Versions Compared

Version Old Version 28 New Version 29
Changes made by

Girish

Girish

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Single domestic payment allows the Useruser/Customer customer to post his/her consent to the PISPs to make a one-time payment for a specific amount to a specific payee immediately, wherein the PISP provides this instruction to the customer’s ASPSPs (banks). This use case details out the customer experience guidelines and technical API specifications that are required to be developed and followed by both ASPSPs (Banks) and PISPs. This use case is applicable to both retail and corporate customers. Depending on few decision points (as explained in the End to End user flow), three variations of the user journey has been mapped and explained in detail in the section below.

...

User/Customers can initiate, by providing their consent to PISPs, an instruction to their ASPSPs (Banks) to make a onetime payment for a specific amount to a specific payee where all information for a complete payment order (including the Useruser/Customers’ customers’ account details) is passed from PISPs to ASPSPs (Banks). Once Useruser/Customers customers have been authenticated in ASPSPs (Banks) domain, Useruser/Customers customers must be directed back to the PISP domain.

...

UserCustomers UserCustomers UserCustomers UserCustomers UserCustomers UserCustomer UserCustomer UserCustomer UserCustomers UserCustomers UserCustomer UserCustomers UserCustomer UserCustomers UserCustomers UserCustomer UserCustomers UserCustomer UserCustomers

S.No.

Requirements and Considerations

 Participant

Implementation Requirements

1

Minimum Set of Parameters

PISPs must either allow

user/

customers to specify the below minimum set of parameters or pre-populate them for the

user/

customers:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payee Account Identification details (e.g. IBAN, PAN)

  • Payment Reference (optional)

PISP

Required

2

User/Customer payment Account Selection

PISPs must provide

user/

customers at least one of the following options:

  • Enter their Payer's payment Account Identification details

  • Select their Account Identification details (this assumes they have been saved previously and user/customer is required to verify/authorize the account identification details in a PISP before storing it in PISP)

PISP

Required

3

User/Customer Consent to PISP

PISPs must request for the

user/

customers' consent to the payment in a clear and specific manner. PISPs must display the following information in the consent screen:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payment Reference, ifit has been entered by

  • user/

  • customers or prepopulated by PISPs in item #1

  • User/Customer payment Account Identification

    • Note 1: if

    • user/

    • customer payment Account identification is selected in item #2, PISPs should mask the

    • user/

    • customer payment Account details on the consent screen. Otherwise, if the

    • user/

    • customer payment Account identification has been input by

    • user/

    • customers in item #2, PISPs should not mask these details to allow

    • user/

    • customers to check and verify correctness

    • Note 2: if

    • user/

    • customer payment Account identification is provided by

    • user/

    • customers in item #2, PISPs may use this to identify and display the ASPSP (Bank) without having to ask

    • user/

    • customer

For Payee Account Identification details (e.g. account number and full IBAN, PAN):

  • If this has been provided by

  • user/

  • customers in item #1, then PISPs must also display this in the consent screen to allow

  • user/

  • customers to check and verify correctness

  • If this has been pre-populated by PISPs (e.g. in an e-commerce payment scenario) PISPs may choose whether to display this information or not

  • PISPs must provide messaging to inform users/customers that they will be taken to their ASPSPs (Banks) to complete the payment. Example wording: "You will be securely transferred to YOUR ASPSP (Banks) to authenticate and make the payment"

PISP

Required

4

CX consideration:

  • Generic PISP to ASPSP (Bank) redirection screen and message

SCA-Strong Customer Authentication

SCA (including dynamic linking) must be the only action required at the ASPSPs (Banks) (unless supplementary information required). The ASPSP (Bank) authentication must have no more than the number of steps that the

user/

customer would experience when directly accessing the ASPSP (Bank) channel.

 CX consideration:

  • If SCA as described in this section cannot occur on the same screen as displaying the amount and the payee (e.g. for some biometric authentications methods), then ASPSPs should offer

  • user/

  • customers options to proceed or cancel the payment with "equal prominence”

ASPSP

Required

5

ASPSP (Bank) displaying transaction summary

ASPSPs (Banks) must display as minimum the Payment Amount, Currency and the Payee Account Name to make the

user/

customer aware of these details (unless an SCA exemption is being applied). These details must be displayed as part of the authentication journey on at least one of the following screens without introducing additional confirmation screens (unless supplementary information is required):

  • ASPSPs’ (Banks’) Authentication screen

  • ASPSP (Bank) to PISP redirection screen
    Note: Displaying the balance in this instance need not require any additional strong customer authentication

CX consideration:

  • ASPSPs should inform

  • user/

  • customers about their “point of no return” for making the payment and that their payment will be made after authentication occurs. Example wording: “Authenticate to make payment”

  • Generic ASPSP to PISP redirection screen and message

ASPSP

Required

6

PISP Confirmation

PISPs must display the information received from the ASPSP. This information may include:

  • The unique identifier assigned to the payment instruction by ASPSPs

  • The payment status (and status update date & time) - Confirmation of successful payment initiation

If received from ASPSP, PISPs must display the following additional information:

  • The expected payment execution date & time

  • The expected settlement date & time (i.e. the value date of the payment)

  • The ASPSP charges (where applicable)

In case of payment cancellation, PISP may update the Useruser/Customer customer with reason for payment cancellation. The payment cancellation might be due to technical or non-technical scenarios. The messaging format for technical scenario may be simplified to make it easy for Useruser/Customer customer to understand. Non-technical reasons such as fund availability, incorrect payee information, etc. may be detailed out.

CX consideration:

If Useruser/Customers customers provide their payment account identification details (as per item #2 options), the PISP may, with the consent of the Useruser/Customercustomer, save the account details for future transactions (such as making further payments or initiating refunds back to Useruser/Customerscustomers) where this is part of the payment initiation service explicitly requested by the Useruser/Customercustomer. For example, a merchant, upon request from the Useruser/Customercustomer, may initiate a refund back to the Useruser/Customercustomer, by instructing the same PISP that initiated the initial Useruser/Customer customer transaction to use the saved Useruser/Customer customer payment account identification details as the beneficiary details for the refund. This will be dependent on the same PISP being used by both the Useruser/Customer customer and the merchant, their specific contractual terms and the existing regulations.

PISP

 

 

Required

 

7

Further Payment Status Update

PISPs must follow up with ASPSPs (Banks) in order to check and update the Useruser/Customers customers with the most updated information that can be received by ASPSPs (Banks) in relation to the execution of the payment.

PISP

Required

...

There may be cases where the payment order submitted by PISPs to ASPSPs (Banks) is incomplete, such as where Useruser/Customer customer account selection has not yet occurred. In these scenarios, Open banking guideline considers that SCA only needs to be obtained once, as part of the initial interaction between the ASPSP (Bank) and Useruser/Customercustomer. The fact that the Useruser/Customer customer has to then carry out account selection or provide other information does not invalidate the SCA just performed by the ASPSP.

...

S. No.

Requirements and Considerations

 Participant

Implementation Requirements

1

Minimum Set of Parameters

PISPs must either allow Useruser/Customers customers to specify the below minimum set of parameters or pre-populate them for the Useruser/Customerscustomers:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payee Account Identification details (e.g. account number and full IBAN, PAN)

  • Payment Reference (optional)

 PISP

Required

2

User/Customer payment Bank Selection

PISPs must provide Useruser/Customers customers the following options:

  • Select their ASPSP (Bank) in order to select their Useruser/Customer customer payment Account from there later on in the journey

 PISP

Required

3

User/Customer Consent to PISP

PISPs must request for the Useruser/Customerscustomers' consent to the payment initiation in a clear and specific manner. PISPs must display the following information in the consent screen:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payment Reference, if it has been entered by Useruser/Customers customers or prepopulated by PISPs in item #1

  • Selected ASPSP (Bank) (based on item #2 options)

For Payee Account Identification details (e.g. IBAN, PAN):

  • If this has been provided by Useruser/Customers customers in item #1, then PISPs must also display this in the consent screen to allow Useruser/Customers customers to check and verify correctness

  • If this has been pre-populated by PISPs (e.g. in an e-commerce payment scenario) PISPs may choose whether to display this information or not

  • PISPs must provide messaging to inform Useruser/Customers customers that they will be taken to their ASPSPs (Banks) to complete the payment. Example wording: "You will be securely transferred to your ASPSP (Bank) to authenticate and make the payment"

 PISP

Required

4

CX consideration:

  • Generic PISP to ASPSP redirection screen and message

SCA-Strong Customer Authentication

ASPSPs (Banks) must apply SCA including dynamic linking, unless an exemption applies. The ASPSP (Bank) authentication must have no more than the number of steps that the Useruser/Customer customer would experience when directly accessing the ASPSP (Bank) channel.

 ASPSP

 Required

5

User/Customer Payment Account Selection

ASPSPs must allow Useruser/Customers customers to select the payment account to complete the payment order for execution

Once the Useruser/Customer customer has selected their account, the ASPSPs must display the following information to the Useruser/Customercustomer:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payment Reference, if it has been entered by Useruser/Customers customers or prepopulated by PISPs in item #1

  • The account selected by the Useruser/Customer customer for payment

ASPSPs must allow Useruser/Customers customers to review as a part of the authentication process the information described above in #5. The Useruser/Customer customer can either proceed with the payment or cancel it, on the same screen, using options with "equal prominence"

CX consideration:

  • ASPSPs should inform Useruser/Customers customers about their “point of no return” for making the payment and that their payment will be made after pressing the Proceed button. Example wording: “Press Proceed to make payment"

  • Generic ASPSP to PISP redirection screen and message

 ASPSP

 Required

6

PISP Confirmation   

PISPs must display the information received from the ASPSP. This information may include:

  • The unique identifier assigned to the payment instruction by ASPSPs

  • The payment status (and status update date & time) - Confirmation of successful payment initiation

If received from ASPSP, PISPs must display the following additional information:

  • The expected payment execution date & time

  • The expected settlement date & time (i.e. the value date of the payment)

  • The ASPSP charges (where applicable)

In case of payment cancellation, PISP may update the Useruser/Customer customer with reason for payment cancellation. The payment cancellation might be due to technical or non-technical scenarios. The messaging format for technical scenario may be simplified to make it easy for Useruser/Customer customer to understand. Non-technical reasons such as fund availability, incorrect payee information, etc. may be detailed out.

CX consideration:

  • If Useruser/Customers customers provide their payment account identification details (as per item #5 options), PISPs may save the account details for future transactions, where this is part of the payment initiation service explicitly requested by the Useruser/Customercustomer.

PISP

 

 

Required

 

7

Further Payment Status Update

PISPs must follow up with ASPSPs (Banks) in order to check and update the Useruser/Customers customers with the most updated information that can be received by ASPSPs (Banks) in relation to the execution of the payment.

PISP

Required

...

In some scenarios, an additional step in ASPSPs’ (Banks’) journeys may be required to display supplementary information to Useruser/Customerscustomers. ASPSPs (Banks) should determine the situations where this supplementary information is required, having regard to the principle that parity should be maintained between Open Banking journeys and ASPSPs’ (Banks’) online channel journeys, such that if supplementary information is not provided within the ASPSPs’ (Banks’) online channels directly to Useruser/Customerscustomers, then it must not be provided during an Open Banking PIS journey. ASPSPs (Banks) should also ensure that this information does not constitute an obstacle or additional check on the consent provided by the Useruser/Customer customer to the PISP.

Note: The user/customer journey shown below is for a/c selection @PISP and similar variation will also apply in the a/c selection @ASPSP.

...

S. No.

Requirements and Considerations

 Participant

Implementation Requirements

1

Minimum Set of Parameters

PISPs must either allow Useruser/Customers customers to specify the below minimum set of parameters or pre-populate them for the Useruser/Customerscustomers:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payee Account Identification details (e.g. IBAN, PAN)

  • Payment Reference (optional)

PISP

Required

2

User/Customer Payment Account Selection

PISPs must provide Useruser/Customers customers at least one of the following options:

  • Enter their Payer's payment Account Identification details

  • Select their Account Identification details (this assumes they have been saved previously and a user/customer is required to verify/authorize the account identification details in a PISP before storing it in PISP)

PISP

Required

3

User/Customer Consent to PISP

PISPs must request for the Useruser/Customerscustomers' consent to the payment initiation in a clear and specific manner. PISPs must display the following information in the consent screen:

  • Payment Amount and Currency (BHD for Bahrain  implementations)

  • Payee Account Name

  • Payment Reference, if it has been entered by Useruser/Customers customers or prepopulated by PISPs in item #1

  • Useruser/Customer customer payment Account Identification

    • Note 1: if Useruser/Customer customer payment Account identification is selected in item #2, PISPs should mask the Useruser/Customer customer payment Account details on the consent screen. Otherwise, if the Useruser/Customer customer payment Account identification has been input by Useruser/Customers customers in item #2, PISPs should not mask these details to allow Useruser/Customers customers to check and verify correctness

    • Note 2: if Useruser/Customer customer payment Account identification is provided by Useruser/Customers customers in item #2, PISPs may use this to identify and display the ASPSP (Bank) without having to ask Useruser/Customercustomer

For Payee Account Identification details (e.g. IBAN, PAN):

  • If this has been provided by Useruser/Customers customers in item #1, then PISPs must also display this in the consent screen to allow Useruser/Customers customers to check and verify correctness

  • If this has been pre-populated by PISPs (e.g. in an e-commerce payment scenario) PISPs may choose whether to display this information or not 

  • PISPs must provide messaging to inform Useruser/Customers customers that they will be taken to their ASPSPs (Banks) to complete the payment. Example wording: "You will be securely transferred to your ASPSP (Bank) to authenticate and make the payment"

PISP

Required

4

CX consideration:

  • Generic PISP to ASPSP (Bank) redirection screen and message

SCA-Strong Customer Authentication

ASPSPs (Banks) must apply SCA including dynamic linking, unless an exemption applies. The ASPSP (Bank) authentication must have no more than the number of steps that the Useruser/Customer customer would experience when directly accessing the ASPSP (Bank) channel.

ASPSP

Required

5

Additional Supplementary Information

ASPSPs must be able to introduce a step as part of the authentication journey to display supplementary information associated with that payment if required

ASPSPs must display to Useruser/Customers customers all the payment instruction information received from PISPs together with the supplementary information. This information may include the following:

  • Payment Amount and Currency (BHD for Bahrain implementations)

  • Payee Account Name

  • Payment Reference, if it has been entered by Useruser/Customers customers or prepopulated by PISPs in item #1

  • User/Customer payment Account Identification

ASPSPs must allow Useruser/Customers customers to review as a part of the authentication process any supplementary Information. The Useruser/Customer customer can either proceed with the payment or cancel it on the same screen with supplementary information details, using options with "equal prominence“

CX consideration:

  • ASPSPs should inform Useruser/Customers customers about their “point of no return” for making the payment and that their payment will be made after pressing the Proceed button. Example wording: “Press Proceed to make payment"

  • Generic ASPSP to PISP redirection screen and message

ASPSP

Required

 6

PISP Confirmation

PISPs must display the information received from the ASPSP. This information may include:

  • The unique identifier assigned to the payment instruction by ASPSPs

  • The payment status (and status update date & time) - Confirmation of successful payment initiation

If received from ASPSP, PISPs must display the following additional information:

  • The expected payment execution date & time

  • The expected settlement date & time (i.e. the value date of the payment)

  • The ASPSP charges (where applicable)

 In case of payment cancellation, PISP may update the Useruser/Customer customer with reason for payment cancellation. The payment cancellation might be due to technical or non-technical scenarios. The messaging format for technical scenario may be simplified to make it easy for Useruser/Customer customer to understand. Non-technical reasons such as fund availability, incorrect payee information, etc. may be detailed out.

 CX consideration:

If Useruser/Customers customers provide their payment account identification details (as per item #2 options), the PISP may, with the consent of the Useruser/Customercustomer, save the account details for future transactions (such as making further payments or initiating refunds back to Useruser/Customerscustomers) where this is part of the payment initiation service explicitly requested by the Useruser/Customercustomer. For example, a merchant, upon request from the Useruser/Customercustomer, may initiate a refund back to the Useruser/Customercustomer, by instructing the same PISP that initiated the initial Useruser/Customer customer transaction to use the saved Useruser/Customer customer payment account identification details as the beneficiary details for the refund. This will be dependent on the same PISP being used by both the Useruser/Customer customer and the merchant, their specific contractual terms and the existing regulations.

PISP

 

 

Required

 

 

7

Further Payment Status Update

PISPs must follow up with ASPSPs (Banks) in order to check and update the Useruser/Customers customers with the most updated information that can be received by ASPSPs (Banks) in relation to the execution of the payment.

PISP

Required

...

ASPSPs (Banks) must determine the situations where Supplementary Information is required to be shown to the Useruser/Customercustomer, having regard to the principle that parity should be maintained between Open Banking journeys and ASPSP (Bank) direct online channel journeys. Supplementary Information may be required (illustrative):

  • Where fees, charges or Forex apply

  • Where interest rates apply

  • To display a Useruser/Customer customer warning that the relevant payment account will become overdrawn / exceed an overdraft limit as a result of the intended payment

  • If the relevant payment submission cut-off time  has elapsed and the ASPSP (Bank) wishes to offer an execution date/time

  • Where the Useruser/Customer customer has been identified by the ASPSPs (Banks) as a vulnerable customer (who therefore receives tailored journeys and messages in ASPSP’s (Bank’s) own online platforms)

  • To show value-add information based on functionality implemented by ASPSPs (Banks) in competitive space which provides positive customer outcome (e.g. cash flow prediction engine)

  • For high value transactions using a different payment scheme

  • Where the payments may be duplicated by the customer in a short period (e.g. ASPSP (Bank) may display a warning that payment appears to be duplicated)

...