# Payment glossary

This glossary contains general terms used in the payments industry and should help you demystify the world of payments.

## Strong Customer Authentication (SCA)

SCA is mandated in [PSD2](https://www.ecb.europa.eu/press/intro/mip-online/2018/html/1803_revisedpsd.en.html)
as a way to make online payments and online banking transactions more secure.

An authentication is considered strong if a shopper is able to provide two out of the following factors:

* Something the shopper has.
* Something the shopper knows.
* Something the shopper is.


For example, a shopper is required to supply a one-time authentication code received on their phone (something the shopper has),
and a password that only the shopper knows (something the shopper knows).

## Network token

A card scheme token used in place of the customer’s primary account number. Network token payments are submitted with `networkTokenType`, `networkToken`, and the token expiry date. They are different from xMoney saved-card tokens, which are referenced by `cardId`.

## DPAN

Device Primary Account Number. This is the tokenized card number returned by a card network, issuer, wallet, or token service provider. In xMoney API requests, send the DPAN in `networkToken`.

## CAVV

Cardholder Authentication Verification Value. This value is generated by a 3D Secure authentication flow and can be sent in the `cavv` field.

## TAVV

Token Authentication Verification Value. This is a token cryptogram associated with a network token. In xMoney API requests, send TAVV values in `networkTokenCryptogram`.

## DSRP cryptogram

Dynamic Secure Remote Payment cryptogram. Wallets and token providers may return this cryptogram for tokenized card payments. In xMoney API requests, send DSRP cryptograms in `networkTokenCryptogram` or, for decrypted wallet payloads, in `digitalWalletCryptogram`.

## ECI

Electronic Commerce Indicator. ECI describes the authentication or e-commerce security context of the transaction. xMoney supports ECI values for 3D Secure authentication (`eci`), network token payments (`networkTokenEci`), and decrypted wallet payloads (`digitalWalletEci`).

## Network transaction ID

The scheme or provider transaction identifier returned for an authorized payment. For standard xMoney tokenized payments, xMoney handles the required merchant-initiated transaction data internally. Merchants only need to store and send `networkTransactionId` with `networkTransactionDate` when tokenization happens outside xMoney.