Single Tap with Online PIN
5 min
Strong Customer Authentication (SCA)
When processing contactless transactions, issuers may require Strong Customer Authentication through PIN entry. If you receive a declined response with Action Type AccptrAuthstnRspn/AuthstnRspn/TxRspn/Actn/ActnTp set to PINQ (Request Cardholder Authentication through PIN insertion), you must perform a second contactless transaction with online PIN verification.
Prerequisites
To support Single Tap with online PIN, all authorisation requests must have Supported Options AccptrAuthstnReq/AuthstnReq/Cntxt/PmtCntxt/SpprtdOptn set to PINQ (PIN Request) to indicate the device supports Single Tap transactions.
<Cntxt>
<PmtCntxt>
<SpprtdOptn>PINQ</SpprtdOptn>
<!-- Other payment context fields -->
</PmtCntxt>
</Cntxt>Handling SCA Requests
When you receive a response with Action Type set to PINQ:
- Prompt for PIN entry – Request the cardholder to enter their PIN
- Submit second authorisation request with the Online Reason AccptrAuthstnReq/AuthstnReq/Tx/TxDtls/OnLineRsn field set to IFPR (Issuer Forced PIN Request): Request Cardholder Authentication through PIN insertion
- Optional - set the Transaction Verification Result AccptrAuthstnReq/AuthstnReq/Envt/Crdhldr/TxVrfctnRslt method field to NPIN
Example: Single Tap Supported Transaction (Initial Request)
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<Document
xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
xmlns=\"urn:iso:std:iso:20022:tech:xsd:caaa.001.001.09\">
<AccptrAuthstnReq>
<Hdr>
<MsgFctn>FAUQ</MsgFctn>
<PrtcolVrsn>9.0</PrtcolVrsn>
<XchgId>662333851759302</XchgId>
<CreDtTm>2025-11-28T15:40:55.853Z</CreDtTm>
<InitgPty>
<Id>poi_77beb6e708673d314e163d</Id>
<Tp>OPOI</Tp>
<Issr>poi_66000001</Issr>
</InitgPty>
</Hdr>
<AuthstnReq>
<Envt>
<POI>
<Id>
<Id>poi_77beb6e708673d314e163d</Id>
<Tp>OPOI</Tp>
<Issr>OPOI</Issr>
</Id>
<Cpblties>
<CrdhldrVrfctnCpblties>FCPN</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>FEPN</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>MNSG</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>NPIN</CrdhldrVrfctnCpblties>
</Cpblties>
</POI>
<Card>
<PrtctdCardData>
<CnttTp>EVLP</CnttTp>
<EnvlpdData>
<Rcpt>
<KEK>
<KEKId>
<KeyId>sred-key-id</KeyId>
<KeyVrsn>0</KeyVrsn>
<DerivtnId>v84aBQfa0EAAiw==</DerivtnId>
</KEKId>
<KeyNcrptnAlgo>
<Algo>E3DC</Algo>
</KeyNcrptnAlgo>
</KEK>
</Rcpt>
<NcrptdCntt>
<CnttTp>DATA</CnttTp>
<NcrptdData>PZYwtJIrmyz2s9V/Oixg7iwXQZs/Wgk5HTM4CYIYvBk=</NcrptdData>
</NcrptdCntt>
</EnvlpdData>
</PrtctdCardData>
</Card>
<Crdhldr>
<TxVrfctnRslt>
<Mtd>CRYP</Mtd>
<VrfctnNtty>TRML</VrfctnNtty>
<Rslt>SUCC</Rslt>
</TxVrfctnRslt>
<Authntcn>
<AuthntcnMtd>OTHR</AuthntcnMtd>
</Authntcn>
</Crdhldr>
</Envt>
<Cntxt>
<PmtCntxt>
<CardPres>true</CardPres>
<CrdhldrPres>true</CrdhldrPres>
<AttndncCntxt>ATTD</AttndncCntxt>
<TxChanl>MPOS</TxChanl>
<AttndntMsgCpbl>true</AttndntMsgCpbl>
<CardDataNtryMd>ECTL</CardDataNtryMd>
<FllbckInd>NFLB</FllbckInd>
<SpprtdOptn>PINQ</SpprtdOptn>
</PmtCntxt>
</Cntxt>
<Tx>
<TxCaptr>true</TxCaptr>
<TxTp>CRDP</TxTp>
<MrchntCtgyCd>1234</MrchntCtgyCd>
<SaleRefId>purchase_444463377TMM61J2F571</SaleRefId>
<TxId>
<TxDtTm>2025-11-28T15:40:55.862Z</TxDtTm>
<TxRef>648315875266</TxRef>
</TxId>
<InitrTxId>648315875266</InitrTxId>
<RcncltnId>648315875266</RcncltnId>
<TxDtls>
<Ccy>GBP</Ccy>
<TtlAmt>5.51</TtlAmt>
<DtldAmt>
<Grtty>0.00</Grtty>
</DtldAmt>
<OnLineRsn>FRLT</OnLineRsn>
<ICCRltdData>ggIZgIQHoAAAAAQQEJUFAAAAgAGaAyURKJwBAF8qAggmnwIGAAAAAAVRnwMGAAAAAAAAnwkCAAKfEBIBEKBAACAAAAAAAAAAAAAAAACfGgIAVp8eCDIxMTAwMjEynyYITn1FjSrcl22fJwGAnzMDIAgInzQDHwMCnzUBIp82AgADnzcEsCALrl80AQGfbgsIQAADMDAAAQIIgFAKTUNENTUgdjEgMA==</ICCRltdData>
</TxDtls>
</Tx>
</AuthstnReq>
<SctyTrlr>
<CnttTp>AUTH</CnttTp>
<AuthntcdData>
<Rcpt>
<KeyIdr>
<KeyId>SpecV1TestKey</KeyId>
<KeyVrsn>1</KeyVrsn>
</KeyIdr>
</Rcpt>
<MACAlgo>
<Algo>CCA3</Algo>
</MACAlgo>
<NcpsltdCntt>
<CnttTp>DATA</CnttTp>
</NcpsltdCntt>
<MAC>VG5DXjBAOhMhf00RzsT+rw==</MAC>
</AuthntcdData>
</SctyTrlr>
</AccptrAuthstnReq>
</Document>Example: Response with Action Type set to PINQ
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<Document
xmlns:None=\"urn:iso:std:iso:20022:tech:xsd:caaa.002.001.09\"
xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
xmlns=\"urn:iso:std:iso:20022:tech:xsd:caaa.002.001.09\">
<AccptrAuthstnRspn>
<Hdr>
<MsgFctn>FAUP</MsgFctn>
<PrtcolVrsn>9.0</PrtcolVrsn>
<XchgId>662333851759302</XchgId>
<CreDtTm>2025-11-28T15:40:58.834Z</CreDtTm>
<InitgPty>
<Id>poi_77beb6e708673d314e163d</Id>
<Tp>OPOI</Tp>
<Issr>ITAG</Issr>
</InitgPty>
<RcptPty>
<Id>Toro-Gateway</Id>
<Tp>ITAG</Tp>
</RcptPty>
</Hdr>
<AuthstnRspn>
<Envt>
<POI>
<Id>
<Id>poi_77beb6e708673d314e163d</Id>
<Tp>OPOI</Tp>
<Issr>ITAG</Issr>
</Id>
<Cpblties>
<CrdhldrVrfctnCpblties>FCPN</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>FEPN</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>MNSG</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>NPIN</CrdhldrVrfctnCpblties>
</Cpblties>
</POI>
<Card>
<PrtctdCardData>
<CnttTp>EVLP</CnttTp>
<EnvlpdData>
<Rcpt>
<KEK>
<KEKId>
<KeyId>sred-key-id</KeyId>
<KeyVrsn>0</KeyVrsn>
<DerivtnId>v84aBQfa0EAAiw==</DerivtnId>
</KEKId>
<KeyNcrptnAlgo>
<Algo>E3DC</Algo>
</KeyNcrptnAlgo>
</KEK>
</Rcpt>
<NcrptdCntt>
<CnttTp>DATA</CnttTp>
<NcrptdData>PZYwtJIrmyz2s9V/Oixg7iwXQZs/Wgk5HTM4CYIYvBk=</NcrptdData>
</NcrptdCntt>
</EnvlpdData>
</PrtctdCardData>
</Card>
<Crdhldr>
<Authntcn>
<AuthntcnMtd>OTHR</AuthntcnMtd>
</Authntcn>
</Crdhldr>
</Envt>
<Tx>
<SaleRefId>purchase_444463377TMM61J2F571</SaleRefId>
<TxId>
<TxDtTm>2025-11-28T15:40:55.862Z</TxDtTm>
<TxRef>648315875266</TxRef>
</TxId>
<InitrTxId>648315875266</InitrTxId>
<RcncltnId>648315875266</RcncltnId>
<TxDtls>
<Ccy>GBP</Ccy>
<TtlAmt>0.00</TtlAmt>
<DtldAmt>
<Grtty>0.00</Grtty>
</DtldAmt>
<ReqdAmt>5.51</ReqdAmt>
<AuthrsdAmt>0.00</AuthrsdAmt>
<OnLineRsn>FRLT</OnLineRsn>
<ICCRltdData>igIxQQ==</ICCRltdData>
</TxDtls>
</Tx>
<TxRspn>
<AuthstnRslt>
<AuthstnNtty>
<Tp>ACQR</Tp>
</AuthstnNtty>
<RspnToAuthstn>
<Rspn>DECL</Rspn>
<RspnRsn>Strong Customer Authentication requ</RspnRsn>
<AddtlRspnInf>01:XZZ013f84833a1e84D6XLHOXJPVZNAWB</AddtlRspnInf>
</RspnToAuthstn>
<CmpltnReqrd>false</CmpltnReqrd>
</AuthstnRslt>
<Actn>
<ActnTp>PINQ</ActnTp>
</Actn>
</TxRspn>
</AuthstnRspn>
<SctyTrlr>
<CnttTp>AUTH</CnttTp>
<AuthntcdData>
<Vrsn>0</Vrsn>
<Rcpt>
<KeyIdr>
<KeyId>SpecV1TestKey</KeyId>
<KeyVrsn>1</KeyVrsn>
</KeyIdr>
</Rcpt>
<MACAlgo>
<Algo>CCA3</Algo>
</MACAlgo>
<NcpsltdCntt>
<CnttTp>DATA</CnttTp>
</NcpsltdCntt>
<MAC>vhf/zkiM7MvQzGWvQv6bYA==</MAC>
</AuthntcdData>
</SctyTrlr>
</AccptrAuthstnRspn>
</Document>Example: Second Request with Online PIN
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<Document
xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
xmlns=\"urn:iso:std:iso:20022:tech:xsd:caaa.001.001.13\">
<AccptrAuthstnReq>
<Hdr>
<MsgFctn>FAUQ</MsgFctn>
<PrtcolVrsn>9.0</PrtcolVrsn>
<XchgId>463682899290186</XchgId>
<CreDtTm>2025-11-28T15:41:07.864Z</CreDtTm>
<InitgPty>
<Id>21100212</Id>
<Tp>OPOI</Tp>
<Issr>ACCP</Issr>
</InitgPty>
<RcptPty>
<Id>Toro-Gateway</Id>
<Tp>ITAG</Tp>
</RcptPty>
</Hdr>
<AuthstnReq>
<Envt>
<POI>
<Id>
<Id>poi_77beb6e708673d314e163d</Id>
<Tp>OPOI</Tp>
<Issr>OPOI</Issr>
</Id>
<Cpblties>
<CrdhldrVrfctnCpblties>FCPN</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>FEPN</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>MNSG</CrdhldrVrfctnCpblties>
<CrdhldrVrfctnCpblties>NPIN</CrdhldrVrfctnCpblties>
</Cpblties>
</POI>
<Card>
<PrtctdCardData>
<CnttTp>EVLP</CnttTp>
<EnvlpdData>
<Rcpt>
<KEK>
<KEKId>
<KeyId>sred-key-id</KeyId>
<KeyVrsn>0</KeyVrsn>
<DerivtnId>v84aBQfa0EAAiw==</DerivtnId>
</KEKId>
<KeyNcrptnAlgo>
<Algo>E3DC</Algo>
</KeyNcrptnAlgo>
</KEK>
</Rcpt>
<NcrptdCntt>
<CnttTp>DATA</CnttTp>
<NcrptdData>PZYwtJIrmyz2s9V/Oixg7iwXQZs/Wgk5HTM4CYIYvBk=</NcrptdData>
</NcrptdCntt>
</EnvlpdData>
</PrtctdCardData>
</Card>
<Crdhldr>
<TxVrfctnRslt>
<Mtd>CRYP</Mtd>
<VrfctnNtty>TRML</VrfctnNtty>
<Rslt>SUCC</Rslt>
</TxVrfctnRslt>
<TxVrfctnRslt>
<Mtd>NPIN</Mtd>
<VrfctnNtty>ISSR</VrfctnNtty>
<Rslt>NOVF</Rslt>
</TxVrfctnRslt>
<Authntcn>
<AuthntcnMtd>NPIN</AuthntcnMtd>
<CrdhldrOnLinePIN>
<NcrptdPINBlck>
<CnttTp>EVLP</CnttTp>
<EnvlpdData>
<Rcpt>
<KEK>
<KEKId>
<KeyId>pin-key-id</KeyId>
<KeyVrsn>0</KeyVrsn>
<DerivtnId>ijSxBQfa0EAARA==</DerivtnId>
</KEKId>
<KeyNcrptnAlgo>
<Algo>E3DC</Algo>
</KeyNcrptnAlgo>
</KEK>
</Rcpt>
<NcrptdCntt>
<CnttTp>DATA</CnttTp>
<NcrptdData>C+tsNydZBW8=</NcrptdData>
</NcrptdCntt>
</EnvlpdData>
</NcrptdPINBlck>
<PINFrmt>ISO0</PINFrmt>
</CrdhldrOnLinePIN>
</Authntcn>
</Crdhldr>
</Envt>
<Cntxt>
<PmtCntxt>
<CardPres>true</CardPres>
<CrdhldrPres>true</CrdhldrPres>
<AttndncCntxt>ATTD</AttndncCntxt>
<TxChanl>MPOS</TxChanl>
<AttndntMsgCpbl>true</AttndntMsgCpbl>
<CardDataNtryMd>ECTL</CardDataNtryMd>
<FllbckInd>NFLB</FllbckInd>
<SpprtdOptn>PINQ</SpprtdOptn>
</PmtCntxt>
</Cntxt>
<Tx>
<TxCaptr>true</TxCaptr>
<TxTp>CRDP</TxTp>
<MrchntCtgyCd>1234</MrchntCtgyCd>
<SaleRefId>purchase_444463377TMM61J2F571</SaleRefId>
<TxId>
<TxDtTm>2025-11-28T15:41:07.868Z</TxDtTm>
<TxRef>259535822818</TxRef>
</TxId>
<InitrTxId>259535822818</InitrTxId>
<RcncltnId>259535822818</RcncltnId>
<TxDtls>
<Ccy>GBP</Ccy>
<TtlAmt>5.51</TtlAmt>
<DtldAmt>
<Grtty>0.00</Grtty>
</DtldAmt>
<OnLineRsn>IFPR</OnLineRsn>
<ICCRltdData>ggIZgIQHoAAAAAQQEJUFAAAAgAGaAyURKJwBAF8qAggmnwIGAAAAAAVRnwMGAAAAAAAAnwkCAAKfEBIBEKBAACAAAAAAAAAAAAAAAACfGgIAVp8eCDIxMTAwMjEynyYITn1FjSrcl22fJwGAnzMDIAgInzQDAgMAnzUBIp82AgADnzcEsCALrl80AQGfbgsIQAADMDAAAQIIgFAKTUNENTUgdjEgMA==</ICCRltdData>
</TxDtls>
</Tx>
</AuthstnReq>
<SctyTrlr>
<CnttTp>AUTH</CnttTp>
<AuthntcdData>
<Rcpt>
<KeyIdr>
<KeyId>SpecV1TestKey</KeyId>
<KeyVrsn>1</KeyVrsn>
</KeyIdr>
</Rcpt>
<MACAlgo>
<Algo>CCA3</Algo>
</MACAlgo>
<NcpsltdCntt>
<CnttTp>DATA</CnttTp>
</NcpsltdCntt>
<MAC>TbGD8wMcsxYBGJXXRsk3Mw==</MAC>
</AuthntcdData>
</SctyTrlr>
</AccptrAuthstnReq>
</Document>