← Payment Reference GuidesProtocol Reference

ISO 8583

The foundational financial transaction message standard used by ATMs, POS terminals, card switches, and payment gateways worldwide. Every card payment you make passes through this protocol.

Network Variations

Each card network extends ISO 8583 with proprietary data elements, subelement structures, and processing rules. Understanding these variations is essential when building or certifying against a specific network.

Visa BASE I / VisaNet

Visa's authorization network uses ISO 8583 with extensive DE48 subelements and DE63 for routing. Key structures:

FieldSubelementDescription
DE48
Additional Data
SE01POS Environment — terminal type, attendance, capability flags
SE22CAVV — 3DS authentication value for card-not-present transactions
SE23ECI — Electronic Commerce Indicator (05=full auth, 06=attempt, 07=no auth)
SE31Merchant category — enhanced MCC data
SE42Electronic commerce security level / 3DS version
SE92CPS (Custom Payment Service) condition code
DE63
Network Data
Visa routing data: transaction ID, validation code, network ID, and transaction lifecycle identifiers
DE55EMV chip data — standard TLV structure across all schemes

Mastercard BankNet

Mastercard uses similar DE48 subelement structure plus DE63 for BankNet reference data. Key differences:

FieldSubelement / DataDescription
DE48TCC (Transaction Category Code)Single-char code: T=retail, R=restaurant, H=hotel, F=fuel
SE26Wallet Program Data — for digital wallet transactions (Apple Pay, Google Pay)
SE43Universal Cardholder Authentication Field — authentication data
SE92CPS condition code equivalent for Mastercard
DE63BankNet Reference NumberMastercard's unique transaction reference assigned by BankNet. Used in clearing and dispute matching.
DE127Extended Network DataMastercard extension beyond the standard 128 DEs for additional clearing and settlement data.

Common Extensions (All Networks)

DE55 (EMV Chip Data) is standardized by EMVCo and has the same TLV structure across all networks. The content includes ARQC, AIP, ATC, TVR, IAD, unpredictable number, and terminal capabilities. Each network validates ARQC using issuer-derived session keys.

DE104-DE107 are Visa private-use extensions typically used in reconciliation and clearing messages for counts and amounts of credits, debits, and reversals in a settlement batch.