Mastercard is expanding the use of the Merchant Advice Code (MAC) to include card-present transactions. Previously, MAC was primarily used for card-not-present or deferred transactions.

The MAC Value of 02 “Cannot approve at this time, try again later” can now be used for card-present transactions.

This can help merchants and acquirers manage deferred authorizations more effectively especially in scenarios like natural disasters or connectivity interruptions.

For more information on MAC codes please visit our previous article at Card brand changes: March 2024 | Elavon UK

Visa has already launched the Visa Flexible Credential, allowing cardholders to access multiple funding sources through a single Visa card.

Mastercard is also launching Mastercard One Credential, a single, digitally connected credential that allows consumers to access multiple payment methods one unified experience. 

Consumers can choose how they want to pay—credit, debit, prepaid, or installments—using a single card or digital credential. Cardholders can set their preferred payment method in their banking app or website. This change offers greater flexibility and control to consumers.

Elavon will support the new data elements and message formats. Customers should be aware that cardholders may begin to present these cards at point of sale. 

The following language is being added to Data field 55 of the 1110 Authorization Response message in Tag 91, Subfield 1, Issuer Authentication Data:

“Do not use IAD to determine if the transaction was approved or declined. Use Data Field 39, Action Code in the 1110 Authorization Response message.”

To ensure that Data Field 39, Action Code is used to determine if the transaction is approved or not to avoid disruptions at the point of sale. Any customers using a third-party provider will need to contact their provider to ensure that they are ready to support these changes.

The Visa Stop Payment Service (VSPS) is a digital solution designed to help Visa card issuers and their cardholders block future, unwanted card-on-file payments—such as recurring or installment charges—from being authorized, cleared or settled. Visa is updating account verification message formats to support the VSPS. 

Previously account verification only checked the validity of a particular card, however going forward these will also check any VSPS stop advices placed by issuers. This means merchants can have visibility of these advices before any merchant-initiated transactions are processed.

Visa is implementing changes to validate sender and recipient data in both domestic and cross-border Account Funding Transactions (AFTs) and Original Credit Transactions (OCTs). These changes apply to both money transfer and non-money transfer Business Application Identifiers (BAI).

All changes are effective for October 2025, except the changes on system edits for the presence of the field Recipient Name which is effective from April 2026.

Visa will actively monitor AFT and OCT transactions and will decline authorization requests that contain incomplete or invalid information, ensuring compliance and maintaining transaction integrity.

Customers will need to ensure that they are collecting the required information from the cardholder at the point of sale. Any customers using a third-party provider will need to contact their provider to ensure that they are ready to support these changes.  

PSD2 mandated multi-factor authentication for electronic payments to enhance security and protect consumer data. 

Visa is implementing Strong Customer Authentication (SCA) in Serbia and Kosovo, aligning with PSD2 regulations to enhance transaction security. 

This change is part of a broader initiative to support SCA regulatory requirements in various CEMEA countries, including Albania, Azerbaijan, Georgia, Montenegro, Moldova, North Macedonia, and Ukraine. The mandate requires support of response codes 70 and 1A by acquirers and issuers in Serbia and Kosovo to facilitate SCA.