# Annexure 1 source: https://developer.mastercard.com/fld-fraud-submission/documentation/parameters/annexure-1/index.md ## Table 1: Fraud Type Codes {#table-1-fraud-type-codes} | **Code** | **Description** | |----------|-------------------------------| | 00 | Lost Fraud | | 01 | Stolen Fraud | | 02 | Never Received Issue | | 03 | Fraudulent Application | | 04 | Counterfeit Card Fraud | | 05 | Account Takeover Fraud | | 06 | Card Not Present Fraud | | 51 | Bust-out Collusive Merchant | | 55 | Modification of Payment Order | | 56 | Manipulation of Cardholder | | 57 | First-Party Misuse | Note: The fraud type **57** (First-Party Misuse) is introduced and applicable from *27 October 2024* for Fraud Sub-Type as **K** , **N** , **P** , and **U**. ## Table 2: Confirm Fraud Sub-Type Codes {#table-2-confirm-fraud-sub-type-codes} | **Code** | **Description** | |----------|---------------------------------------------------| | K | Convenience or Balance Transfer Check transaction | | N | PIN not used in transaction | | P | PIN used in transaction | | U | Unknown | | H | Purchase Scam | | R | Romance Scam | | I | Impersonation Scam | | V | Investment Scam | | A | Advance Fee Scam | Note: The fraud Sub-Type Codes **H** , **R** , **I** , **V** , **A** are introduced and applicable to Fraud Type Code **56** from *27 October 2024*. Existing Fraud Sub-Type Codes will continue for other Fraud Type Codes. ## Table 3: Account Device Type Codes {#table-3-account-device-type-codes} | **Code** | **Description** | |----------|-------------------------------------------------------------| | 1 | Chip only with PIN | | 2 | Chip only without PIN | | 3 | Magnetic Stripe only | | 4 | Contactless only | | A | Chip with PIN and Mag Stripe only | | B | Chip with PIN and contactless only | | C | Chip with PIN, and Mag Stripe, and Contactless | | D | Chip without PIN and with Mag Stripe | | E | Chip without PIN and with Contactless | | F | Chip without PIN, and with Mag Stripe, and with Contactless | | G | Mag Stripe with only PIN | | H | Mag Stripe and Contactless only | | I | Chip without PIN and without Mag Stripe | | J | Internet card | ## Table 4: AVS Response Codes {#table-4-avs-response-codes} | **Code** | **Description** | |----------|---------------------------------------------------------------------------------------------------------------------| | A | Address matches, Postal/Zip code does not | | B | Visa only. Street address match. Postal code not verified because of incompatible formats | | C | Visa only. Street address and postal code not verified because of incompatible formats | | D | Visa only. Street address and postal code match | | F | Visa only. Street address and postal code match. Applies to U.K.only | | G | Visa only. Non-AVS participant outside the U.S.; address not verified for international transaction | | I | Visa only. Address information not verified for international transaction | | M | Visa only. Street addresses and postal code match | | N | Neither address nor postal code matches | | P | Visa only. Postal codes match. Street address not verified because of incompatible formats | | R | Retry, system unable to process | | S | AVS currently not supported | | U | No data from Issuer/Authorization platform (Unknown or Unavailable) | | W | U.S.: Postal/nine-digit Zip code matches, address does not; Outside U.S.: Postal/Zip code matches, address does not | | X | U.S.: Address and Postal/nine-digit Zip code matches; Outside U.S.: Postal code and address match | | Y | U.S.: Five-digit Postal/Zip code matches | | Z | U.S.: Five digit Postal/Zip code matches, address does not | ## Table 5: Authorization Response Codes {#table-5-authorization-response-codes} | **Code** | **Description** | |----------|-----------------------------------------------------| | 00 | Approved or completed successfully | | 01 | Refer to card issuer | | 03 | Invalid merchant | | 04 | Capture card | | 05 | Do not honor | | 08 | Honor with ID | | 10 | Partial approval | | 12 | Invalid transaction | | 13 | Invalid amount | | 14 | Invalid card number | | 15 | Invalid issuer | | 30 | Format error | | 40 | Unknown | | 41 | Lost card | | 43 | Stolen card | | 51 | Insufficient funds/over credit limit | | 54 | Expired card | | 55 | Invalid PIN | | 57 | Transaction not permitted to issuer/cardholder | | 58 | Transaction not permitted to acquirer/terminal | | 61 | Exceeds withdrawal amount limit | | 62 | Restricted card | | 63 | Security violation | | 65 | Exceeds withdrawal count limit | | 70 | Cardholder to contact issuer | | 71 | PIN not changed | | 75 | Allowable number of PIN tries exceeded | | 76 | Invalid/nonexistent "To Account" specified | | 77 | Invalid/nonexistent "From Account" specified | | 78 | Invalid/nonexistent account specified (general) | | 79 | Lifecycle | | 81 | Domestic Debit Transaction Not Allowed | | 82 | Policy | | 83 | Fraud/Security | | 84 | Invalid authorization life cycle | | 85 | Not declined | | 86 | PIN Validation not possible | | 87 | Purchase amount only | | 88 | Cryptographic failure decline | | 89 | Unacceptable PIN-Transaction | | 91 | Authorization platform or issuer system inoperative | | 92 | Unable to route transaction | | 94 | Duplicate transmission detected | | 96 | System error | ## Table 6: Cardholder Presence Indicator {#table-6-cardholder-presence-indicator} | **Code** | **Description** | |----------|--------------------------------------------------------------| | 0 | Cardholder present | | 1 | Cardholder not present, unspecified reason | | 2 | Cardholder not present, mail/facsimile order | | 3 | Cardholder not present, phone/ARU order | | 4 | Cardholder not present; standing order/recurring transaction | | 5 | Electronic order (home PC, Internet, mobile phone, PDA) | | 9 | Unknown; data not available | ## Table 7: Card Present Indicator {#table-7-card-present-indicator} | **Code** | **Description** | |----------|------------------| | 0 | Card Not Present | | 1 | Card Present | | 9 | Unknown | ## Table 8: POS Entry Mode {#table-8-pos-entry-mode} | **Code** | **Description** | |----------|----------------------------------------------------------------------------------------------------------------------------------------------| | 00 | PAN entry mode unknown | | 01 | PAN manual entry | | 02 | PAN auto-entry via magnetic stripe | | 03 | PAN auto-entry via bar code reader | | 04 | PAN auto-entry via OCR | | 05 | PAN auto-entry via chip | | 06 | PAN auto-entry via chip, contactless mapping service applied | | 07 | PAN auto-entry via contactless M/Chip | | 09 | PAN entry via electronic commerce, including remote chip | | 10 | Credential on File | | 79 | Chip card at a chip capable terminal was unable to process transaction using data on the chip or magnetic strip--PAN entry via manual entry | | 80 | Chip card at chip-capable terminal was unable to process transactions using data on the chip--terminal defaulted to magnetic stripe-read PAN | | 81 | PAN entry via electronic commerce, including chip | | 82 | PAN auto entry via Server (issuer, acquirer, or third-party vendor system) | | 90 | PAN auto entry via magnetic stripe-full track data has been read without alteration or truncation | | 91 | PAN entry via contactless magnetic stripe | | 95 | Visa only. Chip card with unreliable Card Verification Value (CVV) data | ## Table 9: Cardholder Activated Terminal Level Indicator {#table-9-cardholder-activated-terminal-level-indicator} | **Code** | **Description** | |----------|--------------------------------------------------------------| | 0 | Not a CAT transaction | | 1 | Authorized Level 1 CAT:Automated dispensing machine with PIN | | 2 | Authorized Level 2 CAT:Self-service terminal | | 3 | Authorized Level 3 CAT:Limited-amount terminal | | 4 | Authorized Level 4 CAT:In-flight commerce | | 5 | Reserved | | 6 | Authorized Level 6 CAT:Electronic commerce | | 7 | Authorized Level 7 CAT:Transponder transaction | | 9 | MPOS Acceptance Device | | \* | Unknown or unspecified | ## Table 10: Electronic Commerce Security Level Indicator {#table-10-electronic-commerce-security-level-indicator} | **Code** | **Description** | |----------|-------------------------------------------------------------------------------------------------------------------| | 21 | Channel encryption; cardholder certificate not used (this is the preferred value for Mastercard® Identity Check™) | | 22 | Masterpass-generated transaction | | 24 | Tokenized Payment | | \* | Unknown | ## Table 11: Secure Code {#table-11-secure-code} | **Code** | **Description** | |----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------| | 0 | Non-authenticated payment, Identity Check transaction with failed authentication, or Tokenized Payment with Dynamic Token Verification Code (DTVC) | | 1 | UCAF data collection is supported by the merchant, and UCAF data must be present | | 2 | UCAF data collection is supported by the merchant, and UCAF data must be present.This includes cardholder-initiated transactions (CIT) for authentication | | 3 | UCAF data collection is supported by the merchant, and UCAF(Mastercard assigned Static Account holder Authentication Value) data must be present | | 4 | Merchant has chosen to share authentication data within authorization; UCAF data collection must be present | | 6 | Merchant Risk Based Decisioning | | 7 | Merchant-initiated transactions. Liability will depend on the original UCAF values provided and matching with the initial transaction | ## Table 12: Terminal Attendance Indicator {#table-12-terminal-attendance-indicator} | **Code** | **Description** | |----------|-----------------------------------------------------------------| | 0 | Attended terminal | | 1 | Unattended terminal (CAT terminal, home PC, mobile phone, PDA) | | 2 | No terminal used, Voice/Audio Response Unit (ARU) Authorization | | 9 | Unknown | ## Table 13: Terminal Operating Environment {#table-13-terminal-operating-environment} | **Code** | **Description** | |----------|------------------------------------------------| | 0 | No terminal used | | 1 | On card acceptor premises; attended terminal | | 2 | On card acceptor premises; unattended terminal | | 3 | Off card acceptor premises; attended | | 4 | Off card acceptor premises; unattended | | 5 | On cardholder premises; unattended | | 6 | Off cardholder premises; unattended | | 8 | Additional Terminal Operating Environments | | 9 | Unknown; data unavailable | ## Table 14: Terminal Input Capability Indicator {#table-14-terminal-input-capability-indicator} | **Code** | **Description** | |----------|-------------------------------------------------------------------------------------| | 0 | Input capability unknown or unspecified | | 1 | No terminal used server | | 2 | Terminal supports magnetic stripe input only | | 3 | Terminal supports contactless EMV input | | 4 | Contactless Mag Stripe | | 5 | Terminal supports EMV contact chip input and magnetic stripe input | | 6 | Terminal supports key entry input only | | 7 | Terminal supports magnetic stripe input and key entry input | | 8 | Terminal supports EMV contact chip input, magnetic stripe input and key entry input | | 9 | Terminal supports EMV contact chip input only | ## Table 15: Card Validation Code (CVC) Indicator {#table-15-card-validation-code-cvc-indicator} | **Code** | **Description** | |----------|-------------------------------------------------------------------| | Y | Invalid CVC 1 or CVC 3 only | | \* | Valid CVC 1 or CVC 3 or Unknown/Unspecified | | M | CVC 2 Valid (Match) | | N | CVC 2 Invalid (Non-match) | | P | CVC 2 or CVC 3 Unable to Process (Issuer temporarily unavailable) | | U | CVC 2 Unverified (Mastercard use only) | | ? | CVC 2 Response Code Unknown | | E | CVC 3 Length of Unpredictable Number Invalid | ## Table 16: Issuer SCA(Strong Customer Authentication) Exemption {#table-16-issuer-scastrong-customer-authentication-exemption} | **Code** | **Description** | |----------|------------------------------------------------------------------------------------------------------------------------------------| | 01 | Transaction Risk Analysis (categorized by acquirer as TRA exemption) | | 02 | Recurring Payment (categorized by acquirer as Recurring Payment) | | 03 | Low Value Remote Payment (categorized by acquirer as Low Value Payment) | | 04 | Low Value Contactless Payment (categorized by acquirer as Contactless Low Value Payment) | | 05 | Unattended terminal for transport or parking fares (categorized by acquirer as Unattended terminal for transport or parking fares) | | 06 | Secure Corporate Payment (categorized by acquirer as Other) | | 07 | Authentication Exception Outage (categorized by acquirer as Other) | | 08 | Merchant White Listing/Trusted Payee (categorized by acquirer as Other) | | 09 | Other example for one-leg or during transition period (categorized by acquirer as Other) |