APRP Payment Systems 4 — Questions and Answers
Question 1: What is the primary purpose of a 'reserve account' held by an acquirer from a high-risk merchant?
- To fund the merchant's marketing campaigns
- To protect the acquirer against potential chargeback losses and fraud from that merchant (Correct answer)
- To comply with PCI DSS Level 1 requirements
- To hold funds until annual tax reporting is completed
Correct answer: To protect the acquirer against potential chargeback losses and fraud from that merchant
Reserve accounts are a financial buffer that acquirers maintain from high-risk merchants' proceeds to cover potential future chargebacks or fraud losses.
Question 2: In EMV chip card transactions, what is 'offline data authentication' (ODA) designed to verify?
- That the cardholder's PIN matches the issuer's records
- That the chip card is genuine and not a counterfeit (Correct answer)
- That the transaction amount does not exceed the cardholder's credit limit
- That the terminal is certified by the card network
Correct answer: That the chip card is genuine and not a counterfeit
Offline data authentication uses cryptographic techniques (SDA, DDA, or CDA) to verify the chip card's authenticity without requiring a connection to the issuer.
Question 3: What does 'interchange optimization' mean for a merchant accepting card payments?
- Minimizing the number of card networks the merchant accepts
- Ensuring transactions qualify for the lowest possible interchange category through proper data submission (Correct answer)
- Negotiating directly with card issuers to reduce published rates
- Switching from card payments to ACH to eliminate interchange entirely
Correct answer: Ensuring transactions qualify for the lowest possible interchange category through proper data submission
Interchange optimization involves submitting complete transaction data (e.g., Level 2 or Level 3 data for B2B cards) to qualify transactions for lower interchange tiers.
Question 4: Which body in the US payment system is responsible for regulating large-value payment systems under the Dodd-Frank Act as 'systemically important financial market utilities' (SIFMUs)?
- Consumer Financial Protection Bureau (CFPB)
- Financial Stability Oversight Council (FSOC) with oversight by the Fed, SEC, or CFTC depending on the FMU (Correct answer)
- Office of the Comptroller of the Currency (OCC)
- National Credit Union Administration (NCUA)
Correct answer: Financial Stability Oversight Council (FSOC) with oversight by the Fed, SEC, or CFTC depending on the FMU
Dodd-Frank designated certain FMUs as SIFMUs, subject to enhanced oversight by FSOC with primary supervision by the Fed, SEC, or CFTC based on function.
Question 5: What is a 'batch file' in the context of ACH processing?
- A compressed archive of cardholder data stored by an acquirer
- A file containing multiple ACH entries grouped together for submission to the ACH network (Correct answer)
- A regulatory report filed with NACHA about suspicious transactions
- A reconciliation document comparing settlement amounts to authorized amounts
Correct answer: A file containing multiple ACH entries grouped together for submission to the ACH network
An ACH batch file groups multiple payment entries (credits or debits) into a single transmission sent to the ACH operator for processing.
Question 6: In the card payment lifecycle, what happens during the 'clearing' phase?
- The issuer authorizes or declines the transaction in real time
- Transaction details are exchanged between acquirer and issuer to reconcile and establish settlement obligations (Correct answer)
- The cardholder's available balance is permanently reduced
- The merchant deposits its daily transaction receipts with the acquirer
Correct answer: Transaction details are exchanged between acquirer and issuer to reconcile and establish settlement obligations
Clearing is the post-authorization process where acquirers and issuers exchange transaction records through the card network to calculate net settlement positions.
Question 7: Which risk type is most directly addressed by requiring merchants to implement 3D Secure (3DS) authentication for card-not-present transactions?
- Operational risk from terminal malfunctions
- Fraud risk from unauthorized use of stolen card credentials in e-commerce (Correct answer)
- Credit risk from cardholder inability to repay balances
- Liquidity risk from delayed settlement cycles
Correct answer: Fraud risk from unauthorized use of stolen card credentials in e-commerce
3DS adds an authentication step (e.g., OTP or biometric) in CNP transactions to verify the cardholder is legitimate, directly reducing fraud from stolen card data.
APRP Payment Systems 4
What is the primary purpose of a 'reserve account' held by an acquirer from a high-risk merchant?