Visa released new requirements regarding high-risk transactions and this affects you! I constantly hear that one of the benefits to working with an IPSP is that you can cross sell with other sponsored merchants. As this was never the intent of Visa they have revised their operating regulations to make it explicitly clear what constitutes a crosssell/upsell and what has to happen on this type of transaction.
Effective June 1, an upselling merchant is defined as “a merchant that offers a cardholder goods and/or services online through the initial merchant, but is not the initial merchant, a subsidiary or affiliate of the initial merchant with whom the cardholder initiated the transaction.”
Effective June 1, an upselling merchant is defined as “a merchant that offers a cardholder goods and/or services online through the initial merchant, but is not the initial merchant, a subsidiary or affiliate of the initial merchant with whom the cardholder initiated the transaction.
One could still argue that in an IPSP situation the IPSP is the merchant and the sponsored merchants (being the site owners) still fall under that umbrella of the initial merchant. That sounds like a good argument but then why is an ISPS required by Visa to differentiate the descriptor by sponsored merchant? I’ll let you ponder that one.
To be sure you understand the requirements according to Visa, here is the exact language from the rules regarding the up-selling requirements.
UPSELLING MERCHANT REQUIREMENTS
Effective in June, an upselling merchant must comply with all of the following:
Clearly disclose to the cardholder all of the following:
- The name of the upselling merchant offering the goods and/or services, in a manner that clearly differentiates the upselling merchant from the initial merchant
- A description of the goods and/or services being offered
- The length of the trial period, if offered, including clear disclosure that the cardholder will be charged unless the cardholder takes steps to cancel the subsequent transaction
- The transaction amount and transaction date for the goods and/or services purchased
- The cancellation policy for all goods and/or services being offered
Obtain an authorization for the initial transaction and any subsequent transactions, as specified in “recurring transaction processing”
Obtain express informed consent from the cardholder for the subsequent transactions by requiring the cardholder to undertake all of the following:
- Enter their personal account number for the subsequent transaction
- Enter the name and address and contact details of the cardholder
- Perform an additional affirmative action, such as clicking a confirmation button or other authentication, as permitted by local applicable law, to indicate cardholder consent for participation in the transaction
Based on the language above, it can be deduced that if a consumer is being charged for more than one service by more than one merchant (not merchant account) that the customer will have to re-enter their information and provide explicit consent as described above. If you are currently leveraging this benefit of using an IPSP, it might behoove you to specifically ask your IPSP what their position is on this new regulation, and that they indemnify you from any fines from Visa for cross/up-selling or deceptive marketing practices.
Even if you are not currently leveraging cross-sells or upsells, I suggest that you evaluate your payment set up and understand your risks associated with it.
As you understand your exposure, consider the elements of your payment set up that would associate you to these types of transactions. In particular your customer service toll-free number, your descriptor, your customer service e-mail address and even your cancellation webpage.
If these items are not unique to you, then any investigations being conducted on other merchants could bring your activities into the spotlight.
Last I checked, it is never good to be in Visa’s spotlight.
