This space is deprecated and no longer supported. Please use the latest available version here.
Common Rules and Guidelines
This section contains Rules & Guidelines which are common for all Bank Data Sharing and Bank Service Initiation capabilities described in the UAE Open Finance Standards.
IMPORTANT NOTE:
LFIs & TPPs MUST comply with the rules and guidelines listed in this section.
LFIs MUST connect all mandatory APIs to the Open Finance Platform and may provide direct access to TPPs.
Note: The Standard does not support the direct access of LFIs to TPPs.
Basic terminology
In the context of the Open Finance Standard, the following terms have been used:
Debtor: Term used to describe the originating payer of an Open Finance bank service initiation. In most of the cases, the Debtor is the User of the Open Finance services offered by TPPs.
Creditor: Term used to describe the beneficiary payee of an Open Finance bank service initiation.
1. Supported Accounts & Payment Rails
LFIs MUST:
CRG-1.1 Provide Open Finance APIs for as many of the following account types as they allow their Users to access in their existing Digital channels:
Retail Accounts: Accounts used for the execution of payment transactions provided by LFIs to individuals
Current accounts, Savings accounts
SME Accounts: Accounts used for the execution of payment transactions provided by LFIs to SMEs
Current accounts, Savings accounts
Corporate Accounts: Accounts used for the execution of payment transactions provided by LFIs to Corporates
Current accounts, Savings accounts
CRG-1.2 Provide Open Finance APIs for the aforementioned account types in all currencies. The scope of currencies is as follows:
CRG-1.2.1 For Bank Data Sharing, the aforementioned accounts as per CRG-1.1 MUST be supported in ALL available currencies.
CRG-1.2.2 For Bank Service Initiation, the following scope rules apply:
For domestic payments (i.e. payment accounts within the UAE juristinction) both debtor (initiating) payment account and creditor (beneficiary) payment account MUST be in AED.
Domestic payments (i.e. payment accounts within the UAE juristinction) involving FX payment conversion at the debtor (initiating) payment account (for example from USD to AED or GBP to AED) before domestic payment initiation are NOT in the scope of the current version of the Open Finance Standard.
For international payments (i.e. payments to accounts outside the UAE juristinction), ALL available currencies supported by LFIs MUST be supported for Open Finance payment initiation. For more informaiton, please refer to International Payments | 1. Description.
CRG-1.3 Allow Users to authorize consents only for eligible accounts.
CRG-1.4 Provide Open Finance APIs for domestic Payment Initiation capabilities from the aforementioned account types using ONLY the Instant Payment Platform (IPP).
CRG-1.4.1 In the scenario that the Creditor account is with an LFI that has not been onboarded with the IPP platform, the LFIs MUST perfrom their BAU check and reject any payments to Creditor accounts not supported by the IPP platform.
CRG-1.4.2 In the scenario that IPP is unavailable, for example, it is going through maintenance and planned downtime, the LFIs MUST NOT route the Open Finance payments via other payment systems. Instead, LFIs MUST keep the status of the payment to pending and process the payment as normal when IPP is available again.
Note: This does not exclude edge cases where the payment value may be applied on a different date than the payment authorization. CBUAE will be monitoring the ecoysystem for these cases to assess whether remediations may be required in the future.
CRG-1.4.3 In the scenario that IPP does not have the user's date/city of bith registered, the LFIs MUST NOT route the Open Finance payments via other payment systems. Instead, LFIs MUST reject the Open Financen payment informing the User what is required to be done in order to resolve this issue. It is expected that the LFIs MUST obtain this information through the KYC or another process, to ensure that this mandated information is registered with the IPP platform.
keep the status of the payment to pending and process the payment as normal when IPP is available again.
CRG-1.5 Provide Open Finance APIs for International (i.e. cross-border) Payment Initiation capabilities from the aforementioned account types using ALL available payment rails in use by LFIs to support International payment initiation for their existing online channels.
2. User Payment Account Selection
3. Payment Amount & Currency
4. Creditor Identification
5. Debtor Reference
6. Creditor Reference
7. Is Single Authorization flag
8. Authorization Expiration DateTime
9. Risk Information Block
9.1 TPP Obligations
Based on the type of payment/use case, TPPs have different obligations with populating the various parts of the Risk Information Block.
Risk Information Block Element
| Payments to Merchants onboarded by TPPs (Pay by Account) | P2P/B2P Payments | Payments-to-self | Payments to Businesses non-onboarded by TPPs |
---|---|---|---|---|
A. User (Debtor) Indicators Information related to the User. | ||||
| C (if onboarded) | C (if onboarded) | C (if onboarded) | C (if onboarded) |
| C (if customer present) | C (if customer present) | C (if customer present) | C (if customer present) |
| O | O | O | O |
| C (if onboarded) | C (if onboarded) | C (if onboarded) | C (if onboarded) |
B. Transaction Indicators Information in relation to the transaction initiated by the User. | ||||
| M | M | M | M |
| M | M (Y) | M (Y) | M (Y) |
| M | M | M | M |
C. Destination Delivery Address Information for all related e-commerce payments. Destination Delivery Address may not be relevant for certain in-store transactions for example when goods/services are delivered to customers in-store. In these cases, TPPs are NOT required to provide this field. | ||||
| M (Online), C (Instore) | C (upon availability) | N | M (Online), C (Instore) |
| M (Online), C (Instore) | C (upon availability) | N | M (Online), C (Instore) |
| M (Online), C (Instore) | C (upon availability) | N | M (Online), C (Instore) |
D. Beneficiary Indicators Information in relation to the Beneficiary of the initiated payment. | ||||
| M | M (Retail) | M | M |
| M | M | M | M |
| M | N | N | N |
| C (if verified by KYC or COP) | N | N | C (if verified by KYC or COP) |
| C (if verified by KYC or COP) | M | M | C (if verified by KYC or COP) |
| C (if verified by KYC or COP) | M | M | C (if verified by KYC or COP) |
| M (Trade License number) M (Account Holder Name) | O (Emirates ID) C (D4) (Account Holder Name) | O (Emirates ID) C (D4) (Account Holder Name) | O (Trade License number) C (D4) (Account Holder Name) |
| M | N | N | O |
9.2 LFI Obligations
9.3 Additional TPP Obligations
9.3.1 Details Verification for Merchants onboarded by TPPs
10. Consent Staging
11. Hand-off to LFI
12. Payment Account Selection at LFI
13. Check Is Single Authorization flag
14. Hand-off back to the TPP
15. Payment Status Update
GRC-15.10 Payment Status Model
This figure illustrates the payment status model that can be used to cover the payment status throughout the payment's lifecycle. The model is applicable to all payment types including Single Immediate, Future Dated, Fixed Recurring, Variable Recurring, Fixed On-demand, Variable On-demand, and Variable-defined.
Payment Status | Description |
---|---|
Pending (ISO 200022 PDNG) | Payment initiation or individual transaction included in the payment initiation is pending. Further checks and status updates will be performed. |
Rejected (ISO 200022 RJCT) | The payment initiation has been rejected |
Accepted Settlement Completed Debtor Account (ISO 200022 ACSC) | The payment has successfully passed technical validation, customer profile checking, and funds checking. The payment instruction has been accepted for execution and the settlement is now in process. The amount of the payment has been reserved in the User Account and the payment has been sent through the payment rails for execution. The User Account will be debited in response to successful credit accepted by the recipient LFI. Alternatively, in response to rejected credit from the recipient LFI (or not response), the User Account will be released from the reserved payment amount as per the BAU payment initiation processes of the LFI. |
Accepted Credit Settlement Completed (ISO 200022 ACCC) OR Accepted Without Posting (ISO 200022 ACWP) | The receiving account holding entity has successfully accepted the credit transfer initiated by the TPP payment instruction and the credit has been posted to the creditor customer’s account. OR The receiving account holding entity has successfully accepted the credit transfer initiated by the TPP payment instruction, but the credit has not been posted to the creditor customer’s account yet. |
Accepted with change (ISO 200022 ACWC) | The sending LFI has accepted the payment order with changes to the initial order. |
16. Confirmation to User
17. Payment Notifications
CRG-17.5 Multi-User Authorization Flow Notifications
In scenarios of multi-user accounts such as shared accounts or corporate accounts where multiple users have delegated authority to approve the payments.
18. Multi-User Authorization Flow
19. Check Authorization Time Window
20. Purpose of Payment
21. Shari’ah compliance of TPP
22. Supplementary Information
23. TPP Obligations towards Customer Verification
© CBUAE 2024
Open License and Contribution Agreement | Attribution Notice
Please try out our Advanced Search function.