Generate cards for your cardholders

The standard contract lifecycle applied on Worldline Card Issuing reflects the relation between you (as an “Issuer”) and an individual cardholder (retail market) or a company (corporate market)

• Contract “signed”

A contract newly created on Worldline Card Issuing gets this status. In this contract, terms and conditions between the issuer and cardholder(s) are reflected such as :

• Transaction and mark up fees,
• Card event related fees (i.e. replacement, PIN selection etc.),
• Velocity (i.e. maximum amount per transaction, maximum spending amount etc.),
• Wallet “ready” option: capability to onboard the card in wallets (i.e. Apple/Google/Samsung Pay etc.)
• 3D Secure / ACS option: decide if the card can perform 3D secure check
• Instant Issuing option: decide if the card credentials have to be immediately available (PAN, expiry date, CVx2, cardholder name) without waiting for a physical plastic card.

Note that in this state, updates are always possible (i.e. change of fees, velocity on a card product included in the contract, addition of a new card product). Some updates will only be applicable for next card(s) issued in this contract such as card design, or embossing name for instance.

• Contract “suspended”

A contract can be suspended at any time. This will directly impact all the card(s) belonging to this contract by “blocking” them temporarily. The removal of a suspension can be done either on demand or automatically at the end of a period that was set when you’ve suspended the contract.

• Contract “closed”

Contracts can be ended at any time and for any reasons (i.e. cardholder leaves the bank) either on demand or automatically based on the “standard” rules below:

• All cards belonging to a contract have reached their expiry date with no automatic renewals,
• The end of a contract was scheduled.

Each card issued through Worldline Card Issuing follows the general card lifecycle highlighted :

• Card Created

Cards will start their lives on Worldline Card Issuing on Issuers’ demands either by calling our APIs or sharing with us a provisioning file. Each card will be created using:

• The card account information (IBAN) précised by the Issuer,
• Limits and fees settings defined by the Issuer when he has created the card product on Worldline Card Issuing,
• The BIN ranges selected by the Issuer[1]

Based on these data, Worldline Card Issuing:

• Generates cards’ numbers/PAN, cards’ PINs and will calculate expiry dates (card variable data),
• Generates and send a cardholder file (for physical crd) to the Embosser selected by the Issuer.

• Card Active

Cards can be automatically activated or not, depending on the choice of the Issuer when defining its card product on Worldline Card Issuing. For cards not immediately active, 3 options are available to make them active:

• On demand through an API call,
• On demand through our WL Card Issuing Portal.
• Automatically at the 1^st PIN based approved authorization

• Card Blocking

Worldline Card Issuing supports both “temporary” and “permanent” blocking. Unlike “temporary” blocking which is reversible, “permanent” blocking is definitive and will be mainly used in case of fraud, lost or stolen. When a “permanent” blocking will be requested on a card, Worldline Card Issuing will:

• Decline authorizations coming from this card,
• Notify the scheme associated to this card,
• Stop the renewal of the card

• Card Deactivated

Card deactivation is also not reversible and can be done on WL Card Issuing through 5 ways:

• On demand,
• Automatically on expiry date,
• At the contract termination,
• X days after a replacement,
• After the 1^st use of the new card following a renewal.

• Card Cancellation

A card will be in this state on WL Card Issuing if any issue occurs during the card production (i.e. errors
when generating card data or errors on the embosser side).

[1] BIN can be owned by the Issuer itself or, as an option covered by Worldline through its sponsorship license.

The data preparation feature aims at collecting, generating and preparing all the data needed by the embosser to produce the card and personalize the chip card applications.

Worldline Card Issuing supports in “standard” the production of Card Order Files using XML format and based on EMV Card Personalization Specification (CSP). In terms of security, AES encryption mechanism is used to cypher sensitive data. Once produced, these files are compressed (ZIP format), encrypted using RSA standard and sent to the embosser.

As a return from the embosser, Worldline Card Issuing expects to receive from the embosser a file containing the personalization status.

A similar approach is used to generate and send files related to PIN distribution.

PIN creation

Regarding PIN creation, two strategies are available for an Issuer on Worldline Card Issuing:

• Either creating cards with an initial PIN randomly generated by our solution,
• Or creating cards with PIN selected by cardholders.

When a card is about to expire, this latter is usually renewed to offer to the cardholder a continuity in his card payment experience. Worldline Card Issuing offers 2 renewal mode automatic or “on-demand”.

Automatic renewal

In this mode, the production of new cards will be launched automatically X days before reaching the expiry date of cards in circulation. This delay can be set by the issuer on the platform.

Note that on top of checking dates, additional verifications are done by Worldline Card Issuing on:

• The card status: when a card is “blocked”, this latter cannot be renewed,
• The age of the cardholder: for instance prepaid card for kids,
• The existence of any programmed card deactivation or contract closing rules for which a renewal doesn’t make sense

On-demand renewal

In this mode, the issuer will control the renewal of each card of his portfolio manually.

Whatever the mode selected, cards will be renewed using the same PAN and the same PIN. Worldline Card Issuing also supports renewal with new PAN and/or PIN.

Several scenario may lead to the replacement of the card such as: card defect (PIN non compromised), embossing name change, lost or stolen card.

For card defect or embossing name change cases, Worldline Card Issuing will order a new card reusing the same PAN/PIN/Expiry date whereas these data will be generated again for lost/stolen cases.

Note that before ordering a replacement, Worldline Card Issuing will perform verifications on:

• The card and contract status: preventing from replacing a card which is blocked or for which the related contract is suspended,
• The expiry date of current card: to avoid launching a replacement for cards having a renewal date coming soon,
• The existence of any programmed card deactivation or contract closing rules for which a replacement doesn’t make sense.