Recent Changes to VISA Operating Regulations - January 1 Deadline
Credit unions that use VISA should be aware of a recent change to VISA's Operating Regulations. The changes were effective July 1, 2008 and card issuers have a mandatory compliance date of January 1, 2009.
The changes include two definitional changes:
PIN-Debit NetworkâÂÂEffective July 1, 2008, a non-Visa debit network that typically authenticates transactions by use of a PIN that is not generally known as, marketed as, or enabled as a competitive general-purpose card program, or other prohibited payment program, either directly or through a joint acceptance agreement." Â
The first objective is to determine if the network(s) your credit union uses allow "Non-Visa Debit Transactions."Â Karl Leslie of Wolters Kluwer Financial Services has written a wonderful article summarizing the rule changes and helping financial institutions determine if they need to comply.
For example, letâÂÂs say your network offers a PIN-less bill payment product. A merchant that uses the same network offers that payment option in its online payment environment. One of your cardholders goes to that merchantâÂÂs web site and chooses that payment option because she sees the payment option has the same logo as she has on her card. Your institution has to honor that PIN-less bill pay transaction because you agreed to do so when you subscribed to your network. As a result, your institution has enabled Non-Visa Debit Transaction processing.
We are aware of the following networks that offer a PIN-less payment option:Â STAR, PULSE, NYCE, COOP, and ACCEL/Exchange."Â (emphasis added).
If one of your networks allows "Non-Visa Debit Transactions" the credit union must make certain disclosures to its cardholders as well as notifying VISA because these "Non-Visa Debit Transactions" would not be conducted through VISA's network and, therefore, would not receive VISA's zero liability and other protections.Â
Take a look at your language in your cardholder agreement and Reg E disclosure to see if it addresses transactions not conducted through the VISA network. If not, you may need to add this information as well as disclosing this information to your cardholders on an annual basis.Â