Mastercard monitoring program for gambling and gaming merchants

In September 2022 Mastercard introduced a new element of their Data Integrity Monitoring Program to monitor gaming and gambling merchants to use the Card Verification Value (CVV) or 3D Secure in online authorization transactions.

They recently expanded the scope of transactions to include:

• Fully authenticated Network Token transactions
• Recurring payment transactions that link to a prior CVV or fully authenticated transaction

Gambling merchants have until February 1, 2025, to follow the gambling requirements under this program. Mastercard is monitoring usage of these authentication methods and will impose assessments (fines) for non-compliant gambling and gaming merchants from this date.

Who does the monitoring program affect?

You’ll be in scope for this mandate if you process under any of the following Merchant Category Codes (MCCs):

• 7800 (Government Owned Lottery – US region)
• 7801 (Internet Gambling – US region)
• 7802 (Government Licensed Horse/Dog Racing – US region)
• 7995 (Gambling Transactions)
• 9406 (Government Owned Lottery – Global excluding US)

How do I maintain compliance?

If you’re in the scope of this mandate, you should ensure that you’re authenticating transactions using one of the following methods:

• Supplying the CVV field
• Using 3D Secure, including for Network Token transactions
• For recurring transactions, referencing an authenticated transaction in the previous_payment_id field of your recurring transaction request

What penalties apply under the program?

Mastercard may assess non-compliance fines for merchants that fail compliance. These start at $2,500 USD per-month with assessments increasing from the ninth month onwards.

‍