Accounts Questionnaire

License / Registration reference number

Date of license/registration

Type of license/registration (required)

6. System Information
Please outline your operational and infrastructure arrangements related to essential acquiring capabilities

Processing System (required)

Data Center (required)

Data Center Hosting (required)

Data Center Redundancy (required)

Processing Message Type (required)

Pos Terminal Driving and Management (TMS) (required)

Single/Multi Currency Support (required)

7. Products and Services (Which of the following Products and services do you currently support)

Please select all payment options that you offer (required)

Credit/Debit Cards

Mobile Money

Electronic Funds Transfer

Pass through wallets (Applepay/Google pay, etc)

Digital wallets with own acceptance mark

Crypto

BNPL

Local payment methods

Supported card payment scheme (required)

Visa

Mastercard

American Express

UnionPay

Discover

JCB

In which areas do you provide payment services? (required)

Card Present

Card Not Present

Omnichannel

Specify if Other (required)

9. Products & services

Payment page (required)

Checkout (required)

Gateway (required)

Card on file tokennization (required)

MPI (Merchant Plug in for 3DS) (required)

Dynamic Currency Conversion (required)

Installments (required)

Recurring payments (required)

Push payments (P2P,P2M, M2P other) (required)

Payouts&Remittances (required)

Split payments (required)

Cross-border payments (required)

Tokenization (Applepay, Google pay, etc) (required)

Fraud management (required)

POS software (required)

Merchant Settlement Reports (required)

Merchant Transaction Reports (required)

Digital On-boarding (required)

Digital StoreFront (required)

Loyalty solutions (required)

Any additional services provided to merchants? (required)

Are you prepared to support the industry-wide 8-digit BIN standard? (required)

Could you please confirm if you are dependent on the capabilities of acquirers to perform the following tasks (required)

Underwriting of merchants

Onboarding of merchants

Velocity monitoring of merchants

Website monitoring of merchants

Sanctions screening systems

Transactions Monitoring

Merchant Termination

None of the above

10. Ecosystem Risk

Please select statements that describe your processes, policies and capabilities (required)

You have a team of professionals for merchant onboarding responsible for approving and declining the Merchants.

You have a team of professionals for performing merchant risk monitoring process

You have a team of professionals for performing merchant investigation process

Your underwriting and onboarding policy has a step to screening Merchants through Terminated file (VMSS) before onboarding a Merchant

No to all

Who in your organizations responsible for performing Merchant underwriting, performing due diligence, background checks on Merchants and responsible for final decision-making of onboarding the Merchant? (required)

Who in your organization is responsible for conducting Merchant activity monitoring including daily monitoring of merchant transaction activities to identify unusual or suspicious transaction, detect and prevent fraud or other form of illegal and brand- damaging activity and make final decisions on the Merchants identified as risk to the Payment ecosystem? (required)

Who in your organization is responsible for performing investigations on Merchants involved in illegal activity, fraud, or brand damaging activities including initial assessments, detailed investigations, data analysis, and making final decisions if Merchants are identified as a risk to the payment ecosystem? (required)

Please provide the name and description of the tools that are used for Merchant activity monitoring (monitoring of daily and monthly transaction activity, velocity monitoring, unusual or sudden changes in normal Merchant activity, etc.) (required)

Please provide name and description of the tools that are used for incident investigation of Merchants ( Used for alerts, data analysis, recording, and reporting findings) (required)

Please select the statement describing you Merchant onboarding (required)

a. You have a system to capture information on all the merchant applications, and retrieve it in the future

b. You only source and onboard merchants within the jurisdiction of the acquirer

c. You pass information about every merchant to the Acquirer for their approval prior to onboarding

d. You have merchant agreements to ensure compliance to applicable PCI DSS and Visa security requirements

Who handles the storage and transmission of consumer data in your transaction flow (required)

Your company

Acquirer

Vendor

11. Compliance and AML
11.1 AML policy and team

Please select statements that describe you Compliance and AML Risk policy (required)

You have a dedicated compliance and AML function/department.

You have a dedicated compliance manager and MLRO.

Your compliance and audit functions have direct and effective access to the Senior Management/Governing Body.

Access includes regular meetings and independent reporting to the Senior Management / Governing Body.

The institution's compliance resource is adequate and commensurate with the size and complexity of the business.

You maintain policies and procedures, including a compliance manual and AML manual, that clearly communicate the applicable regulatory and internal requirements.

You have outsourcing arrangements of key compliance functions (MLRO, compliance officer, transactions monitoring, sanctions screening).

No to all

Period of MLRO Employment How long has the MLRO been employed by the company?

What are the organizational functions (e.g Compliance and/or Business) participating in the approval of customers?   (required)

Do you have business in or with entities or countries that are subject to OFAC sanctions

Yes

Methods of the sanctions screening (Automated/Manual)

Name of the sanctions screening solution

List of the sources utilized for sanctions screening (OFAC, UN, HMT, Others…)

Are your merchants sanctioned-screened regularly after onboarding? Describe the frequency

11.3 PEP derogatory media Screening

Methods of the PEP/derogatory media screening (Automated/Manual)

Name of the screening solution

List of the sources utilized for PEP/derogatory media screening

Frequency of the screening

11.4.Transaction Monitoring

Which function is responsible for the ongoing AML/ATF monitoring of Visa transactions? (required)

You have system in place to detect, prevent, and investigate money laundering

You have a transaction monitoring system covering transactions related to Visa products

The transaction monitoring solution is a real-time solution

The organization delegates any AML/ATF responsibilities to TPAs

Who is responsible for reviewing and reporting suspicious transactions? (required)

Methods of the transaction monitoring (Automated/Manual)

Name of the transaction monitoring solution

Number of scenarios utilized for detecting unusual merchant's activity

Frequency of the transaction monitoring

Please describe major (at least 5) scenarios for detecting unusual merchant’s activity

11.5.Third Party controls

If you rely on third-parties for any material compliance and AML outsourcing such as using the services of third parties for AML monitoring or drafting of policies and reporting to FIU, what due diligence controls are applied over third-party agents (TPAs)? (required)

If you rely on third parties for any material compliance and AML outsourcing, how often is the review of TPAs conducted? (required)

11.6.Merchant Due Diligence

Describe the due diligence process that is performed over (please refer to the internal policy and specify the chapters and pages covering due diligence process for your clients/merchants (required)

Please select the statement describing your Merchant due diligence (required)

You have a process to ensure you are aware of your customer/merchant business

You require evidence of ownership, residence, ID of the merchant owners

You check if your merchants have the required permissions/licenses to undertake the activity in their markets

You have a process for terminating fraudulent merchants after investigation

You insert merchant details into the terminated merchant file after termination

You risk-rate your merchants/clients? (e.g. Low, Medium, High risk)

Know Your Customer (KYC) information refresh frequency depends on the merchant activity and risk classification of the merchant

No to all

Describe initial and routine physical premises visits of their customers/merchants business location or performs one of the below listed measures for merchant's business verification (required)

You visit the phys ical premises of your merchants/customers

Merchant’s website crawling (products and services);

Test purchases from merchant’s website;

Validation of list of products on merchant’s website with declared business.

Collection of data from open media (e.g. Google maps, government registers etc.)

Video calls with merchants.

How frequently do you refresh your Know Your Customer information? (required)

How frequently do you review the KYC information of your High-Risk clients/merchants? (required)

11.7 Internal and Independent Audit

Do you have an Internal Audit function? (required)

Yes

How often is the AML Program audited? (required)

Who is responsible for managing the audit? (required)

Who is informed of the results from the audit? (required)

Describe the scope and the frequency of the periodic audit (required)

Has there been an independent (internal or external) audit that included a review of the client AML/ATF and sanctions program in the last 24 months? (required)

What is the date of your latest independent audit report? (required)

What is the date and result of your latest regulatory inspection, if applicable? (required)

Type of independent audit (internal/external): (required)

Senior Management are informed of the Audit results (required)

Yes

Scope of the periodic audit covers Visa products (required)

Yes

The latest audit of the AML program resulted in material findings (required)

Yes

All material findings from the latest AML audit report have been remediated (required)

Yes

11.8 Training and Awareness

Are your employees required to complete mandatory compliance and AML training? (required)

Yes

Do you provide annual mandatory compliance and AML training to your senior management? (required)

Yes

Do you require your employees to acknowledge the completion of the annual mandatory compliance and AML training? (required)

Yes

Do compliance/AML employees have certifications in AML/ATF and/or Sanction Compliance? (required)

Yes

How do you communicate important changes of polices and procedure and regulatory requirements to your employees? (required)

11.9 Record Keeping

Do you have record keeping policies in accordance with applicable regulations in your jurisdiction? (required)

Yes

What is the retention period for merchant and transaction records, and in what formats are these records stored?

12. Confirmation and Acknowledgment

I have submitted the Certification intake form prior to sending the Certification application package.

I have reviewed the information in the PF Certification guide and will provide additional documentation in full as specified in the Application package section to CEMEAPaymentFacilitatorsTeam@visa.com

I understand the procedure for CPA/Certification and limitations related to CPA approval

I have reviewed the Visa risk standards as specified in the Visa Acceptance Risk Standards (VARS) and the Payment Facilitator and Marketplace Risk Guide

I would like to be assessed for the Premium Certification tier and understand that it will require providing additional information upon request

Accounts Questionnaire

©Copyright 1996-2025. All Rights Reserved.