Posted by Dominik Mengelt– Developer Relations Engineer, Funds and Florin Modrea – Product Options Engineer, Google Pay
We’re excited to announce the final availability [1] of legal responsibility shift for Visa machine tokens for Google Pay.
For Mastercard machine tokens the legal responsibility already lies with the issuing financial institution, whereas, for Visa, solely eligible machine tokens with issuing banks within the European area profit from legal responsibility shift.
What’s legal responsibility shift?
If legal responsibility shift is granted for a transaction, the duty of overlaying the losses from fraudulent transactions is shifting from the service provider to the issuing financial institution. With this variation, qualifying Google Pay Visa transactions performed with a tool token will profit from this legal responsibility shift.
The right way to know if the legal responsibility was shifted to the issuing financial institution for my transaction?
Eligible Visa transactions will carry an eciIndicator worth of 05. PSPs can entry the eciIndicator worth after decrypting the cost technique token. Retailers can examine with their PSPs to get a report on legal responsibility shift eligible transactions.
{
"gatewayMerchantId": "some-merchant-id",
"messageExpiration": "1561533871082",
"messageId": "AH2Ejtc8qBlP_MCAV0jJG7Er",
"paymentMethod": "CARD",
"paymentMethodDetails": {
"expirationYear": 2028,
"expirationMonth": 12,
"pan": "4895370012003478",
"authMethod": "CRYPTOGRAM_3DS",
"eciIndicator": "05",
"cryptogram": "AgAAAAAABk4DWZ4C28yUQAAAAAA="
}
}
A decrypted cost token for a Google Pay Visa transaction with an eciIndicator worth of 05 (legal responsibility shifted) |
Try the next desk for a full record of eciIndicator values we return for our Visa and Mastercard machine token transactions:
 eciIndicator worth |
 Card Community |
 Liable Occasion |
 authMethod |
 “” (empty) |
 Mastercard |
 Service provider/Acquirer |
 CRYPTOGRAM_3DS |
 “02” |
 Mastercard |
 Card issuer |
 CRYPTOGRAM_3DS |
 “06” |
 Mastercard |
 Service provider/Acquirer |
 CRYPTOGRAM_3DS |
 “05” |
 Visa |
 Card issuer |
 CRYPTOGRAM_3DS |
 “07” |
 Visa |
 Service provider/Acquirer |
 CRYPTOGRAM_3DS |
 “” (empty) |
 Different networks |
 Service provider/Acquirer |
 CRYPTOGRAM_3DS |
Every other eciIndicator values for VISA and Mastercard that are not current on this desk will not be returned.
The right way to enroll
Retailers could opt-in from inside the Google Pay & Wallet console beginning this month. Retailers in Europe (already benefiting from legal responsibility shift) don’t have to take any actions as they are going to be auto enrolled.
To ensure that your Google Pay transaction to qualify for enabling legal responsibility shift, the next API parameters are required:
totalPrice |
Be sure that totalPrice matches with the quantity that you simply use to cost the person. Transactions with totalPrice=0 won’t qualify for legal responsibility shift to the issuing financial institution. |
totalPriceStatus |
Legitimate values are: FINAL or ESTIMATED Transactions with the totalPriceStatus worth of NOT_CURRENTLY_KNOWN don’t qualify for legal responsibility shift. |
Not all transactions get legal responsibility shift
Ineligible retailers
Within the US, the next MCC codes are excluded from getting legal responsibility shift:
4829 |
Cash Switch |
5967 |
Direct Advertising – Inbound Teleservices Service provider |
6051 |
Non-Monetary Establishments – Overseas Forex, Non-Fiat Forex (for instance: Cryptocurrency), Cash Orders (Not Cash Switch), Account Funding (not Saved Worth Load), Vacationers Cheques, and Debt Compensation |
6540 |
Non-Monetary Establishments – Saved Worth Card Buy/Load |
7801 |
Authorities Licensed On-Line Casinos (On-Line Playing) (US Area solely) |
7802 |
Authorities-Licensed Horse/Canine Racing (US Area solely) |
7995 |
Betting, together with Lottery Tickets, On line casino Gaming Chips, Off-Observe Betting, Wagers at Race Tracks and video games of probability to win prizes of financial worth |
Ineligible transactions
To ensure that your Google Pay transactions to qualify for legal responsibility shift, make sure that to incorporate the above talked about parameters totalPrice and totalPriceStatus. Transactions with totalPrice=0 or a tough coded totalPrice (at all times the identical quantity however the customers get charged a distinct quantity) won’t qualify for legal responsibility shift.
Processing transactions
Google Pay API transactions with Visa machine tokens are certified for legal responsibility shift at facilitation time if all of the situations are met, however a transaction certified for legal responsibility shift will be downgraded by community throughout transaction authorization processing.
Getting began with Google Pay
Not but utilizing Google Pay? Confer with the documentation to begin integrating Google Pay as we speak. Study extra in regards to the integration by having a look at our sample application for Android on GitHub or use certainly one of our button components on your internet integration. If you find yourself prepared, head over to the Google Pay & Wallet console and submit your integration for manufacturing entry.
Comply with @GooglePayDevs on X (previously Twitter) for future updates. You probably have questions, tag @GooglePayDevs and embrace #AskGooglePayDevs in your tweets.
[1] For retailers and PSPs utilizing dynamic price updates or different callback mechanisms the Visa machine token legal responsibility shift adjustments might be rolled out later this yr.