"10th article" standard Commercial Bank and the third party pays the organization cooperation already issued

　NetEase Finance April 17 News financial regulators today to NetEase Finance confirmed, commonly known as "article 10th" on standardizing commercial banks and third-party payment agencies to cooperate with the document has been issued this month 10th.

According to today's Caixin network reported that the Banking Regulatory Commission and the central bank in recent days, commonly known as "10th Wen" "China Banking Regulatory Commission on strengthening commercial banks and third-party payment agencies to cooperate business management notice" to standardize commercial banks and third-party payment agencies.

In terms of the qualification of third party payment institutions, 10th requires the first bank to assess the customer's risk tolerance to determine the account association, type of business, and transaction limit associated with the third party payment institution, including the single payment limit and the daily cumulative payment limit. After the customer has applied for and authenticated and identified, a single payment limit and a daily cumulative payment limit can be adjusted appropriately within the interim period. It is up to the bank to decide what the quota is and how long the temporary period is.

Article 10th reaffirms the importance of client authentication. For the first time when a business association is required, it must be authenticated by the dual identity of a third-party payment agency and a bank, which may have been independently authenticated by a third party payment agency, and 5th for commercial banks. Article 10th again stressed that the bank in the electronic channel to authenticate customers, should use two-factor authentication method to identify the customer identity.

In the area of liability for compensation, the article 10th requires that commercial banks, when signing cooperation agreements with third party payment agencies, require that customers be transferred to strengthen their identity certification through large sums of money to ensure that the clients themselves issue funds transfer requirements. Inform the customer of the large payment and suspicious payment. The payment transaction funds drawn from the bank account shall be returned to the original bank account if the transaction is terminated or failed.

In the view of bankers, at least 10 of the main 18 requirements of article 10th are aimed at the payment agencies ' non-compliance with the banks in their previous operations. For example, 11th, commercial banks should expressly require that third party payment agencies should not be unauthorized to shield the bank's payment interface and interface. The bankers reflected that they found that payment agencies did not provide customers with a choice of bank card payment interface, or the bank card payment gateway in inconspicuous places. "This is the problem of paying institutions to create banks and users."

In strengthening the bank's internal risk prevention, the bank will be required to incorporate the cooperation business of the third party payment institution into the monitoring scope of the operation risk monitoring system, especially for the large and abnormal fund receipts and disbursements to be monitored. Banks should build secure network channels (if they are connected, VPN channels, etc.), establish security boundaries (such as deploying firewalls, DMZ quarantine zones, etc.) to prevent the third party from Cross-border access.

According to bankers, the so-called Cross-border access means that the payment interface was originally used to pay the cost of water and electricity, but shopping has gone from this channel, "the payment agencies have been sneaking around." Without the authority and supervision of banks, it is impossible to do so in a compliant manner. ”

In a report on the issue today, CICC said the company believes that third-party payments agencies are facing challenges in fast payment and data sharing, but the actual effect depends on enforcement:

1. The fast payment function of the third party payment institution will be further restricted. Following four lines down fast payment limit, this article 10th refers to two points, may be quick payment, including the balance treasure, such as the purchase of the impact:

A, the use of fast payment is limited. Article 10th states that "Banks should build secure network channels, establish security boundaries and prevent cross-border access by Third-party agencies". The so-called Cross-border access, refers to the function of fast payment beyond the bank's authorized scope. As far as we know, banks generally set certain restrictions on the use of payment interfaces, such as only to pay utilities, but some third-party payment agencies in the operation of the expansion of the payment interface for the purpose of the behavior, such as widening the width to the shopping.

B, fast payment is restricted. Article 10th states that "the first time a business association is established, it must be identified through the dual identity of a third-party payment institution and a bank". In practice, the opening fast payment usually only requires the identity of the Third-party payment agencies. Increasing the identity of the bank will affect the convenience of quick payment and the customer experience.

2. Third party payments need to share customer and transaction information with the bank. Article 10th and the Central bank issued last year, "bank card receipts Business management measures" pointed out that "the receipt of institutions should ... Correct selection of transaction types, accurate identification of transaction information and send ... The transaction information should include at least: The Merchant name, category and code of the goods or services directly provided, the type and code of the receiving terminal (Network payment interface), the time and place of the transaction (network address of the network merchant), the amount of transaction, the type and channel of the transaction, and the way of The transaction information of the network merchants should also include the commodity order number and the network trading platform name. "But in practice, the information sent to the bank by some third-party payment agencies does not include information on the level two account, which means that the bank can only see that there is a sum of money traded through Alipay [Weibo], but it is not possible to know the specific direction and use of the funds." We understand that customer and transaction information is an important asset of a third-party payment company in a large data environment, and that if the future is forced to share with the bank, it will affect the value of third-party payments of the company's data.