This glossary contains general terms used in the payments industry and should help you demystify the world of payments.
SCA is mandated in PSD2 as a way to make online payments and online banking transactions more secure.
An authentication is considered strong if a shopper is able to provide two out of the following factors:
- Something the shopper has.
- Something the shopper knows.
- Something the shopper is.
For example, a shopper is required to supply a one-time authentication code received on their phone (something the shopper has), and a password that only the shopper knows (something the shopper knows).
A card scheme token used in place of the customer’s primary account number. Network token payments are submitted with networkTokenType, networkToken, and the token expiry date. They are different from xMoney saved-card tokens, which are referenced by cardId.
Device Primary Account Number. This is the tokenized card number returned by a card network, issuer, wallet, or token service provider. In xMoney API requests, send the DPAN in networkToken.
Cardholder Authentication Verification Value. This value is generated by a 3D Secure authentication flow and can be sent in the cavv field.
Token Authentication Verification Value. This is a token cryptogram associated with a network token. In xMoney API requests, send TAVV values in networkTokenCryptogram.
Dynamic Secure Remote Payment cryptogram. Wallets and token providers may return this cryptogram for tokenized card payments. In xMoney API requests, send DSRP cryptograms in networkTokenCryptogram or, for decrypted wallet payloads, in digitalWalletCryptogram.
Electronic Commerce Indicator. ECI describes the authentication or e-commerce security context of the transaction. xMoney supports ECI values for 3D Secure authentication (eci), network token payments (networkTokenEci), and decrypted wallet payloads (digitalWalletEci).
The scheme or provider transaction identifier returned for an authorized payment. For standard xMoney tokenized payments, xMoney handles the required merchant-initiated transaction data internally. Merchants only need to store and send networkTransactionId with networkTransactionDate when tokenization happens outside xMoney.