What Visa and Mastercard require
In the Visa Core Rules of 18 April 2026 (4.1.1.3), an issuer is prepared to receive and respond to an authorisation request for a credit transaction, and updates cardholder-facing applications with the pending credit in the same timeframe as a purchase. The issuer also keeps its approval rate for credit transactions at 99% or more.
In Mastercard's Transaction Processing Rules of 9 June 2026, an acquirer has had to support the online authorisation of refunds acquired on the Dual Message System since 12 April 2024, and enables it for a merchant on request (2.1). Issuers support it for all Mastercard and Debit Mastercard account ranges except non-reloadable prepaid ones (2.2).
Where a refund authorisation shows up in a platform
Modules that do the work
- Card acquiringCard acceptance on the phone, in store and online, through the acquirer you choose.
- CheckoutA hosted checkout for cards, wallets, bank payments and crypto, routed to the best provider.
- NotificationsEmail, SMS, push and in-app messages in your brand, through the providers you choose.
Platforms that need it
Where it is written
The laws and standards this page's facts come from.
- Visa Core Rules and Visa Product and Service Rules, 18 April 2026: 4.1.1.3 (Visa)
- Mastercard Transaction Processing Rules, 9 June 2026: 2.1 and 2.2 (Mastercard)
General information, not legal advice: what applies to you depends on your services and your market.