl - Reject: Transaction Number Usage)

NOTE: Transaction may need to be re-executed until number usage control is exceeded.

MSR PURCHASE
0100 090250500006 1 0 SIGNATURE 00 90 0 RCN_118 05

Fails merchant ID limit controls and alert sent

6 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Hb (inControl RCN Spend Control Service - inControl Merchant ID Limit)
DE 60 = 2000067 (inControl - Reject: Merchant ID Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 236
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090250500007 1 0 SIGNATURE 00 90 0 RCN_119 05

Fails MCC limit controls and alert sent

7 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Jb (inControl RCN Spend Control Service - inControl MCC Limit)
DE 60 = 2000069 (inControl - Reject: MCC Limit)

MSR PURCHASE
0100 090250500008 1 0 SIGNATURE 00 90 0 RCN_111 05

Fails geographic restriction controls and alert sent

8 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Lb (inControl RCN Spend Control Service - inControl Geographic Restriction)
DE 60 = 2000072 (inControl - Reject: Geographic Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 237
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090250500009 1 0 SIGNATURE 00 90 0 RCN_112 05

Fails transaction type restriction controls and alert sent

9 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Mb (inControl RCN Spend Control Service - inControl Transaction Type Restriction)
DE 60 = 2000073 (inControl - Reject: Transaction Type Restriction)

MSR PURCHASE
0100 090250500010 1 0 SIGNATURE 00 90 0 RCN_114 05

Fails transaction time/date restriction controls and alert sent

10 Mastercard sends Issuer 0120 advice message containing the following:


DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Pb (inControl RCN Spend Control Service - inControl Transaction Time/Date Restriction)
DE 60 = 2000075 (inControl - Reject: Transaction Time/Date Restriction)

Table 0902506—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Mastercard In
Control Real Card Spend Control Service can receive and process Authorization Advices for transactions rejected by Real Card Spend
Control Service for the reasons indicated in DE 48, subelement 71 (On-behalf Services) and return correctly formatted Authorization
Responses.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 238
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Testing online to create Authorization Advices for transactions to be rejected for failing Purchase Controls must be carefully planned
with the Customer Implementation Specialist to achieve the desired results. The issuer's test cards must be set up with knowledge of
the content of the Authorization Request test transaction to cause Mastercard In Control to reject Authorization Request
transactions for failing Spend Controls.
The Customer Implementation Specialist must first initiate processing of Authorization Requests for each of the Authorization Advice
business descriptions described below.

Table 0902506—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090250600001 1 0 SIGNATURE 00 90 0 RCN_125 00

Fails validity period limit controls and alert sent


1
DE 39 = 54 (Expired card)
DE 48, SE 71 = 20Db (Mastercard In Control RCN Spend Control Service - Validity Period Limit)
DE 60 = 2000063 (Reject: Validity Period Limit)

MSR PURCHASE
0120 090250600002 1 0 SIGNATURE 00 90 0 RCN_126 00

Fails transaction amount limit controls and alert sent


2
DE 39 = 51 (Insufficient Funds)
DE 48, SE 71 = 20Eb (Mastercard In Control RCN Spend Control Service - Transaction Amount Limit Check)
DE 60 = 2000064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 239
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090250600001 1 0 SIGNATURE 00 90 0 RCN_123 00

Fails transaction cumulative amount limit controls and alert sent


3
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 20Fb (Mastercard In Control RCN Spend Control Service - Cumulative Amount Limit Check)
DE 60 = 2000065 ( Reject: Cumulative Amount Limit Check)

MSR PURCHASE
0120 090250600004 1 0 SIGNATURE 00 90 0 RCN_127 00

Fails transaction number usage controls and alert sent


4
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Gb (Mastercard In Control RCN Spend Control Service - Transaction Number Usage)
DE 60 = 2000066 (Reject: Transaction Number Usage)

MSR PURCHASE
0120 090250600005 1 0 SIGNATURE 00 90 0 RCN_128 00

Fails merchant ID limit controls and alert sent


5
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Hb (Mastercard In Control RCN Spend Control Service - Merchant ID Limit)
DE 60 = 2000067 (Reject: Merchant ID Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 240
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090250600006 1 0 SIGNATURE 00 90 0 RCN_129 00

Fails MCC limit controls and alert sent


6
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Jb (Mastercard In Control RCN Spend Control Service - MCC Limit)
DE 60 = 2000069 (Reject: MCC Limit)

MSR PURCHASE
0120 090250600007 1 0 SIGNATURE 00 90 0 RCN_121 00

Fails geographic restriction controls and alert sent


7
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Lb (Mastercard In Control RCN Spend Control Service - Geographic Restriction)
DE 60 = 2000072 (Reject: Geographic Restriction)

MSR PURCHASE
0120 090250600008 1 0 SIGNATURE 00 90 0 RCN_122 00

Fails transaction type restriction controls and alert sent


8
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Mb (Mastercard In Control RCN Spend Control Service - Transaction Type Restriction)
DE 60 = 2000073 (Reject: Transaction Type Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 241
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090250600009 1 0 SIGNATURE 00 90 0 RCN_124 00

Fails transaction time/date restriction controls and alert sent


9
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Pb (Mastercard In Control RCN Spend Control Service - Transaction Time/Date Restriction)
DE 60 = 2000075 (Reject: Transaction Time/Date Restriction)

Table 0902507—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Advices (Acquirer-generated)
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Mastercard In
Control Real Card Spend Control Service can receive and process Authorization Advices (Acquirer-generated) that contain DE 48,
subelement 71 (On-behalf Services) indicating the In Control results and return correctly formatted Authorization Responses.
Issuers that participate in In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 242
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902507—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Authorization Advices (Acquirer-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090250700001 1 1 SIGNATURE 00 90 0 RCN_101-109 00

1 Passes spend controls


DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid)
DE 60 = 190 (APS approved)

Table 0902510—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Authorization Requests and Reversal
The following test cases will test whether an issuer's Dual Message authorization application can receive and process Authorization
Requests and Reversal containing DE 48, subelement 71 indicating the Mastercard In Control results, as well as DE 48, subelement
33 (PAN Mapping File Information), and return correctly formatted Authorization Responses. The results are pass or fail and each fail
triggers an alert to the cardholder.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 243
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902510—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Authorization Requests and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090251000001 1 1 PURCHASE NO CVM 00 81 6 VCN_201 00

0400 1 1 DE 39 = 00 00
1
Virtual card number successfully mapped and has no spend controls
DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)

ELECTRONIC COMMERCE
0100 090251000002 1 1 PURCHASE NO CVM 00 81 6 VCN_211-219 00
2
Virtual card number successfully mapped and has passed spend controls
DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)

ELECTRONIC COMMERCE
0100 090251000004 1 0 PURCHASE NO CVM 00 81 6 VCN_241 V
3
Virtual card number successfully mapped, fails validity period limit controls and alert sent
DE 48, SE 71 = 17Db (Mastercard In Control VCN with Spend Control Service — Validity Period Limit)

ELECTRONIC COMMERCE
0100 090251000005 1 0 PURCHASE NO CVM 00 81 6 VCN_242 V
4
Virtual card number successfully mapped, fails transaction amount limit controls and alert sent
DE 48, SE 71 = 17Eb (Mastercard In Control VCN with Spend Control Service — Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 244
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090251000006 1 0 PURCHASE NO CVM 00 81 6 VCN_243 V

Virtual card number successfully mapped, fails transaction cumulative amount limit controls and alert sent
5
DE 48, SE 71 = 17Fb (Mastercard In Control VCN with Spend Control Service—Cumulative Amount Limit Check)

NOTE: Transaction may need to be re-executed until cumulative amount limit is exceeded

ELECTRONIC COMMERCE
0100 090251000007 1 0 PURCHASE NO CVM 00 81 6 VCN_244 V

Virtual card number successfully mapped, fails transaction number usage controls and alert sent
6
DE 48, SE 71 = 17Gb (Mastercard In Control VCN with Spend Control Service—Transaction Number Usage)

NOTE: Transaction may need to be re-executed until transaction number usage is exceeded

ELECTRONIC COMMERCE
0100 090251000008 1 0 PURCHASE NO CVM 00 81 6 VCN_245 V
7
Virtual card number successfully mapped, fails merchant ID limit controls and alert sent
DE 48, SE 71 = 17Hb (Mastercard In Control VCN with Spend Control Service—Merchant ID Limit)

ELECTRONIC COMMERCE
0100 090251000009 1 0 PURCHASE NO CVM 00 81 6 VCN_246 V
8
Virtual card number successfully mapped, fails MCC limit controls and alert sent
DE 48, SE 71 = 17Jb (Mastercard In Control VCN with Spend Control Service—MCC Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 245
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0100 090251000010 1 0 PURCHASE NO CVM 00 81 6 VCN_247 V
9
Virtual card number successfully mapped, fails geographic restriction controls and alert sent
DE 48, SE 71 = 17Lb (Mastercard In Control VCN with Spend Control Service—Geographic Restriction)

ELECTRONIC COMMERCE
0100 090251000011 1 0 PURCHASE NO CVM 00 81 6 VCN_248 V
10
Virtual card number successfully mapped, fails transaction type restriction controls and alert sent
DE 48, SE 71 = 17Mb (Mastercard In Control VCN with Spend Control Service—Transaction Type Restriction)

ELECTRONIC COMMERCE
0100 090251000012 1 0 PURCHASE NO CVM 00 81 6 VCN_249 V
11
Virtual card number successfully mapped, fails transaction time/date restriction controls and alert sent
DE 48, SE 71 = 17Pb (Mastercard In Control VCN with Spend Control Service—Transaction Time/Date Restriction)

Table 0902511—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Authorization Advices (Acquirer-generated)
The following test cases will test whether an issuer's Dual Message application can receive and process Authorization Advices
(Acquirer-generated) that contain DE 48, subelement 71 (On-behalf Services) indicating the Mastercard In Control results, as well as
DE 48, subelement 33 (PAN Mapping File Information), and return correctly formatted Authorization Responses. The results are pass
or fail and each fail triggers an alert to the cardholder.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 246
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902511—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Authorization Advices (Acquirer-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090251100001 1 1 PURCHASE NO CVM 00 81 6 VCN_201 00

1 Virtual card number successfully mapped and has no spend controls


DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)
DE 60 = 190 (APS approved)

ELECTRONIC COMMERCE
0120 090251100002 1 1 PURCHASE NO CVM 00 81 6 VCN_211-219 00

2 Virtual card number successfully mapped and has passed spend controls
DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)
DE 60 = 190 (APS approved)

Table 0902512—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message application can receive and process Authorization Advices
(System-generated) that contain DE 48, subelement 71 (On-behalf Services) indicating the Mastercard In Control results, as well as
DE 48, subelement 33 (PAN Mapping File Information) and return correctly formatted Authorization Responses. The results are pass
or fail and each fail triggers an alert to the cardholder.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 247
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Testing online to create Authorization Advices for transactions to be rejected for failing Purchase Controls must be carefully planned
with the Customer Implementation Specialist to achieve the desired results. The issuer's test cards must be set up with knowledge of
the content of the Authorization Request test transaction to cause Mastercard In Control to reject Authorization Request
transactions for failing Spend Controls.
The Customer Implementation Specialist must first initiate processing of Authorization Requests for each of the Authorization Advice
business descriptions described below.

Table 0902512—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090251200001 1 0 PURCHASE NO CVM 00 81 6 VCN_205 00

Virtual card number successfully mapped but expiration date does not match
1
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Ab (Mastercard In Control - VCN with Spend Control Service VCN expiration date does not match)
DE 60 = 2000060 (Reject: VCN expiration date does not match)

ELECTRONIC COMMERCE
0120 090251200002 1 0 PURCHASE NO CVM 00 81 6 VCN_206 00

Virtual card number successfully mapped but expiration date expired


2
DE 39 = 54 (Expired card)
DE 48, SE 71 = 17Bb (Mastercard In Control VCN with Spend Control Service - VCN expiration date expired)
DE 60 = 2000061 (Reject: VCN expiration date expired)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 248
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090251200003 1 0 PURCHASE NO CVM 00 81 6 VCN_207 00

Virtual card number successfully mapped but CVC 2 does not match
3
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Cb (Mastercard In Control VCN with Spend Control Service - Virtual CVC 2 does not match)
DE 60 = 2000062 (Reject: Virtual CVC 2 does not match)

ELECTRONIC COMMERCE
0120 090251200004 1 0 PURCHASE NO CVM 00 81 6 VCN_231 00

Virtual card number successfully mapped, fails validity period limit controls and alert sent
4
DE 39 = 54 (Expired card)
DE 48, SE 71 = 17Db (Mastercard In Control VCN with Spend Control Service - Validity Period Limit)
DE 60 = 2000063 (Reject: Validity Period Limit)

ELECTRONIC COMMERCE
0120 090251200005 1 0 PURCHASE NO CVM 00 81 6 VCN_232 00

Virtual card number successfully mapped, fails transaction amount limit controls and alert sent
5
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 17Eb (Mastercard In Control VCN with Spend Control Service - Transaction Amount Limit Check)
DE 60 = 2000064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 249
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090251200006 1 0 PURCHASE NO CVM 00 81 6 VCN_233 00

Virtual card number successfully mapped, fails cumulative amount limit controls and alert sent
6
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 17Fb (Mastercard In Control VCN with Spend Control Service - Cumulative Amount Limit Check)
DE 60 = 2000065 (Reject: Cumulative Amount Limit Check)

ELECTRONIC COMMERCE
0120 090251200007 1 0 PURCHASE NO CVM 00 81 6 VCN_234 00

Virtual card number successfully mapped, fails transaction number usage controls and alert sent
7
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Gb (Mastercard In Control VCN with Spend Control Service - Transaction Number Usage)
DE 60 = 2000066 (Reject: Transaction Number Usage)

ELECTRONIC COMMERCE
0120 090251200008 1 0 PURCHASE NO CVM 00 81 6 VCN_235 00

Virtual card number successfully mapped, fails merchant ID limit controls and alert sent
8
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Hb (Mastercard In Control VCN with Spend Control Service - Merchant ID Limit)
DE 60 = 2000067 (Reject: Merchant ID Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 250
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090251200009 1 0 PURCHASE NO CVM 00 81 6 VCN_236 00

Virtual card number successfully mapped, fails MCC limit controls and alert sent
9
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Jb (Mastercard In Control VCN with Spend Control Service - MCC Limit)
DE 60 = 2000069 (Reject: MCC Limit)

ELECTRONIC COMMERCE
0120 090251200010 1 0 PURCHASE NO CVM 00 81 6 VCN_237 00

Virtual card number successfully mapped, fails geographic restriction controls and alert sent
10
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Lb (Mastercard In Control VCN with Spend Control Service - Geographic Restriction)
DE 60 = 2000072 (Reject: Geographic Restriction)

ELECTRONIC COMMERCE
0120 090251200011 1 0 PURCHASE NO CVM 00 81 6 VCN_238 00

Virtual card number successfully mapped, fails transaction type restriction controls and alert sent
11
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Mb (Mastercard In Control VCN with Spend Control Service - Transaction Type Restriction)
DE 60 = 2000073 (Reject: Transaction Type Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 251
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0120 090251200012 1 0 PURCHASE NO CVM 00 81 6 VCN_239 00

Virtual card number successfully mapped but fails transaction time/date restriction controls and alert sent
12
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Pb (Mastercard In Control VCN with Spend Control Service - Transaction Time/Date Restriction)
DE 60 = 2000075 (Reject: Transaction Time/Date Restriction)

ELECTRONIC COMMERCE
0120 090251200013 1 0 PURCHASE NO CVM 00 81 6 VCN_210 00

Invalid virtual card number to real card number mapping relationship


13
DE 39 = 14 (Invalid card number)
DE 48, SE 71 = 17Ib (Mastercard In Control VCN with Spend Control Service - Invalid VCN-RCN mapping relationship)
DE 60 = 2000068 (Reject: Invalid VCN-RCN Mapping Relationship)

Table 0902520—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Optional
Partial Approval Processing—Authorization Requests
The following test cases will test whether an issuer Dual Message online application is able to receive Authorization Requests for the
In Control suggested partial approval amount; process them, and send correctly formatted Authorization Responses.
The issuer is participating in an In Control transaction amount limit service and has opted to receive the suggested partial approval
amount indicated via amount type 59 in DE 54.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 252
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902520—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard In Control Optional
Partial Approval Processing—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN_072


0100 090252000001 1 0 PURCHASE NO CVM 00 81 6 VCN_250 10

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer approves that available amount.

1 0100: DE 48, SE 33 contains virtual account information


0100: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0100: DE 54, SF 2 = 59 and SF 4 contains suggested partial approval amount.
0110: DE 6 contains partial approval amount that was suggested, DE 38 contains authorization code, DE 39 = 10 (Partial
approval), and DE 51 contains cardholder billing currency.

ELECTRONIC COMMERCE VCN_072


0100 090252000002 1 0 PURCHASE NO CVM 00 81 6 VCN_250 10

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer approves less than that available amount.

2 0100: DE 48, SE 33 contains virtual account information


0100: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0100: DE 54, SF 2 = 59 and SF 4 contains suggested partial approval amount.
0110: DE 6 contains partial approval amount that was less than suggested, DE 38 contains authorization code, DE 39 = 10
(Partial approval), and DE 51 contains cardholder billing currency.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 253
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN_073


0100 090252000003 1 0 PURCHASE NO CVM 00 81 6 VCN_251 00

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer approves the total transaction amount rather
than only the suggested amount.
3
0100: DE 48, SE 33 contains virtual account information
0100: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0100: DE 54, SF 2 = 59 and SF 4 contains suggested partial approval amount.
0110: DE 38 contains authorization code, DE 39 = 00 (Approved).

ELECTRONIC COMMERCE VCN_074


0100 090252000004 1 1 PURCHASE NO CVM 00 81 6 VCN_252 V

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer declines the total transaction amount.
4 0100: DE 48, SE 33 contains virtual account information
0100: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0100: DE 54, SF 2 = 59 and SF 4 contains suggested partial approval amount.
0110: DE 39 contains any decline response code.

Table 0902560—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
for Mastercard In Control Processing (Virtual Card Service)—Mastercard In Control Service Requests and Responses
Issuers participating in the Mastercard Shared Services Platform for Mastercard In Control Processing (Virtual Card Service) must be
able to process Mastercard In Control service requests and responses as follows:

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 254
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

• The issuer receives an online authorization message from a message originator and determines that the transaction participates in
a Mastercard In Control service.
• Prior to sending the online authorization message response, the issuer creates a properly formatted Mastercard In Control service
request per Mastercard specifications and sends to Mastercard Worldwide Network to obtain the service request response.
• The issuer, upon receipt of the Mastercard In Control service request response from the Mastercard Worldwide Network, must
evaluate the service request response as well as evaluate the original online authorization message to determine an authorization
decision.
• The issuer provides an online authorization message response to the message originator.
The following test cases will test whether an issuer's online authorization application can process online authorization messages per
the above steps to include receiving Mastercard In Control service request responses including DE 48, subelement 71 (On behalf
Services), the real vs. virtual PAN relationship in DE 48, subelement 33 (PAN Mapping File Information), and any applicable DE 48,
subelement 87 (Card Validation Code Result) results. The results are pass or fail and each fail may optionally trigger an alert to the
cardholder.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 255
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902560—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
for Mastercard In Control Processing (Virtual Card Service)—Mastercard In Control Service Requests and Responses

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000001 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_201 85

Test scenario - Virtual card number successfully mapped and account has no spend controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
1
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Vb (Mastercard In Control VCN Service - Valid).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000002 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_211-219 85

Test scenario - Virtual card number successfully mapped and account has passed spend controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
Issuer receives 0110 Service Response containing Service Status "C".
2
0110: DE 48, SE 71 = 17Vb (MasterCard In Control VCN with Spend Control Service - Valid).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

NOTE: This test may optionally be executed several times to test each of the In Control spend controls.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 256
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000003 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_210 14

Test scenario — Invalid virtual card number.


Issuer sends 0100 Service Request containing Service Identifier "2130".
3
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Ib (Mastercard In Control VCN with Spend Control Service — invalid virtual card number).
0110: DE 48, SE 33 not present.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000004 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_241 54

Test scenario - Virtual card number successfully mapped and account has failed validity period limit controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
4
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Db (MasterCard In Control VCN with Spend Control Service - Validity Period Limit).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 257
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000005 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_242 51

Test scenario - Virtual card number successfully mapped and account has failed transaction amount limit controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
5
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Eb (Mastercard In Control VCN with Spend Control Service - Transaction Amount Limit Check).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000006 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_243 51

Test scenario - Virtual card number successfully mapped and account has failed transaction cumulative amount limit controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
6
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Fb (Mastercard In Control VCN with Spend Control Service - Cumulative Amount Limit Check).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 258
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000007 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_244 05

Test scenario - Virtual card number successfully mapped and account has failed transaction number usage controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
7
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Gb (Mastercard In Control VCN with Spend Control Service - Transaction Number Usage).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000008 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_245 05

Test scenario - Virtual card number successfully mapped and account has failed merchant ID limit controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
8
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Hb (Mastercard In Control VCN with Spend Control Service - Merchant ID Limit).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 259
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000009 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_246 05

Test scenario - Virtual card number successfully mapped and account has failed MCC limit controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
9
Issuer receives 0110 Service Response.
0110: DE 48, SE 71 = 17Jb (Mastercard In Control VCN with Spend Control Service - MCC Limit).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000010 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_247 05

Test scenario - Virtual card number successfully mapped and account has failed geographic restriction controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
10
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Lb (Mastercard In Control VCN with Spend Control Service - Geographic Restriction).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 260
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000011 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_248 05

Test scenario - Virtual card number successfully mapped and account has failed transaction type restriction controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
11
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Mb (Mastercard In Control VCN with Spend Control Service - Transaction Type Restriction).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000012 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_249 05

Test scenario - Virtual card number successfully mapped and account has failed transaction time/date restriction controls.
Issuer sends 0100 Service Request containing Service Identifier "2130".
12
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Pb (Mastercard In Control VCN with Spend Control Service - Transaction Time/Date Restriction).
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 261
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000022 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_060 05

Test scenario — Virtual card number expiration data does not match.
Issuer sends Service Request containing Service Identifier "2130" and Authorization Request/0100 message.
13 Issuer receives Service Response containing Service Status "C" and Authorization Response/0110 message.
0110: DE 48, SE 71 = 17Ab (Mastercard In Control VCN with Spend Control Service — Virtual card number expiration date
does not match).
0110: DE 48, SE 33 not present.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000023 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_061 54

Test scenario — Virtual card number expiration data expired.


Issuer sends 0100 Service Request containing Service Identifier "2130".
14 Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Bb (Mastercard In Control VCN with Spend Control Service — Virtual card number expiration date
expired)
0110: DE 48, SE 33 not present.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 262
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000024 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_062 05

Test scenario — Virtual card number virtual CVC 2 does not match.
Issuer sends 0100 Service Request containing Service Identifier "2130".
15 Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Cb (Mastercard In Control VCN with Spend Control Service — Virtual card number virtual CVC 2
does not match).
0110: DE 48, SE 33 not present.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

BUSINESS TRANSACTION
0100 090256000025 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_209 92

Test scenario — Unable to perform MasterCard In Control service.


Issuer sends 0100 Service Request containing Service Identifier "2130".
16
Issuer receives 0110 Service Response containing Service Status is a space.
0110: DE 48, SE 71 = 17Ub (Mastercard In Control VCN with Spend Control Service — Unable to process).
0110: DE 48, SE 33 not present.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 263
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0120 090256000031 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_211-219 85

Test scenario — Issuer advises MasterCard In Control of fully approved transaction not previously sent to Mastercard In
Control.
Issuer sends 0120 Service Request containing Service Identifier "2131" with DE 60 = 200 and DE 39 = 00.
17
Issuer receives 0130 Service Response containing Service Status "C".
0130: DE 48, SE 71 = 17Cb (Mastercard In Control VCN with Spend Control Service — Valid).
0130: DE 48, SE 33 contains PAN Mapping File Information.
0130: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0120 message.

BUSINESS TRANSACTION
0120 090256000032 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_201 85

Test scenario — Issuer advises MasterCard In Control of partially approved transaction previously sent to and approved by
18 Mastercard In Control.
Issuer sends 0120 Service Request containing Service Identifier "2131" with DE 60 = 200, DE 39 = 10, as well as DE 48, SE
71, SE 33 and, if applicable, SE 92 and SE 87.
Issuer receives 0120 Service Response containing Service Status "C".

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 264
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0120 090256000033 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_211-219 85

Test scenario — Issuer advises MasterCard In Control of declined transaction previously sent to and approved by Mastercard In
19 Control.
Issuer sends 0120 Service Request containing Service Identifier "2131" with DE 60 = 201, DE 39 = 05, as well as DE 48, SE
71, SE 33 and, if applicable, SE 92 and SE 87.
Issuer receives 0130 Service Response containing Service Status "C".

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 265
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000041 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_201 85

0400 N/A 1 DE 39 = 00 85

Test scenario - Virtual card number successfully mapped and account has no spend controls. A request is followed by a
reversal.

Issuer sends 0100 Service Request containing Service Identifier "2130".


Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Vb (Mastercard In Control VCN Service - Valid).
20
0110: DE 48, SE 33 contains PAN Mapping File Information.
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

Issuer sends 0400 Service Request containing Service Identifier "2131".


Issuer receives 0410 Service Response containing Service Status "C".
0410: DE 48, SE 71 = 17Vb (Mastercard In Control VCN Service - Valid).
0410: DE 48, SE 33 contains PAN Mapping File Information.
0410: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0400 message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 266
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256000042 N/A 1 OF CUSTOMER CHOICE ** ** * VCN_211-219 85

0400 N/A 1 DE 39 = 00 85

Test scenario - Virtual card number successfully mapped and account has passed spend controls. A request is followed by a
reversal.
Issuer sends 0100 Service Request containing Service Identifier "2130".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid).
0110: DE 48, SE 33 contains PAN Mapping File Information.
21
0110: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

Issuer sends 0400 Service Request containing Service Identifier "2131".


Issuer receives 0410 Service Response containing Service Status "C".
0410: DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid).
0410: DE 48, SE 33 contains PAN Mapping File Information.
0410: DE 48, SE 92 contains CVC 2 value and SE 87 contains CVC 2 results if SE 92 present in 0100 message.

NOTE: This test may optionally be executed several times to test each of the MasterCard In Control spend
controls.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 267
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902565—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
for Mastercard In Control Processing (Account Level Spend)—Mastercard In Control Service Requests and Responses
Issuers participating in the MasterCard Shared Services Platform for Mastercard In Control Processing (Account Level Spend) must be
able to process Mastercard In Control service requests and responses as follows:
• The issuer receives an online authorization message from a message originator and determines that the transaction participates in
a Mastercard In Control service.
• Prior to sending the online authorization message response, the issuer creates a properly formatted Mastercard In Control service
request per Mastercard specifications and sends to Mastercard Worldwide Network to obtain the service request response.
• The issuer, upon receipt of the Mastercard In Control service request response from the Mastercard Worldwide Network, must
evaluate the service request response as well as evaluate the original online authorization message to determine an authorization
decision.
• The issuer provides an online authorization message response to the message originator.
The following test cases will test whether an issuer's online authorization application can process online authorization messages per
the above steps to include receiving Mastercard In Control service request responses including DE 48, subelement 71 (On behalf
Services) results. The results are pass or fail and each fail may optionally trigger an alert to the cardholder.
Issuers that participate in Mastercard In Control must perform online integrated testing with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 268
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902565—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
for Mastercard In Control Processing (Account Level Spend)—Mastercard In Control Service Requests and Responses

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256500001 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_101-109 85

Test scenario - Account has passed spend controls.


Issuer sends 0100 Service Request containing Service Identifier "2994".
1
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid).

NOTE: This test may optionally be executed several times to test each of the Mastercard In Control spend controls.

BUSINESS TRANSACTION
0100 090256500002 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_115 85

Test scenario - Account has failed validity period limit controls.


2
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Db (Mastercard In Control RCN Spend Control Service - Validity Period Limit).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 269
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256500003 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_116 51

Test scenario - Account has failed transaction amount limit controls.


3
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Eb (Mastercard In Control RCN Spend Control Service - Transaction Amount Limit Check).

BUSINESS TRANSACTION
0100 090256500004 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_113 51

Test scenario - Account has failed transaction cumulative amount limit controls.
Issuer sends 0100 Service Request containing Service Identifier "2994".
4
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Fb (Mastercard In Control RCN Spend Control Service - Cumulative Amount Limit Check).

NOTE: Transaction may need to be re-executed until cumulative amount limit is exceeded.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 270
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256500005 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_117 05

Test scenario - Account has failed transaction number usage controls.


Issuer sends 0100 Service Request containing Service Identifier "2994".
5
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Gb (Mastercard In Control RCN Spend Control Service - Transaction Number Usage).

NOTE: Transaction may need to be re-executed until number usage control is exceeded.

BUSINESS TRANSACTION
0100 090256500006 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_118 05

Test scenario - Account has failed merchant ID limit controls.


6
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Hb (Mastercard In Control RCN Spend Control Service - Merchant ID Limit).

BUSINESS TRANSACTION
0100 090256500007 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_119 05

Test scenario - Account has failed MCC limit controls.


7
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Jb (Mastercard In Control RCN Spend Control Service - MCC Limit).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 271
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256500008 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_111 05

Test scenario - Account has failed geographic restriction controls.


8
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Lb (Mastercard In Control RCN Spend Control Service - Geographic Restriction).

BUSINESS TRANSACTION
0100 090256500009 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_112 05

Test scenario - Account has failed transaction type restriction controls.


9
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Mb (Mastercard In Control RCN Spend Control Service - Transaction Type Restriction).

BUSINESS TRANSACTION
0100 090256500010 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_114 05

Test scenario - Account has failed transaction time/date restriction controls.


10
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 20Pb (Mastercard In Control RCN Spend Control Service - Transaction Time/Date Restriction).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 272
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090256500025 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_100 92

Test scenario - Unable to perform inControl service.


11
Issuer sends 0100 Service Request containing Service Identifier "2994".
Issuer receives 0110 Service Response containing Service Status is a space.
0110: DE 48, SE 71 = 20Ub (Mastercard In Control RCN Spend Control Service - Unable to process).

BUSINESS TRANSACTION
0120 090256500031 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_101-109 85

Test scenario - Issuer advises Mastercard In Control of fully approved transaction not previously sent to Mastercard In Control.
12
Issuer sends 0120 Service Request containing Service Identifier "2133" with DE 60 = 200 and DE 39 = 00.
Issuer receives 0130 Service Response containing Service Status "C".
0130: DE 48, SE 71 = 20Cb (Mastercard In Control RCN Spend Control Service - Valid).

BUSINESS TRANSACTION
0120 090256500032 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_101-109 85

Test scenario - Issuer advises Mastercard In Control of partially approved transaction previously sent to and approved by
Mastercard In Control.
13
Issuer sends 0120 Service Request containing Service Identifier "2133" with DE 60 = 200 and DE 39 = 10.
Issuer receives 0130 Service Response containing Service Status "C".
0130: DE 48, SE 71 = 20Cb (Mastercard In Control RCN Spend Control Service - Valid).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 273
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0120 090256500033 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_101-109 85

Test scenario - Issuer advises Mastercard In Control of declined transaction previously sent to and approved by Mastercard In
Control.
14
Issuer sends 0120 Service Request containing Service Identifier "2133"with DE 60 = 200 and DE 39 = 05.
Issuer receives 0130 Service Response containing Service Status "C".
0130: DE 48, SE 71 = 20Cb (Mastercard In Control RCN Spend Control Service - Valid).

BUSINESS TRANSACTION
0100 090256500041 N/A 1 OF CUSTOMER CHOICE ** ** * RCN_101-109

0400 N/A 1 DE 39 = 00 85

Test scenario - Account has passed spend controls. A 0100 request is followed by a 0400 reversal.

Issuer sends 0100 Service Request containing Service Identifier "2994".


Issuer receives 0110 Service Response containing Service Status "C".
15
0110: DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid).

Issuer sends 0400 Service Request containing Service Identifier "2133".


Issuer receives 0410 Service Response containing Service Status "C".
0410: DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid).

NOTE: This test may optionally be executed several times to test each of the Mastercard In Control spend controls.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 274
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902901—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud
Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that participates in Expert Monitoring
System Real-Time Fraud Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ can receive and process DE 48, SE
75 (Fraud Scoring Data) and when applicable SE 56 (Security Services Additional Data for Issuers) as well as DE 48, SE 71 (On-behalf
Results) in Authorization Requests and return correctly formatted Authorization Responses.

Table 0902901—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud
Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090290100002 1 1 SIGNATURE 00 90 0 001-010 00
1
Fraud Scoring Service unsuccessful
DE 48, SE 71 = 18Ub (Fraud Scoring Service was not performed successfully)

MSR PURCHASE
0100 090290100006 1 1 SIGNATURE 00 90 0 001-010 00

Fraud Scoring Service with optional Fraud Rule Manager, MasterCard Authorization IQ Security Services Data, and Assurance
IQ Security Services Data.
DE 48, SE 71 = 18Cb (Fraud Scoring Service performed successfully)
2
DE 48, SE 75 (Fraud Scoring Data), SF 1 (Fraud Score), SF 2 (Score Reason Code), SF 3 (Rules Score), SF 4 (Rules Reason Code
1), and SF 5 (Rules Reason Code 2) are present.
Multiple occurences of DE 48, SE 56 (Security Services Additional Data for Issuers), SF 1 (Security Services Indicators) = AIQ
(Assurance IQ) and SF 2 (Security Services Data) are present; SF 1 = AQV (GDV-based Spend Ranking and SF 2 are present; SF
1 = AQF (Frequency-based Spend Ranking) and SF 2 are present; and SF 1 = AQS (Segment Qualifier) and SF 2 are present.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 275
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090290100007 1 1 SIGNATURE 00 90 0 001-010 00

Fraud Scoring Service with optional Fraud Rule Manager, Mastercard Authorization IQ Security Services Data and Assurance IQ
Security Services Data, and Mastercard Spend Alerts Security Services Data provided to test maximum 16 occurences and
maximum length
DE 48, SE 71 = 18Cb (Fraud Scoring Service performed successfully)
3
DE 48, SE 75 (Fraud Scoring Data), SF 1 (Fraud Score), SF 2 (Score Reason Code), SF 3 (Rules Score), SF 4 (Rules Reason Code
1), and SF 5 (Rules Reason Code 2) are present.
Multiple occurences of DE 48, SE 56 (Security Services Additional Data for Issuers), SF 1 (Security Services Indicators) = AIQ
(Assurance IQ) and SF 2 (Security Services Data) are present; SF 1 = AQV (GDV-based Spend Ranking) and SF 2 are present; SF
1 = AQF (Frequency-based Spend Ranking) and SF 2 are present; SF 1 = AQS (Segment Qualifier) and SF 2 are present; and SF
1 = INC (Spend Alerts and Controls) and SF 2 are present; as well as 11 other occurrences of test data for maximum length of
96.

Table 0902903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Safety
Net—Authorization Advice
The following test case will test whether an issuer's Dual Message authorization application that participates in Mastercard Safety
Net can receive and process a Safety Net Authorization Advice and return correctly formatted Authorization Response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 276
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902903—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Safety
Net—Authorization Advice

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090290300001 1 N/A SIGNATURE 00 90 0 001-010 00

Transaction decline by Mastercard Safety Net service


DE 39 = 05 (Do not honor)
1
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 = 998 or 000 and SF 2 = NM (Network Monitor)
DE 60, SF 1 = 120 (Transaction Blocking)
DE 121 = 000003 (Mastercard On-behalf Service)

Table 0902906—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Spend Alerts or Spend
Controls Services—Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message authorization application that participates in Mastercard Spend
Alerts or Spend Controls services can receive and process DE 48, SE 71 (On-behalf Results); DE 48, subelement 56 (Security Services
Additional Data for Issuers) when applicable; and DE 48, SE 75 (Fraud Scoring Data) when applicable in Authorization Requests and
Advices and return correctly formatted Authorization Responses.
Mastercard Spend Alerts enables issuers to meet the popular transaction alert needs of cardholders.
Mastercard Spend Controls enables issuers to meet the popular transaction alert and control needs of cardholders.
Additionally, for both Mastercard Spend Alerts and Spend Controls, cardholders can easily disable their cards to temporarily stop all
payments.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 277
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

These test transactions are meant to only test the authorization messages and not for testing delivery of alerts.

Table 0902906—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Spend Alerts or Spend
Controls Services—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090290600001 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


1 DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ATA (Alert Transaction
Amount)

MSR PURCHASE
0100 090290600002 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


2
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ACB (Alert Cross Border)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 278
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0100 090290600003 1 N/A PURCHASE SIGNATURE 00 01 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


3 DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ACH (Alert Transaction
Channel)

MSR PURCHASE
0100 090290600004 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


4
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AGE (Alert Geo Locations)

MSR PURCHASE
0100 090290600005 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


5
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AMC (Alert MCC)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 279
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090290600006 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


6
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ABD (Alert Budget)

MSR PURCHASE
0100 090290600007 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


7
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AFL (Alert Filter)

MSR PURCHASE
0100 090290600008 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


8
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AAL (Alert Aprove All)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 280
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090290600009 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


9
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = NAT (No Action Taken)

MSR PURCHASE
0100 090290600020 1 N/A SIGNATURE 00 90 0 001-010 00

10 Mastercard Spend Alerts or Spend Controls services


DE 48, SE 71 = 18Ub (Unable to Process)
DE 48, SE 75 and SE 56 not present

MSR PURCHASE
0120 090290600031 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services

11 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DCD (Decline Card Disabled)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 281
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090290600032 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
12
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DTA (Decline Transaction
Amount)

MSR PURCHASE
0120 090290600033 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

13 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DCB (Decline Cross Border)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 282
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0120 090290600034 1 N/A PURCHASE SIGNATURE 00 01 0 001-010 00

Mastercard Spend Controls services

14 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DCH (Decline Channel)

MSR PURCHASE
0120 090290600035 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

15 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DGE (Decline Geo Location)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 283
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090290600036 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

16 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DMC (Decline MCC)

MSR PURCHASE
0120 090290600037 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

17 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DBD (Decline Budget)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 284
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090290600038 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

18 DE 39 = 05 (Do not honor), DE 60, SF 1 = 120 (Transaction Blocking), and DE 121 = 000003 (Mastercard On-behalf Service)
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DFL (Decline Filter)

Table 0902921—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
(Expert Monitoring Real-time Fraud Scoring Service / Decision Intelligence, Assurance IQ, Authorization IQ and Spend
Alerts)—Service Requests and Responses
The Mastercard Shared Services Platform provides customers the ability to obtain access to certain Mastercard value-added services
for eligible transactions that are not currently processed on the Mastercard Network. The Mastercard interface processor (MIP) hosts
the Shared Services Interface (SSI) that enables this offering to customers or their authorized agents that are switching eligible
Mastercard and eligible non-Mastercard transactions on their own network.
When a customer or its authorized agent receives a transaction on its network that it wants to have Mastercard value-added services
performed on, the customer must pause the transaction process and send a service request to the Mastercard Network. Mastercard
will process the service request and return a service request response indicating the status and result of the services performed. This
service request/response process must occur before the transaction can be decisioned by an issuer. Customers submit a service
request message for each cardholder transaction for which Mastercard value-added services are to be applied.
The following test cases will test whether an issuer's online authorization application can process online authorization messages
including sending an authorization message via shared services to be processed through Expert Monitoring Real-time Fraud Scoring
Service / Decision Intelligence, Assurance IQ, Authorization IQ and Spend Alerts services and receive service results back in DE 48 SE
71, SE 75, and SE 56 of the response message.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 285
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0902921—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Shared Services Platform
(Expert Monitoring Real-time Fraud Scoring Service / Decision Intelligence, Assurance IQ, Authorization IQ and Spend
Alerts)—Service Requests and Responses

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090292100010 N/A 1 OF CUSTOMER CHOICE ** ** * 85

Test scenario - Issuer sends 0100 Service Request containing Service Identifier "2401" for Expert Monitoring System (Fraud
Scoring Service with Fraud Rule Manager Service) and Issuer receives 0110 Service Response containing Service Status "C".
1 0110: DE 48, SE 71 = 18Cb (Fraud Scoring Service - Completed successfully).
0110: DE 48, SE 75 (Fraud Scoring Data) contains SF 1 (Fraud Score), SF 2 (Score Reason Code), SF 3 (Rule Adjusted Score), SF
4 (Rule reason code 1), and SF 5 (Rule reason code 2).
0110: DE 48, SE 56 (Security Services Additional Data for Issuers), SF 1 (Security Services Indicator) and SF 2 (Security Services
Data).

BUSINESS TRANSACTION
0100 090292100060 N/A 1 OF CUSTOMER CHOICE ** ** * 92

Test scenario - Issuer sends 0100 Service Request containing Service Identifier "2401" for Expert Monitoring System (Fraud
Scoring Service with Fraud Rule Manager Service) and Issuer receives 0110 Service Response containing Service Status "T"
2
(Timeout).
0110: DE 48, SE 71 = 18Ub (Fraud Scoring Service - Unable to process).

NOTE: This service status is just one of several that trigger DE 48, SE 71 = 18Ub

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 286
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090292100070 N/A 1 OF CUSTOMER CHOICE ** ** * 85

Test scenario - Issuer sends 0100 Service Request containing Service Identifier "2401" for Expert Monitoring System (Fraud
Scoring Service with Fraud Rule Manager Service) and Issuer receives 0110 Service Response containing Service Status "C"
3
(Completed successfully).
0110: DE 48, SE 71 = 18Ub (Fraud Scoring Service - Unable to process).

NOTE: This service status is just one of several that trigger DE 48, SE 71 = 18Ub

BUSINESS TRANSACTION
0100 090292100080 N/A 1 OF CUSTOMER CHOICE ** ** * 30

Test scenario - Issuer sends 0100 Service Request containing Service Identifier "2401" for Expert Monitoring System (Fraud
Scoring Service with Fraud Rule Manager Service) and Issuer receives 0110 Service Response containing Service Status "E"
4 (Format error) due to missing Data Elements (one of DE 6, 10, 51 and 43).
0110: DE 44 present containing data element that has the format error.
0110: DE 48, SE 71 = 18Ub (Fraud Scoring Service - Unable to process).

NOTE: This service status is just one of several that trigger DE 48, SE 71 = 18Ub

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 287
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

BUSINESS TRANSACTION
0100 090292100012 N/A 1 OF CUSTOMER CHOICE ** ** * 85

0120 N/A 1 DE 39 = V 85

Test scenario - Issuer sends 0100 Service Request containing Service Identifier "2401" for Expert Monitoring System (Fraud
Scoring Service) and Issuer receives 0110 Service Response containing Service Status "C".
0110: DE 48, SE 71 = 18Cb (Fraud Scoring Service - Completed successfully).
5
0110: DE 48, SE 75 (Fraud Scoring Data) contains SF 1 (Fraud Score) and SF 2 (Score Reason Code).

Test scenario - Issuer sends 0120 Service Request containing Service Identifier "2410" with DE 39 = 05, 57 etc. for a decline
on a previous 0100 transaction previously sent to EMS and Issuer receives 0130 Service Response containing Service Status
"C".
0130: DE 48, SE 71 = 18Cb (Fraud Scoring Service - Completed successfully).
0130: DE 48, SE 75 (Fraud Scoring Data) contains SF 1 (Fraud Score) and SF 2 (Score Reason Code).

Table 0903525—Issuer On-behalf Services - DMS Auth—MSR Product and Services— Merchant Presented QR Payment
Transactions (Non-token PAN)—Authorization Requests and Advices
The following test cases will test whether a Receiving Institution's Dual Message authorization application that is participating in
Merchant Presented QR can process Authorization Requests and Advices containing Merchant Presented QR payment transactions
with on-behalf service results in DE 48, subelement 71 on a consumer's PAN; process them, and send correctly formatted
Authorization Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 288
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 289
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903525—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Non-token PAN)—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090352500001 1 0 NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a payment transaction for a consumer's PAN was successfully processed
DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
1 DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0110: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 290
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090352500002 1 0 NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a payment transaction for a consumer's PAN was successfully processed
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are not
2
present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0110: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 291
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090352500003 1 0 NO CVM 28 81 6 001-010 V

Merchant Presented QR service for a payment transaction for a consumer's PAN was not available
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
3 DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Ub for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0110: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 292
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0120 090352500004 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a payment transaction for a consumer's PAN was rejected due to exceeding transaction
amount limit and an advice is sent to RI
DE 4 (Amount, Transaction) greater than 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)

4 DE 18 (Merchant Code) does not contain any prohibited value


DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 71 = 37Db for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1510064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 293
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0120 090352500005 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a payment transaction for a consumer's PAN was rejected due to exceeding cumulative
amount limit and an advice is sent to RI
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)

5 DE 18 (Merchant Code) does not contain any prohibited value


DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 71 = 37Eb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1510065 (Reject: Cumulative Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 294
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0120 090352500006 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a payment transaction for a consumer's PAN was rejected due to cross border transaction
and an advice is sent to RI
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)

6 DE 18 (Merchant Code) does not contain any prohibited value


DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 71 = 37Fb for the on-behalf service results
DE 39 = 05 (Do not honor) and DE 60 = 1510072 (Reject: Geographic Restriction)
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 295
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0120 090352500007 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a payment transaction for a consumer's PAN is routed to and rejected by Stand-In limits
due to RI timeout after Merchant Presented QR service was successfully performed; an advice is sent to RI informing of the
Stand-In reject.
DE 4 (Amount, Transaction) less than or equal to 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
7 DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1020064 (IPS Timed Out; Reject: Transaction Amount Limit Check)

Table 0903526—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Authorization Requests and Advices
The following test cases will test whether a Receiving Institution's (RI) Dual Message authorization application that is participating in
Merchant Presented QR can process Authorization Requests containing Merchant Presented QR payment transactions with on-behalf
service results in DE 48, subelement 71 on a token; process them, and send correctly formatted Authorization Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 296
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 297
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903526—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090352600001 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service was successfully processed and MDES Secure Element token was successfully mapped,
validated, and issuer approved on a DSRP UCAF transaction
DE 2 and DE 14 contain PAN data and DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier) ; and SE 34 (ATC
Information) are present
DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present

1 DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology)
DE 48, SE 42 = 242 (DSRP) is present and SE 43 is present if issuer opt-in to receive
DE 48, SE 71 = 37Vb 50Cb 51Vb for the on-behalf service results
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0110: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 298
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0100 090352600002 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service was successfully processed and MDES Cloud-based payment token was successfully mapped,
validated, and issuer approved on a DSRP UCAF transaction
DE 2 and DE 14 contain PAN data and DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier) ; and SE 34 (ATC
Information) are present are present
DE 48, SE 32 (Mastercard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present

2 DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology)
DE 48, SE 42 = 242 (DSRP) is present and SE 43 is present if issuer opt-in to receive
DE 48, SE 71 = 37Vb 50Cb 61Vb for the on-behalf service results
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0110: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 299
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903535—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Authorization Requests
The following test cases will test whether a Receiving Institution's (RI) Dual Message authorization application that is participating in
Merchant Presented QR can process Authorization Requests containing Merchant Presented QR refund transactions with on-behalf
service results in DE 48, subelement 71 on a consumer's PAN; process them, and send correctly formatted Authorization Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 300
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903535—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
REFUND PAYMENT
0100 090353500001 1 0 TRANSACTION NO CVM 28 81 6 001-010 00

Merchant Presented QR service refund payment transaction for a consumer's PAN was successfully processed
DE 48, SE 77 = C68 (Merchant Presented QR Refund) and DE 18 (Merchant Code) must not contain any prohibited value
DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
1 if available and required
DE 48, SE 42 = 210 and SE 43 not present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 1 (Unique Reference Number); SE 03, SF 03 (Funding Source); and
SE 05, SF 01 (Digital Account Reference Number) are present.
0110: DE 48, SE 42 is returned in response

Table 0903536—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Authorization Requests
The following test cases will test whether a Receiving Institution's (RI) Dual Message authorization application that is participating in
Merchant Presented QR can process Authorization Requests containing Merchant Presented QR refund transactions with on-behalf
service results in DE 48, subelement 71 on a token; process them, and send correctly formatted Authorization Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 301
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 302
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903536—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
REFUND PAYMENT
0100 090353600001 1 N/A TRANSACTION NO CVM 28 81 6 001-010 00

Merchant Presented QR and MDES PAN mapping services successfully processed.


DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier) are
present.
DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are
present.
1 DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 (UCAF data not present).
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 = C68 (Merchant Presented QR Refund).
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 1 (Unique Reference Number); SE 03, SF 03 (Funding Source); and
SE 05, SF 01 (Digital Account Reference Number) are present.
0110: DE 48, SE 42 is returned in response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 303
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
REFUND PAYMENT
0100 090353600002 1 N/A TRANSACTION NO CVM 28 81 6 001-010 00

Merchant Presented QR and MDES PAN mapping services successfully processed.


DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier) are
present.
DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are
present.
2 DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 (UCAF data not present).
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 = C68 (Merchant Presented QR Refund).
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 1 (Unique Reference Number); SE 03, SF 03 (Funding Source); and
SE 05, SF 01 (Digital Account Reference Number) are present.
0110: DE 48, SE 42 is returned in response

Table 0903555—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Merchant
Presented QR and Mastercard Digital Enablement Service (MDES) can receive Authorization Requests containing token funding
transactions for electronic commerce and contactless magnetic stripe acceptance environments; process them, and send correctly
formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 304
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903555—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PURCHASE (FUNDING)
0100 090355500001 1 0 TRANSACTION NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved for a consumer's token on a DSRP UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information).

1 DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
if available
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP) and SE 43 is present if issuer opt-in to receive.
DE 48, SE 71 = 37Vb50Cb51Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 305
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PURCHASE (FUNDING)
0100 090355500002 1 0 TRANSACTION NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Cloud-based token successfully mapped, validated, and issuer approved
for a consumer's token on a DSRP UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.

2 DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
if available
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP) and SE 43 is present if issuer opt-in to receive.
DE 48, SE 71 = 37Vb50Cb61Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 306
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PURCHASE (FUNDING)
0100 090355500003 1 0 TRANSACTION NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved for a SecureCode Full UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
3 if available
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode) and SE 43 is present and forwarded to issuer for validation.
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 307
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PURCHASE (FUNDING)
0100 090355500004 1 0 TRANSACTION NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Cloud-based Payment token successfully mapped, validated, and issuer
approved for a SecureCode Full UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
4 if available
DE 48, SE 33, SF 1 = H (MDES Cloud-based Paymment Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode) and SE 43 is present and forwarded to issuer for validation.
DE 48, SE 71 = 33Vb50Cb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 308
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE (FUNDING)
TRANSACTION
0100 090355500005 1 0 SIGNATURE OR NO CVM 00 91 0 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved for a consumer's token on a magnetic stripe contactless transaction.
DE 2 and DE 14 contain PAN data.
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
5 DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
if available.
DE 35 (Track Data) present if issuer opt-in to receive crypto data.
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 37Vb50Cb52Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 309
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE (FUNDING)
TRANSACTION
0100 090355500006 1 0 SIGNATURE OR NO CVM 00 91 0 412 00

Merchant Presented QR service performed and MDES Cloud-based token successfully mapped, validated, and issuer approved
for a consumer's token on a magnetic stripe contactless transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
6 DE 48, SE 32 (MasterCard Assigned ID) and DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
if available
DE 35 (Track Data) present if issuer opt-in to receive crypto data
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 37Vb50Cb62Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 310
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0903556—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Merchant
Presented QR can receive Authorization Requests containing non-token funding transactions for electronic commerce and
contactless magnetic stripe acceptance environments; process them, and send correctly formatted Authorization Responses.

Table 0903556—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PURCHASE (FUNDING)
0100 090355600003 1 N/A TRANSACTION NO CVM 00 81 6 001-010 00

Merchant Presented QR service funding transaction for a consumer's PAN was successfully processed
DE 2 (Primary Account Number) contains a PAN

1 DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 42 (Electronic Commerce Indicators) = 212 (SecureCode) and SE 43 is present
DE 48, SE 71 = 37Vb indicates Merchant Presented QR Blocking Service valid OBS result
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 311
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE (FUNDING)
TRANSACTION
0100 090355500005 1 N/A SIGNATURE OR NO CVM 00 91 0 001-010 00

Merchant Presented QR service funding transaction for a consumer's PAN was successfully processed
DE 2 (Primary Account Number) contains a PAN
2
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 71 = 37Vb indicates Merchant Presented QR Blocking Service valid OBS result
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number) ; and
SE 06 (QR Dynamic Code Data) are present

Table 0904101—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Pay with Rewards
Service—Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message authorization application can receive and process MasterCard Pay
with Rewards Service transactions in Authorization Requests and Advices, and return correctly formatted Authorization Responses.
Issuers must register redemption cards into the Mastercard Pay with Rewards Service.
MasterCard will perform dynamic account mapping in real-time during authorization processing to route transactions to the
appropriate funding source.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 312
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0904101—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Mastercard Pay with Rewards
Service—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0100 090410100001 1 1 SIGNATURE 00 90 0 001-010 00

DE 2 = Funding card
DE 14 (Expiration date of funding card)
1
DE 48, SE 33 (PAN Mapping file information), SF 1 (Account number indicator) = R (Pay with Rewards card), SF 2 (Account
number), SF 3 (Expiration date), SF 4 (Product code if provided)
DE 48, SE 71, SF 1 = 27 (Pay with Rewards Service), SF 2 = L (Pay with Rewards transaction funded using consumer loyalty
points)

MSR PURCHASE
0120 090410100011 1 1 SIGNATURE 00 90 0 001-010 00

Processed by Stand-In on issuer's behalf


DE 39 = 00 (Approved)
DE 2 = Funding card
2
DE 48, SE 33 (PAN Mapping file information); SF 1 (Account number indicator) = R (Pay with Rewards card), SF 2 (Account
number), SF 3 (Expiration data), SF 4 (Product code, if provided)
DE 48, SE 71, SF 1 = 27 (Pay with Rewards Service), SF 2 = L (Pay with Rewards transaction funded using consumer loyalty
points)
DE 60 = 1010000 (IPS signed out; accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 313
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 090410100003 1 1 SIGNATURE 00 90 0 001-010 00

Transaction rejected by Mastercard Rewards System


DE 39 = 05 (Do not honor)
DE 2 = Pay with Rewards card
3
DE 48, SE 71, SF 1 = 27 (Pay with Rewards Service), SF 2 = R (Pay with Rewards transaction declined on issuer's behalf for
failing rules/restrictions)
DE 60, SF 1 = 126 (Pay with Rewards processing advice to issuer), SF 2 = 0121 (Reject: Pay with Rewards - Redemption rule(s)
failed)
DE 121 = 000004 (Mastercard Rewards System)

MSR PURCHASE
0120 090410100004 1 1 SIGNATURE 00 90 0 001-010 00

Transaction rejected by Mastercard Rewards System


DE 2 = Pay with Rewards card
DE 39 = 05 (Do not honor)
4
DE 48, SE 71, SF 1 = 27 (Pay with Rewards Service), SF 2 = N (Pay with Rewards transaction decline - card not registered for
service)
DE 60, SF1 = 126 (Pay with Rewards processing advice to issuer), SF 2 = 0123 (Reject: Pay with Rewards - account not
registered)
DE 121 = 000004 (Mastercard Rewards System)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 314
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0120 080410100014 1 1 SIGNATURE 00 90 0 001-010 00

Transaction rejected by Mastercard Rewards System


DE 39 = 05 (Do not honor)
DE 2 = Pay with Rewards
5
DE 48, SE 71, SF 1 = 27 (Pay with Rewards Service), SF 2 = I (Pay with Rewards transaction decline on issuer's behalf for
insufficient points balance)
DE 60, SF 1 = 126 (Pay with Rewards processing advice to issuer), SF 2 = 0120 (Reject: Pay with Rewards - insufficient points
balance)
DE 121 = 000004 (Mastercard Rewards System)

MSR PURCHASE
0120 090410100006 1 1 SIGNATURE 00 90 0 001-010 00

Transaction rejected by Mastercard Rewards System


DE 39 = 96 (System error)
6 DE 2 = Pay with Rewards
DE 48, SE 71, SF 1 = 27 (Pay with Rewards Service), SF 2 = U (Pay with Rewards Service was not performed successfully)
DE 60, SF 1 = 126 (Pay with Rewards processing advice to issuer), SF 2 = 0122 (Decline: Pay with Rewards Service was not
performed successfully)
DE 121 = 000004 (Mastercard Rewards System)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 315
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 0906161—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application can receive Authorization Requests
containing Token Service Provider (TSP) Token/PAN Mapping related information for various POS entry modes, process them and
send correctly formatted Authorization Responses.

NOTE: Issuer response contains DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

Table 0906161—Issuer On-behalf Services - DMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0100 090616100001 1 0 OR NO CVM 00 91 0 001-010 00

TSP Token/PAN mapping completed.


1
DE 2 contains PAN.
DE 48, SE 33 contain token information; DE 35 and/or DE 45 are passed from the acquirer.
DE 48, SE 71 = 14Cb for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 316
Dual Message Authorization—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

DYNAMIC MSR
PURCHASE SIGNATURE
0100 090616100002 1 0 OR NO CVM 00 90 0 001-010 00

TSP Token/PAN mapping completed.


2
DE 2 contains PAN.
DE 48, SE 33 contain token information; DE 35 and/or DE 45 are passed from the acquirer.
DE 48, SE 71 = 14Cb for the on-behalf service results

ELECTRONIC COMMERCE
0100 090616100003 1 0 PURCHASE NO CVM 00 81 6 001-010 00

TSP Token/PAN mapping completed.


3
DE 2 contains PAN.
DE 48, SE 33 contains token information; DE 48, SE 42 and SE 43 (if present) are passed from the acquirer.
DE 48, SE 71 = 14Cb for the on-behalf service results

MSR CONTACTLESS ATM


BALANCE INQUIRY
0100 090616100011 1 0 ONLINE PIN 30 91 0 V 001-010 00

TSP Token/PAN mapping completed.


4 DE 35 and/or 45 track da ta are passed from the acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0110: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 317
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS ATM


WITHDRAWAL ONLINE
0100 090616100012 1 0 PIN 01 91 0 V 001-010 00

TSP Token/PAN mapping completed.


5 DE 35 and/or 45 track da ta are passed from the acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0110: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

Test Cases—ICC-based Operations


The test cases listed in this section are applicable when upgrading to integrated circuit card (ICC)-based operations. Within this
section, both contact ICC-based operations and contactless ICC-based operations are addressed. Select and run test cases from This
tables where the acquirer supports the Business Transaction described for the test case.

NOTE:
The transaction amounts customers use must be above the floor limit to cause the transaction to go online, as required in the test
cases (transaction amounts below the floor limit will be processed offline).

Products and Services


The following test cases in this section test whether a customer's issuer Single Message authorization application can send correctly
formatted Financial Transaction Requests and process the resulting Financial Transaction Request Responses when presented under
conditions that are specific to all additional features available.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 318
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service With DE22 Conversion—Authorization Requests
The following test cases will test whether an issuer's Dual Message application can process Authorization Request messages
processed by the Mastercard Chip to Magnetic Stripe Conversion Service with DE22 Conversion.

NOTE: Issuers that choose not to receive the results of the Chip to Magnetic Stripe Conversion Service should not run these tests.

Table 0950201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service With DE22 Conversion—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095020100001 1 N/A SIGNATURE 00 05 0 101-105 00
1
DE 48, SE 71 = 01Cb indicates conversion from DE 22, SF 1 = 05 (PAN auto-entry via chip) to SF 1 = 90 (PAN auto-entry via
magnetic stripe).

ICC CONTACTLESS
0100 095020100003 1 N/A PURCHASE SIGNATURE 00 07 0 401-405 00
2
DE 48, SE 71 = 01Sb indicates conversion from DE 22, SF 1 = 07 (PAN auto-entry via contactless M/Chip) to SF 1 = 90 (PAN
auto-entry via magnetic stripe).

ICC FALLBACK TO
MANUAL ENTRY
3 0100 095020100003 1 N/A PURCHASE SIGNATURE 00 79 0 101-105 V

DE 48, SE 71 = 01Cb indicates conversion from DE 22, SF 1 = 79 (A hybrid terminal failed - voice authorization obtained) to
SF 1 = 01 (PAN manual entry).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 319
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC FALLBACK TO
MAGNETIC STRIPE
0100 095020100004 1 N/A PURCHASE SIGNATURE 00 80 0 101-105 V
4
DE 48, SE 71 = 01Mb indicates conversion from DE 22, SF 1 = 80 (Chip card at chip-capable terminal was unable to process
transaction using data on the chip; therefore, the terminal defaulted to the magnetic stripe-read PAN.) to SF 1 = 90 (PAN
auto-entry via magnetic stripe).

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095020100005 1 N/A NO CVM 00 09 6 401-405 00

5 DE 48, SE 71 = 01Sb indicates conversion from DE 22, SF 1 = 09 (PAN entry via electronic commerce, including remote chip)
to SF 1 = 90 (PAN auto-entry via magnetic stripe).

NOTE: This test case should only be run by contactless chip issuers.

Table 0950206—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service Without DE22 Conversion—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application can process Authorization Requests
that underwent the Mastercard Chip to Magnetic Stripe Conversion Service without DE22 Conversion.
Issuers will receive the service results in DE 48, SE 71 unless they choose to suppress those results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 320
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950206—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service Without DE22 Conversion—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095020600001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00
1
DE 22, SF 1 = 05 (PAN auto-entry via chip)
DE 48, SE 71 = 01Cb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095020600002 1 N/A OR NO CVM 00 07 0 401-405 00
2
DE 22, SF 1 = 07 (PAN auto-entry via contactless M/Chip)
DE 48, SE 71 = 01Sb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

ICC FALLBACK TO
MANUAL ENTRY
0100 095020600003 1 N/A PURCHASE SIGNATURE 00 79 0 101-105 V
3
DE 22, SF 1 = 79 (PAN auto-entry via fallback to magnetic stripe)
DE 48, SE 71 = 01Cb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 321
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC FALLBACK TO
MAGNETIC STRIPE
0100 095020600004 1 N/A PURCHASE SIGNATURE 00 80 0 101-105 V
4
DE 22, SF 1 = 80 (PAN auto-entry via fallback to magnetic stripe)
DE 48, SE 71 = 01Mb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095020600005 1 N/A NO CVM 00 09 6 401-405 00

5 DE 22, SF 1 = 09 (PAN entry via electronic commerce, including remote chip)


DE 48, SE 71 = 01Sb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

NOTE: This test case should only be run by contactless chip issuers.

Table 0950251—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application can process Authorization Requests
that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Shared Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 322
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950251—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095025100001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00
1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

ICC PURCHASE
0100 095025100002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)

ICC PURCHASE
0100 095025100003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
3
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 31Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)

ICC PURCHASE
0100 095025100004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

4 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 31Kb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 323
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095025100005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
5
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Ub (Unable to process)

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095025100011 1 N/A OR NO CVM 00 07 0 401-405 00

6 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095025100012 1 N/A NO CVM 00 09 6 401-405 00

7 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 324
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950252—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application can process Stand-In Authorization
Advices that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Shared Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

Table 0950252—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095025200001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully)


1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 1010000 (IPS signed out; accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 325
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095025200002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 1010000 (IPS signed out; accept)

ICC PURCHASE
0120 095025200003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


3
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 1010054 (IPS signed out; reject: Track data format error)

ICC PURCHASE
0120 095025200004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


4
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 31Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)
DE 60 = 1010000 (IPS signed out; accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 326
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095025200005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


5
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 31Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)
DE 60 = 1010055 (IPS signed out; reject: Chip CVC invalid)

ICC PURCHASE
0120 095025200006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


6 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Kb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC PURCHASE
0120 095025200007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 96 (System error) Mastercard default response


7
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Ub (Unable to process)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 327
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095025200011 1 N/A OR NO CVM 00 07 0 401-405 00

DE 39 = 00 (Approved or completed successfully)

8 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 1010000 (IPS signed out; accept)

NOTE: This test case should only be run by contactless chip issuers.

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095025200012 1 N/A NO CVM 00 09 6 401-405 00

DE 39 = 00 (Approved or completed successfully)

9 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 1010000 (IPS signed out; accept)

NOTE: This test case should only be run by contactless chip issuers.

Table 0950261—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application can process Authorization Requests
that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Unique Key.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 328
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

Table 0950261—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095026100001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00
1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

ICC PURCHASE
0100 095026100002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)

ICC PURCHASE
0100 095026100003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
3
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 32Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 329
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095026100004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

4 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 32Kb (Neither the Issuer Chip CVC Key Record nor the Issuer CVC 1 Key Record found for Account Range /
Expiry Date combination; Service not performed)

ICC PURCHASE
0100 095026100005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
5
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Ub (Unable to process)

ICC PURCHASE
0100 095026100006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

6 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 32Lb (Issuer CVC 1 Key Record not Found for Account Range/Expiry Date Combination; Service not
performed)

ICC PURCHASE
0100 095026100007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

7 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 32Mb (Issuer Chip CVC Key Record not found for Account Range/Expiry Date Combination; Service not
performed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 330
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095026100011 1 N/A OR NO CVM 00 07 0 401-405 00

8 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095026100012 1 N/A NO CVM 00 09 6 401-405 00

9 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

Table 0950262—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application can process Stand-In Authorization
Advices that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Unique Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 331
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950262—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095026200001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully)


1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 1010000 (IPS signed out; accept)

ICC PURCHASE
0120 095026200002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 1010000 (IPS signed out; accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 332
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095026200003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


3
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 1010054 (IPS signed out; reject: Track data format error)

ICC PURCHASE
0120 095026200004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


4
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 32Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)
DE 60 = 1010000 (IPS signed out; accept)

ICC PURCHASE
0120 095026200005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


5
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 32Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)
DE 60 = 1010055 (IPS signed out; reject: Chip CVC invalid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 333
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095026200006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


6 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Kb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC PURCHASE
0120 095026200007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 96 (System error) Mastercard default response


7
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Ub (Unable to process)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC PURCHASE
0120 095026200008 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


8 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Lb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 334
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095026200009 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


9 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Mb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095026200010 1 N/A OR NO CVM 00 07 0 401-405 00

DE 39 = 00 (Approved or completed successfully)

10 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 1010000 (IPS signed out; accept)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 335
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095026200011 1 N/A NO CVM 00 09 6 401-405 00

DE 39 = 00 (Approved or completed successfully)

11 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 1010000 (IPS signed out; accept)

NOTE: This test case should only be run by contactless chip issuers.

Table 0950400—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application properly processes Authorization
Advices for declined Authorization Requests that have been processed by the Mastercard M/Chip Cryptogram Pre-validation Service.
Issuer has opted to receive declined advices for all failed M/Chip Cryptogram Pre-validation Service on-behalf results.

NOTE: These two test cases are a representative sampling of all on-behalf results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 336
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950400—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095040000001 1 N/A SIGNATURE 00 05 0 101-105 00

1 DE 39 = 05 (Do not honor) - Issuer instructs Mastercard to decline on TVR/CVR validation failed
DE 48, SE 71 = 02Tb (TVR/CVR validation failed)
DE 60 = 1150035; Transaction Processed via On-Behalf Service Decision: Rejected.

ICC PURCHASE
0120 095040000002 1 N/A SIGNATURE 00 05 0 101-105 00

2 DE 39 = 05 (Do not honor) - Issuer instructs MasterCard to decline on invalid chip cryptogram
DE 48, SE 71 = 02Ib (Invalid chip cryptogram)
DE 60 = 1150034; Transaction Processed via On-Behalf Service Decision: Rejected.

Table 0950401—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation
Service—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application properly processes Authorization
Requests that have been processed by the Mastercard M/Chip Cryptogram Pre-validation Service.
Issuer has opted to receive requests for all M/Chip Cryptogram Pre-validation Service on-behalf results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 337
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950401—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation
Service—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095040100001 1 N/A SIGNATURE 00 05 0 101-105 00
1
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

ICC PURCHASE
0100 095040100002 1 N/A SIGNATURE 00 05 0 101-105 V

2 DE 48, SE 71 = 02Ub (Unable to process)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0100 095040100003 1 N/A SIGNATURE 00 05 0 101-105 V

DE 48, SE 71 = 02Tb (Bad TVR/CVR)


3
DE 48, SE 79 contains CVR/TVR bits found to be in error
Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 338
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095040100004 1 N/A SIGNATURE 00 05 0 101-105 V

4 DE 48, SE 71 = 02Ib (Invalid cryptogram)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0100 095040100005 1 N/A SIGNATURE 00 05 0 101-105 V

5 DE 48, SE 71 = 02Gb (Valid non-ARQC cryptogram)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0100 095040100006 1 N/A SIGNATURE 00 05 0 101-105 V

6 DE 48, SE 71 = 02Ab (Valid Application Cryptogram; ATC outside allowed range)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0100 095040100007 1 N/A SIGNATURE 00 05 0 101-105 V

7 DE 48, SE 71 = 02Eb (Valid Application Cryptogram; ATC Replay)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 339
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095040100008 1 N/A SIGNATURE 00 05 0 101-105 V

8 DE 48, SE 71 = 02Kb (No matching key file)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0100 095040100009 1 N/A SIGNATURE 00 05 0 101-105 V

9 DE 48, SE 71 = 02Xb (Security platform time out)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0100 095040100010 1 N/A SIGNATURE 00 05 0 101-105 V

10 DE 48, SE 71 = 02Zb (Security platform processing error)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC CASH
DISBURSEMENT
0100 095040100021 1 N/A SIGNATURE 17 05 0 101-105 00
11
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 340
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE ONLINE


0100 095040100022 1 N/A PIN 00 05 0 V 101-105 00
12
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

ICC CONTACTLESS
0100 095040100023 1 N/A PURCHASE NO CVM 00 07 0 401-405 00

Contactless M/Chip issuers only


DE 48, SE 71 = 02Vb (Valid cryptogram)
13
Response message meets the response chip-specific general acceptance criteria plus the following
DE 55 is not present in response message.

NOTE: This test case should only be run by contactless chip issuers.

ICC PURCHASE OFFLINE


0100 095040100024 1 N/A PIN 00 05 0 101-105 00
14
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 341
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095040100025 1 N/A NO CVM 00 09 6 401-405 00

Contactless M/Chip issuers only

15 DE 48, SE 71 = 02Vb (Valid cryptogram)


Response message meets the response chip-specific general acceptance criteria plus the following
DE 55 is not present in response message.

NOTE: This test case should only be run by contactless chip issuers.

Table 0950402—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Authorization Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application can correctly process Authorization
Advices from Stand-In for request transactions processed by the Mastercard M/Chip Cryptogram Pre-validation Service which were
unable to be routed to the issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 342
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950402—Issuer On-behalf Services - DMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095040200001 1 N/A SIGNATURE 00 05 0 101-105 00

1 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on valid cryptogram.


DE 48, SE 71 = 02Vb (Valid cryptogram) and DE 48, SE 72 contains ARPC value
DE 60 = 1010000; Issuer signed out and approved by Stand-In.

ICC PURCHASE
0120 095040200002 1 N/A SIGNATURE 00 05 0 101-105 00

2 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on bad TVR/CVR


DE 48, SE 71 = 02Tb (Bad TVR/CVR) and DE 48, SE 79 contains CVR/TVR bits found to be in error.
DE 60 = 1010035; Issuer signed out and approved by Stand-In.

ICC PURCHASE
0120 095040200003 1 N/A SIGNATURE 00 05 0 101-105 00

3 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on invalid cryptogram


DE 48, SE 71 = 02Ib (Invalid cryptogram)
DE 60 = 1010034; Issuer signed out and approved by Stand-In.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 343
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0950403—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Risk Management Testing
(Authorization Request)
The following test cases will test whether an issuer's Dual Message authorization application is able to properly handle fraudulent
transaction attempts where Data Element 55 (ICC-system Related Data) has been manipulated to cause system failures. The rationale
behind this test, as well as how to execute them and interpret the results, is found in the EMV Issuer Risk Management Test Suite
document.

Table 0950403—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Risk Management Testing
(Authorization Request)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0100 095040300001 1 N/A SIGNATURE OR NO CVM 00 05 0 401-405 V

This test case is fully defined in EMV Issuer Risk Management Test Suite, test case 03-01. Please see that document for
1 instructions on executing this test and interpreting the results.

NOTE: This test case can be found in the Best practices — Enhanced Testing folder in this Mastercard
Authorization Simulator.

Table 0950501—Issuer On-behalf Services - DMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In Processing
Service—Authorization Advices (System-generated)
MasterCard issuers using the Mastercard M/Chip Cryptogram Validation in Stand-In Processing should select and run a subset of the
test cases below based upon the options they select when enrolling in this service.
Test case 1 is an approval advice, which all issuers must run.
Test cases 2 and 3 represent non-valid validation outcomes in which the issuer instructs Mastercard to approve the transaction even
though the validation failed.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 344
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Test cases 4 and 5 represent non-valid validation outcomes in which the issuer instructs Mastercard to decline the transaction in the
event of a specific validation failure.
Issuers may need to run a mixed subset of the test cases depending on the mix of instructions they send to Mastercard.
Issuers choose decline codes for each non-valid validation result and place those in a decision matrix in their On-behalf Key
Management file.
Issuers may choose from the following decline codes:
• 01 Refer to Issuer
• 04 Pickup card
• 05 Do Not Honor
• 08 Honor with Identification
• 12 Invalid Transaction
• 57 Transaction not permitted to cardholder

NOTE: Mastercard has mandated support for the Chip Cryptogram Validation in Stand-In Processing Service (OBS3).

Table 0950501—Issuer On-behalf Services - DMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In Processing
Service—Authorization Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095050100001 1 N/A SIGNATURE 00 05 0 101-105 00

1 DE 39 = 00 (Approved)- Issuer instructs Mastercard to approve on valid cryptogram


DE 48, SE 71 = 03Vb (Valid cryptogram) and DE 48, SE 72 contains ARPC value
DE 60 = 1010000; Issuer signed out and approved by Stand-In.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 345
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095050100002 1 N/A SIGNATURE 00 05 0 101-105 00

2 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on bad TVR/CVR


DE 48, SE 71 = 03Tb (Bad TVR/CVR) and DE 48, SE 79 contains CVR/TVR bits found to be in error.
DE 60 = 1010035; Issuer signed out and approved by Stand-In.

ICC PURCHASE
0120 095050100003 1 N/A SIGNATURE 00 05 0 101-105 00

3 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on invalid cryptogram


DE 48, SE 71 = 03Ib (Invalid cryptogram)
DE 60 = 1010034; Issuer signed out and approved by Stand-In.

ICC PURCHASE
0120 095050100004 1 N/A SIGNATURE 00 05 0 101-105 00

4 DE 39 = decline response chosen by issuer - Issuer instructs Mastercard to decline on bad TVR/CVR
DE 48, SE 71 = 03Tb (Bad TVR/CVR) and DE 48, SE 79 contains CVR/TVR bits found to be in error.
DE 60 = 1010035; Issuer signed out and declined by Stand-In for bad TVR/CVR.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 346
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0120 095050100005 1 N/A SIGNATURE 00 05 0 101-105 00

5 DE 39 = decline response chosen by issuer - Issuer instructs Mastercard to decline on invalid cryptogram
DE 48, SE 71 = 03Ib (Invalid cryptogram)
DE 60 = 1010034; Issuer signed out and declined by Stand-In for invalid cryptogram.

Table 0951140—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Cloud-
Based Payments Tokens)—Authorization Requests, Advices, and Reversal
The following test cases will test whether an issuer's Dual Message authorization application can receive Mastercard Cloud-Based
Payment contactless M/Chip Authorization Requests, Advices, and Reversal when the Mastercard Digital Enablement Service (MDES)
was performed, process them, and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 347
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0951140—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Cloud-
Based Payments Tokens)—Authorization Requests, Advices, and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000001 1 0 OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
1
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 348
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000002 1 0 OR NO CVM 00 07 0 422 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed cryptogram validation (invalid MD AC and invalid UMD AC). Issuer Decision Matrix indicates forward request
with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
2
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 349
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000003 1 0 OR NO CVM 00 07 0 423 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed due to invalid UMD AC (Invalid Mobile PIN). Issuer Decision Matrix indicates forward request with results if OBS
61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
3
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 350
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000004 1 0 OR NO CVM 00 07 0 424 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed due to invalid MD AC. Issuer Decision Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 351
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000005 1 0 OR NO CVM 00 07 0 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed due to Invalid TVR/CVR. Issuer Decision Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
5
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 352
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000006 1 0 OR NO CVM 00 07 0 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service unable to process. Issuer Decision Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 353
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114000011 1 N/A OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
7
DE 48, SE 26 contains Wallet Identifier SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 354
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114000012 1 N/A OR NO CVM 00 07 0 422 00

MasterCard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Chip Pre-
validation Service cryptogram validation (invalid MD AC and invalid UMD AC). Issuer decision matrix to decline (issuer
selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
8
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (issuer selection) per simulator setup:

DE 48.71 = 61K and DE 60 = 1410207 for invalid UMD AC


DE 48.71 = 61L and DE 60 = 1410208 for invalid MD AC
DE 48.71 = 61T and DE 60 = 1410211 for invalid TVR/CVR
DE 48.71 = 61U and DE 60 = 1410212 for unable to process

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 355
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114000013 1 N/A OR NO CVM 00 07 0 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Chip Pre-
validation Service cryptogram validation (ATC replay). Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
9 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Eb for the on-behalf service results.
DE 60 = 1410205 (Reject: ATC replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (mandatory default) per simulator setup:

DE 48.71 = 61D and DE 60 = 1410204 for invalid ATC


DE 48.71 = 61M and DE 60 = 1410209 for mobile PIN try counter max limit reached, token suspended.
DE 48.71 = 61P and DE 60 = 1410206 for invalid Mobile PIN.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 356
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114000010 1 N/A OR NO CVM 00 07 0 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
10 DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 357
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000040 1 0 OR NO CVM 00 07 0 412 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
11 Service without incurring any failed transaction analysis validations.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 358
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000041 1 0 OR NO CVM 00 07 0 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue processing
(send authorization request to issuer).
12
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 359
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000042 1 0 OR NO CVM 00 07 0 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue processing
(send authorization request to issuer).
13
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 360
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114000043 1 N/A OR NO CVM 00 07 0 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline (send
authorization advice to issuer).
DE 39 = 05 (Do not honor).
14
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 361
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114000044 1 N/A OR NO CVM 00 07 0 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline (send
authorization advice to issuer).
DE 39 = 05 (Do not honor).
15
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 362
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114000051 1 0 OR NO CVM 00 07 0 412 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Prevalidation Service on acquirer 0100 request
and acquirer-generated 0400 reversal request.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
16 0100: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
0100 and 0400: DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
0100 and 0400: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 363
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS ATM


BALANCE INQUIRY
0100 095114000061 1 0 ONLINE PIN 30 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 55 track data (if opt-in to receive crypto data) and DE 23 (if opt-in to receive) are present.
17
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

ICC CONTACTLESS ATM


WITHDRAWAL ONLINE
0100 095114000062 1 0 PIN 01 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 55 track data (if opt-in to receive crypto data) and DE 23 (if opt-in to receive) are present.
18
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 364
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
0100 095114000071 1 0 PURCHASE ONLINE PIN 00 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation transaction
with PIN.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
19 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 0951141—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Authorization Requests, Advices, and Reversal
The following test cases will test whether an issuer's Dual Message authorization application can receive contactless M/Chip
Authorization Requests, Advices, and Reversal for transactions when the Mastercard Digital Enablement Service (MDES) was
performed, process them, and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 365
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0951141—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Authorization Requests, Advices, and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100001 1 0 OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 366
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100006 1 0 OR NO CVM 00 07 0 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 367
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100002 1 N/A OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation; and then
Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
3
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C(MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 368
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100007 1 N/A OR NO CVM 00 07 0 414 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed M/Chip cryptogram validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
4
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 60 = 1410034 (Mastercard Digital Enablement Service; Reject: Chip validation failed).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 369
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100008 1 N/A OR NO CVM 00 07 0 417 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed M/Chip cryptogram validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 60 = 1410035 (Mastercard Digital Enablement Service; Reject: TVR/CVR validation failed).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 370
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100009 1 N/A OR NO CVM 00 07 0 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform M/Chip cryptogram
validation. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 60 = 1410032 (Mastercard Digital Enablement Service; Reject: Chip technical failure).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 371
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100010 1 N/A OR NO CVM 00 07 0 418 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but failed ATC
validation. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
7
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: ATC outside allowed range).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 372
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100011 1 N/A OR NO CVM 00 07 0 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but failed ATC
validation. Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
8
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC replay).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 373
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095114100012 1 N/A OR NO CVM 00 07 0 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
9 DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 374
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
0100 095114100015 1 0 PURCHASE ONLINE PIN 00 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation transaction
with PIN.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
10 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100021 1 0 OR NO CVM 00 07 0 418 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is out of
range. Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
11
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 375
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100022 1 0 OR NO CVM 00 07 0 419 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is a replay.
Issuer Decision Matrix indicates forward request with results if OBS 51 not successful
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
12
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 376
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100023 1 0 OR NO CVM 00 07 0 414 V

Mastercard Digital Enablement Service successfully performed PAN mapping but chip validation failure (Invalid cryptogram).
Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
13
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 377
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 085114100024 1 0 OR NO CVM 00 07 0 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping but chip validation failure (Valid ARQC/TC;
TVR/CVR invalid). Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
14
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 378
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100025 1 0 OR NO CVM 00 07 0 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping but chip validation failure (unable to process).
Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
15
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 379
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100026 1 0 OR NO CVM 00 07 0 425 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed M/Chip validation no matching key file
for this PAN, PAN expiry date and KDI combination. Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
16
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 380
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095114100051 1 0 OR NO CVM 00 07 0 412 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and Chip Prevalidation Service on acquirer 0100 request and acquirer-generated
0400 reversal request.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
17 0100: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0100 and 0400: DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
0100 and 0400: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 381
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS ATM


BALANCE INQUIRY
0100 095114100061 1 0 ONLINE PIN 30 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation.
DE 55 track data (if opt-in to receive crypto data) and DE 23 (if opt-in to receive) are present.
18
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

ICC CONTACTLESS
WITHDRAWAL ONLINE
0100 095114100062 1 0 PIN 01 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation.
DE 55 track data (if opt-in to receive crypto data) and DE 23 (if opt-in to receive) are present.
19
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 382
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0951142—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Cloud-Based Payments Tokens)—Authorization Requests, Advices, and Reversal
The following test cases will test whether an issuer's Dual Message authorization application can receive Mastercard Cloud-Based
Payment Digital Secure Remote Payment Chip Authorization Requests, Advices, and Reversals when the Mastercrd Digital
Enablement Service was performed, process them, and send correctly formatted Authorization Responses.

Table 0951142—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Cloud-Based Payments Tokens)—Authorization Requests, Advices, and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200021 1 0 NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
1
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 383
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200022 1 0 NO CVM 00 09 6 422 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC. Issuer Decision
Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 384
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200023 1 0 NO CVM 00 09 6 423 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid UMD AC (invalid mobile PIN). Issuer Decision
Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 385
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200024 1 0 NO CVM 00 09 6 424 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 386
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200025 1 0 NO CVM 00 09 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid TVR/CVR. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 387
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200026 1 0 NO CVM 00 09 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to unable to process. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 388
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114200031 1 N/A NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction; and then Stand-in approved due to issuer signed out.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.

7 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 389
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114200032 1 N/A NO CVM 00 09 6 422 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC). Issuer decision
matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
8
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (issuer selection) per simulator setup:

DE 48.71 = 61K and DE 60 = 1410207 for invalid UMD AC


DE 48.71 = 61L and DE 60 = 1410208 for invalid MD AC
DE 48.71 = 61T and DE 60 = 1410211 for invalid TVR/CVR
DE 48.71 = 61U and DE 60 = 1410212 for unable to process

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 390
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114200033 1 N/A NO CVM 00 09 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to ATC replay. Issuer decision matrix to decline
(mandatory default).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
9 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Eb for the on-behalf service results.
DE 60 = 1410205 (Reject: ATC Replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (mandatory default) per simulator setup:

DE 48.71 = 61D and DE 60 = 1410204 for invalid ATC


DE 48.71 = 61M and DE 60 = 1410209 for mobile PIN try counter max limit reached, token suspended.
DE 48.71 = 61P and DE 60 = 1410206 for invalid Mobile PIN.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 391
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114200010 1 N/A NO CVM 00 09 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
10
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 392
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200040 1 0 NO CVM 00 09 6 412 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
11 Service on a Digital Secure Remote Payment transaction without incurring any failed transaction analysis validations.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 393
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200041 1 0 NO CVM 00 09 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer).
12
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 394
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200042 1 0 NO CVM 00 09 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer).
13
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 395
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114200043 1 N/A NO CVM 00 09 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
14
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 396
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114200044 1 N/A NO CVM 00 09 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
15
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 397
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114200051 1 0 NO CVM 00 09 6 412 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Prevalidation Service on acquirer 0100 request
and acquirer-generated 0400 reversal request.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
16 0100: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
0100 and 0400: DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
0100 and 0400: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

Table 0951143—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Secure Element Tokens—Authorization Requests, Advices, and Reversal
The following test cases will test whether an issuer's Dual Message authorization application can receive contactless M/Chip token
Authorization Requests, Advices, and Reversal for token transactions when the Mastercard Digital Enablement Service (MDES) was
performed on a Digital Secure Remote Payment, process them, and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 398
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0951143—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES (Digital Secure Remote
Payment EMV - Secure Element Tokens—Authorization Requests, Advices, and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300001 1 0 NO CVM 00 09 6 412 00

MasterCard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
1 DE 48, DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 399
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300002 1 0 NO CVM 00 09 6 416 00

MasterCard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 400
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300006 1 N/A NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction and then Stand-In approved due to issuer signed out.
DE 39 = 00 (Approved).
3 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 401
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300007 1 N/A NO CVM 00 09 6 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction and then Stand-In approved due
to issuer signed out.
4 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 402
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300011 1 N/A NO CVM 00 09 6 414 00

Mastercard Digital Enablement Service successfully performed PAN mapping but invalid M/Chip cryptogram validation on a
Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
5 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 60 = 1410034 (Mastercard Digital Enablement Service; Reject: Chip validation failed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 403
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300012 1 N/A NO CVM 00 09 6 417 00

Mastercard Digital Enablement Service successfully performed PAN mapping but TVR/CVR invalid for M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
6 DE 2 token is present, DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 60 = 1410035 (Mastercard Digital Enablement Service; Reject: TVR/CVR validation failed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 404
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300013 1 N/A NO CVM 00 09 6 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
7 DE 2 Token is present, DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 60 = 1410032 (Mastercard Digital Enablement Service; Reject: Chip technical failure)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 405
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300014 1 N/A NO CVM 00 09 6 418 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
outside allowed range on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
8 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: ATC outside allowed range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 406
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300015 1 N/A NO CVM 00 09 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
replay on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
9 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC replay)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 407
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300016 1 N/A NO CVM 00 09 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
replay on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).

10 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410037 (Mastercard Digital Enablement Service; Reject: No matching key file for this PAN, PAN expiry date and KDI
combination)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 408
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0120 095114300017 1 N/A NO CVM 00 09 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
11
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 409
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300021 1 0 NO CVM 00 09 6 418 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is out of range. Issuer Decision Matrix indicates forward request with results if OBS 51
not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
12
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 410
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300022 1 0 NO CVM 00 09 6 419 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is a replay. Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
13
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 411
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300023 1 0 NO CVM 00 09 6 414 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Invalid cryptogram). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
14
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 412
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300024 1 0 NO CVM 00 09 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Valid ARQC/TC; TVR/CVR invalid). Issuer Decision Matrix indicates forward request with results if
OBS 51 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
15
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 413
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300025 1 0 NO CVM 00 09 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (unable to process). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
16
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 414
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300026 1 0 NO CVM 00 09 6 425 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but failed M/chip cryptogram validation for no matching key file for this PAN, PAN expiry date and KDI combination. Issuer
Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
17
DE DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 415
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095114300051 1 0 NO CVM 00 09 6 412 00

0400 1 0 DE 39 = 17 00

MDES successfully performed PAN mapping and Chip Prevalidation Service on acquirer 0100 request and acquirer-generated
0400 reversal request.
0100: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
18 0100: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0100 and 0400: DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
0100 and 0400: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100 and 0400: DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request and
reversal or optionally inserted by issuer as BIN Controller in issuer response.
0400: DE 39 = 17 (Customer Cancellation) and DE 48, SE 63 (Trace ID).
0400: DE 48, SE 71 = 50Cb for the on-behalf service results.

Table 0951152—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices
The following test cases will test whether an issuer's Dual Message authorization application for issuers that participate in the
Mastercard Digital Enablement Service (MDES) can receive MDES device token Authorization Request and Advices that have
undergone MDES mapping but for various reasons do not contain any cryptographic on-behalf service results; process them, and
send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 416
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0951152—Issuer On-behalf Services - DMS Auth—ICC Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Authorization Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095115200001 1 0 OR NO CVM 00 07 0 001-010 00

MDES successfully performed PAN mapping on a device token for an incremental authorization.
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
1 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 63 indicates an incremental authorization.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
REFUND SIGNATURE OR
0100 095115200002 1 0 NO CVM 20 07 0 001-010 00

Mastercard Digital Enablement Service successfully performed PAN mapping on a device token for a refund authorization.
2 DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token requestor ID), and SF 8 (Storage technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 417
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095115200011 1 N/A OR NO CVM 00 07 0 515 00

MDES unsuccessfully performed PAN mapping.


DE 2 containing the token and DE 14.
3
DE 39 = 14 (Invalid card number).
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095115200012 1 N/A OR NO CVM 00 07 0 513 00

MDES unable to perform PAN mapping.


DE 2 containing the token and DE 14 as applicable.
4
DE 39 = 96 (System error).
DE 48, SE 71 = 50Ub for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 418
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095115200013 1 N/A OR NO CVM 00 07 0 515 00

MDES rejected request for suspended token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted Card).
5
DE 48, SE 33, SF 1(Account Type Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3 (Expiration
Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410202 (Mastercard Digital Enablement Service Reject:Token in suspended status)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 419
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095115200014 1 N/A OR NO CVM 00 07 0 515 00

MDES rejected request for deactivated token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted card).
6
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410203 (Mastercard Digital Enablement Service Reject: Token deactivated)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0120 095115200015 1 N/A OR NO CVM 00 07 0 016 00

MDES failed PAN mapping due to format error.


DE 2 and DE 14 (if applicable) contain token information.
7
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 002.
DE 48, SE 71 = 50Fb for the on-behalf service results.
DE 60 = 1410201 (MDES Advice to Issuer; Reject: Invalid Token-Primary Account Number mapping relationship).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 420
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0420 095115200026 1 N/A OR NO CVM 00 07 311 00

MDES successfully performed PAN mapping on system-generated 0420 reversal advice due to Masterecard unable to deliver
0400 reversal request to issuer.

8 DE 39 = 17 (Customer Cancellation), DE 48, SE 63 (Trace ID), and DE 60, SF 1 = 403 (Issuer signed out).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token
Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller in issuer reversal advice and need not be inserted
by issuer as BIN Controller in issuer response.

Table 0951201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Authorization Request, Reversal and Advice
The following test case will test whether a customer's Mastercard PAN Mapping Service issuer Dual Message authorization
application can receive and process Authorization Request, Reversal and Advice that have undergone mapping from the contactless
PAN to the real PAN and return correctly formatted Authorization Responses.
Issuers participating in the PAN Mapping Service are required to test with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 421
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0951201—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Authorization Request, Reversal and Advice

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
0100 095120100001 1 N/A PURCHASE NO CVM 00 07 0 411 00

0400 1 N/A DE 39 = 17 00

DE 48, SE 33 = Contactless PAN information.


1
DE 48, SE 71 = 14Cb (PAN Mapping Service completed)
DE 55 is present; track data (DE 35 or DE 45) is not present.
Response message meets the authorization response contactless M/Chip-specific general acceptance criteria.
Full reversal - customer cancellation.

ICC CONTACTLESS
0120 095120100002 1 N/A PURCHASE NO CVM 00 07 0 415 00

Issuer provided contactless PAN must not be setup for PAN Mapping Service
2
DE 39 = 14 (Invalid card number)
DE 48, SE 71 = 14Ib (Contactless PAN mapping invalid)
DE 60, SF 1 = 140 (unable to convert contactless PAN account number)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 422
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0953555—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Merchant
Presented QR and Mastercard Digital Enablement Service (MDES) can receive Authorization Requests containing token funding
transactions for contactless M/chip acceptance environment; process them, and send correctly formatted Authorization Responses.

Table 0953555—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095355500001 1 0 OR NO CVM 00 07 0 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved on chip contactless transaction.
0100: DE 2 and DE 14 contain PAN data; DE 18 contains any valid value for Merchant Presented QR Funding.
0100: DE 23 (if opt-in to receive) and DE 55 (if opt-in to receive) are present.

1 0100: DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
0100: DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100: DE 48, SE 71 = 37Vb50Cb51Vb for the on-behalf service results.
0100: DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
0100: DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
0100: DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account
Number); and SE 06 (QR Dynamic Code Data) are present.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 423
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095355500002 1 0 OR NO CVM 00 07 0 412 00

Merchant Presented QR service performed and MDES Cloud-based Payments token successfully mapped, validated, and issuer
approved on chip contactless transaction.
0100: DE 2 and DE 14 contain PAN data; DE 18 contains any valid value for Merchant Presented QR Funding.
0100: DE 23 (if opt-in to receive) and DE 55 (if opt-in to receive) are present.

2 0100: DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
0100: DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0100: DE 48, SE 71 = 37Vb50Cb61Vb for the on-behalf service results.
0100: DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
0100: DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
0100: DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account
Number); and SE 06 (QR Dynamic Code Data) are present.

Table 0953556—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application that is participating in Merchant
Presented QR can receive Authorization Requests containing non-token funding transactions for contactless M/chip acceptance
environment; process them, and send correctly formatted Authorization Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 424
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0953556—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095355600001 1 N/A OR NO CVM 00 07 0 001-010 00

Merchant Presented QR service for a funding transaction for a consumer's PAN was successfully processed.
0100: DE 18 contains any valid value for Merchant Presented QR Funding.
1
0100: DE 23 (if opt-in to receive) and DE 55 (if opt-in to receive) are present.
0100: DE 48, SE 71 = 37Vb for the on-behalf service results.
0100: DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
0100: DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account
Number); and SE 06 (QR Dynamic Code Data) are present.

Table 0956161—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests
The following test cases will test whether an issuer's Dual Message authorization application can receive Authorization Requests
containing Token Service Provider (TSP) Token/PAN Mapping related information for various POS entry modes, process them and
send correctly formatted Authorization Responses.

NOTE: Issuer response contains DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 425
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 0956161—Issuer On-behalf Services - DMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Authorization Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0100 095616100004 1 0 OR NO CVM 00 07 0 00

TSP Token/PAN mapping completed.


1
DE 2 contains PAN.
DE 48, SE 33; DE 35; and DE 55 contain token information.
DE 48, SE 71 = 14Cb for the on-behalf service results

ICC ELECTRONIC
COMMERCE PURCHASE
0100 095616100005 1 0 NO CVM 00 09 6 00

TSP Token/PAN mapping completed.


2
DE 2 contains PAN.
DE 48, SE 33 and DE 55 contain token information.
DE 48, SE 71 = 14Cb for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 426
Dual Message Authorization—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS ATM


BALANCE INQUIRY
0100 095616100011 1 0 ONLINE PIN 30 07 0 V 00

TSP Token/PAN mapping completed.


3 DE 55 chip data, DE 23 as well as DE 35 if present from acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0110: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

ICC CONTACTLESS ATM


WITHDRAWAL ONLINE
0100 095616100012 1 0 PIN 01 07 0 V 00

TSP Token/PAN mapping completed.


4 DE 55 chip data, DE 23 as well as DE 35 if present from acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0110: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 427
Single Message System—Issuer On-behalf Services

Chapter 2 Single Message System—Issuer On-behalf Services


This chapter describes the test cases for conducting individual application testing and validation of a customer's Single Message System
application.

Introduction...........................................................................................................................................................................................433
TRIC Table Notations......................................................................................................................................................................... 433
Test Cases—Magnetic Stripe-based Operations...................................................................................................................................... 434
Base Testing...................................................................................................................................................................................... 434
Table 3501401—Issuer On-behalf Services - SMS Auth—MSR Base—MoneySend Payment Transactions—Financial Transaction
Requests, Advices and Reversals................................................................................................................................................... 434
Products and Services—Debit............................................................................................................................................................ 449
Table 3500402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode AAV Verification
Service—Financial Transaction Request......................................................................................................................................... 450
Table 3500802—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic AAV
Verification in Stand-In Service—Financial Transaction Request......................................................................................................455
Table 3500852—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—Financial
Transaction Requests and Advices................................................................................................................................................. 460
Table 3500853—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service—
Financial Transaction Advices........................................................................................................................................................ 463
Table 3501105—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping Service
with Dynamic CVC 3 Pre-validation—Financial Transaction Requests............................................................................................. 465
Table 3501106—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping Service
with Dynamic CVC 3 Pre-validation—Financial Transaction Advices............................................................................................... 468
Table 3501140—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Cloud-Based Payments Tokens) Financial Transaction Request, Advices, and Reversals................................................................... 475
Table 3501141—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals............................................................................ 494

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 428
Single Message System—Issuer On-behalf Services

Table 3501142—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Financial Transaction Request, Advices, and Reversals.....................................................................................513
Table 3501143—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure Element
Tokens)—Financial Transaction Request, Advices, and Reversals.................................................................................................... 531
Table 3501145—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe - Secure
Element Tokens)—Financial Transaction Request, Advices, and Reversals....................................................................................... 551
Table 3501146—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-Based
Payments Token)-Financial Transaction Requests........................................................................................................................... 567
Table 3501147—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure Element
Token)-Financial Transaction Requests........................................................................................................................................... 573
Table 3501149—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES for Merchants and Commerce
Platforms—Financial Transaction Requests.................................................................................................................................... 579
Table 3501152—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES Device Token Without Cryptogram
—Financial Transaction Requests and Advices............................................................................................................................... 582
Table 3501202—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-validation
Service—Financial Transaction Requests........................................................................................................................................ 597
Table 3501203—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-validation
Service—Financial Transaction Advices.......................................................................................................................................... 600
Table 3501205—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Validation in
Stand-in—Financial Transaction Advices (System-generated)......................................................................................................... 605
Table 3501301—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud Scoring
Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Financial Transaction Requests..............................................612
Table 3501303—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Safety Net—Financial
Transaction Advice........................................................................................................................................................................614
Table 3501306—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MasterCard Spend Alerts or Spend
Controls Services—Financial Transaction Requests and Advices..................................................................................................... 614
Table 3501402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Funding Transactions—
Financial Transaction Requests and Advices...................................................................................................................................622
Table 3501411—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Issuer Transaction Controls—
Financial Transaction Requests and Advices...................................................................................................................................628

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 429
Single Message System—Issuer On-behalf Services

Table 3501601—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card Spend
Control Service —Financial Transaction Requests and Reversals..................................................................................................... 642
Table 3501602—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card Spend
Control Service—Financial Transaction Advices (Acquirer-generated)............................................................................................. 645
Table 3501603—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card Spend
Control Service—Financial Transaction Advices (System-generated)............................................................................................... 646
Table 3501604—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card Service
—Financial Transaction Requests and Reversal.............................................................................................................................. 650
Table 3501605—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card Service
—Financial Transaction Advices (Acquirer-generated).................................................................................................................... 653
Table 3501606—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card Service
— Financial Transaction Advices (System-generated)..................................................................................................................... 654
Table 3501620—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Optional Partial
Approval Processing—Financial Transaction Requests.................................................................................................................... 659
Table 3503525—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Non-token PAN)—Financial Transaction Requests and Advices..................................................................................661
Table 3503526—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Financial Transaction Requests and Advices.......................................................................................... 669
Table 3503535—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Financial Transaction Requests..................................................................................................... 674
Table 3503536—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Financial Transaction Requests..............................................................................................................675
Table 3503555—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests..............................................................................................................678
Table 3503556—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests..................................................................................................... 685
Table 3504900—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Maestro Switching of Visa Tokenized
Transactions—Financial Transaction Requests, Advices, and Reversals............................................................................................686
Table 3506161—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests....................................................................................................................................693

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 430
Single Message System—Issuer On-behalf Services

Test Cases—ICC-based Operations.........................................................................................................................................................695


Products and Services........................................................................................................................................................................ 695
Table 3550201—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion Service
With DE22 Conversion—Financial Transaction Requests................................................................................................................696
Table 3550203—Issuer On-behalf Services - SMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In Processing
Service—Financial Transaction Advices (System-generated)........................................................................................................... 698
Table 3550206—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion Service
Without DE22 Conversion—Financial Transaction Requests...........................................................................................................700
Table 3550250—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Financial Transaction Requests......................................................................................................................... 703
Table 3550253—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Financial Transaction Advices (System-generated)............................................................................................ 705
Table 3550260—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Financial Transaction Requests.........................................................................................................................710
Table 3550263—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Financial Transaction Advices (System-generated)............................................................................................ 713
Table 3550300—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation Service
—Financial Transaction Advices (System-generated)...................................................................................................................... 719
Table 3550301—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation Service
—Financial Transaction Requests...................................................................................................................................................720
Table 3550302—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation Service
—Financial Transaction Advices (System-generated)...................................................................................................................... 726
Table 3550403—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation Service
—Risk Management Testing (Financial Transaction Requests)........................................................................................................ 727
Table 3550504—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Financial Transaction Request and Reversal............................................................................................................ 728
Table 3551140—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Cloud-Based
Payments Tokens)—Financial Transaction Requests, Advices, and Reversals................................................................................... 729

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 431
Single Message System—Issuer On-behalf Services

Table 3551141—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Financial Transaction Requests, Advices, and Reversals......................................................................................749
Table 3551142—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment EMV
- Cloud-Based Payments Tokens)—Financial Transaction Request, Advices, and Reversals.............................................................. 766
Table 3551143—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment EMV
- Secure Element Tokens)—Financial Transaction Requests, Advices, and Reversals........................................................................ 784
Table 3551152—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES Device Token PAN Mapping Without
Cryptogram—Financial Transaction Requests and Advices.............................................................................................................803
Table 3553555—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests..............................................................................................................808
Table 3553556—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests..................................................................................................... 810
Table 3554900—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Maestro Switching of Visa Tokenized
Transactions—Financial Transaction Requests, Advices, and Reversals............................................................................................811
Table 3556161—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests....................................................................................................................................816

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 432
Single Message System—Issuer On-behalf Services
Introduction

Introduction
This chapter contains details about the test cases applicable to the Issuer On-behalf Services business profile during individual
application testing and validation of a customer's issuer Single Message System Debit application.
Separate test cases are provided for magnetic stripe-based operations. If customers are undergoing testing and validation for
magnetic stripe-based operations, only those test cases described in the Test Cases—Magnetic Stripe-based Operations section must
be conducted.
Within the Test Cases—Magnetic Stripe-based Operations section, test cases are described for contact operations. If customers are
undergoing testing and validation for contact operations, only those test cases described for contact operations must be conducted.
The following manuals in the Testing Reference Information Center (TRIC) document set provide references to these test cases,
indicating when they should be conducted:
• Offline Validation
• Online Validation

TRIC Table Notations


This table defines notations that appear in tables throughout this chapter.

TRIC Table Notations

Notation Definition

M Indicates a Mandatory business transaction.

C Indicates a Conditional business transaction.

N/A Indicates Not Applicable.

x For addenda messages, indicates No Information.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 433
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Notation Definition

1 Where it appears in a SIM or MTF column, indicates testing is recommended for that environment.

0 Where it appears in a SIM or MTF column, indicates testing is available for that environment.

Test Cases—Magnetic Stripe-based Operations


The test cases listed in this section are applicable to magnetic stripe-based operations only. Select the appropriate business
transactions from the following tables and conduct the associated test cases.

Base Testing
The base test cases for this section are described below.

Table 3501401—Issuer On-behalf Services - SMS Auth—MSR Base—MoneySend Payment Transactions—Financial


Transaction Requests, Advices and Reversals
The following test cases are designed to ensure that an issuer Single Message application is able to receive and process properly
formatted Mastercard MoneySend Payment Transactions in Financial Transaction messages and also return correctly formatted
Financial Transaction Responses.

NOTE: Issuers must comply with MoneySend Payment Transaction processing requirements including the following:

1. Validate funds are available in Debit and Prepaid accounts within 30 minutes of the approval of the authorization request.
2. Validate that the amount posted to the card account is the same as the amount indicated in DE 4 (Amount, Transaction) when the
transaction currency in DE 49 matches the currency of the card account.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 434
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501401—Issuer On-behalf Services - SMS Auth—MSR Base—MoneySend Payment Transactions—Financial


Transaction Requests, Advices and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100001 1 1 NO CVM 28 01 0 001-010 00

0420 1 1 DE 39 = 00 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
1 0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match
to names on the applicable screening lists, while lower scores indicate a less likely match.
0200: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
0420: Full reversal, DE 39 = 00.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 435
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100002 1 1 NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
2 0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match
to names on the applicable screening lists, while lower scores indicate a less likely match.
0200: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 436
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100003 1 1 NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score cannot be determined.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
3 0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains sender Sanction Screening score value 999 indicating unable to obtain a score for a cross
border or U.S. domestic transaction.
0200: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 437
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100004 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction unable to process Mastercard Blocking; Sanction Screening score not provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
4
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67 not present.
0200: DE 48, SE 71 = 33Ub (MoneySend Blocking Service; Unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 438
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100005 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score not provided for non-participating
country.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
5
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67 not present.
0200: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 439
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100014 1 1 NO CVM 28 01 0 001-010 00

0420 1 1 DE 39 = 00 00

MoneySend Payment transaction passes Mastercard Blocking; Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is present.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
6 0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains data in all subelements and subfields.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match
to names on the applicable screening lists, while lower scores indicate a less likely match.
0200: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
0420: Full reversal; DE 39 = 00 (Approval),

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 440
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100006 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
7 values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Gb (MoneySend Blocking; Transaction limit not allowed for the MoneySend Payment type and
Country)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500064.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 441
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100007 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

8 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Hb (MoneySend Blocking; Merchant not allowed for the MoneySend Payment type)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500067.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 442
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100008 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

9 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Ib (MoneySend Blocking; Cross-border not allowed for the MoneySend Payment type)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500072.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 443
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100009 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

10 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Jb (MoneySend Blocking; MoneySend Transaction Count exceeded)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500077.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 444
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100010 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

11 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Kb (MoneySend Blocking; Aggregate transaction amount limit exceeded)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500065.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 445
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100011 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking; Sanction Screening score (if applicable) is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

12 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score (if applicable).
0220: DE 48, SE 71 = 33Wb (MoneySend MasterCard Blocking; Country not allowed for the MoneySend Transaction)
0220: DE 39 = 12 (Invalid Transaction); DE 60 = 1500072 (Reject: Geographic Restriction).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 446
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350140100013 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Mastercard Blocking - Product code invalid for the Transaction Type indicator; Sanction
Screening score (if applicable) is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
13
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) and DE 108 (MoneySend Reference Data) are present.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score (if applicable).
0220: DE 48, SE 71 = 33Sb (MoneySend MasterCard Blocking - Product code invalid for the Transaction Type indicator)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500071 (Reject: Decline Other).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 447
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100021 1 1 NO CVM 28 01 0 001-010 V

Account Status Inquiry for a MoneySend Payment Transaction


DE 3, SF 1 = 28 (Payment Transaction); DE 4 = zero amount; and DE 14 (Expiration Date) not present
DE 18 = MCC 6537 (MoneySend intercountry) or MCC 6536 (MoneySend intracountry)
DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match to
14 names on the applicable screening lists, while lower scores indicate a less likely match.
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 61, SF 7 = 8 (Account Status Inquiry Service)
DE 124 contains mandated MoneySend Payment subfields.
DE 108 (MoneySend Reference Data) contains only the mandated data.

NOTE: Issuers have the option to use 85 (Not declined) or 05 (Do not honor) in DE 39.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 448
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350140100022 1 1 NO CVM 28 01 0 001-010 V

Account Status Inquiry for a MoneySend Payment Transaction


DE 3, SF 1 = 28 (Payment Transaction); DE 4 = non-zero amount; and DE 14 (Expiration Date) not present
DE 18 = MCC 6537 (MoneySend intercountry) or MCC 6536 (MoneySend intracountry)
DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100. A higher score indicates a closer match to
15 names on the applicable screening lists, while lower scores indicate a less likely match.
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)
DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 61, SF 7 = 8 (Account Status Inquiry Service)
DE 124 contains mandated MoneySend Payment subfields.
DE 108 (MoneySend Reference Data) contains only the mandated data.

NOTE: Issuers have the option to use 85 (Not declined) or 05 (Do not honor) in DE 39.

Products and Services—Debit


The test cases for this section are described below.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 449
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3500402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode AAV
Verification Service—Financial Transaction Request
The following test cases will test whether an issuer's Single Message application can receive Financial Transaction Requests
containing SecureCode AAV results when issuer is participating in Mastercard SecureCode AAV Verification Service, process them,
and return correctly formatted responses.
Issuers will also receive DE 48, SE 66 (Authentication Data) if provided by acquirer.
Test cases 1-3 are for SPA and test cases 4-14 are for SPA2 algorithm.

NOTE: Mastercard SecureCode AAV Verification service is mandatory on every authorization transaction for all issuers unless issuer
provides evidence of self-validation which excuses them from validating the Mastercard attempts AAV values.

Table 3500402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode AAV
Verification Service—Financial Transaction Request

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350040200001 1 N/A PURCHASE NO CVM 00 81 6 001-010 00
1
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results) and DE 48, SE 42 and 43 are present
DE 48, SE 66 (Authentication Data), SF 1 = 1 (3DS 1.0), and SF 2 (Directory Server Transaction ID) are present

ELECTRONIC COMMERCE
0200 350040200002 1 N/A PURCHASE NO CVM 00 81 6 001-010 V
2
DE 48, SE 71 = 05Ib (Invalid SecureCode AAV results)and DE 48, SE 42 and 43 are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 450
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350040200003 1 N/A PURCHASE NO CVM 00 81 6 001-010 V
3
DE 48, SE 71 = 05Ub (Unable to process)and DE 48, SE 42 and 43 are present

ELECTRONIC COMMERCE
0200 350040200011 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction successfully validated by Mastercard SecureCode AAV
Verification Service
4
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

ELECTRONIC COMMERCE
0200 350040200012 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Challenge transaction successfully validated by Mastercard SecureCode AAV
5 Verification Service
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kH
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 451
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350040200013 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Frictionless transaction successfully validated by Mastercard SecureCode AAV
6 Verification Service
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kJ
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

ELECTRONIC COMMERCE
0200 350040200014 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Challenge transaction successfully validated by Mastercard SecureCode AAV
7 Verification Service
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kK
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

ELECTRONIC COMMERCE
0200 350040200015 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Attempts)-Frictionless transaction successfully validated by Mastercard SecureCode AAV Verification
Service
8
DE 48, SE 42, SF 1 = 211 and DE 48, SE 43 containing first two values = kL
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 05Vb (Valid SecureCode AAV results)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 452
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350040200021 1 N/A PURCHASE NO CVM 00 81 6 001-010 V

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates forward results in request message
9 DE 48, SE 42, SF 1 = 212
and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Kb (No matching key file for this PAN, PAN expiry date and KDI combination)
DE 39 issuer decision

ELECTRONIC COMMERCE
0200 350040200022 1 N/A PURCHASE NO CVM 00 81 6 001-010 V

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates forward results in request message
10
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Xb (Security platform time out)
DE 39 issuer decision

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 453
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350040200023 1 N/A PURCHASE NO CVM 00 81 6 001-010 V

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates forward results in request message
11
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Zb (Security platform processing error)
DE 39 issuer decision

ELECTRONIC COMMERCE
0220 350040200031 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates decline request and forward results in advice message
12 DE 48, SE 42, SF 1 = 212
and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Kb (No matching key file for this PAN, PAN expiry date and KDI combination)
DE 39 = 05 (Do not honor) and DE 60 = 1150037 (Transaction Processed via On-behalf Service Decision: Reject)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 454
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350040200032 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates decline request and forward results inadvice message
13
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Xb (Security platform time out)
DE 39 = 05 (Do not honor) and DE 60 = 1150038 (Transaction Processed via On-behalf Service Decision: Reject)

ELECTRONIC COMMERCE
0220 350040200033 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction failed validation by Mastercard SecureCode AAV Verification
Service and issuer decision matrix indicates decline request and forward results inadvice message
14
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 05Zb (Security platform processing error)
DE 39 = 05 (Do not honor) and DE 60 = 1150040 (Transaction Processed via On-behalf Service Decision: Reject)

Table 3500802—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic
AAV Verification in Stand-In Service—Financial Transaction Request
The following test cases will test whether an issuer's Single Message online application can receive Financial Transaction Advices that
contain Mastercard SecureCode Accountholder Authentication Value (AAV) results when issuer is participating in Mastercard
SecureCode AAV Verification in Stand-In Service, process them, and return correctly formatted Financial Transaction Responses.
Issuers will also receive DE 48, SE 66 (Authentication Data) if provided by acquirer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 455
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

NOTE: All issuers globally that participate in Stand-In processing must have Mastercard SecureCode Dynamic AAV Verification in
Stand-In Processing performed during Stand-In processing. Issuers are required to perform each of the two test cases.

Test cases 1-3 are for SPA and test cases 4-11 are for SPA2 algorithm.

Table 3500802—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard SecureCode Dynamic
AAV Verification in Stand-In Service—Financial Transaction Request

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350080200001 1 N/A PURCHASE NO CVM 00 81 6 013 00

1 DE 39 = 05 (Do not honor)DE 48; SE 71 = 06Ib (Invalid SecureCode AAV results); and DE 48, SE 42 and 43 are present
DE 48, SE 66 (Authentication Data), SF 1 = 1 (3DS 1.0), and SF 2 (Directory Server Transaction ID) are present
DE 60 = 1010003 (IPS signed out; not approved)

ELECTRONIC COMMERCE
0220 350080200002 1 N/A PURCHASE NO CVM 00 81 6 001-010 00
2
DE 39 = 00 (Approved); DE 48, SE 71 = 06Vb (Valid SecureCode AAV results); and DE 48, SE 42 and 43 are present
DE 60 = 1010000 (IPS signed out; approval)

ELECTRONIC COMMERCE
0220 350080200003 1 N/A PURCHASE NO CVM 00 81 6 013 00
3
DE 39 = 05 (Do not honor); DE 48, SE 71 = 06Ub (Unable to process); and DE 48, SE 42 and 43 are present
DE 60 = 1010003 (IPS signed out; Unable to approve)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 456
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350080200011 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and successfully validated by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
DE 48, SE 42, SF 1 = 212
4
DE 48, SE 43 containing first two values = kG
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

ELECTRONIC COMMERCE
0220 350080200012 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Challenge transaction routed to Stand-in and successfully validated by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
5
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kH
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 457
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350080200013 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Frictionless transaction routed to Stand-in and successfully validated by
Mastercard SecureCode Dynamic AAV Verification in Stand-In Processing
6
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kJ
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

ELECTRONIC COMMERCE
0220 350080200014 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Authenticated)-Stand-In Challenge transaction routed to Stand-in and successfully validated by
Mastercard SecureCode Dynamic AAV Verification in Stand-In Processing
7
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kK
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 458
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350080200015 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

SecureCode SPA2 AAV (Attempts)-Frictionless transaction routed to Stand-in and successfully validated by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
8 DE 48, SE 42, SF 1 = 211 and DE 48, SE 43 containing first two values = kL
DE 48, SE 66 (Authentication Data), SF 1 = 2 (3DS 2.0), and SF 2 (Directory Server Transaction ID) are present
DE 48, SE 71 = 06Vb (Valid SecureCode AAV results)
DE 39 = 00 (Approved) and DE 60 = 1010000 (IPS signed out: Approved)

ELECTRONIC COMMERCE
0220 350080200021 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and validation failed by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
9
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 06Kb (No matching key file for this PAN, PAN expiry date and KDI combination)
DE 39 = 05 (Do not honor) and DE 60 = 1010037 (IPS signed out: Reject)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 459
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350080200022 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and validation failed by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
10
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 06Xb (Security platform time out)
DE 39 = 05 (Do not honor) and DE 60 = 1010038 (IPS signed out: Reject)

ELECTRONIC COMMERCE
0220 350080200023 1 N/A PURCHASE NO CVM 00 81 6 013 00

SecureCode SPA2 AAV (Authenticated)-Frictionless transaction routed to Stand-in and validation failed by Mastercard
SecureCode Dynamic AAV Verification in Stand-In Processing
11
DE 48, SE 42, SF 1 = 212 and DE 48, SE 43 containing first two values = kG
DE 48, SE 71 = 06Zb (Security platform processing error)
DE 39 = 05 (Do not honor) and DE 60 = 1010040 (IPS signed out: Reject)

Table 3500852—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Financial Transaction Requests and Advices
The following test cases will test whether an issuer's Single Message online application that is participating in the optional CVC 1
Pre-Validation Service can receive OBS 11 validation results in DE 48, SE 71 of Financial Transaction Requests and optionally receive in
Financial Transaction Advices; process them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 460
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3500852—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Pre-Validation Service—
Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350085200001 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 00
1
CVC 1 Pre-Validation Service successfully performed and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Vb indicating the OBS result

MSR PURCHASE
0200 350085200002 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 V
2
CVC 1 Pre-Validation Service invalid cryptogram and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Ib indicating the OBS result

MSR PURCHASE
0200 350085200003 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 V
3
CVC 1 Pre-Validation Service no matching key file and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Kb indicating the OBS result

MSR PURCHASE
0200 350085200004 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 V
4
CVC 1 Pre-Validation Service unable to process and Issuer decision matrix indicates 'continue processing'
DE 48, SE 71 = 11Ub indicating the OBS result

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 461
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350085200011 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 00

5 CVC 1 Pre-Validation Service successfully performed and routed to Stand-In due to issuer signed out
DE 48, SE 71 = 11Vb indicating the OBS result
DE 39 = 00 (Approved) and DE 60 = 2010000 (IPS signed out; approval)

MSR PURCHASE
0220 350085200012 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

6 CVC 1 Pre-Validation Service invalid cryptogram and Issuer decision matrix indicates 'decline'
DE 48, SE 71 = 11Ib indicating the OBS result
DE 39 = 05 (Do not honor); DE 60 = 1600028 (Reject: Invalid CVC 1); and DE 48, SE 87 = Y (Invalid CVC 1)

MSR PURCHASE
0220 350085200013 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

CVC 1 Pre-Validation Service no matching key file and Issuer decision matrix indicates 'decline'
7
DE 48, SE 71 = 11Kb indicating the OBS result
DE 39 = 05 (Do not honor) and DE 60 = 1600047 (Reject: CVC 1 No matching key file for this PAN, PAN expiry date
combination; status unknown)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 462
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350085200014 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

8 CVC 1 Pre-Validation Service unable to process and Issuer decision matrix indicates 'decline'
DE 48, SE 71 = 11Ub indicating the OBS result
DE 39 = 05 (Do not honor) and DE 60 = 1600036 (Reject: CVC 1 Unable to process)

Table 3500853—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service—
Financial Transaction Advices
The following test cases will test whether an issuer's Single Message online application that is participating in the optional CVC 1
Validation Stand-In Service can receive OBS 11 validation results in DE 48, SE 71 of Financial Transaction Advices; process them, and
send correctly formatted Financial Transaction Responses.

NOTE: Effective 1 March 2017 per Global Operations Bulletin No. 4, 1 April 2016, Revised Standards for Validation Services During
Stand-In Processing, all issuers globally that participate in Stand-In processing must have Card Validation Code 1 (CVC 1) Verification
performed during Stand-In processing.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 463
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3500853—Issuer On-behalf Services - SMS Auth—MSR Product and Services—CVC 1 Validation Stand-In Service—
Financial Transaction Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350085300001 1 N/A SIGNATURE OR NO CVM 00 90 0 001-010 00

1 CVC 1 Validation Stand-In Service successfully performed


DE 48, SE 71 = 10Vb indicating the OBS result
DE 39 = 00 (Approved) and DE 60 = 2010000 (IPS signed out; approval)

MSR PURCHASE
0220 350085300002 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

2 CVC 1 Validation Stand-In Service result invalid cryptogram and issuer decision matrix indicates 'decline'
DE 48, SE 71 = 10Ib indicating the OBS result
DE 39 = 05 (Do not honor); DE 60 = 2010028 (IPS Signed out; Reject: Invalid CVC 1); and DE 48, SE 87 = Y (Invalid CVC 1)

MSR PURCHASE
0220 350085300003 1 N/A SIGNATURE OR NO CVM 00 90 0 013 00

3 CVC 1 Validation Stand-in Service unable to process and issuer decision matrix indicates 'decline'
DE 48, SE 71 = 10Ub indicating the OBS result
DE 39 = 05 (Do not honor) and DE 60 = 2010036 (IPS Signed Out; Reject: CVC 1 Unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 464
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501105—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Financial Transaction Requests
The following test cases will test whether an issuer's participating in Mastercard Contactless Mapping Service with M/Chip
Cryptogram Pre-validation Service Single Message authorization application can receive and process Financial Transaction Requests
that have undergone mapping from the contactless PAN to the real PAN, as well as validation of the M/Chip cryptogram, and return
correctly formatted Financial Transaction Responses.
Issuers participating in the Contactless Mapping Service are required to test with Mastercard.

Table 3501105—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500001 1 N/A OR NO CVM 00 91 0 311 00

Valid CVC 3
1
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains valid PAN Mapping and dynamic CVC 3 validation result
DE 48, SE 34, SF 1 contains ATC value, SF 2 contains no discrepancy, SF 3 = W (ATC value is within the issuer defined limits)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 465
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500002 1 N/A OR NO CVM 00 91 0 312 V
2 Invalid CVC 3
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains valid PAN Mapping result and invalid dynamic CVC 3 validation result

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500003 1 N/A OR NO CVM 00 91 0 313 V
3 Unable to process CVC 3 validation
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains valid PAN Mapping result with dynamic CVC 3 validation unable to process

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500004 1 N/A OR NO CVM 00 91 0 316 V
4 Unpredictable number mismatch
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains valid PAN Mapping result with dynamic CVC 3 unpredictable number mismatch

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 466
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500005 1 N/A OR NO CVM 00 91 0 317 V

ATC outside of valid range


5
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains valid PAN Mapping result with dynamic CVC 3 ATC out of range result
DE 48, SE 34, SF 1 contains ATC value, SF 2 contains discrepancy value, SF 3 = G (value is greater than the maximum value
allowed)

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500006 1 N/A OR NO CVM 00 91 0 318 V

ATC outside of valid range


6
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains PAN Mapping result with dynamic CVC 3 ATC out of range result
DE 48, SE 34, SF 1 contains ATC value, SF 2 contains discrepancy value, SF 3 = L (ATC lower than minimum value allowed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 467
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350110500007 1 N/A OR NO CVM 00 91 0 319 V

ATC replay
7
DE 48, SE 33 contains PPAN information
DE 48, SE 71 contains valid PAN Mapping result with dynamic CVC 3 ATC replay result
DE 48, SE 34, SF 1 contains ATC value, SF 2 contains no discrepancy, SF 3 = W (ATC value within issuer defined limits)

Table 3501106—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Financial Transaction Advices
Issuers using the Contactless Mapping Service with Dynamic CVC 3 Pre-validation Service should select and run a subset of the test
cases below based upon the options they select when enrolling in this service, as described below:
• Issuers that choose the Optional Non-valid CVC 3 Processing Service should run test cases 1-3 in the table below.
• For Issuers not using the Optional Non-valid CVC 3 Processing Service should run test cases 4-8. These test cases represent
advices that they would receive when Mastercard authorizes transactions when standing in for the issuer system.
• Test case 4 is an approval advice, that all issuers that do not use the Optional Non-valid CVC 3 Processing Service should run.
• Test cases 5-6 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to approve the transaction even
though the CVC 3 validation failed.
• Test cases 7-8 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to decline the transaction in the event
of a specific CVC 3 validation failure.
• Issuers may need to run a mixed subset of the test cases in the 5-6 (approve) and 7-8 (decline) ranges, depending on the mix of
instructions they send to Mastercard.
• Test case 9 should be run by all issuers that use the Contactless Mapping Service.

NOTE: These outcomes are a representative sampling of those that may be received by issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 468
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501106—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Contactless Mapping
Service with Dynamic CVC 3 Pre-validation—Financial Transaction Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600001 1 N/A OR NO CVM 00 91 0 311 00

Issuer uses optional non-valid CVC 3 processing - valid CVC 3


DE 39 = 00 in 0220 message
1 DE 48, SE 33 = PPAN information
DE 48, SE 34, SF 1 = ATC value; SF 2 = No discrepancy; and SF 3 = W (ATC within limits)
DE 48, SE 71 = Valid PAN mapping and valid dynamic CVC 3 validation result
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SE 2 = 0000 (Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 469
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600002 1 N/A OR NO CVM 00 91 0 312 00

Issuer uses optional non-valid CVC 3 processing - invalid CVC 3


DE 39 = 05 (Do not honor) in 0220 message
2 DE 48, SE 33 = PPAN information
DE 48, SE 71 = Valid PAN mapping result and invalid dynamic CVC 3 validation result
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600005 1 N/A OR NO CVM 00 91 0 317 00

Issuer uses optional non-valid CVC 3 processing - CVC 3 ATC out of valid range
DE 39 = 05 (Do not honor) in 0220 message
DE 48, SE 33 = PPAN information
3
DE 48, SE 71= Valid PAN mapping result with dynamic CVC 3 ATC out of range result
DE 48, SE 34 = ATC value, SE 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via MIP on-behalf service decision)
DE 60, SF 2 = 0043 (ATC outside of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 470
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600008 1 N/A OR NO CVM 00 91 0 311 00

Issuer does not use optional non-valid CVC 3 processing - valid CVC 3
DE 39 = 00 in 0220 message
4 DE 48, SE 33 = PPAN information
DE 48, SE 34, SF 1 = ATC, SF 2 = No discrepancy, SF 3 = ATC within limits
DE 48, SE 71 = Valid PAN mapping and valid dynamic CVC 3 validation result
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SE 2 = 0000 (Accept)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600009 1 N/A OR NO CVM 00 91 0 312 00

Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
Issuer instructs Mastercard to approve on invalid CVC 3 result
DE 39 = 00 in 0220 message
5
DE 48, SE 33 = PPAN information
DE 48, SE 71 = Valid PAN mapping result and invalid dynamic CVC 3 validation result
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 471
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600012 1 N/A OR NO CVM 00 91 0 317 00

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC out of valid range
Issuer instructs Mastercard to approve on ATC out of range result
DE 39 = 00 in 0220 message
6 DE 48, SE 33 = PPAN information
DE 48, SE 71 = Valid PAN mapping with dynamic CVC 3 ATC out of range
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC outside of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 472
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600015 1 N/A OR NO CVM 00 91 0 312 00

Issuer does not use optional non-valid CVC 3 processing - invalid CVC 3
Issuer instructs Mastercard to decline on invalid CVC 3
DE 39 from 0210 based on issuer decision matrix
7
DE 48, SE 33 = PPAN information
DE 48, SE 71 = Valid PAN mapping and invalid dynamic CVC 3 validation
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 473
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600020 1 N/A OR NO CVM 00 91 0 319 00

Issuer does not use optional non-valid CVC 3 processing - CVC 3 ATC replay
DE 39 from 0210 based on issuer decision matrix
DE 48, SE 33 = PPAN information
8
DE 48, SE 71 = Valid PAN mapping result with dynamic CVC 3 ATC replay result
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC within limits)
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0046 (ATC replay)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 474
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350110600022 1 N/A OR NO CVM 00 91 0 311 00

Issuer uses optional non-valid CVC 3 processing - valid CVC 3


DE 39 = 00 in 0220 message
9 DE 48, SE 33 = PPAN information
DE 48, SE 34, SF 1 = ATC value; SF 2 = No discrepancy; and SF 3 = W (ATC within limits)
DE 48, SE 71 = Valid PAN mapping and valid dynamic CVC 3 validation result
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SE 2 = 0000 (Accept)

Table 3501140—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Cloud-Based Payments Tokens) Financial Transaction Request, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Mastercard Cloud-Based Payment
contactless magnetic stripe Financial Transaction Requests and Advices when the Mastercard Digital Enablement Service (MDES) was
performed, process them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 475
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501140—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Cloud-Based Payments Tokens) Financial Transaction Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000001 1 0 OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 35/45 track data (if opt-in to receive crypto data) is present.
1
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 476
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000002 1 0 OR NO CVM 00 91 0 322 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed cryptogram validation (invalid MD AC and invalid UMD AC). Issuer Decision Matrix indicates
forward request with results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 477
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000003 1 0 OR NO CVM 00 91 0 323 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed due to invalid UMD AC (Invalid Mobile PIN). Issuer Decision Matrix indicates forward request with
results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 478
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000004 1 0 OR NO CVM 00 91 0 324 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed due to invalid MD AC. Issuer Decision Matrix indicates forward request with results if OBS 62 not
successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 479
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000005 1 0 OR NO CVM 00 91 0 316 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service failed due to Unpredictable Number Length Indicator Mismatch. Issuer Decision Matrix indicates forward
request with results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Nb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 480
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000006 1 0 OR NO CVM 00 91 0 313 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Magnetic Stripe
Prevalidation Service unable to process. Issuer Decision Matrix indicates forward request with results if OBS 62 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 481
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114000011 1 N/A OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 35/45 track data (if opt-in to receive crypto data) is present.
7
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 482
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114000012 1 N/A OR NO CVM 00 91 0 322 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Magnetic Stripe
Prevalidation Service cryptogram validation (invalid MD AC and invalid UMD AC). Issuer decision matrix to decline (issuer
selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
8
DE 48, SE 71 = 50Cb62Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])

NOTE: Issuers may also receive the following for decline (issuer selection) per simulator setup:

DE 48.71 = 62K and DE 60 = 1410207 for invalid UMD AC


DE 48.71 = 62L and DE 60 = 1410208 for invalid MD AC
DE 48.71 = 62N and DE 60 = 1410210 for unpredictable number length indicator mismatch
DE 48.71 = 62U and DE 60 = 1410212 for unable to process
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 483
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114000013 1 N/A OR NO CVM 00 91 0 319 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Magnetic Stripe
Prevalidation Service cryptogram validation (ATC replay). Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
9 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Eb for the on-behalf service results.
DE 60 = 1410205 (Reject: ATC replay)

NOTE: Issuers may also receive the following for decline (mandatory default) per simulator setup:

DE 48.71 = 62D and DE 60 = 1410204 for invalid ATC


DE 48.71 = 62M and DE 60 = 1410209 for mobile PIN try counter max limit reached, token suspended.
DE 48.71 = 62P and DE 60 = 1410206 for invalid mobile PIN.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 484
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114000014 1 N/A OR NO CVM 00 91 0 016 00

MDES successfully performed PAN mapping but failed CVC cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 35/45 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 035.
10
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Fb for the on-behalf service results.
DE 60 = 1410054 (MDES Advice to Issuer: Reject: Track Data Format Error [for MDES magstripe validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 485
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000040 1 0 OR NO CVM 00 91 0 311 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe
11 Prevalidation Service without incurring any failed transaction analysis validations.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 486
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000041 1 0 OR NO CVM 00 91 0 312 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe
Prevalidation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue
processing (send authorization request to issuer).
12
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 487
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000042 1 0 OR NO CVM 00 91 0 312 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe
Prevalidation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue
processing (send authorization request to issuer).
13
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 488
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114000043 1 N/A OR NO CVM 00 91 0 322 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe Pre-
validation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline
(send authorization advice to issuer).
DE 39 = 05 (Do not honor).
14
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 489
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114000044 1 N/A OR NO CVM 00 91 0 322 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Magnetic Stripe Pre-
validation Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline
(send authorization advice to issuer).
DE 39 = 05 (Do not honor).
15
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token
Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 490
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000051 1 0 OR NO CVM 00 91 0 311 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe Prevalidation Service (if applicable)
on acquirer 0200 request and acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN
Controller and provides PAR to the MDES issuer.
0200:DE 35/45 track data (if opt-in to receive crypto data) is present.
16 0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
0200: DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 491
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114000052 1 0 OR NO CVM 00 91 0 311 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping Cloud-Based Payments Magnetic Stripe Prevalidation Service (if applicable) on
acquirer 0200 request and acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN
Controller and the issuer provides PAR in the 0210 response.
0200: DE 35/45 track data (if opt-in to receive crypto data) is present.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
17
Information.
0200: DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 492
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS ATM


BALANCE INQUIRY
0200 350114000061 1 0 ONLINE PIN 30 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 35/45 track data (if opt-in to receive crypto data) is present.
18
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

MSR CONTACTLESS ATM


WITHDRAWAL ONLINE
0200 350114000062 1 0 PIN 01 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 35/45 track data (if opt-in to receive crypto data) is present.
19
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 493
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501141—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals
The following test cases will test whether an issuer's Single Message application can receive contactless magnetic stripe Financial
Transaction Requests or Advices for transactions when the Mastercard Digital Enablement Service (MDES) was performed, process
them, and send correctly formatted Financial Transaction Responses.

Table 3501141—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Contactless Magnetic Stripe -
Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100001 1 0 OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 494
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100002 1 N/A OR NO CVM 00 91 0 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation; and then Stand-in
approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 35/45 track data (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 495
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100005 1 N/A OR NO CVM 00 91 0 317 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC outside allowed range).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 496
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100007 1 N/A OR NO CVM 00 91 0 319 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC replay).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 497
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100008 1 N/A OR NO CVM 00 91 0 312 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.

5 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.


DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 48, SE 87 = Y (Invalid).
DE 60 = 1410044 (Mastercard Digital Enablement Service; Reject: CVC 3 invalid).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 498
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100009 1 N/A OR NO CVM 00 91 0 316 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.

6 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.


DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 48, SE 87 = E (Length of unpredictable number was not a valid length).
DE 60 = 1410045 (Mastercard Digital Enablement Service; Reject: CVC 3 Unpredictable number mismatch).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 499
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100010 1 N/A OR NO CVM 00 91 0 313 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform dynanic CVC 3 validation.
Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.

7 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.


DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 48, SE 87 = P (Unable to process).
DE 60 = 1410042 (Mastercard Digital Enablement Service; Reject: CVC 3 unable to process).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 500
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
0200 350114100011 1 0 PURCHASE ONLINE PIN 00 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation with PIN.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
8
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100021 1 0 OR NO CVM 00 91 0 318 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is out of
range. Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
9
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 501
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100022 1 0 OR NO CVM 00 91 0 319 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is replayed.
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
10
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 502
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100023 1 0 OR NO CVM 00 91 0 312 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Invalid CVC 3).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
11
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 503
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100024 1 0 OR NO CVM 00 91 0 316 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Unpredictable
number mismatch). Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
12
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 504
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100025 1 0 OR NO CVM 00 91 0 313 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (unable to process).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
13
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 505
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100051 1 0 OR NO CVM 00 91 0 311 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and CVC 3 Prevalidation Service (if applicable) on acquirer 0200 request and
acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN Controller and provides PAR to the
MDES issuer.
0200: DE 35/45 track data (if opt-in to receive crypto data) is present.
14 0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
0200: DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 506
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100051 1 0 OR NO CVM 00 91 0 311 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and CVC 3 Prevalidation Service (if applicable) on acquirer 0200 request and
acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN Controller and the issuer provides
PAR in the 0210 response.
0200: DE 35/45 track data (if opt-in to receive crypto data) is present.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
15
Information.
0200: DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 507
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS ATM


BALANCE INQUIRY
0200 350114100061 1 0 ONLINE PIN 30 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
16
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

MSR CONTACTLESS ATM


WITHDRAWAL ONLINE
0200 350114100062 1 0 PIN 01 91 0 V 311 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
17
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 508
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100071 1 0 OR NO CVM 00 91 0 327 V

MDES successfully performed PAN mapping and issuer decision matrix indicates forward request if dynamic CVC 3 validation
results are security platform time out.
DE 35/45 track data (if opt-in to receive crypto data) is present.
18
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Xb for the on-behalf service results
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 509
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350114100072 1 0 OR NO CVM 00 91 0 328 V

MDES successfully performed PAN mapping and issuer decision matrix indicates forward request if dynamic CVC 3 validation
results are security platform system error.
DE 35/45 track data (if opt-in to receive crypto data) is present.
19
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Zb for the on-behalf service results
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 510
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100073 1 N/A OR NO CVM 00 91 0 327 00

MDES successfully performed PAN mapping and issuer decision matrix indicates decline request if dynamic CVC 3 validation
results are security platform time out.
DE 2 containing PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor)

20 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Xb for the on-behalf service results
DE 60 = 1410038 (MDES; Reject: Security Platform Time Out)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 511
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100074 1 N/A OR NO CVM 00 91 0 328 00

MDES successfully performed PAN mapping and issuer decision matrix indicates decline request if dynamic CVC 3 validation
results are security platform system error.
DE 2 containing PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor)

21 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Zb for the on-behalf service results
DE 60 = 1410040 (MDES; Reject: Security Platform System Errort)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 512
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350114100075 1 N/A OR NO CVM 00 91 0 329 00

MDES successfully performed PAN mapping and issuer decision matrix indicates decline request if dynamic CVC 3 validation
results are no matching key file for this PAN, PAN expiration date, and KDI combination
DE 2 containing PAN and DE 14 PAN expiry date.
DE 39 = 05 (Do not honor)

22 DE 35/45 track data (if opt-in to receive crypto data) is present.


DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Kb for the on-behalf service results
DE 60 = 1410037 (MDES; Reject: No matching key file for this PAN, PAN expiration date, and KDI combination)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 3501142—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Financial Transaction Request, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Digital Secure Remote Payment
(DSRP) transactions with Mastercard Cloud-Based Payment tokens in Financial Transaction Requests and Advices when the
Mastercard Digital Enablement Service (MDES) was performed for PAN mapping and cryptographic validation, process them, and
send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 513
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

NOTE: See table 3501152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

Table 3501142—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Cloud-Based
Payments Tokens)—Financial Transaction Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200021 1 0 PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation
Service on a Digital Secure Remote Payment UCAF transaction.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 514
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200022 1 0 PURCHASE NO CVM 00 81 6 422 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC. Issuer Decision
Matrix indicates forward request with results if OBS 61 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 515
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200023 1 0 PURCHASE NO CVM 00 81 6 423 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to ATC invalid. Issuer Decision Matrix indicates forward
request with results if OBS 61 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Db for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 516
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200024 1 0 PURCHASE NO CVM 00 81 6 424 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 517
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200025 1 0 PURCHASE NO CVM 00 81 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid TVR/CVR. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 518
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200026 1 0 PURCHASE NO CVM 00 81 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to unable to process. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 519
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114200031 1 N/A PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation
Service on a Digital Secure Remote Payment transaction; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
7
42 as provided by the acquirer.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 520
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114200032 1 N/A PURCHASE NO CVM 00 81 6 422 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC). Issuer decision
matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
8
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 521
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114200033 1 N/A PURCHASE NO CVM 00 81 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
Validation Service on a Digital Secure Remote Payment transaction due to ATC replay. Issuer decision matrix to decline
(mandatory default).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
9
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Eb for the on-behalf service results.
DE 60 = 1410206 (Reject: ATC Replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuer may request any other valid on-behalf service result be sent in advice.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 522
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114200034 1 N/A PURCHASE NO CVM 00 81 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 48, SE 42 present and SE 43 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 048.

10 DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer: Reject: DE 55 Format Error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 523
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200040 1 0 PURCHASE NO CVM 00 81 6 412 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction without incurring any failed transaction analysis validations.
11
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 524
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200041 1 0 PURCHASE NO CVM 00 81 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer)
12 DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 525
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200042 1 0 PURCHASE NO CVM 00 81 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer)
13 DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 526
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114200043 1 N/A PURCHASE NO CVM 00 81 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
14 DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 527
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114200044 1 N/A PURCHASE NO CVM 00 81 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
15 DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 528
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200051 1 0 PURCHASE NO CVM 00 81 6 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe Prevalidation Service (if applicable)
on acquirer 0200 request and acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN
Controller and provides PAR to the MDES issuer.
0200: DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.

16 0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
0200: DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 529
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114200052 1 0 PURCHASE NO CVM 00 81 6 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping Cloud-Based Payments Magnetic Stripe Prevalidation Service (if applicable) on
acquirer 0200 request and acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN
Controller and the issuer provides PAR in the 0210 response.
0200: DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
17 Information.
0200: DE 48, SE 71 = 50Cb62Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 530
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350114200061 1 0 NO CVM 28 81 6 412 00

MDES successfully performed PAN mapping and DSRP cryptographic pre-validation on a Mastercard Cloud-based Payment
device token for a DSRP Payment Transaction with cryptographic data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); DE 48, SE 30 (Token Transaction Identifier); and SE 34
contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payment Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
18 Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP - Issuer Authenticated) and DE 48, SE 43 only present if issuer opt-in to receive.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transaction.

Table 3501143—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure Element
Tokens)—Financial Transaction Request, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Mastercard Digital Secure Remote
Payment (DSRP) transactions with Secure Element tokens in Financial Transaction Requests and Advices when the MasterCard Digital
Enablement Service (MDES) was performed for PAN mapping and cryptographic validation, process them, and send correctly
formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 531
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

NOTE: See table 3501152 for the various conditions wherein DE 48, SE 71 is for PAN mapping only OBS result 50.

Table 3501143—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (DSRP UCAF - Secure Element
Tokens)—Financial Transaction Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300001 1 0 PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
1 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 532
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300002 1 0 PURCHASE NO CVM 00 81 6 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
2 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology)
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 533
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300006 1 N/A PURCHASE NO CVM 00 81 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction and then Stand-In approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
3 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out: Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 534
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300007 1 N/A PURCHASE NO CVM 00 81 6 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction and then Stand-In approved due
to issuer signed out.
DE 39 = 00 (Approved).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 535
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300008 1 N/A PURCHASE NO CVM 00 81 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping but ATC replay for M/Chip cryptogram validation
on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
5 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC Replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 536
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300009 1 N/A PURCHASE NO CVM 00 81 6 425 00

Mastercard Digital Enablement Service successfully performed PAN mapping but no matching key file for this PAN, PAN expiry
date and KDI combination for M/Chip cryptogram validation on a Digital Secure Remote Payment transaction. Issuer decision
matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
6 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 60 = 1410037 (Mastercard Digital Enablement Service; Reject: No matching key file for this PAN, PAN expiry date and KDI
combination).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 537
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300011 1 N/A PURCHASE NO CVM 00 81 6 414 00

Mastercard Digital Enablement Service successfully performed PAN mapping but invalid M/Chip cryptogram validation on a
Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
7 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 60 = 1410034 (Mastercard Digital Enablement Service; Reject: Chip validation failed)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 538
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300012 1 N/A PURCHASE NO CVM 00 81 6 417 00

Mastercard Digital Enablement Service successfully performed PAN mapping but TVR/CVR invalid for M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
8 DE DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 60 = 1410035 (Mastercard Digital Enablement Service; Reject: TVR/CVR validation failed)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 539
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300013 1 N/A PURCHASE NO CVM 00 81 6 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
9 DE 48, SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 60 = 1410032 (Mastercard Digital Enablement Service; Reject: Chip technical failure)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 540
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300014 1 N/A PURCHASE NO CVM 00 81 6 418 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
outside allowed range on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
10 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: ATC outside allowed range)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 541
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300015 1 N/A PURCHASE NO CVM 00 81 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
replay on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
11 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 542
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350114300016 1 N/A PURCHASE NO CVM 00 81 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.

12 DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 543
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300021 1 0 PURCHASE NO CVM 00 81 6 418 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is out of range. Issuer Decision Matrix indicates forward request with results if OBS 51
not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
13
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 544
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300022 1 0 PURCHASE NO CVM 00 81 6 419 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is replayed. Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
14
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 545
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300023 1 0 PURCHASE NO CVM 00 81 6 414 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Invalid cryptogram). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
15
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C ((MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 546
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300024 1 0 PURCHASE NO CVM 00 81 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Valid ARQC/TC; TVR/CVR invalid). Issuer Decision Matrix indicates forward request with results if
OBS 51 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
16
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 547
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300025 1 0 PURCHASE NO CVM 00 81 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (unable to process). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
17
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 548
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300026 1 0 PURCHASE NO CVM 00 81 6 425 V

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip validation on a Digital Secure
Remote Payment transaction but no matching key File for this PAN, PAN expiry date and KDI combination. Issuer Decision
Matrix indicates forward request with results if OBS 51 not successful.
DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
18
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 549
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300051 1 0 PURCHASE NO CVM 00 81 6 311 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and M/chip validation. This test case assumes that Mastercard is the BIN
Controller and provides PAR to the MDES issuer.
0200: DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
19 Information.
0200: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 550
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114300052 1 0 PURCHASE NO CVM 00 81 6 311 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and M/Chip validation. This test case assumes that Mastercard is not the BIN
Controller and the issuer provides PAR in the 0210 response.
0200: DE 48, SE 42 is present and SE 43 (if opt-in to receive crypto data) is present.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
20
0200: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

Table 3501145—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe -
Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive tokenized (via Secure Element)
magnetic stripe transactions initiated by a device capable of passing dynamic data in Financial Transaction Requests and Advices
when the Mastercard Digital Enablement Service (MDES) was performed, process them, and send correctly formatted Financial
Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 551
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501145—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Dynamic Magnetic Stripe -
Secure Element Tokens)—Financial Transaction Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500001 1 0 SIGNATURE OR NO CVM 00 90 0 511 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
1 49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 552
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500002 1 N/A SIGNATURE OR NO CVM 00 90 0 511 00

MasterCard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation; and then Stand-
in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
2
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 553
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500005 1 N/A SIGNATURE OR NO CVM 00 90 0 517 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
3
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC outside allowed range).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 554
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500007 1 N/A SIGNATURE OR NO CVM 00 90 0 519 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
4
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: CVC 3 ATC replay).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 555
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500008 1 N/A SIGNATURE OR NO CVM 00 90 0 512 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
5 Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 48, SE 87 = Y (Invalid).
DE 60 = 1410044 (Mastercard Digital Enablement Service; Reject: CVC 3 invalid).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 556
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500009 1 N/A SIGNATURE OR NO CVM 00 90 0 516 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed dynamic CVC 3 validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
6 Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 48, SE 87 = E (Length of unpredictable number was not a valid length).
DE 60 = 1410045 (Mastercard Digital Enablement Service; Reject: CVC 3 Unpredictable number mismatch).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 557
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500010 1 N/A SIGNATURE OR NO CVM 00 90 0 513 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform dynanic CVC 3 validation.
Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
7 Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 48, SE 87 = P (Unable to process).
DE 60 = 1410042 (Mastercard Digital Enablement Service; Reject: CVC 3 unable to process).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 558
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE ONLINE


0200 350114500011 1 0 PIN 00 90 0 V 511 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation with PIN.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
8 49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

MSR PURCHASE
0200 350114500021 1 0 SIGNATURE OR NO CVM 00 90 0 518 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is out of
range. Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
9
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 559
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500022 1 0 SIGNATURE OR NO CVM 00 90 0 519 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is replayed.
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information; and SE
10
49 contains Time Validation Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 560
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500023 1 0 SIGNATURE OR NO CVM 00 90 0 512 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Invalid CVC 3).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
11
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 561
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500024 1 0 SIGNATURE OR NO CVM 00 90 0 516 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (Unpredictable
number mismatch). Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
12
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Nb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 562
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500025 1 0 SIGNATURE OR NO CVM 00 90 0 513 V

Mastercard Digital Enablement Service successfully performed PAN mapping but CVC 3 validation failure (unable to process).
Issuer Decision Matrix indicates forward request with results if OBS 52 not successful.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
13
Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb52Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 563
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500020 1 0 SIGNATURE OR NO CVM 00 90 0 511 V

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation.
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
Information.
14 DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48, SE 49 contains the Time Validation Information, SF 3 = 02 (Positive value outside time validation window). Issuer
decision matrix to continue processing if outside the time validation window.
DE 48, SE 71 = 50Cb52Hb (Invalid Time) for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 564
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350114500021 1 0 SIGNATURE OR NO CVM 00 90 0 512 00

Mastercard Digital Enablement Service successfully performed PAN mapping and dynamic CVC 3 validation, Issuer decision
matrix to reject transaction if outside the time validation window.
DE 39 = 05 (Do not honor).
DE 35/45 track data (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 49 contains Time Validation
15 Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor
ID), and SF 8 (Storage Technology).
DE 48 SE 49 contains the Time Validation Information, SF 3 = 04 (Negative Value outside time validation window
DE 48, SE 71 = 50Cb52Hb (Invalid time validation) for the on-behalf service results.
DE 60 = 1410009 (Reject:Invalid Time Validation)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 565
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500051 1 0 SIGNATURE OR NO CVM 00 90 0 511 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and CVC 3 Prevalidation Service (if available) on acquirer 0200 request and
acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN Controller and provides PAR to the
MDES issuer.
0200: DE 35/45 track data (if opt-in to receive crypto data) is present.

16 0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information;
and SE 34 SE 49 contains Time Validation Information.
0200: DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token
Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 566
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350114500051 1 0 SIGNATURE OR NO CVM 00 90 0 511 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and CVC 3 Prevalidation Service (if available) on acquirer 0200 request and
acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN Controller and the issuer provides
PAR in the 0210 response.
DE 35/45 track data (if opt-in to receive crypto data) is present.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; SE 34 contains ATC Information;
17 and SE 49 contains Time Validation Information.
0200: DE 48, SE 71 = 50Cb52Vb for the on-behalf service results.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token
Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

Table 3501146—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-
Based Payments Token)-Financial Transaction Requests
The following test cases will test whether an issuer's Single Message online application that is participating in Mastercard Digital
Enablement Service (MDES) for Mastercard Cloud-Based Payment tokens can receive and process Financial Transaction Requests
containing electronic commerce transactions with various Mastercard SecureCode (Mastercard Identity Check) and Masterpass

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 567
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Security Level Indicator (SLI) values and, if applicable, validate the Accountholder Authentication Value (AAV); and send properly
formatted Financial Transaction Response messages.
These MDES token e-commerce transactions were submitted by acquirers containing a Dynamic Expiration Date and Dynamic Token
Verification Code as provided by merchants instead of a DSRP UCAF cryptogram. Mastercard used the dynamic data to perform the
MDES cryptography validation service. Issuers will receive the cardholder PAN in DE 2, PAN expiration date in DE 14, and PAN CVC 2
code in DE 48, SE 92 for a successful MDES mapping and cryptography service.

Table 3501146—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Cloud-
Based Payments Token)-Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114600001 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
1
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 (SecureCode no UCAF).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 568
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114600002 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
2
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 220 (Masterpass no UCAF).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 569
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114600003 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
3
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 211 (SecureCode merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 570
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114600004 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
4
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 221 (Masterpass merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 571
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114600005 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
5
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 572
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114600006 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable. DE 48, SE 27 (Transaction Analysis) may be present if MCBP 2.0.
6
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 222 (Masterpass fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 3501147—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure
Element Token)-Financial Transaction Requests
he following test cases will test whether an issuer's Single Message online application that is participating in Mastercard Digital
Enablement Service (MDES) for Secure Element tokens can receive and process Financial Transaction Requests containing electronic
commerce transactions with various Mastercard SecureCode (Mastercard Identity Check) and Masterpass Security Level Indicator (SLI)
values and, if applicable, validate the Accountholder Authentication Value (AAV); and send properly formatted Financial Transaction
Response messages.
These MDES token e-commerce transactions were submitted by acquirers containing a Dynamic Expiration Date and Dynamic Token
Verification Code as provided by merchants instead of a DSRP UCAF cryptogram. Mastercard used the dynamic data to perform the
MDES cryptography validation service. Issuers will receive the cardholder PAN in DE 2, PAN expiration date in DE 14, and PAN CVC 2
code in DE 48, SE 92 for a successful MDES mapping and cryptography service.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 573
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501147—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES (Non-DSRP UCAF - Secure
Element Token)-Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114700001 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
1
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 (SecureCode no UCAF).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 574
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114700002 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
2
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 220 (Masterpass no UCAF).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 575
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114700003 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
3
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 211 (SecureCode merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 576
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114700004 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
4
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 221 (Masterpass merchant attempt) and SE 43 is present.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 577
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114700005 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
5
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 578
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114700006 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping and Secure Element Chip Pre-Validation Service.
DE 2 contains PAN; DE 14 contains PAN expiry date; and DE 48, SE 92 contains CVC 2.
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
6
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 222 (Masterpass fully authenticated) and SE 43 is present for issuer validation.
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

Table 3501149—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES for Merchants and Commerce
Platforms—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message online application that is participating in MasterCard Digital
Enablement Service (MDES) can receive MDES for Merchants Digital Secure Remote Payment (DSRP) with UCAF card-on-file token
transactions in Financial Transaction Requests indicating the mapping and cryptography validation service was performed, process
them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 579
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501149—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES for Merchants and Commerce
Platforms—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350114900001 1 0 PURCHASE NO CVM 00 81 6 412 00

DSRP with UCAF (merchant liability) MDES cloud-based token original transaction was successfully mapped and validated.
0200: DE 48, SE 42 = 246 and SE 43 only present if issuer opt-in to receive.
0200: DE 48, SE 26 (Wallet Identifier) = 327 (MDES for merchants Program) or a unique WID assigned to the commerce
1 platform; SE 30 (Token Transaction Identifier); and SE 34 (ATC Information)
0200: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200: DE 48, SE 71 = 50Cb61Vb contains successful on-behalf service results.
0200: DE 56 (Payment Account Data) inserted by Mastercard as BIN Controller.
0200: DE 61, SF 3 = 2 (Off premises) or 4 (On premises).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 580
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

CREDENTIAL ON FILE
0200 350114900003 1 0 PURCHASE NO CVM 00 10 0 412 00

DSRP with UCAF (retains liability of original transaction) MDES cloud-based token subsequent recurring payment transaction
was successfully mapped.
0200: DE 48, SE 42 = 247 and SE 43 not present.
0200: DE 48, SE 26 (Wallet Identifier) = 327 (MDES for merchants Program) or a unique WID assigned to the commerce
2 platform and SE 30 (Token Transaction Identifier).
0200: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200: DE 48, SE 71 = 50Cb contains successful on-behalf service results.
0200: DE 56 (Payment Account Data) inserted by Mastercard as BIN Controller.
0200: DE 61, SF 3 = 2 (Off premises) and DE 61, SF 4 = 4 (Recurring Payments).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 581
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 368002100004 1 0 PURCHASE NO CVM 00 81 6 412 00

DSRP with UCAF (retains liability of original transaction) MDES cloud-based token subsequent partial shipment transaction
was successfully mapped.
0200: DE 48, SE 42 = 247 and SE 43 not present.
0200: DE 48, SE 26 (Wallet Identifier) = 327 (MDES for merchants Program) or a unique WID assigned to the commerce
3 platform and SE 30 (Token Transaction Identifier).
0200: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200: DE 48, SE 71 = 50Cb contains successful on-behalf service results.
0200: DE 56 (Payment Account Data) inserted by Mastercard as BIN Controller.
0200: DE 61, SF 3 = 2 (Off premises) and DE 61, SF 4 = 5 (Electronic Commerce).

Table 3501152—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES Device Token Without
Cryptogram—Financial Transaction Requests and Advices
The following test cases will test whether an issuer's Single Message online application that is participating in Mastercard Digital
Enablement Service (MDES) can receive MDES device token Financial Transaction Requests and advices that have undergone MDES
mapping but for various reasons do not contain any cryptographic on-behalf service results; process them, and send correctly
formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 582
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501152—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MDES Device Token Without
Cryptogram—Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350115200001 1 0 PURCHASE NO CVM 00 81 6 414 V

MDES successfully performed PAN mapping on a SecureCode issuer authenticated transaction.


DE 48, SE 42 = 212 and SE 43 is forwarded to issuer.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
1
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 583
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350115200003 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
original transaction from SecureCode merchant who chose not to undertake SecureCode on this transaction.
DE 2 and DE 14 contain PAN data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
2
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 210 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 584
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350115200004 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent partial shipment transaction from SecureCode merchant who chose not to undertake SecureCode on original
transaction.
DE 2 and DE 14 contain PAN data.

3 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 217 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 585
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

CREDENTIAL ON FILE
0200 350115200005 1 0 PURCHASE NO CVM 00 10 0 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent recurring payment transaction from SecureCode merchant who chose not to undertake SecureCode on original
transaction.
DE 2 and DE 14 contain PAN data.

4 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 3 (Token expiry date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 217; SE 43 not present; and DE 61, SF 4 = 4 (Recurring payment).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 586
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350115200011 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
original transaction from Masterpass merchant who does not support DSRP with full UCAF.
DE 2 and DE 14 contain PAN data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
5
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 220 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 587
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350115200012 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent partial shipment transaction from Masterpass merchant who did not support DSRP with full UCAF on original
transaction.
DE 2 and DE 14 contain PAN data.

6 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 227 and SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 588
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

CREDENTIAL ON FILE
0200 350115200013 1 0 PURCHASE NO CVM 00 10 0 412 00

MDES successfully performed PAN mapping without cryptography validation on Mastercard device token electronic commerce
subsequent recurring payment transaction from Masterpass merchant who does not support DSRP with full UCAF on original
transaction.
DE 2 and DE 14 contain PAN data.

7 DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token expiry date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 227; SE 43 not present; and DE 61, SF 4 = 4 (Recurring payment).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 589
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350115200014 1 0 PURCHASE NO CVM 00 81 6 412 00

MDES successfully performed PAN mapping on a Digital Secure Remote Payment UCAF subsequent partial shipment
transaction.
DE 48, SE 42 = 247 and SE 43 is not present.
8 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 (Account Type Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

CREDENTIAL ON FILE
0200 350115200015 1 0 PURCHASE NO CVM 00 10 0 412 00

MDES successfully performed PAN mapping on a Digital Secure Remote Payment UCAF subsequent recurring payment
transaction.
DE 48, SE 42 = 247 and SE 43 is not present.
9 DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 (Account Type Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 590
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350115200016 1 0 NO CVM 28 81 6 425 00

MDES successfully performed PAN mapping on a Mastercard device token for a Payment Transaction without cryptographic
data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).

10 DE 48, SE 42 = 210 (UCAF data collection is not supported by the merchant or a SecureCode merchant has chosen not to
undertake SecureCode on this transaction) and DE 48, SE 43 not present. Issuers may also initiate sending of SE 42 value 247
(DSRP).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transaction.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 591
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350115200017 1 0 NO CVM 28 81 6 425 00

MDES successfully performed PAN mapping on a MasterCard device token for a Masterpass Payment Transaction without
cryptographic data.
DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
11
DE 48, SE 42 = 220 (Masterpass - UCAF data collection is not supported by the merchant) and DE 48, SE 43 not present.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 48, SE 77 = C01 (Person-to-Person). Issuers may request testing of other valid payment transaction types.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Request message contains any other applicable mandatory/optional data and proper values for the
submitted payment transaction type such as for DE 18, DE 108, and DE 124 in MoneySend Payment Transaction.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 592
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0200 350115200021 1 0 PURCHASE NO CVM 00 01 0 001-010 00

MDES successfully performed PAN mapping on a device token for an incremental authorization.
DE 48, SE 26, SF 1 (Wallet Identifier) and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
12
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 63 indicates an incremental authorization.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

MANUAL ENTRY REFUND


0200 350115200022 1 0 NO CVM 20 01 0 001-010 00

MDES successfully performed PAN mapping on a device token for a refund authorization.
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice, SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
13
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 593
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350115200031 1 N/A OR NO CVM 00 91 0 515 00

MDES unsuccessfully performed PAN mapping.

14 DE 39 = 14 (Invalid card number).


DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350115200032 1 N/A OR NO CVM 00 91 0 513 00

MDES unable to perform PAN mapping.

15 DE 39 = 96 (System error).
DE 48, SE 71 = 50Ub for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 594
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350115200033 1 N/A OR NO CVM 00 91 0 515 00

MDES rejected request for suspended token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted card).
16 DE 48, SE 26, SF 1 (Wallet Identifier) and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410202 (Mastercard Digital Enablement Service Reject: Token in suspended status)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 595
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350115200034 1 N/A OR NO CVM 00 91 0 515 00

MDES rejected request for deactivated token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted card number).
17 DE 48, SE 26, SF 1 (Wallet Identifier) and DE 48, SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410203 (Mastercard Digital Enablement Service Reject: Token deactivated)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 596
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350115200035 1 N/A OR NO CVM 00 91 0 016 00

MDES failed PAN mapping due to format error.


DE 2 and DE 14 (if applicable) contain token information.
18
DE 35/45 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 =002.
DE 48, SE 71 = 50Fb for the on-behalf service results.
DE 60 = 1410201 (MDES Advice to Issuer; Reject: Invalid Token-Primary Account Number mapping relationship).

Table 3501202—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message application using the Mastercard CVC 3 Pre-validation Service
can receive CVC 3 normal and exception results in Financial Transaction Requests and send the correctly formatted Financial
Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 597
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501202—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200001 1 N/A OR NO CVM 00 91 0 311 00
1 Valid CVC 3
DE 48, SE 71 = 15Vb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = No discrepancy, SF 3 = W (ATC value is within the issuer defined limits)

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200002 1 N/A OR NO CVM 00 91 0 312 V
2
Invalid CVC 3
DE 48, SE 71 = 15Ib for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200003 1 N/A OR NO CVM 00 91 0 313 V
3
Unable to process
DE 48, SE 71 = 15Ub for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 598
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200004 1 N/A OR NO CVM 00 91 0 316 V
4
Unpredictable number mismatch
DE 48, SE 71 = 15Nb for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200005 1 N/A OR NO CVM 00 91 0 317 V
5 ATC out of valid range
DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC value is greater than the maximum value allowed)

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200006 1 N/A OR NO CVM 00 91 0 318 V
6 ATC out of valid range
DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = L (ATC value is lower than the minimum value)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 599
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200007 1 N/A OR NO CVM 00 91 0 319 V
7 ATC replay
DE 48, SE 71 = 15Eb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = No discrepancy, SF 3 = W (ATC value is within the issuer defined limits)

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200008 1 N/A OR NO CVM 00 91 0 327 V
8
Dynamic CVC 3 Pre-validation with issuer decision matrix indicating forward request if results are security platform time out
DE 48, SE 71 = 15Xb for the on-behalf service results

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350120200009 1 N/A OR NO CVM 00 91 0 328 V
9
Dynamic CVC 3 Pre-validation with issuer decision matrix indicating forward request if results are security system error
DE 48, SE 71 = 15Zb for the on-behalf service results

Table 3501203—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Financial Transaction Advices
Issuers that use the Mastercard Dynamic CVC 3 Pre-validation service should be prepared to receive Financial Transaction Advice
messages from Mastercard Stand-In systems that contain data generated by the Dynamic CVC 3 Pre-validation service. The following
are the CVC 3 Financial Transaction Advices for issuers implementing this service.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 600
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Issuers choose decline codes for each non-valid CVC 3 result and place those in a decision matrix in their On-behalf Key
Management file.

NOTE: These outcomes are a representative sampling of those that may be received by issuers.

Table 3501203—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3 Pre-
validation Service—Financial Transaction Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300001 1 N/A OR NO CVM 00 91 0 311 00

Valid CVC 3
DE 39 = 00 (Approved) in 0220 message
1
DE 48, SE 71 = 15Vb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC within range)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SE 2 = 0000 (Accept)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 601
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300009 1 N/A OR NO CVM 00 91 0 312 00

Invalid CVC 3 - Issuer instructs Mastercard to approve on invalid CVC 3


DE 39 = 00 (Approved) in 0220 message
2
DE 48, SE 71 = 15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300012 1 N/A OR NO CVM 00 91 0 317 00

ATC out of valid range - Issuer instructs Mastercard to approve on ATC out of range
DE 39 = 00 in 0220 message
3 DE 48, SE 71 = 15Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC out of range)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 602
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300015 1 N/A OR NO CVM 00 91 0 312 00

Invalid CVC 3 - Issuer instructs Mastercard to decline on invalid CVC 3


DE 39 = from 0210 based on issuer decision matrix
4
DE 48, SE 71 = 15Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300020 1 N/A OR NO CVM 00 91 0 319 00

ATC replay - Issuer instructs Mastercard to decline on ATC replay


DE 39 = from 0210 based on issuer decision matrix
5
DE 48, SE 71 = 15Eb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0046 (ATC replay)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 603
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300021 1 N/A OR NO CVM 00 91 0 327 00

Dynamic CVC 3 Pre-validation with issuer decision matrix indicating decline request if results are security platform time out
DE 39 = 05 (Do not honor)
6
DE 48, SE 71 = 15Xb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via on-behalf service decision)
DE 60, SF 2 = 0038 (Reject: Security Platform Time Out)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300022 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Pre-validation with issuer decision matrix indicating decline request if results are security platform system
error
7 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 15Zb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via on-behalf service decision)
DE 60, SF 2 = 0040 (Reject: Security Platform System Error)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 604
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120300023 1 N/A OR NO CVM 00 91 0 329 00

Dynamic CVC 3 Pre-validation with issuer decision matrix indicating decline request if results are no matching key file for this
PAN, PAN expiration date, and KDI combination
8 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 15Kb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 115 (Transaction processed via on-behalf service decision)
DE 60, SF 2 = 0037 (Reject: No matching key file for this PAN, PAN expiration date, and KDI combination)

Table 3501205—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3
Validation in Stand-in—Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Single Message authorization application using Dynamic CVC 3 Validation in
Stand-In can receive Financial Transaciton Advices with CVC 3 normal and exception results and send the resulting Financial
Transaction Responses.
Issuers must select and run a subset of the test cases below based upon the options they select when enrolling in this service.
• Test case 1 is an approval advice, which all issuers must run.
• Test cases 2-3 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to approve the transaction even
though the CVC 3 validation failed.
• Test cases 4-10 represent non-valid CVC 3 outcomes in which the issuer instructs Mastercard to decline the transaction in the
event of a specific CVC 3 validation failure.
Issuers may need to run a mixed subset of the test cases in the 2-3 (approve) and 4-5 decline.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 605
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Issuers choose decline codes for each non-valid CVC 3 result and place those in a decision matrix in their On-behalf Key
Management file.
Issuers may choose from the following decline codes:
• 01 Refer to Issuer
• 04 Pickup card
• 05 Do Not Honor
• 08 Honor with Identification
• 12 Invalid Transaction
• 57 Transaction not permitted to cardholder

NOTE: These outcomes are a representative sampling of those that may be received by issuers.

NOTE: Effective 1 March 2017 per Global Operations Bulletin No. 4, 1 April 2016, Revised Standards for Validation Services During
Stand-In Processing, all issuers globally that participate in Stand-In processing must have Dynamic CVC 3 Validation in Stand-In
Processing performed during Stand-In processing. Issuers are required to perform test cases 1 and either 2 or 4.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 606
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501205—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Dynamic CVC 3
Validation in Stand-in—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500001 1 N/A OR NO CVM 00 91 0 311 00

Valid CVC 3
DE 39 = 00 (Approved) in 0220 message
1
DE 48, SE 71 = 16Vb for the on-behalf service results
DE 48, SE 34, SF 1 = ATC value, SF 2 = no discrepancy, SF 3 = W (ATC in range)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0000 (Valid dynamic CVC 3)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500002 1 N/A OR NO CVM 00 91 0 312 00

Invalid CVC 3 - Issuer instructs Mastercard to approve on invalid CVC 3


DE 39 = 00 (Approved) in 0220 message
2
DE 48, SE 71 = 16Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 607
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500005 1 N/A OR NO CVM 00 91 0 317 00

ATC out of valid range - Issuer instructs Mastercard to approve on ATC out of range.
DE 39 = 00 (Approved) in 0220 message.
3 DE 48, SE 71 = 16Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 48, SE 34, SF 1 = ATC value, SF 2 = Discrepancy, SF 3 = G (ATC greater than limit)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC out of range)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500008 1 N/A OR NO CVM 00 91 0 312 00

Invalid CVC 3 - Issuer instructs Mastercard to decline on invalid CVC 3


DE 39 from 0210 based on issuer decision matrix
4
DE 48, SE 71 = 16Ib for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0044 (Invalid CVC 3)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 608
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500012 1 N/A OR NO CVM 00 91 0 318 00

ATC out of valid range - Issuer instructs Mastercard to decline on ATC out of range
DE 39 from 0210 based on issuer decision matrix
5
DE 48, SE 71 = 16Ab for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 101 (Alternate issuer route: IPS signed out)
DE 60, SF 2 = 0043 (ATC out of range)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500013 1 N/A OR NO CVM 00 91 0 327 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating approve request if results are security
6 platform time out
DE 39 = 00 (Approved)
DE 48, SE 71 = 16Xb for the on-behalf service results
DE 60, SF 1 = 201 (Network Stand-In: IPS signed out

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 609
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500014 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating approve request if results are security
7 platform system error
DE 39 = 00 (Approved)
DE 48, SE 71 = 16Zb for the on-behalf service results
DE 60, SF 1 = 201 (Network Stand-In: IPS signed out)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500015 1 N/A OR NO CVM 00 91 0 327 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating decline request if results are security
platform time out
8 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 16Xb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 201 (Network Stand-In: IPS signed out
DE 60, SF 2 = 0038 (Reject: Security Platform Time Out)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 610
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500016 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating decline request if results are security
platform system error
9 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 16Zb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 201 (Network Stand-In: IPS signed out)
DE 60, SF 2 = 0040 (Reject: Security Platform System Error)

MSR CONTACTLESS
PURCHASE SIGNATURE
0220 350120500017 1 N/A OR NO CVM 00 91 0 328 00

Dynamic CVC 3 Validation in Stand-In Processing with issuer decision matrix indicating decline request if results are no
matching key file for this PAN, PAN expiration date, and KDI combination
10 DE 39 = 05 (Do not honor)
DE 48, SE 71 = 16Kb for the on-behalf service results
DE 48, SE 87 = Y (Invalid)
DE 60, SF 1 = 201 (Network Stand-In: IPS signed out)
DE 60, SF 2 = 0037 (Reject: No matching key file for this PAN, PAN expiration date, and KDI combination)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 611
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501301—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud
Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message System application that participates in Expert Monitoring
System Real-Time Fraud Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ can receive fraud scoring results
in DE 48, subelement 71 (On-behalf Service Indicator) as well as subelement 75 (Fraud Assessment Prediction Information) and when
applicable subelement 56 (Security Services Additional Data for Issuers) of Financial Transaction Request messages, process them,
and return correctly formatted Financial Transaction Response messages.

Table 3501301—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Expert Monitoring Real-time Fraud
Scoring Service / Decision Intelligence, Assurance IQ, and Authorization IQ—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350130100002 1 1 SIGNATURE 00 90 0 001-010 00
1
Fraud Scoring Service unsuccessful
DE 48, SE 71 = 18Ub (Fraud Scoring Service was not performed successfully)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 612
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350130100006 1 1 SIGNATURE 00 90 0 001-010 00

Fraud Scoring Service with optional Fraud Rule Manager, MasterCard Authorization IQ Security Services Data, and Assurance
IQ Security Services Data.
DE 48, SE 71 = 18Cb (Fraud Scoring Service performed successfully)
2
DE 48, SE 75 (Fraud Scoring Data), SF 1 (Fraud Score), SF 2 (Score Reason Code), SF 3 (Rules Score), SF 4 (Rules Reason Code
1), and SF 5 (Rules Reason Code 2) are present.
Multiple occurences of DE 48, SE 56 (Security Services Additional Data for Issuers), SF 1 (Security Services Indicators) = AIQ
(Assurance IQ) and SF 2 (Security Services Data) are present; SF 1 = AQV (GDV-based Spend Ranking and SF 2 are present; SF
1 = AQF (Frequency-based Spend Ranking) and SF 2 are present; and SF 1 = AQS (Segment Qualifier) and SF 2 are present.

MSR PURCHASE
0200 350130100007 1 1 SIGNATURE 00 90 0 001-010 00

Fraud Scoring Service with optional Fraud Rule Manager, Mastercard Authorization IQ Security Services Data and Assurance IQ
Security Services Data, and Mastercard Spend Alerts Security Services Data provided to test maximum 16 occurences and
maximum length
DE 48, SE 71 = 18Cb (Fraud Scoring Service performed successfully)
3
DE 48, SE 75 (Fraud Scoring Data), SF 1 (Fraud Score), SF 2 (Score Reason Code), SF 3 (Rules Score), SF 4 (Rules Reason Code
1), and SF 5 (Rules Reason Code 2) are present.
Multiple occurences of DE 48, SE 56 (Security Services Additional Data for Issuers), SF 1 (Security Services Indicators) = AIQ
(Assurance IQ) and SF 2 (Security Services Data) are present; SF 1 = AQV (GDV-based Spend Ranking) and SF 2 are present; SF
1 = AQF (Frequency-based Spend Ranking) and SF 2 are present; SF 1 = AQS (Segment Qualifier) and SF 2 are present; and SF
1 = INC (Spend Alerts and Controls) and SF 2 are present; as well as 11 other occurrences of test data for maximum length of
96.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 613
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501303—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Safety Net—Financial
Transaction Advice
The following test case will test whether an issuer's Single Message online application that participates in Mastercard Safety Net can
receive and process a Safety Net Financial Transaction Advice and return correctly formatted Financial Transaction Response.

Table 3501303—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard Safety Net—Financial
Transaction Advice

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350130300001 1 N/A PURCHASE NO CVM 00 81 6 001-010 00

Transaction decline by Mastercard Safety Net service


DE 39 = 05 (Do not honor)
1
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 = 998 or 000 and SF 2 = NM (Network Monitor)
DE 60, SF 1 = 120 (Transaction Blocking)
DE 121 = 000003 (Mastercard On-behalf Service)

Table 3501306—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MasterCard Spend Alerts or Spend
Controls Services—Financial Transaction Requests and Advices
The following test cases will test whether an issuer's Single Message online application that participates in Mastercard Spend Alerts
or Spend Controls services can receive and process DE 48, SE 71 (On-behalf Results); DE 48, subelement 56 (Security Services
Additional Data for Issuers) when applicable; and DE 48, SE 75 (Fraud Scoring Data) when applicable in Financial Transaction
Requests and Advices, and return correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 614
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Mastercard Spend Alerts enables issuers to meet the popular transaction alert needs of cardholders.
Mastercard Spend Controls enables issuers to meet the popular transaction alert and control needs of cardholders.
Additionally, for both Mastercard Spend Alerts and Spend Controls, cardholders can easily disable their cards to temporarily stop all
payments.
These test transactions are meant to only test the financial transaction messages and not for testing delivery of alerts.

Table 3501306—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MasterCard Spend Alerts or Spend
Controls Services—Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350130600001 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


1 DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ATA (Alert Transaction
Amount)

MSR PURCHASE
0200 350130600002 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


2
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ACB (Alert Cross Border)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 615
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0200 350130600003 1 N/A PURCHASE SIGNATURE 00 01 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


3 DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ACH (Alert Transaction
Channel)

MSR PURCHASE
0200 350130600004 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


4
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AGE (Alert Geo Locations)

MSR PURCHASE
0200 350130600005 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


5
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AMC (Alert MCC)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 616
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350130600006 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


6
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = ABD (Alert Budget)

MSR PURCHASE
0200 350130600007 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


7
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AFL (Alert Filter)

MSR PURCHASE
0200 350130600008 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


8
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = AAL (Alert Aprove All)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 617
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350130600009 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services


9
DE 48, SE 71 = 18Cb (Expert Monitoring Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = NAT (No Action Taken)

MSR PURCHASE
0200 350130600020 1 N/A SIGNATURE 00 90 0 001-010 00

10 Mastercard Spend Alerts or Spend Controls services


DE 48, SE 71 = 18Ub (Unable to Process)
DE 48, SE 75 and SE 56 not present

MSR PURCHASE
0220 350130600031 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Alerts or Spend Controls services

11 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DCD (Decline Card Disabled)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 618
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350130600032 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services


DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)
12
DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DTA (Decline Transaction
Amount)

MSR PURCHASE
0220 350130600033 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

13 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DCB (Decline Cross Border)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 619
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0220 350130600034 1 N/A PURCHASE SIGNATURE 00 01 0 001-010 00

Mastercard Spend Controls services

14 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DCH (Decline Channel)

MSR PURCHASE
0220 350130600035 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

15 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DGE (Decline Geo Location)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 620
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350130600036 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

16 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DMC (Decline MCC)

MSR PURCHASE
0220 350130600037 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

17 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DBD (Decline Budget)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 621
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350130600038 1 N/A SIGNATURE 00 90 0 001-010 00

Mastercard Spend Controls services

18 DE 39 = 05 (Do not honor), DE 60, SF 1 = 1200009 (Transaction Blocking: Issuer)


DE 48, SE 71, SF 1 = 18Cb (Fraud Scoring Service performed successfully)
DE 48, SE 75, SF 1 (Fraud Score) = 001 and SF 2 (Score Reason Code) = 00
DE 48, SE 56, SF 1 (Service Code) = INC (Spend Alerts and Controls) and SF 2 (Reason Code) = DFL (Decline Filter)

Table 3501402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Funding Transactions—
Financial Transaction Requests and Advices
The following test cases will test whether an issuer's Single Message application can process MoneySend Funding transactions in the
Financial Transaction Requests and Reversal Advices, and return correctly formatted Financial Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 622
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501402—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Funding Transactions—
Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0200 350140200001 1 1 PURCHASE SIGNATURE 00 01 0 001-010 00

MoneySend Funding Transaction


1 DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 108 and DE 124 present with minimal required
data.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

MSR CAT LEVEL 1


0200 350140200002 1 1 PURCHASE ONLINE PIN 00 90 1 V 001-010 00

MoneySend Funding Transaction


2
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 124 is present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 623
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CAT LEVEL 2


0200 350140200003 1 1 PURCHASE NO CVM 00 90 2 001-010 00

MoneySend Funding Transaction


3
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 108 is present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

ELECTRONIC COMMERCE
0200 350140200004 1 1 PURCHASE NO CVM 00 81 6 001-010 00

MoneySend Funding Transaction


4 DE 18 = 6538 (MoneySend Funding); DE 48, TCC = T (Mail, Phone and Electronic Commerce Order); optional DE 108 and DE
124 are not present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

MSR PURCHASE
0200 350140200005 1 1 SIGNATURE 00 90 0 001-010 00

MoneySend Funding Transaction


5
DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 108 and DE 124 are not present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 624
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CAT LEVEL 1


0200 350140200006 1 N/A PURCHASE ONLINE PIN 00 90 1 V 001-010 V

MoneySend Funding Transaction

6 DE 18 = 6538 (MoneySend Funding); DE 48, TCC = R (Retail); optional DE 108 and DE 124 are not present.
DE 48, SE 77 = C07 (Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program values).
DE 48, SE 71 = 33Ub (MoneySend Blocking Service; Unable to Process)
0210: DE 39 response code is issuer decision.

MANUAL ENTRY
0220 350140200007 1 N/A PURCHASE NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails Mastercard Blocking.


0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6538 (MoneySend Funding)
7 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) MoneySend data is present.
0220: DE 48, SE 71 = 33Tb (MoneySend Mastercard Blocking; Transaction Amount limit not allowed for the MoneySend
Funding transaction type)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500064 (Reject: Transaction Amount Limit Check.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 625
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0220 350140200008 1 N/A PURCHASE NO CVM 00 01 0 001-010 00

MoneySend Funding transaction where Mastercard Blocking not applied due to internal system error.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6538 (MoneySend Funding)
8
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 108 (MoneySend Reference Data) is present.
0220: DE 48, SE 71 = 33Ub (Unable to Process)
0220: DE 39 = 96 (System error); DE 60 = 1500071 (Reject: Decline Other)

MANUAL ENTRY
0220 350140200009 1 N/A PURCHASE NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails Issuer Transaction Controls Block All rule.
0220: DE 14 (Date, Expiration) is optional.
9 0220: DE 18 = MCC 6538 (MoneySend Funding)
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 48, SE 71 = 33Rb (MoneySend Issuer Blocking-Invalid Card)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500071 (Reject: Decline Other).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 626
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0220 350140200010 1 N/A PURCHASE NO CVM 00 01 0 001-010 00

MoneySend Funding transaction where Mastercard Blocking rejected for Product code invalid for the Transaction Type
indicator.
0220: DE 14 (Date, Expiration) is optional.
10
0220: DE 18 = MCC 6538 (MoneySend Funding)
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 48, SE 71 = 33Sb (Product code invalid for the Transaction Type indicator)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500071 (Reject: Decline Other)

MANUAL ENTRY
0220 350140200011 1 N/A PURCHASE NO CVM 00 01 0 001-010 00

MoneySend Funding cross-border transaction is blocked by Mastercard


0220: DE 14 (Date, Expiration) is optional
11 0220: DE 18 = MCC 6538 (MoneySend Funding)
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) or C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values)
0220: DE 48, SE 71 = 33Wb (MoneySend MasterCard Blocking; Country not allowed for the MoneySend Transaction)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500072 (Reject: Geographic Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 627
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501411—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Issuer Transaction
Controls—Financial Transaction Requests and Advices
The following test cases will test whether an issuer's Single Message online application can receive Mastercard MoneySend Payment
Transactions and Funding Transactions in Financial Transaction messages containing the results of MoneySend Issuer Transaction
Controls services as well as the Sanctions Screening score (if provided); process them, and send correctly formatted Financial
Transaction Responses. Mastercard currently provides score on all cross border transactions and participating domestic transactions.

NOTE: These test cases apply only to issuers participating in the optional MoneySend Issuer Transaction Controls service. Issuers
need only complete those test cases for which they have established monitoring or blocking controls.

Issuers must comply with MoneySend Payment Transaction processing requirements.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 628
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501411—Issuer On-behalf Services - SMS Auth—MSR Product and Services—MoneySend Issuer Transaction
Controls—Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350141100001 1 1 NO CVM 28 01 0 001-010 00

MoneySend Payment transaction passes optional Issuer Transaction Controls, and Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
1
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0200: DE 48, SE 71 = 33Vb (MoneySend Blocking Service; Valid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 629
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350141100002 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
2
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0200: DE 48, SE 71 = 33Nb (MoneySend Issuer Monitoring-MoneySend Transaction Count exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 630
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350141100003 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
3
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0200: DE 48, SE 71 = 33Ob (MoneySend Issuer Monitoring-Aggregate transaction amount limit exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 631
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350141100004 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
4
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0200: DE 48, SE 71 = 33Pb (MoneySend Issuer Monitoring-Transaction amount limit exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 632
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0200 350141100005 1 N/A NO CVM 28 01 0 001-010 V

MoneySend Payment transaction fails optional Issuer Monitoring, and Sanction Screening score is provided.
0200: DE 14 (Date, Expiration) is optional.
0200: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)
5
0200: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0200: DE 124 (Member-defined Data) contains all MoneySend subfields.
0200: DE 108 (MoneySend Reference Data) contains only the mandated data.
0200: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0200: DE 48, SE 71 = 33Qb (MoneySend Issuer Monitoring-Sanction Screening Score exceeded)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 633
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100006 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

6 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Ab (MoneySend Issuer Blocking-Transaction limit not allowed for the MoneySend Payment type)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500064.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 634
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100007 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

7 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Bb (MoneySend Issuer Blocking-Merchant not allowed for the MoneySend Payment type)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500067.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 635
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100008 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

8 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Db (MoneySend Issuer Blocking-Country not allowed for the MoneySend Payment type)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500072.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 636
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100009 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

9 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Eb (MoneySend Issuer Blocking-Domestic activity only allowed)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500072.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 637
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100010 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

10 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Fb (MoneySend Issuer Blocking-Sanction Screening Score limit exceeded)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500076.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 638
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100011 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

11 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Lb (MoneySend Issuer Blocking-MoneySend Transaction Count exceeded)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500077.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 639
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100012 1 N/A NO CVM 28 01 001-010 00

MoneySend Payment transaction fails optional Issuer Blocking Controls, and Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

12 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains Sanction Screening Score value between 000-100.
0220: DE 48, SE 71 = 33Mb (MoneySend Issuer Blocking-Aggregate transaction amount limit exceeded)
0220: DE 39 = 05 (Do not honor) and DE 60 = 1500065.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 640
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
PAYMENT TRANSACTION
0220 350141100013 1 N/A NO CVM 28 01 0 001-010 00

MoneySend Payment transaction fails Issuer Transaction Controls Block All rule; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6537 (MoneySend Intercountry) or MCC 6536 (MoneySend Intracountry)

13 0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 124 (Member-defined Data) contains all MoneySend subfields.
0220: DE 108 (MoneySend Reference Data) contains only the mandated data.
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Rb (MoneySend Issuer Blocking-Invalid Card)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500071 (Reject: Decline Other).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 641
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MANUAL ENTRY
0220 350141100014 1 N/A PURCHASE NO CVM 00 01 0 001-010 00

MoneySend Funding transaction fails Issuer Transaction Controls Block All rule; Sanction Screening score is provided.
0220: DE 14 (Date, Expiration) is optional.
0220: DE 18 = MCC 6538 (MoneySend Funding)
14
0220: DE 48, SE 77 = C07 (MoneySend Person-to-Person) and C52, C53, C54, C55, C56, C57 (valid MoneySend Program
values).
0220: DE 48, SE 67, SF 1 contains sender Sanction Screening score.
0220: DE 48, SE 71 = 33Rb (MoneySend Issuer Blocking-Invalid Card)
0220: DE 39 = 05 (Do not honor); DE 60 = 1500071 (Reject: Decline Other).

Table 3501601—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service —Financial Transaction Requests and Reversals
The following test cases will test whether an issuer's Mastercard In Control Real Card Spend Controls Single Message application can
receive and process Financial Transaction Requests and Reversals that contain DE 48, subelement 71 (On-behalf Services) indicating
the Mastercard In Control results and return correctly formatted Financial Responses. The results are pass or fail, and each fail may
trigger an optional alert to the cardholder.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 642
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501601—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Requests and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350160100001 1 1 SIGNATURE OR NO CVM 00 90 0 RCN_101-109 00
1
Passes spend controls
DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid)

MSR PURCHASE
0200 350160100002 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_115 V
2
Fails validity period limit controls and alert sent
DE 48, SE 71 = 20Db (Mastercard In Control RCN Spend Control Service - Validity Period Limit)

MSR PURCHASE
0200 350160100003 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_116 V
3
Fails transaction amount limit controls and alert sent
DE 48, SE 71 = 20Eb (Mastercard In Control RCN Spend Control Service - Transaction Amount Limit Check)

MSR PURCHASE
0200 350160100004 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_113 V

Fails transaction cumulative amount limit controls and alert sent


4
DE 48, SE 71 = 20Fb (Mastercard In Control RCN Spend Control Service - Cumulative Amount Limit Check)

NOTE: Transaction may need to be re-executed until cumulative amount limit is exceeded.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 643
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350160100005 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_117 V

Fails transaction number usage controls and alert sent


5
DE 48, SE 71 = 20Gb (Mastercard In Control RCN Spend Control Service - Transaction Number Usage)

NOTE: Transaction may need to be re-executed until number usage control is exceeded.

MSR PURCHASE
0200 350160100006 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_118 V
6
Fails merchant ID limit controls and alert sent
DE 48, SE 71 = 20Hb (Mastercard In Control RCN Spend Control Service - Merchant ID Limit)

MSR PURCHASE
0200 350160100007 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_119 V
7
Fails MCC limit controls and alert sent
DE 48, SE 71 = 20Jb (Mastercard In Control RCN Spend Control Service - MCC Limit)

MSR PURCHASE
0200 350160100008 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_111 V
8
Fails geographic restriction controls and alert sent
DE 48, SE 71 = 20Lb (Mastercard In Control RCN Spend Control Service - Geographic Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 644
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0200 350160100090 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_112 V
9
Fails transaction type restriction controls and alert sent
DE 48, SE 71 = 20Mb (Mastercard In Control RCN Spend Control Service - Transaction Type Restriction)

MSR PURCHASE
0200 350160100009 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_114 V
10
Fails transaction time/date restriction controls and alert sent
DE 48, SE 71 = 20Pb (Mastercard In Control RCN Spend Control Service - Transaction Time/Date Restriction)

Table 3501602—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Advices (Acquirer-generated)
The following test cases will test whether an issuer's Single Message application can receive and process Financial Transaction
Advices (Acquirer-generated) that contain DE 48, subelement 71 (On-behalf Services) indicating the Mastercard In Control results
and return correctly formatted Financial Transaction Responses. The results are successfully processed or unable to process.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 645
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501602—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Advices (Acquirer-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE RCN_101-109


0220 350160200001 1 1 SIGNATURE OR NO CVM 00 90 0 MSI-ONLY 00
1
Passes spend controls
DE 48, SE 71 = 20Vb (Mastercard In Control RCN Spend Control Service - Valid)

Table 3501603—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Mastercard In Control Real Card Spend Controls Single Message application can
receive and process Financial Transaction Advices (System-generated) that contain DE 48, subelement 71 (On-behalf Services)
indicating the Mastercard In Control results and return correctly formatted Financial Responses. The results are fail and decline, and
each fail may trigger an optional alert to the cardholder.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 646
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501603—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Real Card
Spend Control Service—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350160300001 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_125 00

Fails validity period limit controls and alert sent


1
DE 39 = 54 (Expired card)
DE 48, SE 71 = 20Db (Mastercard In Control RCN Spend Control Service - Validity Period Limit)
DE 60 = 1500063 (Reject: Validity Period Limit)

MSR PURCHASE
0220 350160300002 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_126 00

Fails transaction amount limit controls and alert sent


2
DE 39 = 51 (Insufficient Funds)
DE 48, SE 71 = 20Eb (Mastercard In Control RCN Spend Control Service - Transaction Amount Limit Check)
DE 60 = 1500064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 647
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350160300003 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_123 00

Fails transaction cumulative amount limit controls and alert sent


3
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 20Fb (Mastercard In Control RCN Spend Control Service - Cumulative Amount Limit Check)
DE 60 = 1500065 (Reject: Cumulative Amount Limit Check)

MSR PURCHASE
0220 350160300004 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_127 00

Fails transaction number usage controls and alert sent


4
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Gb (Mastercard In Control RCN Spend Control Service - Transaction Number Usage)
DE 60 = 1500066 (Reject: Transaction Number Usage)

MSR PURCHASE
0220 350160300005 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_128 00

Fails merchant ID limit controls and alert sent


5
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Hb (Mastercard In Control RCN Spend Control Service - Merchant ID Limit)
DE 60 = 1500067 (Reject: Merchant ID Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 648
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350160300006 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_129 00

Fails MCC limit controls and alert sent


6
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Jb (Mastercard In Control RCN Spend Control Service - MCC Limit)
DE 60 = 1500069 (Reject: MCC Limit)

MSR PURCHASE
0220 350160300007 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_121 00

Fails geographic restriction controls and alert sent


7
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Lb (Mastercard In Control RCN Spend Control Service - Geographic Restriction)
DE 60 = 1500072 (Reject: Geographic Restriction)

MSR PURCHASE
0220 350160300008 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_122 00

Fails transaction type restriction controls and alert sent


8
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Mb (Mastercard In Control RCN Spend Control Service - Transaction Type Restriction)
DE 60 = 1500073 (Reject: Transaction Type Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 649
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE
0220 350160300009 1 0 SIGNATURE OR NO CVM 00 90 0 RCN_124 00

Fails transaction time/date restriction controls and alert sent


9
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 20Pb (Mastercard In Control RCN Spend Control Service - Transaction Time/Date Restriction)
DE 60 = 1500075 (Reject: Transaction Time/Date Restriction)

Table 3501604—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Financial Transaction Requests and Reversal
The following test cases will test whether an issuer's Mastercard In Control Virtual Card Service Single Message application can
receive and process Financial Transaction Requests and Reversals that contain DE 48, subelement 71 (On-behalf Services) indicating
the Mastercard In Control results, as well as DE 48, subelement 33 (PAN Mapping File Information), and return correctly formatted
Financial Responses. The results are pass or fail, and each fail triggers an alert to the cardholder.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 650
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501604—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Financial Transaction Requests and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350160400001 1 1 PURCHASE NO CVM 00 81 6 VCN_201 00

0420 1 1 DE 39 = 00 00
1
Virtual card number successfully mapped and has no spend controls
DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)

ELECTRONIC COMMERCE
0200 350160400002 1 1 PURCHASE NO CVM 00 81 6 VCN_211-219 00
2
Virtual card number successfully mapped and has passed spend controls
DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)

ELECTRONIC COMMERCE
0200 350160400004 1 0 PURCHASE NO CVM 00 81 6 VCN_241 V
3
Virtual card number successfully mapped, fails validity period limit controls and alert sent
DE 48, SE 71 = 17Db (Mastercard In Control VCN with Spend Control Service - Validity Period Limit)

ELECTRONIC COMMERCE
0200 350160400005 1 0 PURCHASE NO CVM 00 81 6 VCN_242 V
4
Virtual card number successfully mapped, fails transaction amount limit controls and alert sent
DE 48, SE 71 = 17Eb (Mastercard In Control VCN with Spend Control Service - Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 651
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350160400006 1 0 PURCHASE NO CVM 00 81 6 VCN_243 V

Virtual card number successfully mapped, fails cumulative amount limit controls and alert sent
5
DE 48, SE 71 = 17Fb (Mastercard In Control VCN with Spend Control Service - Cumulative Amount Limit Check)

NOTE: Transaction may need to be re-executed until cumulative amount limit is exceeded.

ELECTRONIC COMMERCE
0200 350160400007 1 0 PURCHASE NO CVM 00 81 6 VCN_244 V

Virtual card number successfully mapped, fails transaction number usage controls and alert sent
6
DE 48, SE 71 = 17Gb (Mastercard In Control VCN with Spend Control Service - Transaction Number Usage)

NOTE: Transaction may need to be re-executed until transaction number usage is exceeded.

ELECTRONIC COMMERCE
0200 350160400008 1 0 PURCHASE NO CVM 00 81 6 VCN_245 V
7
Virtual card number successfully mapped, fails merchant ID limit controls and alert sent
DE 48, SE 71 = 17Hb (Mastercard In Control VCN with Spend Control Service - Merchant ID Limit)

ELECTRONIC COMMERCE
0200 350160400009 1 0 PURCHASE NO CVM 00 81 6 VCN_246 V
8
Virtual card number successfully mapped, fails MCC limit controls and alert sent
DE 48, SE 71 = 17Jb (Mastercard In Control VCN with Spend Control Service - MCC Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 652
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350160400010 1 0 PURCHASE NO CVM 00 81 6 VCN_247 V
9
Virtual card number successfully mapped, fails geographic restriction controls and alert sent
DE 48, SE 71 = 17Lb (Mastercard In Control VCN with Spend Control Service - Geographic Restriction)

ELECTRONIC COMMERCE
0200 350160400011 1 0 PURCHASE NO CVM 00 81 6 VCN_248 V
10
Virtual card number successfully mapped, fails transaction type restriction controls and alert sent
DE 48, SE 71 = 17Mb (Mastercard In Control VCN with Spend Control Service - Transaction Type Restriction)

ELECTRONIC COMMERCE
0200 350160400012 1 0 PURCHASE NO CVM 00 81 6 VCN_249 V
11
Virtual card number successfully mapped, fails transaction time/date restriction controls and alert sent
DE 48, SE 71 = 17Pb (Mastercard In Control VCN with Spend Control Service - Transaction Time/Date Restriction)

Table 3501605—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Financial Transaction Advices (Acquirer-generated)
The following test cases will test whether an issuer's Mastercard In Control Virtual Card Service issuer Single Message application can
receive and process Financial Transaction Advices (Acquirer-generated) that contain DE 48, subelement 71 (On-behalf Services)
indicating the Mastercard In Control results, as well as DE 48, subelement 33 (PAN Mapping File Information), and return correctly
formatted Financial Responses. The results are successfully processed or unable to process.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 653
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501605—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service—Financial Transaction Advices (Acquirer-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350160500001 1 1 PURCHASE NO CVM 00 81 6 VCN_201 00

1 Virtual card number successfully mapped and has no spend controls


DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)
DE 60 = 280 (APS approved)

ELECTRONIC COMMERCE
0220 350160500002 1 1 PURCHASE NO CVM 00 81 6 VCN_211-219 00

2 Virtual card number successfully mapped and has passed spend controls
DE 48, SE 71 = 17Vb (Mastercard In Control VCN with Spend Control Service - Valid)
DE 60 = 280 (APS approvd)

Table 3501606—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service— Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Mastercard In Control Virtual Card Spend Controls issuer Single Message
application can receive and process Financial Transaction Advices (System-generated) that contain DE 48, subelement 71 (On-behalf
Services) indicating the Mastercard In Control results, as well as DE 48, subelement 33 (PAN Mapping File Information) and return
correctly formatted Financial Responses. The results are fail and decline, and each fail triggers an alert to the cardholder.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 654
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501606—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Virtual Card
Service— Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350160600001 1 0 PURCHASE NO CVM 00 81 6 VCN_205 00

Virtual card number successfully mapped but expiration date does not match
1
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Ab (Mastercard In Control VCN with Spend Control Service - VCN expiration date does not match)
DE 60 = 1500060 (Reject: VCN expiration date does not match)

ELECTRONIC COMMERCE
0220 350160600002 1 0 PURCHASE NO CVM 00 81 6 VCN_206 00

Virtual card number successfully mapped but expiration date expired


2
DE 39 = 54 (Expired card)
DE 48, SE 71 = 17Bb (Mastercard In Control VCN with Spend Control Service - VCN expiration date expired)
DE 60 = 1500061 (Reject: VCN expiration date expired)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 655
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350160600003 1 0 PURCHASE NO CVM 00 81 6 VCN_207 00

Virtual card number successfully mapped but CVC 2 does not match
3
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Cb (Mastercard In Control VCN with Spend Control Service - Virtual CVC 2 does not match)
DE 60 = 1500062 (Reject: Virtual CVC 2 does not match)

ELECTRONIC COMMERCE
0220 350160600004 1 0 PURCHASE NO CVM 00 81 6 VCN_231 00

Virtual card number successfully mapped, fails validity period limit controls and alert sent
4
DE 39 = 54 (Expired card)
DE 48, SE 71 = 17Db (Mastercard In Control VCN with Spend Control Service - Validity Period Limit)
DE 60 = 1500063 (Reject: Validity Period Limit)

ELECTRONIC COMMERCE
0220 350160600005 1 0 PURCHASE NO CVM 00 81 6 VCN_232 00

Virtual card number successfully mapped, fails transaction amount limit controls and alert sent
5
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 17Eb (Mastercard In Control VCN with Spend Control Service - Transaction Amount Limit Check)
DE 60 = 1500064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 656
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350160600006 1 0 PURCHASE NO CVM 00 81 6 VCN_233 00

Virtual card number successfully mapped, fails cumulative amount limit controls and alert sent
6
DE 39 = 51 (Insufficient funds)
DE 48, SE 71 = 17Fb (Mastercard In Control VCN with Spend Control Service - Cumulative Amount Limit Check)
DE 60 = 1500065 (Reject: Cumulative Amount Limit Check)

ELECTRONIC COMMERCE
0220 350160600007 1 0 PURCHASE NO CVM 00 81 6 VCN_234 00

Virtual card number successfully mapped, fails transaction number usage controls and alert sent
7
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Gb (Mastercard In Control VCN with Spend Control Service - Transaction Number Usage)
DE 60 = 1500066 (Reject: Transaction Number Usage)

ELECTRONIC COMMERCE
0220 350160600008 1 0 PURCHASE NO CVM 00 81 6 VCN_235 00

Virtual card number successfully mapped, fails merchant ID limit controls and alert sent
8
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Hb (Mastercard In Control VCN with Spend Control Service - Merchant ID Limit)
DE 60 = 1500067 (Reject: Merchant ID Limit)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 657
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350160600009 1 0 PURCHASE NO CVM 00 81 6 VCN_236 00

Virtual card number successfully mapped, fails MCC limit controls and alert sent
9
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Jb (Mastercard In Control VCN with Spend Control Service - MCC Limit)
DE 60 = 1500069 (Reject: MCC Limit)

ELECTRONIC COMMERCE
0220 350160600010 1 0 PURCHASE NO CVM 00 81 6 VCN_237 00

Virtual card number successfully mapped, fails geographic restriction controls and alert sent
10
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Lb (Mastercard In Control VCN with Spend Control Service - Geographic Restriction)
DE 60 = 1500072 (Reject: Geographic Restriction)

ELECTRONIC COMMERCE
0220 350160600011 1 0 PURCHASE NO CVM 00 81 6 VCN_238 00

Virtual card number successfully mapped, fails transaction type restriction controls and alert sent
11
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Mb (Mastercard In Control VCN with Spend Control Service - Transaction Type Restriction)
DE 60 = 1500073 (Reject: Transaction Type Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 658
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0220 350160600012 1 0 PURCHASE NO CVM 00 81 6 VCN_239 00

Virtual card number successfully mapped but fails transaction time/date restriction controls and alert sent
12
DE 39 = 05 (Do not honor)
DE 48, SE 71 = 17Pb (Mastercard In Control VCN with Spend Control Service - Transaction Time/Date Restriction)
DE 60 = 1500075 (Reject: Transaction Time/Date Restriction)

ELECTRONIC COMMERCE
0220 350160600013 1 0 PURCHASE NO CVM 00 81 6 VCN_210 00

Invalid virtual card number to real card number mapping relationship


13
DE 39 = 14 (Invalid card number)
DE 48, SE 71 = 17Ib (Mastercard In Control VCN with Spend Control Service invalid VCN-RCN mapping relationship)
DE 60 = 1500068 (Reject: Invalid VCN-RCN Mapping Relationship)

Table 3501620—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Optional
Partial Approval Processing—Financial Transaction Requests
The following test cases will test whether an issuer Single Message online application is able to receive Financial Transaction Requests
for the In Control suggested partial approval amount; process them, and send correctly formatted Financial Transaction Responses.
The issuer is participating in an In Control transaction amount limit service and has opted to receive the suggested partial approval
amount indicated via amount type 59 in DE 54.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 659
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3501620—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Mastercard In Control Optional
Partial Approval Processing—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN_072


0200 350162000001 1 0 PURCHASE NO CVM 00 81 6 VCN_250 10

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer approves that available amount.

1 0200: DE 48, SE 33 contains virtual account information


0200: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0200: DE 54, SF 2 = 59 and SF 5 contains suggested partial approval amount.
0210: DE 6 contains partial approval amount that was suggested, DE 38 contains authorization code, DE 39 = 10 (Partial
approval), and DE 51 contains cardholder billing currency.

ELECTRONIC COMMERCE VCN_072


0200 350162000002 1 0 PURCHASE NO CVM 00 81 6 VCN_250 10

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer approves less than that available amount.

2 0200: DE 48, SE 33 contains virtual account information


0200: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0200: DE 54, SF 2 = 59 and SF 5 contains suggested partial approval amount.
0210: DE 6 contains partial approval amount that was less than suggested, DE 38 contains authorization code, DE 39 = 10
(Partial approval), and DE 51 contains cardholder billing currency.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 660
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE VCN_073


0200 350162000003 1 0 PURCHASE NO CVM 00 81 6 VCN_251 00

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer approves the total transaction amount rather
than only the suggested amount.
3
0200: DE 48, SE 33 contains virtual account information
0200: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0200: DE 54, SF 2 = 59 and SF 5 contains suggested partial approval amount.
0210: DE 38 contains authorization code, DE 39 = 00 (Approved).

ELECTRONIC COMMERCE VCN_074


0200 350162000004 1 0 PURCHASE NO CVM 00 81 6 VCN_252 V

Virtual card number successfully mapped but fails transaction amount limit controls, merchant terminal permits partial
approvals, In Control provides suggested available amount to issuer, and issuer declines the total transaction amount.
4 0200: DE 48, SE 33 contains virtual account information
0200: DE 48, SE 71 = 17Eb (In Control VCN with Spend Control Service — In Control Transaction Amount Limit Check)
0200: DE 54, SF 2 = 59 and SF 5 contains suggested partial approval amount.
0210: DE 39 contains any decline response code.

Table 3503525—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Non-token PAN)—Financial Transaction Requests and Advices
The following test cases will test whether a Receiving Institution's (RI) Single Message online application that is participating in
Merchant Presented QR can process Financial Transaction Requests and Advices containing Merchant Presented QR payment

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 661
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

transactions with on-behalf service results in DE 48, subelement 71 on a consumer's PAN; process them, and send correctly
formatted Financial Transaction Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 662
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503525—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Non-token PAN)—Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350352500001 1 0 NO CVM 28 81 6 001-010 00

Merchant Presented QR service successfully processed for a consumer's PAN


DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
1 DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 663
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350352500002 1 0 NO CVM 28 81 6 001-010 00

Merchant Presented QR service successfully processed for a consumer's PAN


DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
2 DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are not present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 664
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350352500003 1 0 NO CVM 28 81 6 001-010 V

Merchant Presented QR service for a consumer's PAN is not available


DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
3 DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Ub for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 665
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0220 350352500004 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a consumer's PAN rejected request due to exceeding transaction amount limit and advice
sent to RI
DE 4 (Amount, Transaction) greater than 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
4
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Db for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1510064 (Reject: Transaction Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 666
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0220 350352500005 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a consumer's PAN rejected request due to exceeding cumulative amount limit and advice
sent to RI
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
5
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are present
DE 48, SE 71 = 37Eb for the on-behalf service results
DE 48, SE 42 = 210 is present
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1510065 (Reject: Cumulative Amount Limit Check)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 667
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0220 350352500006 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a consumer's PAN rejected request due to cross border transaction and advice sent to RI
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
6 DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Fb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1510072 (Reject: Geographic Restriction)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 668
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0220 350352500007 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service for a consumer's PAN routed to and rejected by Stand-In limits due to RI timeout after
Merchant Presented QR service was successfully performed; advice sent to RI informing of the Stand-In reject
DE 4 (Amount, Transaction) less than or = 2500 USD and DE 48, SE 77 = C67 (Merchant Presented QR)
DE 18 (Merchant Code) does not contain any prohibited value
7
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 1 (Merchant ID) are present
DE 48, SE 42 = 210 is present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 39 = 05 (Do not honor) and DE 60 = 1020064 (IPS Timed Out; Reject: Transaction Amount Limit Check)

Table 3503526—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Financial Transaction Requests and Advices
The following test cases will test whether a Receiving Institution's (RI) Single Message online application that is participating in
Merchant Presented QR can process Financial Transaction Requests containing Merchant Presented QR payment transactions with
on-behalf service results in DE 48, subelement 71 on a token; process them, and send correctly formatted Financial Transaction
Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 669
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 670
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503526—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Payment
Transactions (Tokenized)—Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
1 PAYMENT TRANSACTION
0200 350352600001 1 N/A NO CVM 28 81 6 001-010 00

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 671
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

Merchant Presented QR service was successfully processed and MDES Secure Element token was successfully mapped,
validated, and issuer approved on a DSRP UCAF transaction
DE 2 and DE 14 contain PAN data and DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology)
DE 48, SE 42 = 242 (DSRP) is present and SE 43 is present if issuer opt-in to receive
DE 48, SE 71 = 37Vb 50Cb 51Vb for the on-behalf service results
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 672
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PAYMENT TRANSACTION
0200 350352600002 1 N/A NO CVM 28 81 6 001-010 00

Merchant Presented QR service was successfully processed and MDES Cloud-based payment token was successfully mapped,
validated, and issuer approved on a DSRP UCAF transaction
DE 2 and DE 14 contain PAN data and DE 18 (Merchant Code) does not contain any prohibited value
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
2 Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology)
DE 48, SE 42 = 242 (DSRP) is present and SE 43 is present if issuer opt-in to receive
DE 48, SE 71 = 37Vb 50Cb 61Vb for the on-behalf service results
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 01 (Unique Transaction Reference); SE 03, SF 02 (Transaction
Additional Message); SE 03, SF 03 (Funding Source); SE 05, SF 01 (Digital Account Reference Number); and SE 06 (QR
Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 673
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503535—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Financial Transaction Requests
The following test cases will test whether a Receiving Institution's (RI) Single Message online application that is participating in
Merchant Presented QR can process Financial Transaction Requests containing Merchant Presented QR refund transactions with on-
behalf service results in DE 48, subelement 71 on a consumer's PAN; process them, and send correctly formatted Financial
Transaction Responses.
The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 674
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503535—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Non-token PAN)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
REFUND PAYMENT
0200 350353500001 1 0 TRANSACTION NO CVM 28 81 6 001-010 00

Merchant Presented QR service successfully processed


DE 48, SE 77 = C68 (Merchant Presented QR Refund)
DE 18 (Merchant Code) must not contain any prohibited value
1
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110 SE 1 (Merchant ID) are present
DE 48, SE 42 = 210 and SE 43 not present
DE 48, SE 71 = 37Vb for the on-behalf service results
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 1 (Unique Reference Number); SE 03, SF 03 (Funding Source); and
SE 05, SF 01 (Digital Account Reference Number) are present.
0210: DE 48, SE 42 is returned in response

Table 3503536—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Financial Transaction Requests
The following test cases will test whether a Receiving Institution's (RI) Single Message online application that is participating in
Merchant Presented QR can process Financial Transaction Requests containing Merchant Presented QR refund transactions with on-
behalf service results in DE 48, subelement 71 on a token; process them, and send correctly formatted Financial Transaction
Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 675
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

The following is a listing of the most commonly used DE 18 (Merchant Code) MCC values:

DE 18 (Merchant Code) MCC values

4111 5541 6300 8249 9222

4121 5542 8211 8299 9311

4131 5960 8220 8398 9399

4900 6051 8241 8661 9402

5411 6211 8244 9211 9405

RIs may test any or all of the above values as well as any other allowed MCC values.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 676
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503536—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Refund
Transactions (Tokenized)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
REFUND PAYMENT
0200 350353600001 1 N/A TRANSACTION NO CVM 28 81 6 001-010 00

Merchant Presented QR and MDES PAN mapping services successfully processed.


DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier) are
pesent.
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
1
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID); and DE 110, SE 01 (Merchant ID) are present.
DE 48, SE 42 = 210 (UCAF data not present).
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 = C68 (Merchant Presented QR Refund).
DE 108, SE 02, SF 11 (Sender Account Number); SE 03, SF 1 (Unique Reference Number); SE 03, SF 03 (Funding Source); and
SE 05, SF 01 (Digital Account Reference Number) are present.
0210: DE 48, SE 42 is returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 677
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
REFUND PAYMENT
0200 350353600002 1 N/A TRANSACTION NO CVM 28 81 6 001-010 00

Merchant Presented QR and MDES PAN mapping services successfully processed.


DE 48, SE 23, SF 1 (Device Type); DE 48, SE 26, SF 1 (Wallet Identifier); and DE 48, SE 30 (Token Transaction Identifier are
present.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
2
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID), and DE 110, SE 01 (Merchant ID) are present.
DE 48, SE 42 = 210 (UCAF data not present).
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 = C68 (Merchant Presented QR Refund).
DE 108 contains SE 02, SF 11 (Sender Account Number); SE 03, SF 2 (Additional Message); and SE 03, SF 03 (Funding
Source).
0210: DE 48, SE 42 is returned in response

Table 3503555—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message online application that is participating in Merchant Presented
QR and Mastercard Digital Enablement Service (MDES) can receive Financial Transaction Requests containing token funding
transactions for electronic commerce and contactless magnetic stripe acceptance environments; process them, and send correctly
formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 678
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503555—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Masterpass QR Funding Transactions
(Tokenized)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350355500001 1 0 OR NO CVM 00 91 0 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved for a consumer's token on a magnetic stripe contactless transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present if available
1
DE 35 (Track Data) present if issuer opt-in to receive crypto data
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 37Vb50Cb52Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present if available and required

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 679
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350355500002 1 0 OR NO CVM 00 91 0 412 00

Merchant Presented QR service performed and MDES Cloud-based token successfully mapped, validated, and issuer approved
for a consumer's token on a magnetic stripe contactless transaction..
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present if available
2
DE 35 (Track Data) present if issuer opt-in to receive crypto data
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 37Vb50Cb62Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present if available and required

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 680
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350355500003 1 0 PURCHASE NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved for a consumer's token on a DSRP UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present if available

3 DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP) and SE 43 is present if issuer opt-in to receive.
DE 48, SE 71 = 37Vb50Cb51Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present if available and required
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 681
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350355500004 1 0 PURCHASE NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Cloud-based token successfully mapped, validated, and issuer approved
for a consumer's token on a DSRP UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); SE 30 (Token Transaction Identifier); and SE 34 (ATC
Information) are present.
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present if available

4 DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 242 (DSRP) and SE 43 is present if issuer opt-in to receive.
DE 48, SE 71 = 37Vb50Cb61Vb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present if available and required
0210: DE 48, SE 42 and SE 43 (if received) are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 682
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350355500005 1 0 PURCHASE NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Secure Element token successfully mapped, validated, and issuer
approved for a SecureCode Full UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present if available
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
5 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode) and SE 43 is present and forwarded to issuer for validation.
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Masterpass QR Receiving Account Number); and SE 06
(QR Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present if available and required
0210: DE 48, SE 42 and SE 43 are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 683
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
0200 350355500006 1 0 PURCHASE NO CVM 00 81 6 412 00

Merchant Presented QR service performed and MDES Cloud-based Payment token successfully mapped, validated, and issuer
approved for a SecureCode Full UCAF transaction.
DE 2 and DE 14 contain PAN data
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 37, SF 1 (Payment Facilitator ID) and SF 3 (Sub-Merchant ID) are present if available
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payment Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
6 Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 42 = 212 (SecureCode) and SE 43 is present and forwarded to issuer for validation.
DE 48, SE 71 = 37Vb50Cb for the on-behalf service results.
DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 ( Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present
DE 110, SE 01 (Merchant ID) is present if available and required
0210: DE 48, SE 42 and SE 43 are returned in response

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 684
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3503556—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests
The following test cases will test whether an issuer's Singe Message online application that is participating in Merchant Presented QR
can receive Financial Transaction Requests containing non-token funding transactions for electronic commerce and contactless
magnetic stripe acceptance environments; process them, and send correctly formatted Financial Transaction Responses.

Table 3503556—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE (FUNDING)
TRANSACTION
0200 350355600001 1 N/A SIGNATURE OR NO CVM 00 91 0 001-010 00

Merchant Presented QR service for a consumer's PAN was successfully processed


DE 2 (Primary Account Number) contains a PAN
1
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
DE 48, SE 71 = 37Vb indicates Merchant Presented QR Blocking Service valid OBS result
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number) ; and
SE 06 (QR Dynamic Code Data) are present

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 685
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE
PURCHASE (FUNDING)
0200 350355600005 1 N/A TRANSACTION NO CVM 00 81 6 001-010 00

Merchant Presented QR service funding transaction for a consumer's PAN was successfully processed
DE 2 (Primary Account Number) contains a PAN
DE 18 (Merchant Type) contains any valid value for Merchant Presented QR Funding
2
DE 48, SE 42 (Electronic Commerce Indicators) = 212 (SecureCode) and SE 43 is present
DE 48, SE 71 = 37Vb indicates Merchant Presented QR Blocking Service valid OBS result
DE 48, SE 77 = C67 (Merchant Presented QR)
DE 108, SE 03, SF 01 (Unique Transaction Reference); SE 05, SF 02 (Merchant Presented QR Receiving Account Number); and
SE 06 (QR Dynamic Code Data) are present
0210: DE 48, SE 42 and SE 43 are returned in response

Table 3504900—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Maestro Switching of Visa Tokenized
Transactions—Financial Transaction Requests, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Maestro-branded Visa token
transactions that have undergone PAN mapping and CVV validation and contain Payment Account Reference (PAR) in DE 56
(Payment Account Data) in Financial Transaction Requests, Advices, and Reversals; process them, and send properly formatted
Financial Transaction Responses. Issuers are not required to return DE 56 in the corresponding response messages. PAR will not be
provided for Maestro-branded Visa non-token transactions.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 686
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3504900—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Maestro Switching of Visa Tokenized
Transactions—Financial Transaction Requests, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE 001-010 MSI-


0200 350490000011 1 N/A SIGNATURE 00 90 0 ONLY 00

Maestro-branded Visa token original request transaction tokenized via Host Code Emulation (HCE) - successful PAN mapping
and CVV validation.
1 DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 only present if issuer opt-in to receive crypto data; DE 48, SE
30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3
(Token Expiry Date), SF 5 (Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 49 (Time Validation Information),
SF 3 = 05 (Unknown); DE 48, SE 71 = 50Cb62Vb (Successful Token to PAN Mapping; Successful CVV Validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

MSR PURCHASE 001-010 MSI-


0220 350490000012 1 N/A SIGNATURE 00 90 0 ONLY 00

Maestro-branded Visa token acquirer advice transaction tokenized via Host Code Emulation (HCE) - successful PAN mapping
but invalid CVV validation.
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 only present if issuer opt-in to receive crypto data; DE 48, SE
2 30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3
(Token Expiry Date), SF 5 (Token Assurance Level) present, and SF 6 (Token Requestor ID) present; DE 48, SE 49 (Time
Validation Information), SF 3 = 05 (Unknown); DE 48, SE 71 = 50Cb62Ib (Successful Token to PAN Mapping; Invalid
cryptogram)
DE 39 = 05 (Do not honor); DE 60 = 1410206 (Token Advice to Issuer; Invalid cryptogram).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 687
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR PURCHASE 001-010 MSI-


0200 350490000013 1 N/A SIGNATURE 00 90 0 ONLY 00

0420 1 N/A DE 39 = 00 00

Maestro-branded Visa token original request and full reversal advice transaction tokenized via Host Code Emulation (HCE) -
successful PAN mapping and CVV validation.
0200: DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 only present if issuer opt-in to receive crypto data; DE
48, SE 30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF
3 3 (Token Expiry Date), SF 5 (Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 49 (Time Validation
Information), SF 3 = 05 (Unknown); DE 48, SE 71 = 50Cb62Vb (Successful Token to PAN Mapping; Successful CVV
Validation).
0200 and 0420: DE 56 (Payment Account Data) is provided by Visa as BIN Controller.
0420: Full reversal, DE 39 = 00 (Approved) and DE 60 = 4530041 (Financial transaction cancellation: card returned).
0420: DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token
Requestor ID), and SF 8 (Storage Technology).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 688
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS 001-010 MSI-


0200 350490000021 1 N/A PURCHASE SIGNATURE 00 91 0 ONLY 00

Maestro-branded Visa token original request transaction tokenized via Secure Element (SE) - successful PAN mapping and
CVV validation.
4 DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 only present if issuer opt-in to receive crypto data; DE 48, SE
30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb52Vb (Successful Token to PAN
Mapping; Successful CVV Validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

MSR CONTACTLESS 001-010 MSI-


0220 350490000022 1 N/A PURCHASE SIGNATURE 00 91 0 ONLY 00

Maestro-branded Visa token acquirer advice transaction tokenized via Secure Element (SE) - successful PAN mapping but
invalid CVV validation.
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 only present if issuer opt-in to receive crypto data; DE 48, SE
5
30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level) present, and SF 6 (Token Requestor ID) present; DE 48, SE 71 = 50Cb52Ib
(Successful Token to PAN Mapping; Invalid Cryptogram)
DE 39 = 05 (Do not honor); DE 60 = 1410206 (Token Advice to Issuer; Invalid cryptogram).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 689
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS 001-010 MSI-


0200 350490000023 1 N/A PURCHASE SIGNATURE 00 91 0 ONLY 00

0420 1 N/A DE 39 = 00 00

Maestro-branded Visa token original request and full reversal advice transaction tokenized via Secure Element (SE) - successful
PAN mapping and CVV validation.
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 only present if issuer opt-in to receive crypto data; DE 48, SE
30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token
6 Expiry Date), SF 5 (Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb52Vb (Successful Token to PAN
Mapping; Successful CVV Validation).
0200 and 0420: DE 56 (Payment Account Data) is provided by Visa as BIN Controller.
0420: Full reversal, DE 39 = 00 (Approved) and DE 60 = 4530041 (Financial transaction cancellation: card returned).
0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor ID),
and SF 8 (Storage Technology).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

ELECTRONIC COMMERCE 001-010 MSI-


0200 350490000031 1 N/A PURCHASE NO CVM 00 81 6 ONLY 00

Maestro-branded Visa token original request transaction tokenized via Secure Element (SE) - successful PAN mapping and
CVV validation.
7 DE 2 and DE 14 contain PAN information; DE 48, SE 42 = 242 and SE 43 only present if issuer opt-in to receive crypto data;
DE 48, SE 30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3
(Token Expiry Date), SF 5 (Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb52Vb (Successful Token
to PAN Mapping; Successful CVV Validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 690
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE 001-010 MSI-


0220 350490000032 1 N/A PURCHASE NO CVM 00 81 6 ONLY 00

Maestro-branded Visa token acquirer advice transaction tokenized via Secure Element (SE) - successful PAN mapping but
invalid CVV validation.
DE 2 and DE 14 contain PAN information; DE 48, SE 42 = 242 and SE 43 only present if issuer opt-in to receive crypto data;
8
DE 48, SE 30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3
(Token Expiry Date), SF 5 (Token Assurance Level) present, and SF 6 (Token Requestor ID) present; DE 48, SE 71 = 50Cb52Ib
(Successful Token to PAN Mapping; Invalid cryptogram)
DE 39 = 05 (Do not honor); DE 60 = 1410206 (Token Advice to Issuer; Invalid cryptogram).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 691
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ELECTRONIC COMMERCE 001-010 MSI-


0200 350490000033 1 N/A PURCHASE NO CVM 00 81 6 ONLY 00

0420 1 N/A DE 39 = 00 00

Maestro-branded Visa token original request and full reversal advice transaction tokenized via Secure Element (SE) - successful
PAN mapping and CVV validation.
DE 2 and DE 14 contain PAN information; DE 48, SE 42 = 242 and SE 43 only present if issuer opt-in to receive crypto data;
DE 48, SE 30 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3
9 (Token Expiry Date), SF 5 (Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb52Vb (Successful Token
to PAN Mapping; Successful CVV Validation).
0200 and 0420: DE 56 (Payment Account Data) is provided by Visa as BIN Controller.
0420: Full reversal, DE 39 = 00 (Approved) and DE 60 = 4530041 (Financial transaction cancellation: card returned).
0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor ID),
and SF 8 (Storage Technology).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

0422 350490000010 1 N/A CHARGEBACK (FULL) 001-010 00

10 Issuer-initiated chargeback in online Issuer Reversal Advice/0422 message that will contain DE 56 in Issuer Reversal Advice
Response/0432 that was provided by Visa as BIN Controller during detokenization of original Financial Transaction Request/
0200 message to issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 692
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Table 3506161—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message online application can receive Financial Transaction Requests
containing Token Service Provider (TSP) Token/PAN Mapping related information for various POS entry modes, process them and
send correctly formatted Financial Transaction Responses.

NOTE: Issuer response contains DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

Table 3506161—Issuer On-behalf Services - SMS Auth—MSR Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS
PURCHASE SIGNATURE
0200 350616100001 1 0 OR NO CVM 00 91 0 00

TSP Token/PAN mapping completed.


1
DE 2 contains PAN.
DE 48, SE 33 contain token information; DE 35 and/or DE 45 are passed from the acquirer.
DE 48, SE 71 = 14Cb for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 693
Single Message System—Issuer On-behalf Services
Test Cases—Magnetic Stripe-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

DYNAMIC MSR
PURCHASE SIGNATURE
0200 350616100002 1 0 OR NO CVM 00 90 0 00

TSP Token/PAN mapping completed.


2
DE 2 contains PAN.
DE 48, SE 33 contain token information; DE 35 and/or DE 45 are passed from the acquirer.
DE 48, SE 71 = 14Cb for the on-behalf service results

ELECTRONIC COMMERCE
0200 350616100003 1 0 PURCHASE NO CVM 00 81 6 00

TSP Token/PAN mapping completed.


3
DE 2 contains PAN.
DE 48, SE 33 contains token information; DE 48, SE 42 and SE 43 (if present) are passed from the acquirer.
DE 48, SE 71 = 14Cb for the on-behalf service results

MSR CONTACTLESS ATM


BALANCE INQUIRY
0200 350616100011 1 0 ONLINE PIN 30 91 0 V 311 00

TSP Token/PAN mapping completed.


4 DE 35 and/or 45 track da ta are passed from the acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0210: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 694
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

MSR CONTACTLESS ATM


WITHDRAWAL ONLINE
0200 350616100012 1 0 PIN 01 91 0 V 311 00

TSP Token/PAN mapping completed.


5 DE 35 and/or 45 track da ta are passed from the acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0210: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

Test Cases—ICC-based Operations


The test cases listed in this section are applicable when upgrading to integrated circuit card (ICC)-based operations. Within this
section, both contact ICC-based operations and contactless ICC-based operations are addressed. Select and run test cases from This
tables where the acquirer supports the Business Transaction described for the test case.

NOTE:
The transaction amounts customers use must be above the floor limit to cause the transaction to go online, as required in the test
cases (transaction amounts below the floor limit will be processed offline).

Products and Services


The following test cases in this section test whether a customer's issuer Single Message authorization application can send correctly
formatted Financial Transaction Requests and process the resulting Financial Transaction Request Responses when presented under
conditions that are specific to all additional features available.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 695
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550201—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service With DE22 Conversion—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message application can process Financial Transaction Request messages
processed by the Mastercard Chip to Magnetic Stripe Conversion Service With DE22 Conversion.

NOTE: Issuers that choose not to receive the results of the Chip to Magnetic Stripe Conversion Service should not run these tests.

Table 3550201—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service With DE22 Conversion—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CAT LEVEL 1 ATM


WITHDRAWAL ONLINE
1 0200 355020100001 1 N/A PIN 01 05 1 V 101-105 00

DE 48, SE 71 = 01Cb indicates conversion from DE 22, SF 1 = 05 (PAN auto-entry via integrated circuit card) to SF 1 = 90 (PAN
auto-entry via magnetic stripe)

ICC CONTACTLESS 401-405 MSI-


0200 355020100002 1 N/A PURCHASE ONLINE PIN 00 07 0 V ONLY 00

2 DE 48, SE 71 = 01Sb indicates conversion from DE 22, SF 1 = 07 (PAN auto-entry via contactless M/Chip) to SF 1 = 90 (PAN
auto-entry via magnetic stripe).

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 696
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC FALLBACK TO
MANUAL PURCHASE NO 101-105 MSI-
0200 355020100003 1 N/A CVM 00 79 0 ONLY V
3
DE 48, SE 71 = 01Cb indicates conversion from DE 22, SF 1 = 79 (PAN manual entry due to chip card at chip-capable terminal
unable to process using technology. Terminal unable to send transaction online. Voice authorization obtained) to SF 1 = 01
(PAN manual entry).

ICC FALLBACK TO
MAGNETIC STRIPE
PURCHASE SIGNATURE 101-105 MSI-
4 0200 355020100004 1 N/A OR NO CVM 00 80 0 ONLY V

DE 48, SE 71 = 01Mb indicates conversion from DE 22, SF 1 = 80 (PAN auto-entry via magnetic stripe due to fallback from
chip) to SF 1 = 90 (PAN auto-entry via magnetic stripe).

ICC ELECTRONIC
COMMERCE PURCHASE 401-405 MSI-
0200 355020100005 1 N/A NO CVM 00 09 6 ONLY 00

5 DE 48, SE 71 = 01Sb indicates conversion from DE 22, SF 1 = 09 (PAN entry via electronic commerce, including remote chip)
to SF 1 = 90 (PAN auto-entry via magnetic stripe).

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 697
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE
0200 355020100006 1 N/A PIN 01 07 1 V 401-405 00
6
DE 48, SE 71 = 01Sb indicates conversion from DE 22, SF 1 = 07 (PAN auto-entry via contactless M/Chip) to SF 1 = 90 (PAN
auto-entry via magnetic stripe).

NOTE: This test case should only be run by contactless chip issuers.

Table 3550203—Issuer On-behalf Services - SMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In Processing
Service—Financial Transaction Advices (System-generated)
Debit MasterCard issuers using the Mastercard M/Chip Cryptogram Validation in Stand-In Processing should select and run a subset
of the test cases below based upon the options they select when enrolling in this service.
Test case 1 is an approval advice, which all issuers must run.
Test cases 2 and 3 represent non-valid validation outcomes in which the issuer instructs Mastercard to approve the transaction even
though the validation failed.
Test cases 4 and 5 represent non-valid validation outcomes in which the issuer instructs Mastercard to decline the transaction in the
event of a specific validation failure.
Issuers may need to run a mixed subset of the test cases depending on the mix of instructions they send to Mastercard.
Issuers choose decline codes for each non-valid validation result and place those in a decision matrix in their On-behalf Key
Management file.
Issuers may choose from the following decline codes:
• 01 Refer to Issuer

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 698
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

• 04 Pickup card
• 05 Do Not Honor
• 08 Honor with Identification
• 12 Invalid Transaction
• 57 Transaction not permitted to cardholder

NOTE: Mastercard has mandated support for the Chip Cryptogram Validation in Stand-In Processing Service (OBS3).

Table 3550203—Issuer On-behalf Services - SMS Auth—ICC Base—M/Chip Cryptogram Validation in Stand-In Processing
Service—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355020300001 1 N/A SIGNATURE 00 05 0 101-105 00

1 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on valid cryptogram


DE 48, SE 71 = 03Vb (Valid cryptogram) and DE 48, SE 72 contains ARPC value
DE 60 = 2010000; Issuer signed out and approved by Stand-In.

ICC PURCHASE
0220 355020300002 1 N/A SIGNATURE 00 05 0 101-105 00

2 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on bad TVR/CVR


DE 48, SE 71 = 03Tb (Bad TVR/CVR) and DE 48, SE 79 contains CVR/TVR bits found to be in error.
DE 60 = 2010035; Issuer signed out and approved by Stand-In.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 699
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355020300003 1 N/A SIGNATURE 00 05 0 101-105 00

3 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on invalid cryptogram


DE 48, SE 71 = 03Ib (Invalid cryptogram)
DE 60 = 2010034; Issuer signed out and approved by Stand-In.

ICC PURCHASE
0220 355020300004 1 N/A SIGNATURE 00 05 0 101-105 00

4 DE 39 = decline response chosen by issuer - Issuer instructs Mastercard to decline on bad TVR/CVR
DE 48, SE 71 = 03Tb (Bad TVR/CVR) and DE 48, SE 79 contains CVR/TVR bits found to be in error.
DE 60 = 2010035; Issuer signed out and declined by Stand-In for bad TVR/CVR.

ICC PURCHASE
0220 355020300005 1 N/A SIGNATURE 00 05 0 101-105 00

5 DE 39 = decline response chosen by issuer - Issuer instructs Mastercard to decline on invalid cryptogram
DE 48, SE 71 = 03Ib (Invalid cryptogram)
DE 60 = 2010034; Issuer signed out and declined by Stand-In for invalid cryptogram.

Table 3550206—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service Without DE22 Conversion—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message authorization application can process Financial Transaction
Requests that underwent the Mastercard Chip to Magnetic Stripe Conversion Service Without DE22 Conversion.
Issuers will receive the service results in DE 48, SE 71 unless they choose to suppress those results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 700
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550206—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip to Magnetic Stripe Conversion
Service Without DE22 Conversion—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE OFFLINE 101-105 MSI-


0200 355020600001 1 N/A PIN 00 05 0 ONLY 00
1
DE 22, SF 1 = 05 (PAN auto-entry via chip)
DE 48, SE 71 = 01Cb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

ICC CONTACTLESS 401-405 MSI-


0200 355020600002 1 N/A PURCHASE OFFLINE PIN 00 07 0 ONLY 00

DE 22, SF 1 = 07 (PAN auto-entry via contactless M/Chip)


2
DE 48, SE 71 = 01Sb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

NOTE: This test case should only be run by contactless chip issuers.

ICC FALLBACK TO
MANUAL ENTRY
PURCHASE SIGNATURE 101-105 MSI-
3 0200 355020600003 1 N/A OR NO CVM 00 79 0 ONLY V

DE 22, SF 1 = 79 (PAN auto-entry via fallback to magnetic stripe)


DE 48, SE 71 = 01Cb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 701
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC FALLBACK TO
MAGNETIC STRIPE 101-105 MSI-
0200 355020600004 1 N/A PURCHASE ONLINE PIN 00 80 0 V ONLY V
4
DE 22, SF 1 = 80 (PAN auto-entry via fallback to magnetic stripe)
DE 48, SE 71 = 01Mb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

ICC ELECTRONIC
COMMERCE PURCHASE 401-405 MSI-
0200 355020600005 1 N/A NO CVM 00 09 6 ONLY 00

5 DE 22, SF 1 = 09 (PAN entry via electronic commerce, including remote chip)


DE 48, SE 71 = 01Sb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

NOTE: This test case should only be run by contactless chip issuers.

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE 401-405 MSI-
0200 355020600006 1 N/A PIN 01 07 1 V ONLY 00
6
DE 22, SF 1 = 07 (PAN auto-entry via contactless M/Chip)
DE 48, SE 71 = 01Sb indicates successful completion of Chip to Magnetic Stripe Conversion Service.

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 702
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550250—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message authorization application can process Financial Transaction
Requests that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Shared Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

Table 3550250—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355025000001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00
1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

ICC PURCHASE
0200 355025000002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 703
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355025000003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
3
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 31Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)

ICC PURCHASE
0200 355025000004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

4 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 31Kb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)

ICC PURCHASE
0200 355025000005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
5
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Ub (Unable to process)

ICC CONTACTLESS
PURCHASE SIGNATURE 401-405 MSI-
0200 355025000006 1 N/A OR NO CVM 00 07 0 ONLY 00

6 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 704
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE 401-405 MSI-
0200 355025000007 1 N/A NO CVM 00 09 6 ONLY 00

7 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE
0200 355025000008 1 N/A PIN 01 07 1 V 401-405 00
8
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

Table 3550253—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Single Message authorization application can process Stand-In Financial
Transaction Advices that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Shared Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 705
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

Table 3550253—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Shared Key—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355025300001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully)


1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

ICC PURCHASE
0220 355025300002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 101 (IPS signed out)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 706
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355025300003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


3
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 1010054 (IPS signed out; reject: Track data format error)

ICC PURCHASE
0220 355025300004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


4
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 101 (IPS signed out)

ICC PURCHASE
0220 355025300005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


5
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 31Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)
DE 60 = 1010055 (IPS signed out; reject: Chip CVC invalid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 707
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 335025200006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


6 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Kb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC PURCHASE
0220 355025300007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 96 (System error) Mastercard default response


7
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 31Ub (Unable to process)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 708
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE 401-405 MSI-
0220 355025300008 1 N/A OR NO CVM 00 07 0 ONLY 00

DE 39 = 00 (Approved or completed successfully)

8 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

NOTE: This test case should only be run by contactless chip issuers.

ICC ELECTRONIC
COMMERCE PURCHASE 401-405 MSI-
0220 355025300009 1 N/A SIGNATURE OR NO CVM 00 09 6 ONLY 00

DE 39 = 00 (Approved or completed successfully)

9 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 31Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 709
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE
0200 355026000010 1 N/A PIN 01 07 1 401-405 00
10
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

Table 3550260—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message authorization application can process Financial Transaction
Requests that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Unique Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 710
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550260—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355026000001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00
1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

ICC PURCHASE
0200 355026000002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)

ICC PURCHASE
0200 355026000003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
3
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 32Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)

ICC PURCHASE
0200 355026000004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

4 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 32Kb (Neither the Issuer Chip CVC Key Record nor the Issuer CVC 1 Key Record found for Account Range /
Expiry Date combination; Service not performed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 711
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355026000005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V
5
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Ub (Unable to process)

ICC PURCHASE
0200 355026000006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

6 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 32Lb (Issuer CVC 1 Key Record not Found for Account Range/Expiry Date Combination; Service not
performed)

ICC PURCHASE
0200 355026000007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

7 DE 35 present containing unvalidated Chip CVC.


DE 48, SE 71 = 32Mb (Issuer Chip CVC Key Record not found for Account Range/Expiry Date Combination; Service not
performed)

ICC CONTACTLESS
PURCHASE SIGNATURE 401-405 MSI-
0200 355026000008 1 N/A OR NO CVM 00 07 0 ONLY 00

8 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 712
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE 401-405 MSI-
0200 335026000012 1 N/A NO CVM 00 09 6 ONLY 00

9 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE
0200 355026000010 1 N/A PIN 01 07 1 401-405 00
10
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)

NOTE: This test case should only be run by contactless chip issuers.

Table 3550263—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Single Message authorization application can process Stand-In Financial
Transaction Advices that underwent the Mastercard Chip CVC to CVC 1 Conversion Service with Unique Key.
Issuers will receive the service results in DE 48, SE 71 and either the Chip CVC or CVC 1 value in DE 35 as indicated in those service
results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 713
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

NOTE: DE 23 and DE 55 are not present because it is assumed that the transactions are not full grade or have been processed
through one of the Chip to Magnetic Stripe Conversion service variations.

Table 3550263—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Chip CVC to CVC 1 Conversion Service
With Unique Key—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355026300001 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully)


1
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

ICC PURCHASE
0220 355026300002 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


2
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 101 (IPS signed out)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 714
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355026300003 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


3
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 1010054 (IPS signed out; reject: Track data format error)

ICC PURCHASE
0220 355026300004 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 00 (Approved or completed successfully) assume obtained from issuer decision matrix


4
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Fb (Track data formatted incorrectly; Service not performed)
DE 60 = 101 (IPS signed out)

ICC PURCHASE
0220 355026300005 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) assume obtained from issuer decision matrix


5
DE 35 present containing invalid Chip CVC.
DE 48, SE 71 = 32Ib (Chip CVC invalid; Conversion of Chip CVC to CVC 1 not performed)
DE 60 = 1010055 (IPS signed out; reject: Chip CVC invalid)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 715
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355026300006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


6 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Kb (Issuer CVC 1 Key Record not found for Account Range / Expiry Date combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC PURCHASE
0220 335026300007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 96 (System error) Mastercard default response


7
DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Ub (Unable to process)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC PURCHASE
0220 355026300008 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


8 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Lb (Issuer CVC 1 Key Record not Found for Account Range/Expiry Date Combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 716
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0220 355026300009 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 00

DE 39 = 05 (Do not honor) Mastercard default response


9 DE 35 present containing unvalidated Chip CVC.
DE 48, SE 71 = 32Mb (Issuer Chip CVC Key Record not found for Account Range/Expiry Date Combination; Service not
performed)
DE 60 = 1010056 (IPS signed out; reject: Chip CVC / CVC 1 unable to process)

ICC CONTACTLESS
PURCHASE SIGNATURE 401-405 MSI-
0220 355026300010 1 N/A OR NO CVM 00 07 0 ONLY 00

DE 39 = 00 (Approved or completed successfully)

10 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 717
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE 401-405 MSI-
0220 355026300011 1 N/A NO CVM 00 09 6 ONLY 00

DE 39 = 00 (Approved or completed successfully)

11 DE 35 present containing Mastercard calculated CVC 1 value.


DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

NOTE: This test case should only be run by contactless chip issuers.

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE
0220 355026300012 1 N/A PIN 01 07 1 401-405 00

DE 39 = 00 (Approved or completed successfully)


12
DE 35 present containing Mastercard calculated CVC 1 value.
DE 48, SE 71 = 32Cb (Chip CVC validated successfully; Conversion of Chip CVC to CVC 1 performed successfully)
DE 60 = 101 (IPS signed out)

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 718
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550300—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Dual Message authorization application properly processes Authorization
Advices for declined Financial Transaction Requests that have been processed by the Mastercard M/Chip Cryptogram Pre-validation
Service.
Issuer has opted to receive declined advices for all failed M/Chip Cryptogram Pre-validation Service on-behalf results.

NOTE: These two test cases are a representative sampling of all on-behalf results.

Table 3550300—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE OFFLINE


0220 355030000001 1 N/A PIN 00 05 0 101-105 00

1 DE 39 = 05 (Do not honor) - Issuer instructs Mastercard to decline on TVR/CVR validation failed
DE 48, SE 71 = 02Tb (TVR/CVR validation failed) and SE 79 contains Chip CVR/TVR Bit Error Results.
DE 60 = 1150035; Transaction Processed via On-Behalf Service Decision: Rejected.

ICC PURCHASE OFFLINE


0220 355030000002 1 N/A PIN 00 05 0 101-105 00

2 DE 39 = 05 (Do not honor) - Issuer instructs Mastercard to decline on invalid chip cryptogram
DE 48, SE 71 = 02Ib (Invalid chip cryptogram)
DE 60 = 1150034; Transaction Processed via On-Behalf Service Decision: Rejected.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 719
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550301—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation
Service—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message application can correctly process Financial Transaction Requests
that have been processed by the Mastercard M/Chip Cryptogram Pre-validation Service.
Debit MasterCard issuers using the Mastercard M/Chip Cryptogram Validation in Stand-In Processing should select and run a subset
of the test cases below based upon the options they select when enrolling in this service.
Issuers may need to run a mixed subset of the test cases depending on the mix of instructions they send to Mastercard.
Issuers choose decline codes for each non-valid validation result and place those in a decision matrix in their On-behalf Key
Management file.
Issuers may choose from the following decline codes:
• 01 Refer to Issuer
• 04 Pickup card
• 05 Do Not Honor
• 08 Honor with Identification
• 12 Invalid Transaction
• 57 Transaction not permitted to cardholder

NOTE: Mastercard has mandated support for the Chip Cryptogram Validation in Stand-In Processing Service (OBS3).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 720
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550301—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-Validation
Service—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355030100001 1 N/A SIGNATURE 00 05 0 101-105 00
1
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

ICC PURCHASE
0200 355030100002 1 N/A SIGNATURE 00 05 0 101-105 V

2 DE 48, SE 71 = 02Ub (Unable to process)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0200 355030100003 1 N/A SIGNATURE 00 05 0 101-105 V

DE 48, SE 71 = 02Tb (Bad TVR/CVR)


3
DE 48, SE 79 contains CVR/TVR bits found to be in error
Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 721
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355030100004 1 N/A SIGNATURE 00 05 0 101-105 V

4 DE 48, SE 71 = 02Ib (Invalid cryptogram)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0200 355030100005 1 N/A SIGNATURE 00 05 0 101-105 V

5 DE 48, SE 71 = 02Gb (Valid non-ARQC cryptogram)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE
0200 355030100006 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

DE 48, SE 71 = 02Ab (Valid Application Cryptogram; ATC outside allowed range)


DE 48, SE 72 contains ARPC value.
6 Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

NOTE: Issuers may also have these test cases sent with DE 22, SF 1 values 07 (PAN auto-entry via contactless M/
Chip) and 09 (PAN entry via electronic commerce, including remote chip).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 722
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355030100007 1 N/A SIGNATURE OR NO CVM 00 05 0 101-105 V

DE 48, SE 71 = 02Eb (Valid Application Cryptogram; ATC Replay)


DE 48, SE 72 contains ARPC value.
7 Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

NOTE: Issuers may also have these test cases sent with DE 22, SF 1 values 07 (PAN auto-entry via contactless M/
Chip) and 09 (PAN entry via electronic commerce, including remote chip).

ICC PURCHASE OFFLINE


0200 355030100008 1 N/A PIN 00 05 0 101-105 V

8 DE 48, SE 71 = 02Kb (No matching key file)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC PURCHASE OFFLINE


0200 355030100009 1 N/A PIN 00 05 0 101-105 V

9 DE 48, SE 71 = 02Xb (Security platform time out)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 723
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE OFFLINE


0200 335030100010 1 N/A PIN 00 05 0 101-105 V

10 DE 48, SE 71 = 02Zb (Security platform processing error)


Response message meets the response chip-specific general acceptance criteria.
Mastercard recommends a decline response from the Issuer.

ICC CASH
DISBURSEMENT
0200 355030100021 1 N/A SIGNATURE 17 05 0 101-105 00
11
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

ICC PURCHASE ONLINE


0200 355030100022 1 N/A PIN 00 05 0 V 101-105 00
12
DE 48, SE 71 = 02Vb (Valid cryptogram)
Response message meets the response chip-specific general acceptance criteria.

ICC CONTACTLESS 401-405 MSI-


0200 355030100023 1 N/A PURCHASE NO CVM 00 07 0 ONLY 00

DE 48, SE 71 = 02Vb (Valid cryptogram)


13 DE 48, SE 72 value in 0200 message (ARPC) must be echoed in DE 48, SE 72 without changes in 0210 message.
Response message meets the response contactless M/Chip specific general acceptance criteria.

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 724
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
ELECTRONIC COMMERCE 401-405 MSI-
0200 355030100024 1 N/A PURCHASE NO CVM 00 09 6 ONLY 00

14 DE 48, SE 71 = 02Vb (Valid cryptogram)


Response message meets the response contactless M/Chip specific general acceptance criteria.

NOTE: This test case should only be run by contactless chip issuers.

ICC CAT LEVEL 1 ATM


WITHDRAWAL ONLINE
0200 355030100025 1 N/A PIN 01 05 1 V 101-105 00
15 DE 48, SE 71 = 02Vb (Valid cryptogram)
DE 48, SE 72 contains ARPC value
Response message meets the response chip-specific general acceptance criteria.

ICC CONTACTLESS CAT


LEVEL 1 ATM
WITHDRAWAL ONLINE 401-405 MSI-
0200 355030100026 1 N/A PIN 01 07 1 ONLY 00

16 DE 48, SE 71 = 02Vb (Valid cryptogram)


DE 48, SE 72 value in 0200 message (ARPC) must be echoed in DE 48, SE 72 without changes in 0210 message.
Response message meets the response contactless M/Chip specific general acceptance criteria.

NOTE: This test case should only be run by contactless chip issuers.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 725
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550302—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Financial Transaction Advices (System-generated)
The following test cases will test whether an issuer's Single Message application can correctly process Financial Transaction Advices
from Stand-In for request transactions processed by the Mastercard M/Chip Cryptogram Pre-validation Service which were unable to
be routed to the issuer.

Table 3550302—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Financial Transaction Advices (System-generated)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE OFFLINE


0220 355030200001 1 N/A PIN 00 05 0 101-105 00

1 DE 39 = 00 (Approved)
DE 48, SE 71 = 02Vb (Valid cryptogram) and DE 48, SE 72 contains ARPC value
DE 60 = 201 0000 (Network Stand-In: IPS signed out; Valid ARQC, valid TVR/CVR)

ICC PURCHASE OFFLINE


0220 355030200002 1 N/A PIN 00 05 0 101-105 00

2 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on bad TVR/CVR


DE 48, SE 71 = 02Tb (Bad TVR/CVR) and DE 48, SE 79 contains CVR/TVR bits found to be in error.
DE 60 = 201 0035 (Network Stand-In: IPS signed out; TVR/CVR validation failed)

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 726
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE OFFLINE


0220 355030200003 1 N/A PIN 00 05 0 101-105 00

3 DE 39 = 00 (Approved) - Issuer instructs Mastercard to approve on invalid cryptogram


DE 48, SE 71 = 02Ib (Invalid cryptogram)
DE 60 = 201 0034 (Network Stand-In: IPS signed out; Chip validation failed)

Table 3550403—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Risk Management Testing (Financial Transaction Requests)
The following test cases will test whether an issuer's Single Message authorization application is able to properly handle fraudulent
transaction attempts where Data Element 55 (ICC-system Related Data) has been manipulated to cause system failures. The rationale
behind this test, as well as how to execute them and interpret the results, is found in the EMV Issuer Risk Management Test Suite
document.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 727
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550403—Issuer On-behalf Services - SMS Auth—ICC Product and Services—M/Chip Cryptogram Pre-validation
Service—Risk Management Testing (Financial Transaction Requests)

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC PURCHASE
0200 355040300001 1 N/A SIGNATURE OR NO CVM 00 05 1 401-405 00

This test case is fully defined in EMV Issuer Risk Management Test Suite, test case 03-01. Please see that document for
1 instructions on executing this test and interpreting the results.

NOTE: This test case can be found in the best practices - Enhanced Testing Folder in the MasterCard Debit Financial
Simulator.

Table 3550504—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Financial Transaction Request and Reversal
The following test cases will test whether a customer's Mastercard PAN Mapping Service Issuer Single Message authorization
application can receive and process Financial Transaction Request and Reversal that have undergone mapping from the contactless
PAN to the real PAN and return correctly formatted Financial Transaction Responses.
Issuers participating in the PAN Mapping Service and are required to test with Mastercard.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 728
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3550504—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Mastercard PAN Mapping Service
(Contactless)—Financial Transaction Request and Reversal

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355050400001 N/A 1 OR NO CVM 00 07 0 401-405 00

0420 N/A 1 DE 39 = 00 00
1 TSP Token/PAN mapping completed.
DE 2 and DE 14 contain PAN information.
DE 23, DE 35, DE 55, and DE 48, SE 33 contain token information.
DE 48, SE 71 = 14Cb for the on-behalf service results

Table 3551140—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Cloud-
Based Payments Tokens)—Financial Transaction Requests, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Mastercard Cloud-Based Payment
contactless M/Chip Financial Transaction Requests, Advices, and Reversals when the Mastercard Digital Enablement Service (MDES)
was performed, process them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 729
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3551140—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Cloud-
Based Payments Tokens)—Financial Transaction Requests, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000001 1 0 OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
1
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 730
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000002 1 0 OR NO CVM 00 07 0 422 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed cryptogram validation (invalid MD AC and invalid UMD AC). Issuer Decision Matrix indicates forward request
with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 731
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000003 1 0 OR NO CVM 00 07 0 423 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed due to invalid UMD AC (Invalid Mobile PIN). Issuer Decision Matrix indicates forward request with results if OBS
61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
3
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 732
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000004 1 0 OR NO CVM 00 07 0 424 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed due to invalid MD AC. Issuer Decision Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
4
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 733
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000005 1 0 OR NO CVM 00 07 0 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service failed due to Invalid TVR/CVR. Issuer Decision Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
5
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 734
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000006 1 0 OR NO CVM 00 07 0 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Cloud-Based Payments Chip Pre-validation
Service unable to process. Issuer Decision Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
6
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 735
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000011 1 N/A OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validationn
Service; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
7
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 736
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000012 1 N/A OR NO CVM 00 07 0 422 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Chip Pre-
validation Service cryptogram validation (invalid MD AC and invalid UMD AC). Issuer decision matrix to decline (issuer
selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
8
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (issuer selection) per simulator setup:

DE 48.71 = 61K and DE 60 = 1410207 for invalid UMD AC


DE 48.71 = 61L and DE 60 = 1410208 for invalid MD AC
DE 48.71 = 61T and DE 60 = 1410211 for invalid TVR/CVR
DE 48.71 = 61U and DE 60 = 1410212 for unable to process

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 737
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000013 1 N/A OR NO CVM 00 07 0 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed Cloud-Based Payments Chip Pre-
validation Service cryptogram validation (ATC replay). Issuer decision matrix to decline (mandatory default).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
9
Expiry Date), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Eb for the on-behalf service results.
DE 60 = 1410205 (Reject: ATC replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (mandatory default) per simulator setup:

DE 48.71 = 61D and DE 60 = 1410204 for invalid ATC


DE 48.71 = 61M and DE 60 = 1410209 for mobile PIN try counter max limit reached, token suspended.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 738
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000014 1 N/A OR NO CVM 00 07 0 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
10 DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 739
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000040 1 0 OR NO CVM 00 07 0 412 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
11 Service without incurring any failed transaction analysis validations.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 740
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000041 1 0 OR NO CVM 00 07 0 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue processing
(send authorization request to issuer).
12
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 741
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000042 1 0 OR NO CVM 00 07 0 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates continue processing
(send authorization request to issuer).
13
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 742
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000043 1 N/A OR NO CVM 00 07 0 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline (send
authorization advice to issuer).
DE 39 = 05 (Do not honor).
14
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 743
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000044 1 N/A OR NO CVM 00 07 0 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service although incurring one or more failed transaction analysis validations. Decision matrix indicates decline (send
authorization advice to issuer).
DE 39 = 05 (Do not honor).
15
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 744
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114000051 1 N/A OR NO CVM 00 07 0 412 00

MDES successfully performed PAN mapping Cloud-Based Payments Chip Prevalidation Service on acquirer-generated 0220
advice.
DE 39 = 00 (Approved) and DE 60 = 280 (APS approved transaction).

16 DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based PaymentsToken), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 745
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000052 1 0 OR NO CVM 00 07 0 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Prevalidation Serviceon acquirer 0200 request
and acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN Controller and provides PAR to
the MDES issuer.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
17 Information.
0200: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 746
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114000053 1 0 OR NO CVM 00 07 0 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping Cloud-Based Payments Chip Prevalidation Service on acquirer 0200 request and
acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN Controller and the issuer provides
PAR in the 0210 response.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
18
0200: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 747
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS ATM


BALANCE INQUIRY
0200 355114000061 1 0 ONLINE PIN 30 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 55 track data (if opt-in to receive crypto data) and DE 23 (if opt-in to receive) are present.
19
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

ICC CONTACTLESS ATM


WITHDRAWAL ONLINE
0200 355114000062 1 0 PIN 01 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Magnetic Stripe
Prevalidation Service.
DE 55 track data (if opt-in to receive crypto data) and DE 23 (if opt-in to receive) are present.
20
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is not provided.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 748
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3551141—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Financial Transaction Requests, Advices, and Reversals
The following test cases will test whether an issuer's Singe Message application can receive contactless M/Chip Financial Transaction
Requests, Advices, and Reversals for transactions when the Mastercard Digital Enablement Service (MDES) was performed, process
them, and send correctly formatted Financial Transaction Responses.

Table 3551141—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Contactless M/Chip - Secure
Element Tokens)—Financial Transaction Requests, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100001 1 0 OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
1
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb (Mastercard Digital Enablement Service PAN Mapping completed successfully) and 51Vb (Mastercard
Digital Enablement Service Chip Pre-Validation - Valid).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 749
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100006 1 0 OR NO CVM 00 07 0 416 00

Mastercrd Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 750
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100002 1 N/A OR NO CVM 00 07 0 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation; and then
Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
3
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 751
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100007 1 N/A OR NO CVM 00 07 0 414 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed M/Chip cryptogram validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
4
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 60 = 1410034 (Mastercard Digital Enablement Service; Reject: Chip validation failed).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 752
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100008 1 N/A OR NO CVM 00 07 0 417 00

Mastercard Digital Enablement Service successfully performed PAN mapping but failed M/Chip cryptogram validation. Issuer
decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 60 = 1410035 (Mastercard Digital Enablement Service; Reject: TVR/CVR validation failed).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 753
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100009 1 N/A OR NO CVM 00 07 0 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform M/Chip cryptogram
validation. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 60 = 1410032 (Mastercard Digital Enablement Service; Reject: Chip technical failure).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 754
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100010 1 N/A OR NO CVM 00 07 0 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
outside allowed range. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
7
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: ATC outside allowed range).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 755
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100011 1 N/A OR NO CVM 00 07 0 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
replay. Issuer decision matrix to decline (mandatory decline).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
8
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC replay).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 756
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100020 1 N/A OR NO CVM 00 07 0 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
9 DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier) are present if
applicable.
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 757
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
0200 355114100015 1 0 PURCHASE ONLINE PIN 00 07 0 V 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation transaction
with PIN.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
10 DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100021 1 0 OR NO CVM 00 07 0 418 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is out of
range. Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
11
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 758
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100022 1 0 OR NO CVM 00 07 0 419 V

Mastercard Digital Enablement Service successfully performed PAN mapping but Application Transaction Counter is replayed.
Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
12
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 759
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100023 1 0 OR NO CVM 00 07 0 414 V

Mastercard Digital Enablement Service successfully performed PAN mapping but chip validation failure (Invalid cryptogram).
Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
13
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 760
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100024 1 0 OR NO CVM 00 07 0 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping but chip validation failure (Valid ARQC/TC;
TVR/CVR invalid). Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
14
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 761
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100025 1 0 OR NO CVM 00 07 0 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping but chip validation failure (unable to process).
Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
15
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 762
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100026 1 0 OR NO CVM 00 07 0 425 V

Mastercard Digital Enablement Service successfully performed PAN mapping but failed M/Chip cryptogram validation for no
matching key File for this PAN, PAN expiry date and KDI combination. Issuer Decision Matrix indicates forward request with
results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
16
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 763
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355114100051 1 N/A OR NO CVM 00 07 0 412 00

MDES successfully performed PAN mapping and M/Chip Cryptogram Validation Service on acquirer-generated 0220 advice.
DE 39 = 00 (Approved) and DE 60 = 280 (APS approved transaction).
DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
17
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data)is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 764
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100052 1 0 OR NO CVM 00 07 0 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and M/Chip Cryptogram Validation Service on acquirer 0200 request and acquirer
initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN Controller and provides PAR to the MDES
issuer.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
18 Information.
0200: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0200 and 0420: DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 765
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355114100053 1 0 OR NO CVM 00 07 0 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and M/Chip Cryptogram Validation Service on acquirer 0200 request and acquirer
initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN Controller and the issuer provides PAR in
the 0210 response.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
19
0200: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0200 and 0420: DE 23 (if opt-in to receive) is present; DE 35 and DE 55 (if opt-in to receive crypto data) are present.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

Table 3551142—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment
EMV - Cloud-Based Payments Tokens)—Financial Transaction Request, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Mastercard Cloud-Based Payment
Digital Secure Remote Payment Chip in Financial Transaction Requests, Advices, and Reversals when the Mastercard Digital
Enablement Service (MDES) was performed, process them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 766
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3551142—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment
EMV - Cloud-Based Payments Tokens)—Financial Transaction Request, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200021 1 0 NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
1
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 767
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200022 1 0 NO CVM 00 09 6 422 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC. Issuer Decision
Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 768
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200023 1 0 NO CVM 00 09 6 423 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid UMD AC (invalid mobile PIN). Issuer Decision
Matrix indicates forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 769
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200024 1 0 NO CVM 00 09 6 424 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Lb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 770
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200025 1 0 NO CVM 00 09 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid TVR/CVR. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 771
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200026 1 0 NO CVM 00 09 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to unable to process. Issuer Decision Matrix indicates
forward request with results if OBS 61 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H, (Mastercard Digital Enablement Service Cloud-based Payments Device Token)2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 772
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200031 1 N/A NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and Cloud-Based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction; and then Stand-in approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
7
DE 48, SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1010000 (IPS signed out; Accept)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 773
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200032 1 N/A NO CVM 00 09 6 422 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to invalid MD AC and invalid UMD AC). Issuer decision
matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
Expiry Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
8
DE 48, SE 71 = 50Cb61Ib for the on-behalf service results.
DE 60 = 1410206 (Reject: Invalid MD AC and UMD AC [Invalid Mobile PIN])
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (issuer selection) per simulator setup:

DE 48.71 = 61K and DE 60 = 1410207 for invalid UMD AC


DE 48.71 = 61L and DE 60 = 1410208 for invalid MD AC
DE 48.71 = 61T and DE 60 = 1410211 for invalid TVR/CVR
DE 48.71 = 61U and DE 60 = 1410212 for unable to process

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 774
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200033 1 N/A NO CVM 00 09 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and failed Cloud-Based Payments Chip Pre-
validation Service on a Digital Secure Remote Payment transaction due to ATC replay. Issuer decision matrix to decline
(mandatory default).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = H (Mastercard Digital Enablement Service Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token
9 Expiry Date), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Eb for the on-behalf service results.
DE 60 = 1410206 (Reject: ATC Replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

NOTE: Issuers may also receive the following for decline (mandatory default) per simulator setup:

DE 48.71 = 61D and DE 60 = 1410204 for invalid ATC


DE 48.71 = 61M and DE 60 = 1410209 for mobile PIN try counter max limit reached, token suspended.
DE 48.71 = 61P and DE 60 = 1410206 for invalid Mobile PIN.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 775
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200034 1 N/A NO CVM 00 09 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
10
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 776
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200040 1 0 NO CVM 00 09 6 412 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
11 Service on a Digital Secure Remote Payment transaction without incurring any failed transaction analysis validations.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 777
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200041 1 0 NO CVM 00 09 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer).
12
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CI (Continue processing with information) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 778
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200042 1 0 NO CVM 00 09 6 414 V

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates continue processing (send authorization request to issuer).
13
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 27, SF 1 (Overview) = CW (Continue processing with warning) and SF 2 (Test Results) contains one or more values
chosen by issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 779
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200043 1 N/A NO CVM 00 09 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
14
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DI (Decline issuer decision) and SF 2 (Test Results) contains one or more values chosen by
issuer from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 780
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200044 1 N/A NO CVM 00 09 6 422 00

NOTE: This test case is for issuer participating in MDES and MCBP version 2.0 wallets. Issuers must use the offline
simulator to setup test values in DE 48, SE 27, SF 1 (Overview) and SF 2 (Test Results) as well as test values in DE
48, SE 71 (On-behalf Services) to execute testing of the transaction analysis capabilities.

MasterCard Digital Enablement Service successfully performed PAN mapping and Cloud-based Payments Chip Pre-validation
Service on a Digital Secure Remote Payment transaction although incurring one or more failed transaction analysis validations.
Decision matrix indicates decline (send authorization advice to issuer).
DE 39 = 05 (Do not honor).
15
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 27, SF 1 (Overview) = DS (Decline suspicious) and SF 2 (Test Results) contains one or more values chosen by issuer
from simulator.
DE 48, SE 33, SF 1 = H (MDES Cloud-based Payments Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 60 = 1410215 (Reject: Declined by Transaction Analysis).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 781
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114200051 1 N/A NO CVM 00 09 6 412 00

MDES successfully performed PAN mapping Cloud-Based Payments Chip Prevalidation Service on acquirer-generated 0220
advice.
DE 39 = 00 (Approved) and DE 60 = 280 (APS approved transaction).

16 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 782
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200052 1 0 NO CVM 00 09 6 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and Cloud-Based Payments Chip Prevalidation Service on acquirer 0200 request
and acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN Controller and provides PAR to
the MDES issuer.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
17 Information.
0200: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
0200 and 0420: DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 783
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114200053 1 0 NO CVM 00 09 0 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping Cloud-Based Payments Chip Prevalidation Service on acquirer 0200 request and
acquirer initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN Controller and the issuer provides
PAR in the 0210 response.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
18
0200: DE 48, SE 71 = 50Cb61Vb for the on-behalf service results.
0200 and 0420: DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
0200 and 0420: DE 48, SE 33, SF 1 = H (MDES Cloud-Based Payments Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5
(Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

Table 3551143—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment
EMV - Secure Element Tokens)—Financial Transaction Requests, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive contactless M/Chip Financial
Transaction Requests, Advices and Reversals for transactions when the Mastercard Digital Enablement Service (MDES) was performed
on a Digital Secure Remote Payment, process them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 784
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3551143—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES (Digital Secure Remote Payment
EMV - Secure Element Tokens)—Financial Transaction Requests, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300001 1 0 NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
1
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 785
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300002 1 0 NO CVM 00 09 6 416 00

MasterCard Digital Enablement Service successfulcly performed PAN mapping and M/Chip cryptogram validation (AC valid
but not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
2
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 786
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300006 1 N/A NO CVM 00 09 6 412 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation on a Digital
Secure Remote Payment transaction and then Stand-In approved due to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
3
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 60 = 101 (IPS signed out)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 787
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300007 1 N/A NO CVM 00 09 6 416 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation (AC valid but
not an ARQC, status of TVR/CVR unknown) on a Digital Secure Remote Payment transaction and then Stand-In approved due
to issuer signed out.
DE 39 = 00 (Approved).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
4
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Gb for the on-behalf service results.
DE 60 = 101 (IPS signed out)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 788
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300011 1 N/A NO CVM 00 09 6 414 00

Mastercard Digital Enablement Service successfully performed PAN mapping but invalid M/Chip cryptogram validation on a
Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
5
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 60 = 1410034 (Mastercard Digital Enablement Service; Reject: Chip validation failed)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 789
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300012 1 N/A NO CVM 00 09 6 417 00

Mastercard Digital Enablement Service successfully performed PAN mapping but TVR/CVR invalid for M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
6
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 60 = 1410035 (Mastercard Digital Enablement Service; Reject: TVR/CVR validation failed)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 790
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300013 1 N/A NO CVM 00 09 6 413 00

Mastercard Digital Enablement Service successfully performed PAN mapping but unable to perform M/Chip cryptogram
validation on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
7
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology)e.
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 60 = 1410032 (Mastercard Digital Enablement Service; Reject: Chip technical failure)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 791
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300014 1 N/A NO CVM 00 09 6 418 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
outside allowed range on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 39 = 05 (Do not honor).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
8
DE 48, SE 26 contains Wallet Identifier and SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 60 = 1410043 (Mastercard Digital Enablement Service; Reject: ATC outside allowed range)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 792
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300015 1 N/A NO CVM 00 09 6 419 00

Mastercard Digital Enablement Service successfully performed PAN mapping and M/Chip cryptogram validation but ATC
replay on a Digital Secure Remote Payment transaction. Issuer decision matrix to decline (issuer selection).
DE 22, SF 1 = 09 (PAN entry via electronic commerce, including remote chip)
DE 39 = 05 (Do not honor).

9 DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
DE 48, SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 60 = 1410046 (Mastercard Digital Enablement Service; Reject: ATC replay)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 793
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300016 1 N/A NO CVM 00 09 6 016 00

MDES successfully performed PAN mapping but failed M/Chip cryptogram validation due to format error.
DE 2 and DE 14 (if applicable) contain PAN information.
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 055.
10
DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Fb for the on-behalf service results.
DE 60 = 1410059 (MDES Advice to Issuer; Reject: DE 55 format error [for MDES chip validation]).
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 794
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300021 1 0 NO CVM 00 09 6 418 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is out of range. Issuer Decision Matrix indicates forward request with results if OBS 51
not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
11
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ab for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 795
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300022 1 0 NO CVM 00 09 6 419 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but Application Transaction Counter is replayed. Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
12
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Eb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 796
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300023 1 0 NO CVM 00 09 6 414 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Invalid cryptogram). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
13
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ib for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 797
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300024 1 0 NO CVM 00 09 6 417 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (Valid ARQC/TC; TVR/CVR invalid). Issuer Decision Matrix indicates forward request with results if
OBS 51 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
14
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Tb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 798
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300025 1 0 NO CVM 00 09 6 413 V

Mastercard Digital Enablement Service successfully performed PAN mapping on a Digital Secure Remote Payment transaction
but chip validation failure (unable to process). Issuer Decision Matrix indicates forward request with results if OBS 51 not
successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
15
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Ub for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 799
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300026 1 0 NO CVM 00 09 6 425 V

Mastercard Digital Enablement Service successfully performed PAN mapping but failed M/Chip validation for no matching key
File for this PAN, PAN expiry date and KDI combonation on a Digital Secure Remote Payment transaction but ATC outside
allowed range. Issuer Decision Matrix indicates forward request with results if OBS 51 not successful.
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
16
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier.
DE 48, SE 33, SF 1 = C (Mastercard Digital Enablement Service Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry
Date), SF 5 (Token Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Kb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 800
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0220 355114300051 1 N/A NO CVM 00 09 6 412 00

MDES successfully performed PAN mapping and M/Chip Cryptogram Validation Service on acquirer-generated 0220 advice.
DE 39 = 00 (Approved) and DE 60 = 280 (APS approved transaction).
DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
17
DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC Information.
DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance Level), SF
6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
DE 56 (Payment Account Data)is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 801
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300052 1 0 NO CVM 00 09 6 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and M/Chip Cryptogram Validation Service on acquirer 0200 request and acquirer
initiated 0420 reversal advice. This test case assumes that Mastercard is the BIN Controller and provides PAR to the MDES
issuer.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
18 Information.
0200: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0200 and 0420: DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200 and 0420: DE 56 (Payment Account Data) is present containing PAR as provided by Mastercard.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 802
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355114300053 1 0 NO CVM 00 09 6 412 00

0420 1 0 DE 39 = 00 00

MDES successfully performed PAN mapping and M/Chip Cryptogram Validation Service on acquirer 0200 request and acquirer
initiated 0420 reversal advice. This test case assumes that Mastercard is not the BIN Controller and the issuer provides PAR in
the 0210 response.
0200: DE 48, SE 26 contains Wallet Identifier; SE 30 contains Token Transaction Identifier; and SE 34 contains ATC
Information.
19
0200: DE 48, SE 71 = 50Cb51Vb for the on-behalf service results.
0200 and 0420: DE 23 (if opt-in to receive) is present, and DE 55 (if opt-in to receive crypto data) is present.
0200 and 0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0210: DE 56 (Payment Account Data) is present containing PAR as provided by the issuer.
0420: DE 39 = 00 (Approved) and DE 60, SF 1 = 454 (APS unable to deliver response) .
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.
0420: DE 56 is provided by Mastercard from the issuer original 0210 response.

Table 3551152—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Financial Transaction Requests and Advices
The following test cases will test whether an issuer's Single Message online application for issuers that participate in the MasterCard
Digital Enablement Service (MDES) can receive MDES device token Financial Transaction Requests, Advices, and Reversals that have

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 803
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

undergone MDES mapping but for various reasons do not contain any cryptographic on-behalf service results; process them, and
send correctly formatted Financial Transaction Responses.

Table 3551152—Issuer On-behalf Services - SMS Auth—ICC Product and Services—MDES Device Token PAN Mapping
Without Cryptogram—Financial Transaction Requests and Advices

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
0200 355115200001 1 0 PURCHASE NO CVM 00 07 0 001-010 00

MasterCard Digital Enablement Service successfully performed PAN mapping on a device token for an incremental
authorization.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
1 Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 63 indicates an incremental authorization.
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 804
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
0200 355115200002 1 0 REFUND NO CVM 20 07 0 001-010 00

Mastercard Digital Enablement Service successfully performed PAN mapping on a device token for a refund authorization.
DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token Assurance
2
Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
DE 48, SE 71 = 50Cb for the on-behalf service results.
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer request or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355115200011 1 N/A OR NO CVM 00 07 0 515 00

MDES unsuccessfully performed PAN mapping.

3 DE 39 = 14 (Invalid card number).


DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 805
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355115200012 1 N/A OR NO CVM 00 07 0 513 00

MDES unable to perform PAN mapping.

4 DE 39 = 96 (System error).
DE 48, SE 71 = 50Ub for the on-behalf service results.
DE 60 = 1410201 (Mastercard Digital Enablement Service Advice to Issuer; Reject)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355115200013 1 N/A OR NO CVM 00 07 0 515 00

MDES rejected request for suspended token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted card).
5
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410202 (Mastercard Digital Enablement Service Reject: Token in suspended status)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 806
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355115200014 1 N/A OR NO CVM 00 07 0 515 00

MDES rejected request for deactivated token.


DE 2 and DE 14 contain PAN information.
DE 39 = 62 (Restricted card number).
6
DE 48, SE 33, SF 1 (Account Number Indicator) of customer choice; SF 2 (Account Number) contains token; and SF 3
(Expiration Date) contains token expiry date.
DE 48, SE 71 = 50Ib for the on-behalf service results.
DE 60 = 1410203 (Mastercard Digital Enablement Service Reject: Token deactivated)
DE 56 (Payment Account Data) is either inserted by Mastercard as BIN Controller in issuer advice or optionally inserted by
issuer as BIN Controller in issuer response.

ICC CONTACTLESS
PURCHASE SIGNATURE
0220 355115200015 1 N/A OR NO CVM 00 07 0 016 00

MDES failed PAN mapping due to format error.


DE 2 and DE 14 (if applicable) contain token information.
7
DE 23, DE 35, and DE 55 only present if issuer opt-in to receive.
DE 39 = 30 (Format error) and DE 44 = 002.
DE 48, SE 71 = 50Fb for the on-behalf service results.
DE 60 = 1410201 (MDES Advice to Issuer; Reject: Invalid Token-Primary Account Number mapping relationship).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 807
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3553555—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message online application that is participating in Merchant Presented
QR and Mastercard Digital Enablement Service (MDES) can receive Financial Transaction Requests containing token funding
transactions for contactless M/Chip acceptance environment; process them, and send correctly formatted Financial Transaction
Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 808
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3553555—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Tokenized)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355355500001 1 0 OR NO CVM 00 07 0 412 00

Merchant Presented QR service andMDES Secure Element token successfully mapped, validated, and issuer approved on chip
contactless transaction.
0200: DE 2 and DE 14 contain PAN data; DE 18 contains valid value for MPQR funding transaction.
0200: DE 23 (if opt-in to receive) and DE 55 (if opt-in to receive) are present.
0200: DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token contains valid value for MPQR
1 funding transaction Identifier).
0200: DE 48, SE 33, SF 1 = C (MDES Secure Element Device Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200: DE 48, SE 71 = 37Vb50Cb51Vb for the on-behalf service results.
0200: DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
0200: DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
0200: DE 108, SE 01, SF 01 (Receiver/Recipient First Name) and SF 03 Receiver/Recipient Last Name); SE 02, SF 01 (Sender
First Name) and SF 03 (Sender Last Name); and SE 03, SF 1 (Unique Transaction Reference).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 809
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355355500002 1 0 OR NO CVM 00 07 0 412 00

Merchant Presented QR service and MDES Cloud-based Payments token successfully mapped, validated, and issuer approved
on chip contactless transaction.
0200: DE 2 and DE 14 contain PAN data; DE 18 contains valid value for MPQR funding transaction.
0200: DE 23 (if opt-in to receive) and DE 55 (if opt-in to receive) are present.

2 0200: DE 48, SE 23, SF 1 (Device Type); SE 26, SF 1 (Wallet Identifier); and SE 30 (Token Transaction Identifier).
0200: DE 48, SE 33, SF 1 = H (MDES Cloud-based PaymentsToken), SF 2 (Token), SF 3 (Token Expiry Date), SF 5 (Token
Assurance Level), SF 6 (Token Requestor ID), and SF 8 (Storage Technology).
0200: DE 48, SE 71 = 37Vb50Cb61Vb for the on-behalf service results.
0200: DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
0200: DE 56 (Payment Account Data) is inserted by Mastercard as BIN Controller.
0200: DE 108, SE 01, SF 01 (Receiver/Recipient First Name) and SF 03 Receiver/Recipient Last Name); SE 02, SF 01 (Sender
First Name) and SF 03 (Sender Last Name); and SE 03, SF 1 (Unique Transaction Reference).

Table 3553556—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests
The following test cases will test whether an issuer's Singe Message online application that is participating in Merchant Presented QR
can receive Financial Transaction Requests containing token funding transactions for electronic commerce and contactless magnetic
stripe acceptance environments; process them, and send correctly formatted Financial Transaction Responses.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 810
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3553556—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Merchant Presented QR Funding
Transactions (Non-Token PAN)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355355600001 1 N/A OR NO CVM 00 07 0 001-010 00

Merchant Presented QR service for a funding transaction for a consumer's PAN was successfully processed.

1 0200: DE 18 contains valid value for MPQR funding transaction.


0200: DE 48, SE 71 = 37Vb for the on-behalf service results.
0200: DE 48, SE 77 (Funding/Payment Transaction Type Indicator) = C67 (Merchant Presented QR).
0200: DE 108, SE 01, SF 01 (Receiver/Recipient First Name) and SF 03 Receiver/Recipient Last Name); SE 02, SF 01 (Sender
First Name) and SF 03 (Sender Last Name); and SE 03, SF 1 (Unique Transaction Reference).

Table 3554900—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Maestro Switching of Visa Tokenized
Transactions—Financial Transaction Requests, Advices, and Reversals
The following test cases will test whether an issuer's Single Message online application can receive Maestro-branded Visa token
transactions that have undergone PAN mapping and CVV validation and contain Payment Account Reference (PAR) in DE 56
(Payment Account Data) in Financial Transaction Requests, Advices, and Reversals; process them, and send properly formatted
Financial Transaction Responses. Issuers are not required to return DE 56 in the corresponding response messages. PAR will not be
provided for Maestro-branded Visa non-token transactions.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 811
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3554900—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Maestro Switching of Visa Tokenized
Transactions—Financial Transaction Requests, Advices, and Reversals

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS 001-010 MSI-


0200 355490000011 1 N/A PURCHASE OFFLINE PIN 00 07 0 ONLY 00

Maestro-branded Visa token original request transaction tokenized via Secure Element (SE) - successful PAN mapping and chip
validation.
1 DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45; DE 23 and DE 55 not present; DE 48, SE 30 (Token Transaction
Identifier) present; DE 48, SE 33, SF 1 = C indicating SE token, SF 2/3 contains token information, SF 5 (Token Assurance
Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb51Vb (Successful Token to PAN Mapping; Successful Chip
Validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

ICC CONTACTLESS 001-010 MSI-


0220 355490000012 1 N/A PURCHASE OFFLINE PIN 00 07 0 ONLY 00

Maestro-branded Visa token acquirer advice transaction tokenized via Secure Element(SE) - successful PAN mapping but
invalid chip validation.
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 and DE 55 not present; DE 48, SE 30 (Token Transaction
2
Identifier) present; DE 48, SE 33, SF 1 = C indicating SE token, SF 2/3 contains token information, SF 5 (Token Assurance
Level) present, and SF 6 (Token Requestor ID) present; DE 48, SE 71 = 50Cb51Ib (Successful Token to PAN Mapping; Invalid
cryptogram)
DE 39 = 05 (Do not honor); DE 60 = 1410206 (Token Advice to Issuer; Invalid chip validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 812
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS 001-010 MSI-


0200 355490000013 1 N/A PURCHASE OFFLINE PIN 00 07 0 ONLY 00

0420 1 N/A DE 39 = 00 00

Maestro-branded Visa token original request and full reversal advice transaction tokenized via Secure Element (SE) - successful
PAN mapping and chip validation.
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45; DE 23 and DE 55 not present; DE 48, SE 30 (Token Transaction
Identifier) present; DE 48, SE 33, SF 1 = C indicating SE token, SF 2/3 contains token information, SF 5 (Token Assurance
3 Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb51Vb (Successful Token to PAN Mapping; Successful Chip
Validation).
0200 and 0420: DE 56 (Payment Account Data) is provided by Visa as BIN Controller.
0420: Full reversal, DE 39 = 00 (Approved) and DE 60 = 4530041 (Financial transaction cancellation: card returned).
0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor ID),
and SF 8 (Storage Technology).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 813
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE 001-010 MSI-
0200 355490000021 1 N/A NO CVM 00 09 6 ONLY 00

Maestro-branded Visa token original request transaction tokenized via Secure Element(SE) - successful PAN mapping and Chip
validation.
4
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 not present; and DE 23 and DE 55 not present; DE 48, SE 30
(Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C indicating SE token, SF 2/3 contains token information, SF 5
(Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb51Vb (Successful Token to PAN Mapping;
Successful Chip Validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

ICC ELECTRONIC
COMMERCE PURCHASE 001-010 MSI-
0220 355490000022 1 N/A NO CVM 00 09 6 ONLY 00

Maestro-branded Visa token acquirer advice transaction tokenized via Secure Element(SE) - successful PAN mapping but
invalid chip validation.
5 DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 not present; and DE 23 and DE 55 not present; DE 48, SE 30
(Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C indicating SE token, SF 2/3 contains token information, SF 5
(Token Assurance Level) present, and SF 6 (Token Requestor ID) present; DE 48, SE 71 = 50Cb51Ib (Successful Token to PAN
Mapping; Invalid cryptogram)
DE 39 = 05 (Do not honor); DE 60 = 1410034 (Token Advice to Issuer; Invalid chip validation).
DE 56 (Payment Account Data) is provided by Visa as BIN Controller.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 814
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE 001-010 MSI-
0200 355490000023 1 N/A NO CVM 00 09 6 ONLY 00

0420 1 N/A DE 39 = 00 00

Maestro-branded Visa token original request and full reversal advice transaction tokenized via Secure Element(SE) - successful
PAN mapping and Chip validation.
DE 2 and DE 14 contain PAN information; DE 35 and/or DE 45 not present; and DE 23 and DE 55 not present; DE 48, SE 30
6 (Token Transaction Identifier) present; DE 48, SE 33, SF 1 = C indicating SE token, SF 2/3 contains token information, SF 5
(Token Assurance Level), and SF 6 (Token Requestor ID); DE 48, SE 71 = 50Cb51Vb (Successful Token to PAN Mapping;
Successful Chip Validation).
0200 and 0420: DE 56 (Payment Account Data) is provided by Visa as BIN Controller.
0420: Full reversal, DE 39 = 00 (Approved) and DE 60 = 4530041 (Financial transaction cancellation: card returned).
0420: DE 48, SE 33, SF 1 = C (MDES Secure Element Token), SF 2 (Token), SF 3 (Token Expiry Date), SF 6 (Token Requestor ID),
and SF 8 (Storage Technology).
0420: DE 48, SE 71 = 50Cb for the on-behalf service results.

0422 355490000010 1 N/A CHARGEBACK (FULL) 001-010 00

7 Issuer-initiated chargeback in online Issuer Reversal Advice/0422 message that will contain DE 56 in Issuer Reversal Advice
Response/0432 that was provided by Visa as BIN Controller during detokenization of original Financial Transaction Request/
0200 message to issuer.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 815
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Table 3556161—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests
The following test cases will test whether an issuer's Single Message online application can receive Financial Transaction Requests
containing Token Service Provider (TSP) Token/PAN Mapping related information for various POS entry modes, process them and
send correctly formatted Financial Transaction Responses.

NOTE: Issuer response contains DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

Table 3556161—Issuer On-behalf Services - SMS Auth—ICC Product and Services—Token Service Provider (Token/PAN
Mapping)—Financial Transaction Requests

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS
PURCHASE SIGNATURE
0200 355616100001 1 0 OR NO CVM 00 07 0 00

TSP Token/PAN mapping completed.


1
DE 2 contains PAN.
DE 48, SE 33; DE 35; and DE 55 contain token information.
DE 48, SE 71 = 14Cb for the on-behalf service results

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 816
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC ELECTRONIC
COMMERCE PURCHASE
0200 355616100002 1 0 NO CVM 00 09 6 00

TSP Token/PAN mapping completed.


2
DE 2 contains PAN information.
DE 48, SE 33 and DE 55 contain token information.
DE 48, SE 71 = 14Cb for the on-behalf service results

ICC CONTACTLESS ATM


BALANCE INQUIRY
0200 355616100011 1 0 ONLINE PIN 30 07 0 V 412 00

TSP Token/PAN mapping completed.


3 DE 55 chip data, DE 23 as well as DE 35 if present from acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0210: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 817
Single Message System—Issuer On-behalf Services
Test Cases—ICC-based Operations

Case DE DE DE
ID MTI Retrieval Ref No SIM MTF Business Transaction 3_1 22_1 61_10 DE 52 Card Id RC

ICC CONTACTLESS ATM


WITHDRAWAL ONLINE
0200 355616100012 1 0 PIN 01 07 0 V 412 00

TSP Token/PAN mapping completed.


4 DE 55 chip data, DE 23 as well as DE 35 if present from acquirer containing token information.
DE 48, SE 33, SF 1 = P (Contactless Account Number), SF 2 (Token), and SF 3 (Token Expiry Date),.
DE 48, SE 71 = 14Cb for the on-behalf service results.
0210: DE 48, SE 33, SF 5 (Token Assurance Level) and/or SF 6 (Token Requestor ID).

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 818
Notices

Notices
Following are policies pertaining to proprietary rights, trademarks, translations, and details about the availability of additional
information online.

Proprietary Rights The information contained in this document is proprietary and confidential to Mastercard International
Incorporated, one or more of its affiliated entities (collectively “Mastercard”), or both.
This material may not be duplicated, published, or disclosed, in whole or in part, without the prior written
permission of Mastercard.

Trademarks Trademark notices and symbols used in this document reflect the registration status of Mastercard
trademarks in the United States. Please consult with the Customer Operations Services team or the
Mastercard Law Department for the registration status of particular product, program, or service names
outside the United States.
All third-party product and service names are trademarks or registered trademarks of their respective
owners.

Disclaimer Mastercard makes no representations or warranties of any kind, express or implied, with respect to the
contents of this document. Without limitation, Mastercard specifically disclaims all representations and
warranties with respect to this document and any intellectual property rights subsisting therein or any part
thereof, including but not limited to any and all implied warranties of title, non-infringement, or suitability
for any purpose (whether or not Mastercard has been advised, has reason to know, or is otherwise in fact
aware of any information) or achievement of any particular result. Without limitation, Mastercard
specifically disclaims all representations and warranties that any practice or implementation of this
document will not infringe any third party patents, copyrights, trade secrets or other rights.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 819
Notices

Translation A translation of any Mastercard manual, bulletin, release, or other Mastercard document into a language
other than English is intended solely as a convenience to Mastercard customers. Mastercard provides any
translated document to its customers “AS IS” and makes no representations or warranties of any kind with
respect to the translated document, including, but not limited to, its accuracy or reliability. In no event shall
Mastercard be liable for any damages resulting from reliance on any translated document. The English
version of any Mastercard document will take precedence over any translated version in any legal
proceeding.

Information Available Online Mastercard provides details about the standards used for this document—including times expressed,
language use, and contact information—on the Publications Support page available on Mastercard
Connect™. Go to Publications Support for centralized information.

©2002–2018 Mastercard. Proprietary. All rights reserved.


Issuer On-behalf Services——Test Cases • 9 August 2018 820

Вам также может понравиться