GYFK Card Payment

CARD ACCEPTANCE

What types of cards can be used for payment?

Payments can be made with VISA and Mastercard embossed cards, as well as certain VISA Electron and V Pay cards. The ability to use VISA Electron cards online depends on the issuing bank. The VISA Electron bank card issued by CIB can be used for online purchases.

Which banks’ cards are suitable for online payments?

Any VISA and Mastercard/Maestro card that has been authorized for online payments by the card-issuing bank, as well as web cards specifically intended for online use.

Can loyalty cards be used for payment?

Loyalty cards issued by merchants/service providers that contain loyalty points cannot be used for online payments.

Can co-branded cards be used for payment?

Any co-branded card that is a MasterCard or VISA based card suitable for online payments can be used.

PAYMENT PROCESS

How does the online payment banking background process work?

The customer initiates the payment after selecting the card payment option on the merchant/service provider’s website, resulting in a transfer to the Bank’s secure payment page equipped with a secure communication channel. To complete the payment, the card number, expiration date, and the 3-digit validation code found on the signature strip on the back of the card must be provided. You initiate the transaction, and from this point, the card undergoes real-time authorization, during which the authenticity of the card data, coverage, and purchase limit are checked. If all data is correct for the continuation of the transaction, the amount to be paid is blocked on your card by the account-holding (card-issuing) bank. The charge (debit) of the amount on the account depends on the account-holding bank and usually occurs within a few days.

How does online card purchasing differ from traditional purchasing?

We distinguish between transactions with card presence (Card Present) and transactions without card presence (Card not Present). Card Present transactions are conducted using a POS terminal device. After swiping the card and entering the PIN code, the terminal connects to the cardholder’s bank through the authorization center, depending on the card type and issuer, via the VISA or MasterCard network. Here, validity and coverage checks (authorization) are performed. Following this route, the POS terminal (or the merchant) receives approval or rejection. The customer signs the receipt. Card not Present transactions are those where the bank card is not physically present during the transaction. This includes transactions conducted by mail, phone, or electronically (online), where the customer (cardholder) initiates the transaction by providing the requested card data on a secure (256-bit encrypted) payment page. You receive an authorization number for a successful transaction, which matches the number found on the paper receipt.

What does reservation mean?

As soon as the transaction is known to the bank, it is immediately followed by a reservation (blocking), as the actual charge requires the official data to arrive first, which may take a few days during which the purchased amount could be spent again. Therefore, with the reservation, the spent or withdrawn money is separated and put under reservation. The reserved amount is part of the account balance, meaning it accrues interest, but cannot be spent again. The reservation ensures the rejection of transactions for which there is no longer coverage, even though the account balance would theoretically still allow it.

FAILED PAYMENTS AND ACTIONS

In what cases can a transaction fail?

Generally, a payment order not accepted by the card-issuing bank (where the customer received the card); but in the case of card usage, it may also be due to a telecommunications or IT error preventing the authorization request from reaching the card-issuing bank.

Card-related error

•          The card is not suitable for online payments.
•          The card’s online usage is prohibited by the account-holding bank.
•          Card usage is prohibited.
•          The card data (card number, expiration date, code on the signature strip) was provided incorrectly.
•          The card has expired.

Account-related error

•          There are insufficient funds for the transaction to be executed.
•          The transaction amount exceeds the card’s purchase limit.

Connection-related error

•          The line was likely interrupted during the transaction. Please try again.
•          The transaction failed due to a timeout. Please try again.

Technical error

•          If you did not return from the payment page to the merchant/service provider’s page, the transaction is unsuccessful.
•          If you returned from the payment page, but the browser returns to the payment page using “back,” “reload,” or “refresh,” your transaction will be automatically rejected by the system for security reasons.

What should I do if the payment procedure fails?

A transaction identifier is generated for every transaction, which we recommend you note down. If the transaction is rejected by the bank during the payment attempt, please contact your account-holding bank.

Why should I contact the account-holding bank in case of payment failure?

During card verification, the account-holding (card-issuing) bank informs the merchant (accepting) bank collecting the amount whether the transaction can be executed. The accepting bank cannot provide confidential information about another bank’s customer; only the bank identifying the cardholder has the right to do so.

What does it mean if I received an SMS from my bank about the amount being reserved/blocking, but the merchant/service provider indicates that the payment was unsuccessful?

This phenomenon can occur if the card was verified on the payment page, but you did not return to the merchant/service provider’s website. In this case, the transaction is considered incomplete and thus automatically unsuccessful. In such cases, the amount will not be charged to your card, and the reservation will be released.

SECURITY

What does VeriSign and the 256-bit encrypted TLS communication channel mean?

TLS stands for Transport Layer Security, an accepted encryption procedure. Our bank has a 256-bit encryption key that protects the communication channel. The company VeriSign enables CIB Bank to use the 256-bit key, which ensures TLS-based encryption. Currently, this encryption method is used in 90% of the world’s electronic commerce. The browser program used by the customer encrypts the cardholder’s data before sending it using TLS, so that they reach CIB Bank in an encoded form, making them unintelligible to unauthorized persons.

After the payment, my browser warned me that I was leaving the secure zone. Is my payment security guaranteed?

Absolutely yes. The payment process occurs over a 256-bit encrypted communication channel, making it completely secure. After the transaction, you return to the merchant’s website; if the merchant’s page is not encrypted, your browser will warn you that you have left the encrypted channel. This does not pose a risk to the security of the payment.

What does the CVC2/CVV2 code mean?

For MasterCard, the so-called Card Verification Code, and for Visa, the so-called Card Verification Value is a coded numerical value on the magnetic stripe of the bank card, which helps to verify the authenticity of a card. The so-called CVC2 code, which appears in the last three digits of the number on the back of Mastercard/Maestro cards, must be provided for online purchases.

What does Verified by Visa mean?

In the Verified by Visa system, registered Visa cardholders choose a password with the card-issuing bank, which they can use to identify themselves during online purchases, providing protection against unauthorized use of Visa cards. CIB Bank accepts cards issued under the Verified by Visa system.

What does Mastercard SecureCode mean?

In the Mastercard SecureCode system, registered Mastercard/Maestro cardholders choose a password with the card-issuing bank, which they can use to identify themselves during online purchases, providing protection against unauthorized use of Mastercard/Maestro cards. CIB Bank accepts cards issued under the Mastercard SecureCode system.

What does the UCAF code mean?

For MasterCard/Maestro cards, it is a unique code that you may receive from your card-issuing bank. If you did not receive one, leave the field blank.