Payment Brand Changes
Europe

On 1 June 2026, Visa will introduce new branding requirements to all new executions for the following payment experiences:

• Tap to Peer-to-Peer (P2P)
• Visa Tap to Add Card
• Tap to Activate
• Tap to Confirm

Also, Visa will require Enabled by Visa as the brand endorsement messaging for Visa Direct, including Visa+ and Visa Tap to P2P. More information can be found in the Visa Brand Center page.

_{Note: Effective 1 June 2027, merchants must adhere to the branding requirements for all executions for the above mentioned payment experiences.} 

_{Published 15 April 2026 | P2025.3418}

On 16 May 2026, Visa will introduce changes to commercial interchange fees for domestic credit, debit, and prepaid transactions in France and Spain as shown in the tables.

Table 1 – Updated Visa Commercial Interchange Rates for Spain

Table 2 – Updated Visa Commercial Interchange Fee Names for Spain

Table 3 – Updated Visa Commercial Interchange Rates for France

Table 4 – New Visa Commercial Interchange Fee Names for France

_{1. Applies to debit and credit transactions.}

_{Published 15 April 2026 | P2025.2512}

Visa is enhancing their card-present $0 account verification (a “zero-dollar” check used to confirm a card is valid) to support PIN verification. This change aligns $0 verifications with standard purchase authorizations, so that the card’s bank can receive the PIN, verify it, and return in a PIN result.

On top of this, the enhancement helps support scenarios where you securely store a customer’s card for future merchant-initiated transactions, such as subscriptions or recurring payments.

What you need to do

If you use PIN with $0 account verification for Visa card-present transactions, please confirm that you are able to support:

1.    Receiving and handling PIN-related response codes returned on the $0 account verification response:

• 14 – Not in positive PIN verification file
• 55 – PIN incorrect or missing
• 75 – Allowable number of PIN-entry
• 81 – Cryptographic error found in PIN
• 86 – Cannot verify PIN (for example, no PVV)

2.    PIN retry behavior, including resending the $0 account verification when appropriate, following standard PIN retry logic.

If you are unsure whether you use $0 account verification PIN today, contact your JPMorganChase representative or your third-party processor/terminal provider for confirmation.

_{Published 15 May 2026 | P2025.2360}

Banque de France recommends merchants to expand 3DS authentication coverage for card-not-present transactions using cards issued in France. If you have not yet expanded 3DS coverage, please take immediate action to align with these recommendations.

Visa also recommends reviewing the Banque de France announcement and website for further details.

_{Published 15 April 2026 | P2026.0363}

Visa will start allowing Account Funding Transactions (AFTs) to qualify for the Digital Commerce Authentication Program (DCAP) on the following dates:

• 17 April 2026 – AFT token-based transactions
• 1 October 2026 – AFT PAN-based transactions

If you process authorization or clearing through a third-party service provider, please contact them to ensure they are able to meet Visa’s AFT authentication requirements for tokenized and PAN-based transactions on the effective dates specified above.

_{Published 15 April 2026 | P2025.2358}

On 25 April 2026, Visa will update their System Integrity Fees (SIFs) assessed for non-compliant international authorization reattempts, including category 1 declines and excessive reattempts after category 2, 3 and 4 declines, as shown below.

Table – Visa Revised SIFs

_{Published 13 March 2026 | P2025.1723}

Visa will be introducing Visa Infinite Plus on 17 April 2026. This will be a new credit product offered to affluent cardholders. You’ll see the below existing fee programs assessed to the Visa Infinite Plus credit transactions.

Table – Existing Visa Interregional Programs for Visa Infinite Plus Credit Transactions

_{Published 13 March 2026 | P2025.2295, P2025.2353}

On 1 April 2026, Visa will revise their Visa Secure pricing for 3DS authentication requests.

Table 1 – Visa Revised 3DS Authentication Request for Cardholder-Initiated-Transactions (CIT)

Table 2 – Visa Revised 3DS Authentication Request for Merchant-Initiated-Transactions (MIT)

_{1. Includes Andorra, Monaco, San Marino, and the Vatican City State.}

_{Published 13 February 2026 | P2025.1718}

On 17 April 2026, Visa will make the following changes:

• Introduce the Visa Infinite Privilege Charge and Visa Ultra High Net Worth charge consumer products
• Expand the existing products Visa Infinite Charge, Visa Infinite Privilege Credit and Debit and Visa Ultra High Net Worth Credit and Debit products for issuance in additional regions as shown below

Table – New and Expanded Visa Infinite, Visa Infinite Privilege, and Visa Ultra High Net Worth products

Existing interregional and intraregional interchange fee programs apply.

_{Published 13 March 2026 | P2025.2354}

Effective 1 April 2026, Visa will extend the authorization misues and zero floor limit components of their Processing Integrity Program to include credit voucher and Merchandise Return Authorization transactions.

To remain compliant and avoid the fees shown in the table, make sure to:

• Properly authorize merchandise returns. For card-present transactions, clear the transaction within 10 days or reverse the authorization within one day.

For card-not-present transactions, clear the transaction within 10 days or reverse the authorization within three days.

• Retain key data elements. Ensure that key data from the authorization (including the transaction identifier) is included in the clearing transaction or reversal message.

Table – Visa Authorization Misuse and Zero Floor Limit Fees

_{Published 13 March  2026 | P2025.2510}

Visa strongly recommends that merchants include the Original Transaction ID (OTID) in all PAN- and token‑based standing instruction merchant‑initiated transaction (MIT) authorization. Merchants should:

• Always capture and pass the OTID in every MIT authorization message
• Ensure the initial cardholder-initiated transaction (CIT) includes the correct POS environment code with indicators I, R, or C, using the same credentials intended for future MITs
• Leverage Visa’s MIT Service to securely store, retrieve, and pass the OTID into the MIT authorization message to simplify implementation and ensure accurate linkage to the CIT 

Doing the above enables:

• Precise linkage from the initial CIT to follow‑on MITs at the subscription level, preventing over‑blocking and avoiding declines caused by merchant‑level stop instructions 
• Fewer repeated retries and declines, minimized compliance‑associated fees, and the ability to unlock more Visa value‑added services and insights through improved data integrity
• Merchant visibility into cardholder cancellation and subscription management via notifications

_{Published 13 March 2026 | P2025.3245}

On 1 April 2026, Visa will revise their domestic, intraregional, and interregional  Account Verification fees shown below.

Table – Updated Visa Account Verification Fees

_{Published 13 February 2026 | P2025.1725, P2025.1725a}

Effective 1 April 2026, Visa will modify their Non-Domestic Settlement Currency fee (VI Non-Dom CCY Stlmnt Fee) to 0.0015 USD, from 0.0010 USD. This fee applies to cross-border transactions settled in a currency different from the merchant’s domestic currency.

_{Published 13 February 2026 | P2025.1720}

On 1 April 2026, Visa will update POS service fees for card-present (CP) and card-not-present (CNP) transactions in Belgium, Finland, France, Germany, Luxembourg, Switzerland, Cyprus, Malta, Norway, and Portugal.

Table 1 – Updated Visa Service Fees for CNP Transactions

Table 2 – Updated Visa Service Fees for CP Transactions

Table 3 – Removed Visa Service Fees

_{1. Transactions between France and the following French territories will be classified as domestic: French Guiana, Guadeloupe, Martinique, Mayotte, Réunion, Saint Barthélemy, and Saint Martin.}

_{Published 13 February 2026 | P2025.2920a, P2025.1712}

On 1 April 2026, Visa will rename their VTS Acquirer Authentication Service Fee as e-Commerce Token Facilitation Fee (eTFF) and update the fees.

Table – Updated Visa e-Commerce Token Facilitation Fee

_{1. Includes Andorra, Monaco, San Marino, and the Vatican City State.}

_{Published 13 February 2026 | P2025.1718}

Visa has introduced Visa Payment Passkey, a service allowing merchants to use secure biometric authentication of online payments. This service uses FIDO^® standards for enhanced security.

3DSS providers must check if the card supports VPP before submitting an authentication request for VPP cardholder enrollment. VPP is available through several Visa solutions:

• Visa Token Service (VTS)
• Click to Pay (CtP)
• Cardinal (Centinel and Payer Authentication)
• Visa Acceptance Solutions

Visa e-Commerce experience (Vee) will use the Digital Commerce Authentication Program (DCAP) indicators to enhance security and efficiency of CNP transactions on 18 April 2026. To qualify for DCAP, merchants must provide the following in the authorization message:

• IP address
• Email address or phone number (at least one of the two must be included)
• Device ID (optional)
• Billing address (optional)

Please contact your third-party service provider to ensure they are prepared to implement VPP.

_{Published 13 February 2026 | P2025.2125}

The Digital Commerce Authentication Program (DCAP) is an optional program launched by Visa in order to enhance data sharing for customer-initiated card-not-present transactions. Participating in DCAP requires providing additional enhanced data through messages by Visa approved authentication solution (e.g. Visa Secure, 3DS or Visa Token Service).

With this, transactions eligible for the program will be identified by Visa starting 17 April 2026 through the introduction of the new DCAP indicator. This needs to be retained during authorization and returned in clearing.

If you process authorization or clearing through a third-party service provider, please contact them to ensure they meet Visa’s requirements.

_{Published 15 December 2025 | P2025.0641, P2025.0642}

Visa Secure will be enhanced with a new risk signal starting 16 March 2026 to improve security and support risk assessment tools. EMV® 3DS transactions will incorporate enumeration detection insights to help you detect and prevent enumeration fraud during authentication, when fraudsters systematically test card details to identify valid accounts. With these insights, merchants can more effectively evaluate transaction authorizations or block suspected fraudulent attempts, ultimately reducing fraud and false declines.

No immediate action is required for this activation, as the enumeration detection insights will be delivered directly to your 3DS service provider. However, you are encouraged to contact your provider to understand how these insights will be made available and integrated in your fraud prevention processes.

_{Published 15 January 2026 | P2025.2456}

On 28 February 2026, Visa will modify their domestic commercial interchange rates as shown below.

Table 1 – Updated Visa Business Domestic Commercial Interchange Rates

Table 2 – Updated Visa Corporate Domestic Commercial Interchange Rates

Table 3 – Updated Visa Purchasing Domestic Commercial Interchange Rates

Table 4 – Updated Visa Platinum Business Domestic Commercial Interchange Rates

Table 5 – Updated Visa Infinite Business Domestic Commercial Interchange Rates

_{Published 15 January 2026 | P2025.2092}

Starting 1 January 2026, all merchants in Europe will be able to process Visa Payment Pass (VPP) transaction using EMV® 3-D Secure (3DS) messages. Please note that Visa Secure program rule will apply to all VPP-authenticated transactions.

VPP is a solution designed to make cardholder authentication easier and more secure for e-commerce transactions, including both credential-on-file and guest checkout payments. VPP uses Fast Identity Online (FIDO™) standards to provide enhanced security and privacy during cardholder verification.

To enable VPP transactions with Visa Secure, please work with your 3DS Server provider to ensure your systems meet the necessary requirements.

_{Published 18 November 2025 | P2025.2338}

Visa is requiring everyone using legacy Click to Pay solutions such as Visa Secure Remote Commerce initiatior (SRCi) Click to Pay button, Click to Pay button, or any integration using v1 of the SDK to migrate to a compliant, network token-based Click to Pay implementation.

On 31 January 2026, legacy Click to Pay solutions will no longer be supported and should be migrated to any of the following Visa provided options.

• Unified Click to Pay
• Drop-In User Interface (UI)
• Visa Click to Pay
• Unified Checkout (for merchants currently on Cybersource gateway)

_{Published 14 November 2025 | P2025.0969}

In 2026, Bulgaria will adopt the euro as their national currency. This change will affect transactions outlined below.

_{Published 15 September 2025 | P2025.2121}

On 8 November 2025, Visa will update their domestic V PAY, consumer, and business debit interchange as follows.

Table 1 – Visa Consumer Debit Interchange Rate Updates

Table 2 – Visa V PAY Interchange Rate Updates

Table 3 – Visa Business Debit Interchange Rate Updates

_{Published 15 October 2025 | P2025.2096}

On 18 October 2025, Visa will add new Spend Qualified Indicator (SQI) values to supplement the existing values shown in the table below.

The new SQI values may be applied to Interchange Reimbursement Fee programs in certain markets, similar to the current values. Future programs may include an expanded level of spend qualification which may utilize the new values.

Please visit our Developer Center for the complete specifications of the SQI values.

Table – Visa New and Existing SQI Indicators

_{Published 15 October 2025 | P2025.0648}

Starting 18 October 2025, Visa will standardize requirements for processing delayed charges for loss, theft, or damages.

A delayed charge transaction for damages, will require merchants to obtain cardholder consent through one of the following:

• Cardholder signature on the same page and near the description of potential charges for delayed charge transactions
• Cardholder signature on the agreement and initials on each page, including the page with the charge description
• Other documentation proving the cardholder's liability for damages

These requirements apply to the following merchant types:

• Vehicle Rental Merchants (Including but not limited to MCCs 3351 – 3441)
• Lodging Merchants (Including but not limited to MCCs 3501 to 3840)
• MCC 7999 – Recreational Services (Aircraft, bicycle, and motorcycle rental)
• MCC 4457 – Boat Rentals and Leasing
• MCC 7296 – Clothing Rental (Costumes, uniforms, and formal wear)
• MCC 4411 – Steamship and Cruise Lines
• MCC 7394 – Equipment, Tool, Furniture, and Appliance Rental and Leasing
• MCC 4789 – Transportation Services
• MCC 7519 – Motor Home and Recreational Vehicle Rentals
• MCC 7033 – Trailer Parks and Campgrounds

_{Published 15 October 2025 | P2025.1574}

On 17 October 2025, Visa will add Visa Stop Payment Service (VSPS) checks in the account verification process. This will notify merchants of stop instructions for a primary account number for recurring and installment transactions.

Please be prepared to receive the following VSPS decline response codes:

• R0 – Stop this payment
• R1 – Stop all future payments
• R3 – Stop all merchants

These VSPS decline response codes indicate that the cardholder has withdrawn their consent to use their card for payment. Please do not attempt to resubmit an authorization request after receiving any of the VSPS decline response codes.

_{Published 15 October 2025 | P2025.0651}

On 17 October 2025, Visa will allow travel intermediaries to use non-travel MCCs in Visa Commercial Choice (VCC) Travel¹ transactions. The usual VCC fees will apply and there will be no changes to the existing interchange fees.  

_{1. The Visa B2B Virtual Payments Program has been renamed to Visa Commercial Choice Travel Program.}

_{Published 15 September 2025 | P2025.0644}

On 17 October 2025, Visa will add response code 78 – Blocked, first used or special condition—new cardholder not activated or card is temporarily blocked to the list of permitted response codes for credit voucher and merchandise return authorization transactions. Updated list show below.

Table 1 –Visa Valid Card Issuer-Provided Approve Response Codes

Table 2 – Updated Visa Valid Card Issuer-Provided Decline Response Codes

<sub>1. Applies only to non-reloadable prepaid cards that do not support credit transaction types, or certain healthcare-related prepaid products where transactions are restricted to certain merchant categories. Response code 57 is not valid for general credit or debit card transactions.
2. This is not a new response code; it already exists for other transactions, but it is now being leveraged for merchandise return and credit vouchers.</sub>

_{Published 15 September 2025 | P2025.0649}

On 1 October 2025, the Visa Secure Credential Framework fee will increase to 0.075% from 0.025% for all domestic or intraregional card-not-present (CNP) primary account number authorization approvals processed without Visa EMV payment tokens or Visa Secure (EMV 3DS).

This fee does not apply to domestic or intraregional CNP authorization approvals that are processed via mail order/telephone order (MOTO)¹.

_{1. Except when used to establish a future standing instruction merchant-initiated transaction.}

_{Published 15 August 2025 | P2024.1905}

On 1 October 2025, Visa will update their Commercial Choice (VCC¹) Travel fee for domestic and intraregional credit, debit, prepaid, deferred debit, and charge transactions.

Additionally, interregional VCC travel transactions will be charged the International fee.

Table – Visa Commercial Choice Travel Fee Update

_{1. The Visa B2B Virtual Payments Program has been renamed to Visa Commercial Choice Travel Program.}

_{Published 15 August 2025 | P2025.1005}

Beginning 18 October 2025, Visa will require all businesses in Europe to be able to actively offer Click to Pay for customers to complete online shopping transactions. To be ready for this requirement, contact your third party payment gateway provider to make sure they are Visa Click to Pay certified.

_{Published 15 May 2025 | P2024.1034}

Effective 19 October 2025, Visa will require merchants to send credit voucher or merchandise return authorization (MRA) messages prior to sending a refund. These measures are designed to streamline the return process, enhance transparency for cardholders, and ensure compliance with Visa’s processing standards and avoid non-compliance fees.

Please visit our Developer Center for specifications of Return Authorization and utilizing our ‘On behalf Of’ offering or reach out to your JPMorganChase Representative for more details.

_{Published 10 January 2025 | P2024.1901, P2020.991p}

Beginning 1 September 2025, a non-compliance fee of 0.08% will be charged on settled cardholder-initiated card-not-present transactions where the authorization-to-clearing date is greater than 10 days. This fee is in addition to any existing Processing Integrity fees or possible dispute impacts.

This fee may be avoided, by doing the following:

• Submit deposits within 10¹ days from authorization date. To get the best interchange rates, it is recommended to submit deposits within 7 days.
• Reverse the original authorization and obtain a new one if a transaction is not completed within a 10-day approval time frame.

As a reminder, incremental authorizations are only allowed when the initial authorization is submitted as an estimated authorization. A 0.02% fee applies to estimated and incremental authorizations.

_{1. Except for lodging, cruise lines, and vehicle rental agencies. These industries have 30 days to clear transactions before this fee is assessed if the initial authorization is submitted and properly identified as an estimated authorization.}

_{Published 31 July 2025 | P2024.1837a}

The advisory period for the Visa Acquirer Monitoring Program (VAMP) enhancements has been extended to 30 September 2025. During this period, you must continue to monitor fraud and dispute metrics and improve risk controls where necessary prior to the VAMP enforcement on 1 October 2025.

Avoid potential fines under VAMP by consulting your JPMorganChase representative for advice on risk improvement measures, and more information on Visa’s monitoring thresholds.

_{Published June 13, 2025 | P2025.0593}

Please visit our Developer Center for Visa’s updated Address Verification Service (AVS) result code definitions and descriptions. Please note that there are no changes to AVS result codes.

For effective AVS results, follow these best practices:

• Send genuine address data provided by the cardholder
• Do not send dummy or repeat data
• Do not send exclusively spaces, blanks or non-printable characters
• Provide both street address and postal / ZIP code whenever possible
• Ensure the billing address is sent in AVS requests when the shipping and billing addresses are different

_{Published 15 September 2025 | P2025.1593}

The following domestic debit interchange rates for Visa will be effective on 15 August 2025.

Table – Visa Updated Domestic Interchange Rates for Debit Transactions

_{Published 15 July 2025} 

On 11 July 2025, Visa will introduce their new domestic interchange rates for Consumer Immediate Debit cards as shown below.

Table – Visa New Card-Present and Card-Not-Present Consumer Interchange Rates for Debit Transactions Including V PAY

_{Published 13 June 2025 | P2023.1021}

Update: The Visa Smart Debit/Credit (VSDC) Certificate Authority (CA) 1408-bit public key must be removed from all terminals by 1 July 2025 to prevent transaction processing failures.

Visa has extended the expiration date of the Visa Smart Debit / Credit (VSDC) Certificate Authority (CA) keys for the 1984-bit public key.

Please reach out to your point-of-sale (POS) service provider to ensure that all terminals supporting Offline Data Authentication or Offline Enciphered PIN contain Visa public keys with the updated expiration dates shown below. Take note to not use expired keys or keys past their expiration date.

Table 1 – Visa Extended Expiration Date for VSDC CA Key

_{Updated 13 June 2025 | P2025.0233
Updated 13 December 2024 | P2024.1949
Published  15 November 2024 | P2022.1122}

Visa will update their Visa Europe Service fees on 1 April 2025 for Austria, Belgium, and Sweden, and on 1 July 2025 for Spain. The updated service fees can be found in Tables 1 and 2 for card-not-present and card-present transactions respectively.

Table 1 – Updated Visa Europe Service Fees for Card-Not-Present Transactions

Table 2 – Updated Visa Europe Service Fees for Card-Present Transactions

_{Published 14 February 2025 | P2024.1896}

On 1 July 2026, Mastercard will introduce the Smart Authentication program to help detect and mitigate authentication BIN attacks. An MC BIN Attack Mitigation fee of 0.001% (max 0.01 EUR) per authentication attack attempt may appear on your billing statement.

_{Published 15 May 2026 | P2025.2695}

On 1 July 2026, Mastercard will introduce the Credential Continuity Program Fee of 0.09 EUR for each recurring payment authorization processed using outdated cardholder credentials.

To avoid this fee, please ensure to use the most updated account information for recurring payment authorizations. Account updates are available through Mastercard Automatic Billing Updater or by proactively contacting the cardholder before processing the recurring payment transaction.

_{Published 15 May 2026 | P2025.2694, P2025.2854}

On 13 July 2026, Mastercard will revise their Acquiring POS Volume and Transaction Fee structures by simplifying MCC categories into three groups and streamlining product segments into two classifications: consumer and commercial, as outlined below. Differentiated rates for card-present and card-not-present transactions will continue to apply.

Table 1 – Mastercard Revised Acquiring POS Volume Fees

Table 2 – Mastercard Revised Acquiring POS Transaction Fees

_{Published 15 April 2026 | P2025.2898}

On 13 July 2026, Mastercard will update their Acquiring POS Volume Fee with the following:

• Mastercard will increase the Commercial Acquiring POS Volume fee by 0.03% as shown in the tables below.
• The domestic consumer rate for Cyprus and Malta will increase to 0.0340% from 0.0184%.
• The domestic consumer rates for other countries will not be impacted by the change and will remain the same.

Table 1 – Mastercard Revised Commercial Acquiring POS Volume Fees

Table 2 – Maestro Revised Commercial Acquiring POS Volume Fees

_{Published 13 February 2026 | P2025.2901, P2025.2978}

Mastercard will make the following changes to their Flex Program.

• 17 April 2026 – Remove the 0.1% program fee per settled transaction
• 24 October 2026 – Apply interchange rates for new product codes WAZ, WBA, WBB, WBC, WBD, WBF, WBG, WBH, WBI, WBJ, and WBK, as updated in Table 2. All other rates remain the same

Table 1 – Mastercard Commercial B2B Interchange Program Product Codes

Table 2 – Mastercard Updated Flex Program Interchange Rates

_{1. Interchange rates for WBL will be announced at a later date.}

_{Published 15 April 2026 | P2026.0766, P2026.0777, P2026.0763, P2026.0466}

Starting 17 April 2026, Mastercard will no longer allow full primary account numbers (FPAN) to appear in any document used for disputes. With this, merchants should NOT upload documents for Mastercard containing FPAN, as this would violate Mastercard rules and may result in fines or additional fees. This rule also applies if the same document is sent again in a later¹ dispute and still shows the FPAN.

To avoid the violation, merchants should only show the last four digits of the card number in any document. Here are some ways to mask the rest of the numbers to ensure that the FPAN cannot be read or reconstructed:

• Cover the other digits with black ink
• Use a software to block out the digits
• Replace the digits with symbols like X, *, or #

_{1. If a document is sent with the FPAN, Mastercard will not cancel the dispute, but the fee will be assessed.}

_{Published 13 February 2026 | P2025.1932}

Mastercard requires merchants and service providers, including merchant payment gateways and third party processors, to comply with the below roadmap. This aims to standardize all e-commerce transactions with tokenization.

To ensure timely adherence to the requirements below, please work with your payment gateway or payment service provider/s.

Table – Mastercard EMV tokenization and Click to Pay adoption roadmap

_{1. Countries in-scope: Austria, Belgium, Bulgaria, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Netherlands, Norway, Poland, Portugal, Romania, Spain, Slovakia, Sweden, Switzerland, and United Kingdom.}
2. Excluded countries: Armenia, Azerbaijan, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Turkey, Turkmenistan, Ukraine, and Uzbekistan.

_{Published 15 April 2025 | P2024.1914, P2024.1916}

Starting 31 March 2026, Mastercard will update their processing requirements for outbound transactions made with Mainland China-issued cards as outlined in the tables below.

These changes are designed to comply with Mainland China’s regulatory standards and may impact how certain transactions are processed. Expect these changes to be enforced at both the authorization request stage and the clearing stage.

Table 1 – Prohibited or invalid card acceptor business codes (MCCs) for which all transactions will be rejected

Table 2 – Restricted or invalid MCCs for which transactions more than 5,000 USD will be rejected

_{Published 15 January 2026 | P2025.3056}

Mastercard has shared the following best practices for preventing enumeration attacks. These attacks involve fraudsters systematically testing card numbers and credentials to identify valid card details.

• Capture and validate CVC2. Always require and validate the CVC2 code when adding a card or processing transactions. This is mandatory for card add in the Europe region and strongly recommended elsewhere.
• Enable EMV 3-D Secure authentication. Ensure EMV 3-D Secure is performed for all card adds and e-commerce transactions to provide an additional layer of security and prevent unauthorized card use.
• Implement CAPTCHA technology. Use CAPTCHAs during card add and checkout to block bots and automated attacks.
• Use Address Verification Service (AVS). Where supported, use AVS to verify the cardholder’s address and further reduce fraud risk.
• Monitor for unusual activity. Watch for spikes in transaction declines, multiple card adds from the same IP address or account, and increases in high-dollar, cross-border transactions.
• Limit transaction velocity. Detect and prevent multiple card adds or transactions per user account or IP address within short time frames. Implement throttling to restrict the number of actions from a single user account or IP address.
• Meet PCI DSS Standards. Ensure your business and all third-party service providers (e.g., payment gateways and shopping cart providers) comply with PCI DSS requirements and have mechanisms to detect and prevent enumeration attacks.
• Report suspicious activity. Immediately report any suspected account takeover or enumeration attack to your bank.
• Remediation plan. Have a documented and actionable remediation plan to address enumeration attacks within 72 hours of detection or notification by your bank or Mastercard.

Implementing these measures will help reduce fraud losses, protect cardholder data, and maintain trust with your customers. Please review your current processes and update them as necessary to comply with Mastercard’s recommendations.

_{Published 13 March 2026 | P2025.3018}

On 23 January 2026, new interchange rates will be introduced for the general product category of Mastercard commercial card transactions, as shown below.

Table – Mastercard New Commercial Interchange Rates

_{Published 15 December 2025 | P2025.1839}

On 1 February 2024, Mastercard will implement a recurring 30-day period M/Chip Deployment Performance Program fee to POS terminals with an implementation issue that causes a technology failure. To avoid this fee, please make sure that your terminal’s Payment System Public Keys in the Combined Dynamic Data Authentication are updated and/or your software kernel has a V3.x reader.

If your POS is supported by a third-party service provider, please contact them to ensure that you have the latest upgrades and specifications that comply with Mastercard’s requirements to help you avoid these fees.

This does not apply if you have a stand-alone POS device that we support.

Table 1 – Mastercard M/Chip Deployment Performance Program Fee

_{Published 13 October 2023 | P2023.0995}

On 5 January 2026, Mastercard will revise their authorization and clearing fee structure to introduce uniform transaction value tiers for approved and declined domestic, intraregional and interregional fees as follows.

Table 1 – Mastercard Authorization Fees¹ for Low-Value Transactions and Standard-Value Transactions

Table 2 – Mastercard Clearing Fees for Low-Value Transactions and Standard-Value Transactions

_{Note: Fees apply to all Mastercard/Maestro approved and declined final authorization and reversals. Transactions that qualify for the Global Wholesale Travel Program will be excluded from authorization and clearing processing fees, except for declined authorization requests where the Global Wholesale Travel Program is not assessed.}

_{1. Authorization processing fees apply to both approved and declined authorization requests, except for those with DE 39 (Response Code) values of 65 (Exceeds withdrawal count), 80 (Network error), and 96 (System error). Additionally, address verification transactions and refund authorizations are eligible for these fees, while Account Status Inquiry (ASI) transactions are not eligible.}

_{Published 14 November 2025 | P2025.0109, P2025.0112, P2025.0113, P2025.0116, P2025.0117, P2025.0121, P2025.0124, P2025.0125, P2025.0126, P2025.0128, P2025.0129, P2025.0130, P2025.0134, P2025.0135, P2025.0136, P2025.0137, P2025.0138, P2025.0174}

On 1 January 2026, Mastercard will require the Device Type value¹ to be transmitted along with the Third Party Data tag 9F6E when present on contactless-enabled cards or payment devices for authorization, financial, reversal, and clearing transaction messages.

The Device Type value is not required in chargebacks or second presentments. However, it is recommended to send the Device Type indicator in applicable transaction messages when processing contact chip transactions, if present.

Please visit our Developer Center for the specifications required to update your Chase-provided terminals, or contact your terminal provider to ensure compliance.

_{1. Identifies which form factor the cardholder is using to perform a contactless transaction such as a card, mobile phone, or key fob.}

_{Published 14 November 2025 | P2024.1917}

Update: Renamed decline code to MAC for clarity.

On 1 January 2026, Mastercard will amend their merchant advice code (MAC) fee Transaction Processing Excellence criteria to no longer include the same amount condition in a transaction. The 0.50 EUR fee remains the same, and will continue to be assessed on transactions that meet the following criteria:

• Received a MAC of:
  • 03 – account closed or fraudulent
  • 21 – cardholder-requested block
• Made on the same card at the same merchant, within the past 30 days, regardless of the transaction amount.

_{Updated 14 November 2025 | P2024.2224
Published 15 September 2025 | P2024.2224}

In 2026, Bulgaria will adopt the euro as their national currency. This change will affect transactions outlined below.

_{Published 15 September 2025 | P2025.1973}

Update: Effective 12 January 2026, Switzerland will be added to the list of select countries in the Europe region that are subject to the Time-based Authorization Validity Value fees, as shown in the table below. 

Mastercard is introducing time-based authorization validity value fees for cleared final authorization transactions in phases, as shown below.

Table – Mastercard Updated Time-Based Authorization Validity Value Fees

_{Updated 15 December 2025 | P2025.0905
Published 13 December 2024 | P2024.0113}

Update: Mastercard has extended the 1984-bit Payment System public key expiration date to 31 December 2035, as shown in the table below.

The 1408-bit Root Certificate Authority (CA) public key must be removed from all terminals by 1 July 2025 to prevent transaction processing failures.

The 1984-bit Payment System public key expiration date has been extended to 31 December 2034 by Mastercard. The 1408-bit public key expiration date remains the same.

Reach out to your point-of-sale (POS) service provider to ensure that all terminals supporting Offline Data Authentication or Offline Enciphered PIN contain public keys with the updated expiration dates. Please do not use keys past their expiration date.

Table – Mastercard, Maestro and Cirrus Extended Expiration Date for the Payment System Public Key

_{Updated 15 December 2025 | P2024.1842u1
Updated 13 June 2025 | P2024.1842
Published 14 February 2025 | P2024.1842}

Effective 4 November 2025, Mastercard will apply Merchant Advice Code (MAC) to card-present transactions. This change will allow you to receive MAC value 02 (Cannot approve at this time, try again later) that will not be limited to deferred authorizations. This will help manage resubmissions for deferred authorizations.

_{Published 15 October 2025 | P2025.0809}

On 18 October 2025, Mastercard will introduce the below interchange rates for the Mastercard Wholesale Travel Program (MWP) for global transactions in the U.S. region.

Table 1 – Mastercard Wholesale Travel Global Interchange Rates

_{Published 15 September 2025 | P2025.0822}

On 17 October 2025, Mastercard will revise the following standards:

• Authorization resubmission requirements. Resubmitted requests must include the same merchant details and POS condition values as the original, unless exceptions apply (e.g., transit debt recovery). They must also include the original PAN and expiration date, a tokenized-stored credential obtained through Secure Remote Commerce tokenization, or new account information from the cardholder or Automatic Billing Updater.
• Token cryptogram exception. If token cryptogram data is used in a declined merchant-initiated transaction (MIT) authorization request, it must not be reused in subsequent resubmissions.
• CNP transaction restrictions. Declined card-not-present (CNP) cardholder-initiated transactions must not be resubmitted as an MIT, except for transit debt recovery.
• Merchant advice codes. Merchants should use the decline reason and merchant advice code from the issuer's response in their resubmission strategies for MITs.
• Prohibition of data manipulation. Merchants must not manipulate transaction data in resubmissions to evade payment arrangement cancellations. This includes altering the acceptor ID or acceptor name used in the merchant's transaction messages, or shifting the merchant's transaction volume to a different acceptor ID.
• Response code restrictions. If any of the following response codes are received in the issuer’s authorization response for a merchant-initiated CNP transaction, do not make additional authorization requests for the same transaction with the same account information (PAN and expiration date combination) at any time:
  • 04 (Capture card)
  • 14 (Invalid card number)
  • 15 (Invalid issuer)
  • 41 (Lost card)
  • 43 (Stolen card)
  • 54 (Expired card)
• Resubmission strategy. The authorization resubmission strategy for MITs must consider both the decline reason code and MAC, as shown below:

Table – Mastercard Authorization Resubmission Strategy for MITs

Please visit our Developer Center for the complete specifications.

_{Published 15 September 2025 | P2025.0437}

On 1 October 2025, Mastercard will begin charging Ireland-domiciled merchants the Customer Performance Development Fund (CPDF) No Authentication fee for both approved and declined transactions. Previously, only declined transactions were subject to this fee.

Table – Mastercard CPDF No Authentication Fee

_{Published 15 August 2025 | P2021.0737b}

On 13 October 2025, Mastercard will introduce a 0.10% Non-Local Currency fee. This applies when merchants choose to settle transactions in a currency other than their domestic currency.

As a result of this change, the following fees will be discontinued:

Table – Discontinued Mastercard Multi-Currency Settlement Fee

_{Published 15 August 2025 | P2025.0102}

On 18 October 2025, Mastercard will modify their criteria for interregional Digital Commerce Interchange Program for card-not-present (CNP) transactions.To qualify for this program, transactions must meet either of the following:

• Transactions should be 3DS authenticated, or
• Transactions should be tokenized and include a Token Requestor ID

CNP transactions that do not qualify for the Digital Commerce Interchange Program will qualify for the Consumer Base Interchange Program. In addition, the interregional Consumer Rate III: Base interchange will be modified as shown below. The refund rate of 1.00% remains the same.

Table – Updated Mastercard Interregional Consumer Rate III: Base Interchange Rates

_{Published 15 August 2025 | P2025.0168}

Update: Mastercard changed the effective date of all new rates below to 1 October 2025, from 1 May 2025.

Effective 1 October 2025, Mastercard will update their interchange rates for commercial debit products as shown below.

Table 1 – Mastercard commercial debit interchange rates in Denmark

Table 2 – Mastercard commercial debit interchange rates in Finland

_{Updated 15 April 2025 | P2025.0212u1
Published 14 March 2025 | P2025.0212}

The MC Global Wholesale Travel Transaction Program B2B Scheme fee has been revised to 0.70% from 0.55%.

_{Published 17 October 2025 | P2024.2184}

On 16 September 2025, Mastercard will introduce their new domestic Meal Voucher interchange fees in Germany as follows. Take note that a maximum amount of EUR 0.05 applies to refund transactions.

Table – New Mastercard Prepaid Meal Voucher Domestic Interchange Fees for Prepaid Transactions

_{1. Supermarket interchange fees apply to MCC 5411: Grocery Stores, Supermarkets.}

_{Published 15 August 2025 | P2025.0439}

On 1 September 2025, Mastercard will mandate card issuers in Asia Pacific to decline all chip to magnetic stripe fallback transactions, except for transactions acquired within the United States region.

_{Published 13 June 2025 | P2025.0440}

On 1 August 2025, Mastercard will revise their commercial business debit interchange rates as shown below. This change will apply to the product codes Debit Mastercard Commercial (MDT) and Business Premium Debit (BPD).

Table – Updated Mastercard Commercial Business Debit Interchange

_{Published 13 June 2025 | P2024.2485}

On 1 August 2025, Mastercard will introduce the Mastercard Central Travel Solutions Air Card and new interchange programs for commercial premium credit and debit products, as shown below.

With these changes, merchants in all countries will be able to process transactions using cards issued in Spain on the new product code. Merchants domiciled in Spain may see an increase in their interchange fees on domestic commercial transactions.

Table 1 – New Mastercard Central Travel Solutions Air Card product

Table 2 – New Mastercard Commercial Credit Premium product codes and corresponding interchange rates

Table 3 – New Mastercard Commercial Debit Premium / Debit Mastercard Commercial Premium product codes and corresponding interchange rates

_{Published 13 June 2025 | P2025.0337}

On 14 July 2025, Mastercard will modify their intraregional and interregional cross-border fees in select European countries as shown below.

Table 1 – Mastercard and Maestro Revised Intraregional Cross-Border Fees for Consumer Credit and Debit Products

Table 2 – Mastercard and Maestro Revised Intraregional Cross-Border Fees for Commercial Credit and Debit Products

Table 3 – Mastercard and Maestro Revised Interregional Cross-Border Fees for Consumer and Commercial Credit and Debit Products

_{Published 13 June 2025 | P2024.2193, P2024.2194, P2024.2194a, P2024.2196}

On 14 July 2025, Mastercard will split the Interregional Reported Transaction fee in the UK into four tiers. The new tiers will be based on transaction values below.

Table – Updated Mastercard Interregional Reported Transaction Fee

_{Published 13 June 2025 | P2024.2194c}

Mastercard will be revising their MC UK Interregional CNP Fee to 0.0015 EUR this 14 July 2025 from 0.0005 EUR.

_{Published 13 June 2025 | P2024.2194b}

On 11 July 2025, Mastercard will add the following new rates to their commercial business debit interchange program.

Table – New Mastercard Commercial Business Debit Interchange Rates

_{Note: Applies to transactions equal to or greater than 150 EUR.}

_{Published 13 June 2025 | P2024.1890}

Update: Mastercard began monitoring tokens generated after 12 October 2023 instead of the previously published 12 October 2024. Please contact your EMV 3DS service provider to ensure you are compliant with the SCA requirements for tokenized transactions and avoid non-compliance fees.

In 2025, Mastercard will introduce a new edit to the Data Integrity Monitoring Program to merchants that have at least 1000 tokenized authorization per month.

Table – Updated Mastercard Data Integrity Monitoring Program

_{1. Transactions such as return and refund, payment, zero amount, and Mastercard Digital Enablement Service Token created before 13 October 2023 are all excluded from the monitoring program.} Merchants that provide the Trace ID in the MIT authorizations are also exempted from this monitoring program.

_{Updated 13 June 2025 | P2024.1349u1}
Published 13 December 2024 | P2024.1349