Supplemental Guidelines on BSP EMV Migration Requirement

J BANOKO SeNrnaL NG PtLIPINAS OFFICE OF THE DEPUTY GOVERNOR SUPERVISION AND EXAMINATION SECTOR MEMORANDUM NO. M.2017. 019 To : ALL BSP-SUPERVISED FtNANCIAL INSTITUTIONS (BSFls) Subject : Supplemental Guidelines on BSP EMV Migration Requirement Pursuant to Subsection XL77.9 of the Manual of Regulations for Banks (MORB) and Subsections 4L77Q.9, 41965.9, 4L93P.9 and 4196N.9 of the Manual of Regulations for Non-Bank Financial lnstitutions (MORNBFI), the Monetary Board, in its Resolution No.902 dated l June 2OI7, approved the supplemental guidelines on BSP EMV migration requirement to provide additional measures aimed at accelerating full migration of the entire payment systems network to EMV technology. A hard deadline of 30 June 2018 shall be imposed for BSFIs to fully comply with the BSP EMV migration requirement. Full compliance constitutes completion of all EMV-related activities from upgrading/enhancement of back-end processes and systems, ATM and POS terminals to the replacement of magstripe credit and debit/prepaid cards, including distribution of EMV-compliant cards. Non- compliance to said requirement will be classified as a "serious offense" pursuant to Appendix 67 of the MORB and shall be subject to monetary sanctions provided under Sections/Subsection X199 and 4199Q and 4196N.9 of the MORB and MORN BFl, respectively. Aligned with lnternational Accounting Standards No. 37, non or partially compliant BSFIs are mandated to book provisions to cover for probable fraud losses that may arise from counterfeit fraud or skimming attacks. To quantify the amount of provision, BSFIs should use the product of a loss probability rate and the outstanding balance of prepaid and debit cards or the available credit limit for credit cards beginning end of quarter 30 September 2017. The loss probability rate can be arrived at using any or a combination of the following factors: a) historical counterfeit card fraud losses; b) customer behavior; c.) nature of products, services, and customer relationships; and d) degree or extent of EMV compliance of card- accepting terminals; among others. At the end of each quarter, recorded provisions should be reviewed and adjusted to reflect the current best estimate. In order to avoid confusion as well as manage expectations of the banking public relative to the transition, all BSFIs must intensify EMV-related public awareness program using various communication channels such as websites, official social media pages, SMS/e-mail notifications, print media advisories, ATM screen displays and branch standees, among others. The information should indicate the date when the EMV cards are available and ready for pick-up by their clients as well A. l"{alriri51.. l'.'iahlr 1{lC4 l'1.ltti:.1, ihili{riiir(:ri r iii32i 70li77l:. * *;*;+i.tx;g:.11r-r;.th . 1)5Filrril(ob..;fr.Iji-}.r.*il

as the related procedures for replacing magstripe cards and distributing EMV- compliant cards. BSFIs are also expected to develop strategies to entice or force clients to replace their old cards with EMV cards (i.e. deactivation of existing cards by certain date, offering of rewards/freebies, and/or liability shift for skimming incidents). f n relation to Circular No. 936 dated 28 December 20L6, the actual restitution of cardholder/s with valid claims should take place within the 10-day resolution timeline for complaints and/or requests for chargeback as a result of counterfeit fraud. For information and compliance. STTTOTO C:FRU ? June 2OI7 Page 2 ot 2