APRP exam – how much do you actually need to know about payment card networks?
I'm preparing for the APRP and I work in ACH fraud operations, so I'm very strong on NACHA rules and ACH risk management. The card network rules – Visa, Mastercard, card-not-present fraud – are less familiar territory for me professionally, and I'm worried the exam might weight those areas more than my background covers.
I'm 6 weeks out from my exam date, studying about 1.5 hours on weekday evenings. I've done maybe 120 practice questions so far and I'm at about 67% overall – 85%+ on ACH-related content, around 50% on card fraud and dispute resolution. That gap is concerning.
The AAP Body of Knowledge guide lists about 12 domains. Is the card network content roughly proportional across domains or are some disproportionately represented? I've heard physical security and internal controls show up more than people expect.
Also curious whether anyone has experience with the exam in 2025 vs earlier versions – I've seen comments suggesting the question style changed to be more scenario-based and less definitional.
Card fraud and dispute resolution was roughly 15–18% of my exam. Your 50% practice score there will hurt you if it stays that low, but 6 weeks is enough to close that gap. I'd dedicate the first 3 weeks almost entirely to card network content to get yourself to parity.
The internal controls section tied closely to the COSO framework in my exam. If you haven't reviewed COSO's five components recently, that's worth an afternoon. Not super deep but the terminology shows up in maybe 8–10 questions.
I scored a 78% overall. My ACH background helped a lot but I had to study check fraud and wire transfer risk from scratch. Those two areas plus card networks are where people with ACH-only backgrounds tend to underperform – plan for it.
The physical security questions caught me off guard – specifically ATM skimming countermeasures and logical access controls for payment systems. They weren't deep technical questions but they required knowing the terminology and standard frameworks.
Yes, the questions have been more scenario-based since the 2024 refresh. They'll describe a situation and ask what the risk professional should do first, rather than asking you to define something directly.
Quick update from me since I posted about this a few weeks ago: I just scored a 78 on my most recent practice exam, which honestly surprised me. I've been grinding the card network stuff specifically because it felt like my weak spot, and I think it's starting to click. The CNP fraud section wasn't as brutal as I expected once I stopped trying to memorize rules verbatim and just focused on understanding how disputes flow.
I'm sitting the real exam on July 15th. If you're coming from ACH like me, don't panic about the card side. It's definitely on there but it's not like they're ignoring everything else. Your NACHA knowledge will carry you further than you think.
I'm in a similar boat -- ACH is my world, card networks not so much. Honestly though, after grinding through a bunch of practice sets, chargebacks and disputes came up way more than I expected. I actually found aprp/questions/chargebacks dispute resolution really helpful for getting comfortable with the terminology quickly. Just ran a practice session last night and scored a 74, which felt pretty solid considering where I started.
I'm sitting the real exam in about three weeks. The card network stuff isn't as deep as I feared -- it's more conceptual than operational, so you don't need to know Visa rules the way you know NACHA. Your ACH background actually helps more than you'd think since a lot of the risk and fraud logic carries over.
I had the same concern coming in from an ACH background, and honestly it helped me more than I expected. The card network questions I've seen aren't really testing whether you know Visa's specific chargeback codes by heart -- they're testing whether you understand the *why* behind payment risk controls. Once I started asking myself "why would this answer be wrong?" instead of just drilling the right ones, the card-not-present stuff clicked a lot faster. There's a solid practice set at aprp/questions/physical and information security 2 that actually helped me practice that mindset across domains, not just security.
Your ACH fluency is a real asset, don't underestimate it. A lot of the fraud concepts transfer directly, it's mostly vocabulary and network-specific rules you'll need to fill in. Focus on understanding what makes a wrong answer wrong, and you'll find the card network section isn't as heavy as you're expecting.
I was in almost the exact same boat -- ACH was my world, cards felt like another language. What I found is that the exam doesn't punish you for coming from one side of payments. You don't need to know Visa's chargeback rules at the level a card ops person does. You need to understand the concepts well enough to apply risk management principles across both rails, which sounds vague but actually made the card stuff click faster once I stopped trying to memorize rules and started thinking about why the rules exist.
Honestly the harder part for me was finding time to study at all. I did maybe 45 minutes a night after the kids were in bed, and I'd squeeze in practice questions during lunch. It took longer than I planned but it's doable. The APRP study guide covers card networks at a level that's manageable even if you've never touched a chargeback in your career -- just don't skip that section thinking your ACH knowledge will carry you through.