Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

1 Description

This bank service request enables Business Users to initiate through TPPs, bulk/batch payments allowing them to make multiple payments from their payment accounts.

...

  • Bulk = A group of payments (e.g. in a file) to be paid to multiple creditor accounts from the same debtor account, on the same date, with the same currency and through the same payment scheme.

  • Batch = A group of payments (e.g. in a file) to be paid to multiple creditor accounts from multiple debtor accounts with the same currency. These may involve different payment execution dates, currencies and payment schemes.

Please also note the following working assumptions:

...

The scope of the Bulk and Batch Payments service initiation related to the segments of payers and payees is shown below:

Payer

Payee

Consumers

SME

Corporates

Consumers

SME

Corporates

(tick)

(tick)

(tick)

(tick)

(tick)

1.2 Bulk or Batch Payment (BBP) - Example User Story

Panel
panelIconId0cd1bba7-8f00-45e4-bfea-96eab8c2d5f8
panelIcon:dsfa:
panelIconText:dsfa:
bgColor#E6FCFF

User Story

As a User ( Business or Corporate),

I want to provide my consent to a TPP to use my payment account for initiating a batch of payments to multiple recipients with a domestic account owned by a business or an individual,

so that I can pay all the relevant beneficiaries by a single transaction with the TPP.

2. User Journey

image-20240508-092009.pngImage RemovedImage Added

The authentication used in this journey replicates the journey of Single Instant Payment. The journey covers the following scenarios:

...

LFIs MUST determine the situations where this supplementary information is required, under consideration that the principle of maintaining parity between the Open Finance journeys and LFIs' online channel journeys MUST be applied. Thus, if supplementary information is not provided within the LFIs' online channels directly to Users, then it MUST NOT be provided during an Open Finance Service Initiation request journey. LFI’s MUST also ensure that this information does not constitute an obstacle or additional check on the Consent provided by the User to the TPP.

3. Wireframes

image-20240508-092205.pngImage RemovedImage Added

3.3 Rules & Guidelines

...

#

...

Step

Rules & Guidelines

#

Step

Rules & Guidelines

BBP-1

Bulk or Batch Payment Consent

Requested execution date: The file uploaded for BBP may contain the requested execution date(s) for the bulk/batch of payments. In this case, TPPs should not allow the customer to define the requested execution date. TPPs could read the file and pre-populate the requested execution date in the case of bulk payments and also for the batch payments if the same throughout the file.  If this information is not present in the file then the TPP MUST allow Users to specify the Requested Execution date.

Note: For batch payments this will only hold if these parameters will need to apply to all the transactions within the batch.

User payment Account Selection: 

If TPPs allow Users to import/upload a batch/bulk file of payments, then the file may contain one User payment Account (for bulk) or multiple User payment Accounts (for batch). In this case, TPPs MUST not allow the customer to define a User Payment Account for the bulk or batch. TPPs MUST read the file and pre-populate the User payment Account in the case of bulk payments. Moreover, TPPs could use the User payment Account sort code(s) to identify and pre-populate the User’s LFI that the bulk/batch needs to be submitted for processing.  

If the uploaded file does not have the User payment Account(s) in the file, TPPs should allow Users to enter the User payment Account details.

User Consent to TPP:

TPPs must request for the User’s consent to the payment clearly displaying any of the following information if specified by Users or pre-populated by TPPs:

  • Total amount of all payments in the bulk/batch and currency (subject to item #2 options).

  • Number of payments included in the bulk/batch (subject to item #2 options).

  • Reference for the file (as per best practice) (subject to item #2 options).

  • Instruction instrument (payment scheme) (subject to item #1 options).

    • Requested Execution date (subject to item #1 options).

    • User payment Account or selected LFI (subject to item #3 options).

    • Any supplementary information required

    which
    • that the LFI has published as required and is specific to that LFI.

    Additional Consent Parameters

    TPPs MUST:

    1.2 Set the Accepted Authorization Type (as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#7.-Accepted-Authorization-Type).

    1.3 Set the Authorization Time Window (as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#8.-Authorization-Time-Window) if there are specific timing requirements that must be met for the consent authorization. This is also relevant to cases where multiple authorizers are required to authorize the payment consent (Please refer to https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#18.-Multi-User-Authorization-Flow).

    1.4 Set the Consent Expiry Date accordingly if the Authorization Time Window is set to more than 1 day. This is to avoid the consent expiring before all necessary authorizations are completed. Otherwise, the default value of the Consent Expiry Date MUST be set to the same day (i..

    e

    the current day). The Consent Expiry Time MUST always be set to 23:59:59 of the Consent Expiry Date.

    1.5 Set the Risk Information Block (as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#9.-Risk-Information-Block)

    TPPs MUST:

    1.6 Enable Users to provide explicit consent for the initiation of a BBP payment order from their online payment account held at their LFI as per the payment details specified in the payment Consent.

    BBP-2

    Consent Staging

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#10.-Consent-Staging

    BBP-3

    Hand-off to LFI

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#11.-Hand-off-to-LFI

    Example wording to use: ‘We will securely transfer to YOUR LFI to authenticate and make the payment“.

    BBP-4

    Authentication

    LFI Authentication Only

    LFIs MUST:

    4.1 Enable Users to perform authentication with their LFIs, as per the following sections:

    4.2 Re-direct Users back to the TPPs, with information that the Consent has not been authorized, if User Authentication has failed or Users opted to cancel the authentication/authorization process.

    Centralized Authentication and Authorization (Federated) Only

    4.3 As per https://openfinanceuae.atlassian.net/wiki/x/HoBBAw

    BBP-5

    Confirmation/ Authorization

    LFIs MUST:

    5.1 Enable Users to authenticate using Multi-Factor Authentication (MFA) in order to review and authorize the Bulk or Batch Payment (BBP) Consent.

    5.2 Retrieve from the OFP the BBP Consent details staged by the TPP using the unique Consent Identifier and present to Users all the details included in this.

    5.4 Check the authorization status of the selected payment account is in accordance with the TPPs' Accepted Authorization Type as per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#13.-Check-Accepted-Authorization-Type.

    5.6 Present to Users the following minimum required information for authorizing the Bulk or Batch Payment (SIP) Consent:

    • Total amount of all payments in the bulk/batch and currency 

    • Number of payments included in the bulk/batch 

    • Reference for the file (as per best practice) 

    Instruction instrument (payment scheme) (subject to item #1 options).
    • Requested Execution date 

    Supplementary/ Missing Payment Information: Although the payee details and total amount are known to the LFI before the User is authenticated, LFIs must introduce a step after authentication to allow Users to provide additional information associated with the bulk/batch payment in order to complete the payment instructions if the payment order is incomplete. This information may include:

    • User payment Account Identification details (for bulk payments only) 

    • Requested Execution date (for bulk payments and for batch only if it applies to all payments in the batch and if not already part of consent)

    • LFIs should be able to introduce a step after authentication to display additional /supplementary information in relation to the bulk atch payment instructions such as expected execution date, specific terms related to this payment type, Fees & VAT (if applicable) that may be applied to the User account etc.

    Note - if applicable, both bank charges and VAT MUST be presented and stated separately, prior to the User Consent authorization.

    5.7 Request Users to authorize the BBP Consent, so that a Bulk or Batch Payment can be initiated.

    5.8 Provide Users the ability to abort the payment journey, if Users decide to terminate the request. The LFI MUST hand-off the Users back to the TPP, providing the necessary error message to the OFP and reject the Bulk or Batch Payment (BBP) Consent.

    5.9 Check the Authorization Time window is valid as per

    5.10 Change the state of the BBP Consent from Awaiting Authorization to Authorized, when all Authorizers (one or more) have authorized the payment Consent.

    5.11 Update the BBP Consent details stored in the OFP with all the information included in the BBP Consent authorized by the User.

    OFP MUST:

    5.12 Confirm back to the LFIs that the Bulk or Batch Payment (BBP) Consent details have been updated successfully.

    Multi-Authorization Journey Only

    5.13 As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#18.-Multi-User-Authorization-Flow

    BBP-6

    Payment Initiation

    LFIs MUST:

    6.1 Trigger the payment initiation process for the payment Consent immediately after the Bulk or Batch Payment (BBP) Consent has been fully authorized by all required authorizers (one or more).

    6.2 Additionally apply all existing BAU payment account controls and limits such as single transaction value limit, total transaction value limit, AML checking (if applicable) and others, as if the payment request has been initiated by the existing channels of the LFI. LFIs MUST send an appropriate error response to the OFP in case the payment is rejected due to violating any of these limits.

    6.3 Reject the payment initiation if the payment account selected for the payment has insufficient funds. The OFP MUST be notified about this rejection with an appropriate error message.

    6.4 Subject to successful BAU checking, validation and payment processing, proceed with the execution of the payment by either submitting the payment to the underlying payment rails or executing internally as Intra-bank payment.

    6.5 Provide the OFP with all the available information in relation to the initiated payment instruction including the payment’s unique identifier Payment Transaction ID. The format of the Payment Transaction ID can be found in the UAE Open Finance Standard specifications.

    6.6 Ensure that the Payment Reference provided in the Bulk or Batch Payment (BBP) Consent is made available to the Beneficiary’s account information in the case of Intra-bank payments within the same LFI.

    OFP MUST:

    6.7 Send an appropriate error response to the TPPs in case the payment is rejected due to violating any of the LFIs BAU payment accounts checks or limits.

    6.8 Send to the TPP the appropriate error message in case the payment initiation was rejected by the LFI due to insufficient funds in the selected payment account.

    6.9 Provide the TPP with all the available information in relation to the initiated Bulk or Batch Payment (BBP) instruction including the payment’s unique identifier Payment Transaction ID.

    BBP-7

    Payment Status Update

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#15.-Payment-Status-Update

    BBP-8

    Hand-off back to the TPP

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#14.-Hand-off-back-to-the-TPP

    BBP-9

    Confirmation to User

    9.1.1 As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#16.-Confirmation-to-User

    BBP-10

    Payment Notifications

    As per https://openfinanceuae.atlassian.net/wiki/spaces/standardsv1draft3/pages/70092902/Common+Rules+and+Guidelines#17.-Payment-Notifications