Single Tap with Online PIN

5 min

strong customer authentication (sca) when processing contactless transactions, issuers may require strong customer authentication through pin entry if you receive a declined response with action type accptrauthstnrspn/authstnrspn/txrspn/actn/actntp set to pinq (request cardholder authentification through pin insertion), you must perform a second contactless transaction with online pin verification prerequisites to support single tap with online pin, all authorisation requests must have supported options accptrauthstnreq/authstnreq/cntxt/pmtcntxt/spprtdoptn set to pinq (pin request) to indicate the device supports single tap transactions \<cntxt> \<pmtcntxt> \<spprtdoptn>pinq\</spprtdoptn> \<! other payment context fields > \</pmtcntxt> \</cntxt> handling sca requests when you receive a response with action type set to pinq prompt for pin entry – request the cardholder to enter their pin submit second authorisation request with the online reason accptrauthstnreq/authstnreq/tx/txdtls/onlinersn field set to ifpr (issuer forced pin request) request cardholder authentication througth pin insertion example single tap supported transaction (initial request) \<?xml version=\\"1 0\\" encoding=\\"utf 8\\"?> \<document 	xmlns\ xsi=\\"http //www w3 org/2001/xmlschema instance\\" 	xmlns=\\"urn\ iso\ std\ iso 20022\ tech\ xsd\ caaa 001 001 13\\"> 	\<accptrauthstnreq> 	 \<hdr> 	 \<msgfctn>fauq\</msgfctn> 	 \<prtcolvrsn>9 0\</prtcolvrsn> 	 \<xchgid>662333851759302\</xchgid> 	 \<credttm>2025 11 28t15 40 55 853z\</credttm> 	 \<initgpty> 	 \<id>21100212\</id> 	 \<tp>opoi\</tp> 	 \<issr>accp\</issr> 	 \</initgpty> 	 \<rcptpty> 	 \<id>toro gateway\</id> 	 \<tp>itag\</tp> 	 \</rcptpty> 	 \</hdr> 	 \<authstnreq> 	 \<envt> 	 \<poi> 	 \<id> 	 \<id>poi 77beb6e708673d314e163d\</id> 	 \<tp>opoi\</tp> 	 \<issr>opoi\</issr> 	 \</id> 	 \<cpblties> 	 \<crdhldrvrfctncpblties>fcpn\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>fepn\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>mnsg\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>npin\</crdhldrvrfctncpblties> 	 \</cpblties> 	 \</poi> 	 \<card> 	 \<prtctdcarddata> 	 \<cntttp>evlp\</cntttp> 	 \<envlpddata> 	 \<rcpt> 	 \<kek> 	 \<kekid> 	 \<keyid>sred key id\</keyid> 	 \<keyvrsn>0\</keyvrsn> 	 \<derivtnid>v84abqfa0eaaiw==\</derivtnid> 	 \</kekid> 	 \<keyncrptnalgo> 	 \<algo>e3dc\</algo> 	 \</keyncrptnalgo> 	 \</kek> 	 \</rcpt> 	 \<ncrptdcntt> 	 \<cntttp>data\</cntttp> 	 \<ncrptddata>pzywtjirmyz2s9v/oixg7iwxqzs/wgk5htm4cyiyvbk=\</ncrptddata> 	 \</ncrptdcntt> 	 \</envlpddata> 	 \</prtctdcarddata> 	 \</card> 	 \<crdhldr> 	 \<authntcn> 	 \<authntcnmtd>othr\</authntcnmtd> 	 \</authntcn> 	 \</crdhldr> 	 \</envt> 	 \<cntxt> 	 \<pmtcntxt> 	 \<cardpres>true\</cardpres> 	 \<crdhldrpres>true\</crdhldrpres> 	 \<attndnccntxt>attd\</attndnccntxt> 	 \<txchanl>mpos\</txchanl> 	 \<attndntmsgcpbl>true\</attndntmsgcpbl> 	 \<carddatantrymd>ectl\</carddatantrymd> 	 \<fllbckind>nflb\</fllbckind> 	 \<spprtdoptn>pinq\</spprtdoptn> 	 \</pmtcntxt> 	 \</cntxt> 	 \<tx> 	 \<txcaptr>true\</txcaptr> 	 \<txtp>crdp\</txtp> 	 \<mrchntctgycd>1234\</mrchntctgycd> 	 \<salerefid>purchase 444463377tmm61j2f571\</salerefid> 	 \<txid> 	 \<txdttm>2025 11 28t15 40 55 862z\</txdttm> 	 \<txref>648315875266\</txref> 	 \</txid> 	 \<initrtxid>648315875266\</initrtxid> 	 \<rcncltnid>648315875266\</rcncltnid> 	 \<txdtls> 	 \<ccy>gbp\</ccy> 	 \<ttlamt>5 51\</ttlamt> 	 \<dtldamt> 	 \<grtty>0 00\</grtty> 	 \</dtldamt> 	 \<onlinersn>frlt\</onlinersn> 	 \<iccrltddata>ggizgiqhoaaaaaqqejufaaaagagaayurkjwbaf8qaggmnwigaaaaaavrnwmgaaaaaaaanwkcaakfebibekbaacaaaaaaaaaaaaaaaacfggiavp8ecdixmtawmjeynyyitn1fjsrcl22fjwganzmdiaginzqdhwmcnzubip82agadnzcescalrl80aqgfbgsiqaadmdaaaqiigfaktunentugdjegma==\</iccrltddata> 	 \</txdtls> 	 \</tx> 	 \</authstnreq> 	 \<sctytrlr> 	 \<cntttp>auth\</cntttp> 	 \<authntcddata> 	 \<rcpt> 	 \<keyidr> 	 \<keyid>specv1testkey\</keyid> 	 \<keyvrsn>1\</keyvrsn> 	 \</keyidr> 	 \</rcpt> 	 \<macalgo> 	 \<algo>cca3\</algo> 	 \</macalgo> 	 \<ncpsltdcntt> 	 \<cntttp>data\</cntttp> 	 \</ncpsltdcntt> 	 \<mac>vg5dxjbaohmhf00rzst+rw==\</mac> 	 \</authntcddata> 	 \</sctytrlr> 	\</accptrauthstnreq> \</document> example response with action type set to pinq \<?xml version=\\"1 0\\" encoding=\\"utf 8\\"?> \<document 	xmlns\ none=\\"urn\ iso\ std\ iso 20022\ tech\ xsd\ caaa 002 001 12\\" 	xmlns\ xsi=\\"http //www w3 org/2001/xmlschema instance\\" 	xmlns=\\"urn\ iso\ std\ iso 20022\ tech\ xsd\ caaa 002 001 12\\"> 	\<accptrauthstnrspn> 	 \<hdr> 	 \<msgfctn>faup\</msgfctn> 	 \<prtcolvrsn>9 0\</prtcolvrsn> 	 \<xchgid>662333851759302\</xchgid> 	 \<credttm>2025 11 28t15 40 58 834z\</credttm> 	 \<initgpty> 	 \<id>21100212\</id> 	 \<tp>opoi\</tp> 	 \<issr>accp\</issr> 	 \</initgpty> 	 \<rcptpty> 	 \<id>toro gateway\</id> 	 \<tp>itag\</tp> 	 \</rcptpty> 	 \</hdr> 	 \<authstnrspn> 	 \<envt> 	 \<poi> 	 \<id> 	 \<id>poi 77beb6e708673d314e163d\</id> 	 \<tp>opoi\</tp> 	 \<issr>opoi\</issr> 	 \</id> 	 \<cpblties> 	 \<crdhldrvrfctncpblties>fcpn\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>fepn\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>mnsg\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>npin\</crdhldrvrfctncpblties> 	 \</cpblties> 	 \</poi> 	 \<card> 	 \<prtctdcarddata> 	 \<cntttp>evlp\</cntttp> 	 \<envlpddata> 	 \<rcpt> 	 \<kek> 	 \<kekid> 	 \<keyid>sred key id\</keyid> 	 \<keyvrsn>0\</keyvrsn> 	 \<derivtnid>v84abqfa0eaaiw==\</derivtnid> 	 \</kekid> 	 \<keyncrptnalgo> 	 \<algo>e3dc\</algo> 	 \</keyncrptnalgo> 	 \</kek> 	 \</rcpt> 	 \<ncrptdcntt> 	 \<cntttp>data\</cntttp> 	 \<ncrptddata>pzywtjirmyz2s9v/oixg7iwxqzs/wgk5htm4cyiyvbk=\</ncrptddata> 	 \</ncrptdcntt> 	 \</envlpddata> 	 \</prtctdcarddata> 	 \</card> 	 \<crdhldr> 	 \<authntcn> 	 \<authntcnmtd>othr\</authntcnmtd> 	 \</authntcn> 	 \</crdhldr> 	 \</envt> 	 \<tx> 	 \<salerefid>purchase 444463377tmm61j2f571\</salerefid> 	 \<txid> 	 \<txdttm>2025 11 28t15 40 55 862z\</txdttm> 	 \<txref>648315875266\</txref> 	 \</txid> 	 \<initrtxid>648315875266\</initrtxid> 	 \<rcncltnid>648315875266\</rcncltnid> 	 \<txdtls> 	 \<ccy>gbp\</ccy> 	 \<ttlamt>0 00\</ttlamt> 	 \<dtldamt> 	 \<grtty>0 00\</grtty> 	 \</dtldamt> 	 \<reqdamt>5 51\</reqdamt> 	 \<authrsdamt>0 00\</authrsdamt> 	 \<onlinersn>frlt\</onlinersn> 	 \<iccrltddata>igixqq==\</iccrltddata> 	 \</txdtls> 	 \</tx> 	 \<txrspn> 	 \<authstnrslt> 	 \<authstnntty> 	 \<tp>acqr\</tp> 	 \</authstnntty> 	 \<rspntoauthstn> 	 \<rspn>decl\</rspn> 	 \<rspnrsn>strong customer authentication requ\</rspnrsn> 	 \<addtlrspninf>01\ xzz013f84833a1e84d6xlhoxjpvznawb\</addtlrspninf> 	 \</rspntoauthstn> 	 \<cmpltnreqrd>false\</cmpltnreqrd> 	 \</authstnrslt> 	 \<actn> 	 \<actntp>pinq\</actntp> 	 \</actn> 	 \</txrspn> 	 \</authstnrspn> 	 \<sctytrlr> 	 \<cntttp>auth\</cntttp> 	 \<authntcddata> 	 \<vrsn>0\</vrsn> 	 \<rcpt> 	 \<keyidr> 	 \<keyid>specv1testkey\</keyid> 	 \<keyvrsn>1\</keyvrsn> 	 \</keyidr> 	 \</rcpt> 	 \<macalgo> 	 \<algo>cca3\</algo> 	 \</macalgo> 	 \<ncpsltdcntt> 	 \<cntttp>data\</cntttp> 	 \</ncpsltdcntt> 	 \<mac>vhf/zkim7mvqzgwvqv6bya==\</mac> 	 \</authntcddata> 	 \</sctytrlr> 	\</accptrauthstnrspn> \</document> example second request with online pin \<?xml version=\\"1 0\\" encoding=\\"utf 8\\"?> \<document 	xmlns\ xsi=\\"http //www w3 org/2001/xmlschema instance\\" 	xmlns=\\"urn\ iso\ std\ iso 20022\ tech\ xsd\ caaa 001 001 13\\"> 	\<accptrauthstnreq> 	 \<hdr> 	 \<msgfctn>fauq\</msgfctn> 	 \<prtcolvrsn>9 0\</prtcolvrsn> 	 \<xchgid>463682899290186\</xchgid> 	 \<credttm>2025 11 28t15 41 07 864z\</credttm> 	 \<initgpty> 	 \<id>21100212\</id> 	 \<tp>opoi\</tp> 	 \<issr>accp\</issr> 	 \</initgpty> 	 \<rcptpty> 	 \<id>toro gateway\</id> 	 \<tp>itag\</tp> 	 \</rcptpty> 	 \</hdr> 	 \<authstnreq> 	 \<envt> 	 \<poi> 	 \<id> 	 \<id>poi 77beb6e708673d314e163d\</id> 	 \<tp>opoi\</tp> 	 \<issr>opoi\</issr> 	 \</id> 	 \<cpblties> 	 \<crdhldrvrfctncpblties>fcpn\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>fepn\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>mnsg\</crdhldrvrfctncpblties> 	 \<crdhldrvrfctncpblties>npin\</crdhldrvrfctncpblties> 	 \</cpblties> 	 \</poi> 	 \<card> 	 \<prtctdcarddata> 	 \<cntttp>evlp\</cntttp> 	 \<envlpddata> 	 \<rcpt> 	 \<kek> 	 \<kekid> 	 \<keyid>sred key id\</keyid> 	 \<keyvrsn>0\</keyvrsn> 	 \<derivtnid>v84abqfa0eaaiw==\</derivtnid> 	 \</kekid> 	 \<keyncrptnalgo> 	 \<algo>e3dc\</algo> 	 \</keyncrptnalgo> 	 \</kek> 	 \</rcpt> 	 \<ncrptdcntt> 	 \<cntttp>data\</cntttp> 	 \<ncrptddata>pzywtjirmyz2s9v/oixg7iwxqzs/wgk5htm4cyiyvbk=\</ncrptddata> 	 \</ncrptdcntt> 	 \</envlpddata> 	 \</prtctdcarddata> 	 \</card> 	 \<crdhldr> 	 \<authntcn> 	 \<authntcnmtd>npin\</authntcnmtd> 	 \<crdhldronlinepin> 	 \<ncrptdpinblck> 	 \<cntttp>evlp\</cntttp> 	 \<envlpddata> 	 \<rcpt> 	 \<kek> 	 \<kekid> 	 \<keyid>pin key id\</keyid> 	 \<keyvrsn>0\</keyvrsn> 	 \<derivtnid>ijsxbqfa0eaara==\</derivtnid> 	 \</kekid> 	 \<keyncrptnalgo> 	 \<algo>e3dc\</algo> 	 \</keyncrptnalgo> 	 \</kek> 	 \</rcpt> 	 \<ncrptdcntt> 	 \<cntttp>data\</cntttp> 	 \<ncrptddata>c+tsnydzbw8=\</ncrptddata> 	 \</ncrptdcntt> 	 \</envlpddata> 	 \</ncrptdpinblck> 	 \<pinfrmt>iso0\</pinfrmt> 	 \</crdhldronlinepin> 	 \</authntcn> 	 \</crdhldr> 	 \</envt> 	 \<cntxt> 	 \<pmtcntxt> 	 \<cardpres>true\</cardpres> 	 \<crdhldrpres>true\</crdhldrpres> 	 \<attndnccntxt>attd\</attndnccntxt> 	 \<txchanl>mpos\</txchanl> 	 \<attndntmsgcpbl>true\</attndntmsgcpbl> 	 \<carddatantrymd>ectl\</carddatantrymd> 	 \<fllbckind>nflb\</fllbckind> 	 \<spprtdoptn>pinq\</spprtdoptn> 	 \</pmtcntxt> 	 \</cntxt> 	 \<tx> 	 \<txcaptr>true\</txcaptr> 	 \<txtp>crdp\</txtp> 	 \<mrchntctgycd>1234\</mrchntctgycd> 	 \<salerefid>purchase 444463377tmm61j2f571\</salerefid> 	 \<txid> 	 \<txdttm>2025 11 28t15 41 07 868z\</txdttm> 	 \<txref>259535822818\</txref> 	 \</txid> 	 \<initrtxid>259535822818\</initrtxid> 	 \<rcncltnid>259535822818\</rcncltnid> 	 \<txdtls> 	 \<ccy>gbp\</ccy> 	 \<ttlamt>5 51\</ttlamt> 	 \<dtldamt> 	 \<grtty>0 00\</grtty> 	 \</dtldamt> 	 \<onlinersn>ifpr\</onlinersn> 	 \<iccrltddata>ggizgiqhoaaaaaqqejufaaaagagaayurkjwbaf8qaggmnwigaaaaaavrnwmgaaaaaaaanwkcaakfebibekbaacaaaaaaaaaaaaaaaacfggiavp8ecdixmtawmjeynyyitn1fjsrcl22fjwganzmdiaginzqdagmanzubip82agadnzcescalrl80aqgfbgsiqaadmdaaaqiigfaktunentugdjegma==\</iccrltddata> 	 \</txdtls> 	 \</tx> 	 \</authstnreq> 	 \<sctytrlr> 	 \<cntttp>auth\</cntttp> 	 \<authntcddata> 	 \<rcpt> 	 \<keyidr> 	 \<keyid>specv1testkey\</keyid> 	 \<keyvrsn>1\</keyvrsn> 	 \</keyidr> 	 \</rcpt> 	 \<macalgo> 	 \<algo>cca3\</algo> 	 \</macalgo> 	 \<ncpsltdcntt> 	 \<cntttp>data\</cntttp> 	 \</ncpsltdcntt> 	 \<mac>tbgd8wmcsxybgjxxrsk3mw==\</mac> 	 \</authntcddata> 	 \</sctytrlr> 	\</accptrauthstnreq> \</document>