GYFK Card payment

Questions and answers about online card payments

CARD ACCEPTANCE

What types of cards can be used for payment?

Payments can be made with VISA and Mastercard embossed cards, as well as certain VISA Electron and V Pay cards. The possibility of using VISA Electron cards online depends on the issuing bank. The VISA Electron bank card issued by CIB can be used for online purchases.

Which banks’ cards are suitable for online payments?

Any VISA and Mastercard/Maestro card that has been authorized for online payment by the issuing bank, as well as specifically web cards intended for online use.

Can loyalty cards be used for payment?

Loyalty cards issued by merchants/service providers that contain loyalty points cannot be used for online payments.

Can co-branded cards be used for payment?

Payments can be made with any co-branded card that is a MasterCard or VISA based card suitable for online payment.

PAYMENT PROCESS

How does the online payment banking background process work?

The customer initiates the payment after selecting the card payment option on the merchant/service provider’s website, resulting in a transfer to the Bank’s secure payment page equipped with a secure communication channel. To complete the payment, the card number, expiration date, and the 3-digit validation code found on the signature strip on the back of the card must be provided. The transaction is initiated by you, and from this point on, the card undergoes real-time authorization, during which the authenticity of the card data, coverage, and purchase limit are checked. If all data is correct for the continuation of the transaction, the amount to be paid is blocked by the cardholder’s (issuing) bank on your card. The actual charge (debit) of the amount on the account depends on the account-holding bank and may occur within a few days.

How does online card purchasing differ from traditional purchasing?

We distinguish between Card Present (with card present) and Card Not Present (without card present) transactions. The Card Present transaction occurs using a POS terminal device. After swiping the card and entering the PIN code, the terminal connects to the cardholder’s bank through the authorization center, depending on the card type and issuer, via the VISA or MasterCard network. Here, validity and coverage checks (authorization) are performed. Following this route in reverse, the POS terminal (or merchant) receives approval or rejection. The customer signs the receipt. The Card Not Present transaction is one in which the bank card is not physically present during the transaction. This includes transactions conducted by mail, phone, or electronically (online), where the customer (cardholder) initiates the transaction by providing the requested card data on a secure (256-bit encrypted) payment page. You will receive an authorization number for a successful transaction, which matches the number found on the paper receipt.

What does reservation mean?

Upon the bank’s acknowledgment of the transaction, a reservation (blocking) immediately follows, as the actual charge requires the official data to arrive first, which may take a few days during which the purchased amount could be spent again. Therefore, with the reservation, the spent or withdrawn money is separated and put under reservation. The reserved amount is part of the account balance, meaning it accrues interest, but cannot be spent again. The reservation ensures the rejection of transactions that no longer have coverage, even though the account balance would theoretically still allow for it.

FAILED PAYMENTS AND ACTIONS

In what cases can a transaction fail?

Generally, a payment order not accepted by the card-issuing bank (where the customer received the card); but in the case of using a bank card, this can also occur due to a telecommunications or IT error preventing the authorization request from reaching the card-issuing bank.

Card-related errors

•          The card is not suitable for online payment.
•          The card’s online use is prohibited by the account-holding bank.
•          The card usage is prohibited.
•          The card data (card number, expiration date, code on the signature strip) was entered incorrectly.
•          The card has expired.

Account-related errors

•          There are insufficient funds to execute the transaction.
•          The transaction amount exceeds the card’s purchase limit.

Connection-related errors

•          The line was likely interrupted during the transaction. Please try again.
•          The transaction failed due to a timeout. Please try again.

Technical errors

•          If you did not return from the payment page to the merchant/service provider’s page, the transaction is unsuccessful.
•          If you returned from the payment page, but the browser returns to the payment page using “back,” “reload,” or “refresh,” your transaction will be automatically rejected by the system for security reasons.

What to do in case of payment procedure failure?

A transaction identifier is generated in all cases, which we recommend you note down. If the payment attempt is rejected by the bank side, please contact your account-holding bank.

Why should I contact the account-holding bank in case of payment failure?

During card verification, the account-holding (card-issuing) bank informs the merchant (acquiring) bank whether the transaction can be executed. The acquiring bank cannot provide confidential information about another bank’s customer; only the bank identifying the cardholder has the right to do so.

What does it mean if I received an SMS from my bank about the amount being reserved/blocking, but the merchant/service provider indicates that the payment was unsuccessful?

This phenomenon may occur if the card was verified on the payment page, but you did not return to the merchant/service provider’s website. In this case, the transaction is considered incomplete and thus automatically unsuccessful. In such cases, the amount will not be charged to your card, and the reservation will be released.

SECURITY

What does VeriSign and the 256-bit encrypted TLS communication channel mean?

TLS stands for Transport Layer Security, an accepted encryption procedure. Our bank has a 256-bit encryption key that protects the communication channel. The company VeriSign enables CIB Bank to use the 256-bit key, with which we ensure TLS-based encryption. Currently, this encryption method is used in 90% of the world’s electronic commerce. The browser program used by the customer encrypts the cardholder’s data before sending it using TLS, so that they reach CIB Bank in an encoded form, making them unintelligible to unauthorized persons.

My browser warned me after the payment that I am leaving the security zone. Is my payment security guaranteed?

Absolutely yes. The payment process occurs over a 256-bit encrypted communication channel, making it completely secure. After the transaction, you return to the merchant’s website; if the merchant’s site is not encrypted, your browser will warn you that you have left the encrypted channel. This does not pose a risk to the security of the payment.

What does the CVC2/CVV2 code mean?

For MasterCard, the so-called Card Verification Code, and for Visa, the so-called Card Verification Value is a coded numerical value on the magnetic stripe of the bank card that helps verify the authenticity of a card. The so-called CVC2 code, which appears in the last three digits of the number on the back of Mastercard/Maestro cards, must be provided during online purchases.

What does Verified by Visa mean?

In the Verified by Visa system, registered Visa cardholders choose a password with the issuing bank, which they can use to identify themselves during online purchases, providing protection against unauthorized use of Visa cards. CIB Bank accepts cards issued under the Verified by Visa system.

What does Mastercard SecureCode mean?

In the Mastercard SecureCode system, registered Mastercard/Maestro cardholders choose a password with the issuing bank, which they can use to identify themselves during online purchases, providing protection against unauthorized use of Mastercard/Maestro cards. CIB Bank accepts cards issued under the Mastercard SecureCode system.

What does the UCAF code mean?

For MasterCard/Maestro cards, this is a unique code that may be received from your card-issuing bank. If you did not receive one, leave the field blank.