Card acceptance in presence business. 5.4 Card acceptance in distance business (General – Secure e-commerce in the webshop – Distance business transactions by post, telephone or fax)
Card acceptance in presence business. In electronic execution by means of hardware terminals, the Merchant shall ensure that the reading of the card data and, where necessary, authentication (e.g. by entering the PIN) can be carried out on the termi- nal by the cardholder in person – without this being observed by the Mer- chant or third parties. If the terminal does not request authentication (e.g. by entering the PIN), the receipt generated by the terminal must in every case be signed per- sonally by the cardholder on the signature line intended for this purpose. When using an mPOS terminal, the cardholder signs directly on the screen of the mobile end device. The following applies to UnionPay trans- actions: A PIN/six-digit combination of numbers is required for each transaction. In addition, each receipt must be signed by the cardholder. For contactless transactions, the applicable security standard is man- aged via the hardware terminal. If the security parameters saved on the card and/or hardware terminal allow, no authentication will be required (e.g. by entering the PIN) in accordance with the regulatory technical standards issued by the European Commission under the Payment Ser- vices Directive. Otherwise, the cardholder will be prompted to authenti- cate themselves, for example, by entering their PIN. If the cardholder’s signature is required for the card to be accepted, the Merchant may only accept the card if it – is presented within the period of validity printed on it; – is not a recognizable forgery; – has all the relevant security features; and – has been signed by the cardholder. Furthermore, for transactions with signature confirmation, the Merchant shall ensure that – the cardholder personally signs the receipt in its presence; – the signature on the paper receipt/screen (for mPOS terminals) matches the signature on the reverse of the card; and – the last four digits of the card number are identical to the last four digits of the number printed on the receipt. In case of doubt, the Merchant shall check the identity of the cardholder against a piece of official ID (check that last and first names match) and note on the receipt that the data on the ID and on the card have been compared and verified. For mPOS terminals this note has to be recorded together with a reference to the corresponding transaction ID. For certain UnionPay cards, the name of the cardholder and expiry date are not shown on the card. In these cases, the Merchant has no obligation to carry out checks with r...