---
title: Single Tap with Online PIN
slug: single-tap-with-online-pin
docTags: 
createdAt: 2025-11-27T13:41:05.089Z
---

#

Strong Customer Authentication (SCA)

When processing contactless transactions, issuers may require Strong Customer Authentication through PIN entry. If you receive a declined response with Action Type `AccptrAuthstnRspn/AuthstnRspn/TxRspn/Actn/ActnTp` set to `PINQ` (Request Cardholder Authentication through PIN insertion), you must perform a second contactless transaction with online PIN verification.

## Prerequisites

To support Single Tap with online PIN, all authorisation requests must have Supported Options `AccptrAuthstnReq/AuthstnReq/Cntxt/PmtCntxt/SpprtdOptn` set to `PINQ` (PIN Request) to indicate the device supports Single Tap transactions.

```xml
<Cntxt>
  <PmtCntxt>
    <SpprtdOptn>PINQ</SpprtdOptn>
    <!-- Other payment context fields -->
  </PmtCntxt>
</Cntxt>
```

## Handling SCA Requests

When you receive a response with Action Type set to `PINQ`:

1. Prompt for PIN entry – Request the cardholder to enter their PIN
2. Submit second authorisation request with the Online Reason `AccptrAuthstnReq/AuthstnReq/Tx/TxDtls/OnLineRsn` field set to `IFPR` (Issuer Forced PIN Request): Request Cardholder Authentication through PIN insertion
3. Optional - set the Transaction Verification Result `AccptrAuthstnReq/AuthstnReq/Envt/Crdhldr/TxVrfctnRslt` method field to `NPIN`

# Example: Single Tap Supported Transaction (Initial Request)

:::CodeblockTabs{indent="1"}
```xml
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<Document
	xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
	xmlns=\"urn:iso:std:iso:20022:tech:xsd:caaa.001.001.09\">
	<AccptrAuthstnReq>
		<Hdr>
			<MsgFctn>FAUQ</MsgFctn>
			<PrtcolVrsn>9.0</PrtcolVrsn>
			<XchgId>662333851759302</XchgId>
			<CreDtTm>2025-11-28T15:40:55.853Z</CreDtTm>
			<InitgPty>
				<Id>poi_77beb6e708673d314e163d</Id>
				<Tp>OPOI</Tp>
				<Issr>poi_66000001</Issr>
			</InitgPty>
		</Hdr>
		<AuthstnReq>
			<Envt>
				<POI>
					<Id>
						<Id>poi_77beb6e708673d314e163d</Id>
						<Tp>OPOI</Tp>
						<Issr>OPOI</Issr>
					</Id>
					<Cpblties>
						<CrdhldrVrfctnCpblties>FCPN</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>FEPN</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>MNSG</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>NPIN</CrdhldrVrfctnCpblties>
					</Cpblties>
				</POI>
				<Card>
					<PrtctdCardData>
						<CnttTp>EVLP</CnttTp>
						<EnvlpdData>
							<Rcpt>
								<KEK>
									<KEKId>
										<KeyId>sred-key-id</KeyId>
										<KeyVrsn>0</KeyVrsn>
										<DerivtnId>v84aBQfa0EAAiw==</DerivtnId>
									</KEKId>
									<KeyNcrptnAlgo>
										<Algo>E3DC</Algo>
									</KeyNcrptnAlgo>
								</KEK>
							</Rcpt>
							<NcrptdCntt>
								<CnttTp>DATA</CnttTp>
								<NcrptdData>PZYwtJIrmyz2s9V/Oixg7iwXQZs/Wgk5HTM4CYIYvBk=</NcrptdData>
							</NcrptdCntt>
						</EnvlpdData>
					</PrtctdCardData>
				</Card>
				<Crdhldr>
				    <TxVrfctnRslt>
				        <Mtd>CRYP</Mtd>
				        <VrfctnNtty>TRML</VrfctnNtty>
				        <Rslt>SUCC</Rslt>
				    </TxVrfctnRslt>
					<Authntcn>
						<AuthntcnMtd>OTHR</AuthntcnMtd>
					</Authntcn>
				</Crdhldr>
			</Envt>
			<Cntxt>
				<PmtCntxt>
					<CardPres>true</CardPres>
					<CrdhldrPres>true</CrdhldrPres>
					<AttndncCntxt>ATTD</AttndncCntxt>
					<TxChanl>MPOS</TxChanl>
					<AttndntMsgCpbl>true</AttndntMsgCpbl>
					<CardDataNtryMd>ECTL</CardDataNtryMd>
					<FllbckInd>NFLB</FllbckInd>
					<SpprtdOptn>PINQ</SpprtdOptn>
				</PmtCntxt>
			</Cntxt>
			<Tx>
				<TxCaptr>true</TxCaptr>
				<TxTp>CRDP</TxTp>
				<MrchntCtgyCd>1234</MrchntCtgyCd>
				<SaleRefId>purchase_444463377TMM61J2F571</SaleRefId>
				<TxId>
					<TxDtTm>2025-11-28T15:40:55.862Z</TxDtTm>
					<TxRef>648315875266</TxRef>
				</TxId>
				<InitrTxId>648315875266</InitrTxId>
				<RcncltnId>648315875266</RcncltnId>
				<TxDtls>
					<Ccy>GBP</Ccy>
					<TtlAmt>5.51</TtlAmt>
					<DtldAmt>
						<Grtty>0.00</Grtty>
					</DtldAmt>
					<OnLineRsn>FRLT</OnLineRsn>
					<ICCRltdData>ggIZgIQHoAAAAAQQEJUFAAAAgAGaAyURKJwBAF8qAggmnwIGAAAAAAVRnwMGAAAAAAAAnwkCAAKfEBIBEKBAACAAAAAAAAAAAAAAAACfGgIAVp8eCDIxMTAwMjEynyYITn1FjSrcl22fJwGAnzMDIAgInzQDHwMCnzUBIp82AgADnzcEsCALrl80AQGfbgsIQAADMDAAAQIIgFAKTUNENTUgdjEgMA==</ICCRltdData>
				</TxDtls>
			</Tx>
		</AuthstnReq>
		<SctyTrlr>
			<CnttTp>AUTH</CnttTp>
			<AuthntcdData>
				<Rcpt>
					<KeyIdr>
						<KeyId>SpecV1TestKey</KeyId>
						<KeyVrsn>1</KeyVrsn>
					</KeyIdr>
				</Rcpt>
				<MACAlgo>
					<Algo>CCA3</Algo>
				</MACAlgo>
				<NcpsltdCntt>
					<CnttTp>DATA</CnttTp>
				</NcpsltdCntt>
				<MAC>VG5DXjBAOhMhf00RzsT+rw==</MAC>
			</AuthntcdData>
		</SctyTrlr>
	</AccptrAuthstnReq>
</Document>
```
:::

# Example: Response with Action Type set to PINQ

```xml
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<Document
	xmlns:None=\"urn:iso:std:iso:20022:tech:xsd:caaa.002.001.09\"
	xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
	xmlns=\"urn:iso:std:iso:20022:tech:xsd:caaa.002.001.09\">
	<AccptrAuthstnRspn>
		<Hdr>
			<MsgFctn>FAUP</MsgFctn>
			<PrtcolVrsn>9.0</PrtcolVrsn>
			<XchgId>662333851759302</XchgId>
			<CreDtTm>2025-11-28T15:40:58.834Z</CreDtTm>
			<InitgPty>
				<Id>poi_77beb6e708673d314e163d</Id>
				<Tp>OPOI</Tp>
				<Issr>ITAG</Issr>
			</InitgPty>
			<RcptPty>
				<Id>Toro-Gateway</Id>
				<Tp>ITAG</Tp>
			</RcptPty>
		</Hdr>
		<AuthstnRspn>
			<Envt>
				<POI>
					<Id>
						<Id>poi_77beb6e708673d314e163d</Id>
						<Tp>OPOI</Tp>
						<Issr>ITAG</Issr>
					</Id>
					<Cpblties>
						<CrdhldrVrfctnCpblties>FCPN</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>FEPN</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>MNSG</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>NPIN</CrdhldrVrfctnCpblties>
					</Cpblties>
				</POI>
				<Card>
					<PrtctdCardData>
						<CnttTp>EVLP</CnttTp>
						<EnvlpdData>
							<Rcpt>
								<KEK>
									<KEKId>
										<KeyId>sred-key-id</KeyId>
										<KeyVrsn>0</KeyVrsn>
										<DerivtnId>v84aBQfa0EAAiw==</DerivtnId>
									</KEKId>
									<KeyNcrptnAlgo>
										<Algo>E3DC</Algo>
									</KeyNcrptnAlgo>
								</KEK>
							</Rcpt>
							<NcrptdCntt>
								<CnttTp>DATA</CnttTp>
								<NcrptdData>PZYwtJIrmyz2s9V/Oixg7iwXQZs/Wgk5HTM4CYIYvBk=</NcrptdData>
							</NcrptdCntt>
						</EnvlpdData>
					</PrtctdCardData>
				</Card>
				<Crdhldr>
					<Authntcn>
						<AuthntcnMtd>OTHR</AuthntcnMtd>
					</Authntcn>
				</Crdhldr>
			</Envt>
			<Tx>
				<SaleRefId>purchase_444463377TMM61J2F571</SaleRefId>
				<TxId>
					<TxDtTm>2025-11-28T15:40:55.862Z</TxDtTm>
					<TxRef>648315875266</TxRef>
				</TxId>
				<InitrTxId>648315875266</InitrTxId>
				<RcncltnId>648315875266</RcncltnId>
				<TxDtls>
					<Ccy>GBP</Ccy>
					<TtlAmt>0.00</TtlAmt>
					<DtldAmt>
						<Grtty>0.00</Grtty>
					</DtldAmt>
					<ReqdAmt>5.51</ReqdAmt>
					<AuthrsdAmt>0.00</AuthrsdAmt>
					<OnLineRsn>FRLT</OnLineRsn>
					<ICCRltdData>igIxQQ==</ICCRltdData>
				</TxDtls>
			</Tx>
			<TxRspn>
				<AuthstnRslt>
					<AuthstnNtty>
						<Tp>ACQR</Tp>
					</AuthstnNtty>
					<RspnToAuthstn>
						<Rspn>DECL</Rspn>
						<RspnRsn>Strong Customer Authentication requ</RspnRsn>
						<AddtlRspnInf>01:XZZ013f84833a1e84D6XLHOXJPVZNAWB</AddtlRspnInf>
					</RspnToAuthstn>
					<CmpltnReqrd>false</CmpltnReqrd>
				</AuthstnRslt>
				<Actn>
					<ActnTp>PINQ</ActnTp>
				</Actn>
			</TxRspn>
		</AuthstnRspn>
		<SctyTrlr>
			<CnttTp>AUTH</CnttTp>
			<AuthntcdData>
				<Vrsn>0</Vrsn>
				<Rcpt>
					<KeyIdr>
						<KeyId>SpecV1TestKey</KeyId>
						<KeyVrsn>1</KeyVrsn>
					</KeyIdr>
				</Rcpt>
				<MACAlgo>
					<Algo>CCA3</Algo>
				</MACAlgo>
				<NcpsltdCntt>
					<CnttTp>DATA</CnttTp>
				</NcpsltdCntt>
				<MAC>vhf/zkiM7MvQzGWvQv6bYA==</MAC>
			</AuthntcdData>
		</SctyTrlr>
	</AccptrAuthstnRspn>
</Document>
```

# Example: Second Request with Online PIN&#x20;

```xml
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<Document
	xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"
	xmlns=\"urn:iso:std:iso:20022:tech:xsd:caaa.001.001.13\">
	<AccptrAuthstnReq>
		<Hdr>
			<MsgFctn>FAUQ</MsgFctn>
			<PrtcolVrsn>9.0</PrtcolVrsn>
			<XchgId>463682899290186</XchgId>
			<CreDtTm>2025-11-28T15:41:07.864Z</CreDtTm>
			<InitgPty>
				<Id>21100212</Id>
				<Tp>OPOI</Tp>
				<Issr>ACCP</Issr>
			</InitgPty>
			<RcptPty>
				<Id>Toro-Gateway</Id>
				<Tp>ITAG</Tp>
			</RcptPty>
		</Hdr>
		<AuthstnReq>
			<Envt>
				<POI>
					<Id>
						<Id>poi_77beb6e708673d314e163d</Id>
						<Tp>OPOI</Tp>
						<Issr>OPOI</Issr>
					</Id>
					<Cpblties>
						<CrdhldrVrfctnCpblties>FCPN</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>FEPN</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>MNSG</CrdhldrVrfctnCpblties>
						<CrdhldrVrfctnCpblties>NPIN</CrdhldrVrfctnCpblties>
					</Cpblties>
				</POI>
				<Card>
					<PrtctdCardData>
						<CnttTp>EVLP</CnttTp>
						<EnvlpdData>
							<Rcpt>
								<KEK>
									<KEKId>
										<KeyId>sred-key-id</KeyId>
										<KeyVrsn>0</KeyVrsn>
										<DerivtnId>v84aBQfa0EAAiw==</DerivtnId>
									</KEKId>
									<KeyNcrptnAlgo>
										<Algo>E3DC</Algo>
									</KeyNcrptnAlgo>
								</KEK>
							</Rcpt>
							<NcrptdCntt>
								<CnttTp>DATA</CnttTp>
								<NcrptdData>PZYwtJIrmyz2s9V/Oixg7iwXQZs/Wgk5HTM4CYIYvBk=</NcrptdData>
							</NcrptdCntt>
						</EnvlpdData>
					</PrtctdCardData>
				</Card>
				<Crdhldr>
				    <TxVrfctnRslt>
				        <Mtd>CRYP</Mtd>
				        <VrfctnNtty>TRML</VrfctnNtty>
				        <Rslt>SUCC</Rslt>
				    </TxVrfctnRslt>
				    <TxVrfctnRslt>
				        <Mtd>NPIN</Mtd>
				        <VrfctnNtty>ISSR</VrfctnNtty>
				        <Rslt>NOVF</Rslt>
				    </TxVrfctnRslt>
					<Authntcn>
						<AuthntcnMtd>NPIN</AuthntcnMtd>
						<CrdhldrOnLinePIN>
							<NcrptdPINBlck>
								<CnttTp>EVLP</CnttTp>
								<EnvlpdData>
									<Rcpt>
										<KEK>
											<KEKId>
												<KeyId>pin-key-id</KeyId>
												<KeyVrsn>0</KeyVrsn>
												<DerivtnId>ijSxBQfa0EAARA==</DerivtnId>
											</KEKId>
											<KeyNcrptnAlgo>
												<Algo>E3DC</Algo>
											</KeyNcrptnAlgo>
										</KEK>
									</Rcpt>
									<NcrptdCntt>
										<CnttTp>DATA</CnttTp>
										<NcrptdData>C+tsNydZBW8=</NcrptdData>
									</NcrptdCntt>
								</EnvlpdData>
							</NcrptdPINBlck>
							<PINFrmt>ISO0</PINFrmt>
						</CrdhldrOnLinePIN>
					</Authntcn>
				</Crdhldr>
			</Envt>
			<Cntxt>
				<PmtCntxt>
					<CardPres>true</CardPres>
					<CrdhldrPres>true</CrdhldrPres>
					<AttndncCntxt>ATTD</AttndncCntxt>
					<TxChanl>MPOS</TxChanl>
					<AttndntMsgCpbl>true</AttndntMsgCpbl>
					<CardDataNtryMd>ECTL</CardDataNtryMd>
					<FllbckInd>NFLB</FllbckInd>
					<SpprtdOptn>PINQ</SpprtdOptn>
				</PmtCntxt>
			</Cntxt>
			<Tx>
				<TxCaptr>true</TxCaptr>
				<TxTp>CRDP</TxTp>
				<MrchntCtgyCd>1234</MrchntCtgyCd>
				<SaleRefId>purchase_444463377TMM61J2F571</SaleRefId>
				<TxId>
					<TxDtTm>2025-11-28T15:41:07.868Z</TxDtTm>
					<TxRef>259535822818</TxRef>
				</TxId>
				<InitrTxId>259535822818</InitrTxId>
				<RcncltnId>259535822818</RcncltnId>
				<TxDtls>
					<Ccy>GBP</Ccy>
					<TtlAmt>5.51</TtlAmt>
					<DtldAmt>
						<Grtty>0.00</Grtty>
					</DtldAmt>
					<OnLineRsn>IFPR</OnLineRsn>
					<ICCRltdData>ggIZgIQHoAAAAAQQEJUFAAAAgAGaAyURKJwBAF8qAggmnwIGAAAAAAVRnwMGAAAAAAAAnwkCAAKfEBIBEKBAACAAAAAAAAAAAAAAAACfGgIAVp8eCDIxMTAwMjEynyYITn1FjSrcl22fJwGAnzMDIAgInzQDAgMAnzUBIp82AgADnzcEsCALrl80AQGfbgsIQAADMDAAAQIIgFAKTUNENTUgdjEgMA==</ICCRltdData>
				</TxDtls>
			</Tx>
		</AuthstnReq>
		<SctyTrlr>
			<CnttTp>AUTH</CnttTp>
			<AuthntcdData>
				<Rcpt>
					<KeyIdr>
						<KeyId>SpecV1TestKey</KeyId>
						<KeyVrsn>1</KeyVrsn>
					</KeyIdr>
				</Rcpt>
				<MACAlgo>
					<Algo>CCA3</Algo>
				</MACAlgo>
				<NcpsltdCntt>
					<CnttTp>DATA</CnttTp>
				</NcpsltdCntt>
				<MAC>TbGD8wMcsxYBGJXXRsk3Mw==</MAC>
			</AuthntcdData>
		</SctyTrlr>
	</AccptrAuthstnReq>
</Document>
```