EMV Tag Reference
Tools/EMV Tag Reference/95
TerminalFormat: bLength: 5
95

Terminal Verification Results (TVR)

Tag ID
95
Format
b
Length (bytes)
5
Source
Terminal

What it is

The Terminal Verification Results (TVRTerminal Verification ResultsEMV tag 95 — a 5-byte bitfield recording the outcome of the terminal’s risk and verification checks.View in glossary →) is a 5-byte bitmap in which the terminal records everything that went wrong or was noteworthy during the transaction: offline authentication outcomes, application version/usage issues, CVMCardholder Verification MethodHow the cardholder is verified — for example offline PIN, online PIN, signature, or no CVM required.View in glossary → problems, risk-management triggers, and issuer/script results.

The TVRTerminal Verification ResultsEMV tag 95 — a 5-byte bitfield recording the outcome of the terminal’s risk and verification checks.View in glossary → is matched against the Issuer Action Codes (9F0D/0E/0F) and Terminal Action Codes to reach the offline/online/decline decision, and it is one of the inputs to the application cryptogram.

Where it appears

Built up by the terminal throughout processing; input to action-code analysis and GENERATE ACApplication CryptogramA cryptogram the card generates to approve or decline a transaction: TC (approve offline), ARQC (go online), or AAC (decline)..

Specification reference

Defined in: EMV 4.x Book 3 (Application Specification), Annex A — Data Element Dictionary

Bit-level definitions below follow: EMV Book 3, Table 48 — Terminal Verification Results (5 bytes)

Bit & value breakdown

EMV Book 3, Table 48 — Terminal Verification Results (5 bytes)
Byte 1 — Offline Data Authentication
b8 = 0x80Offline data authentication not performed
b7 = 0x40SDAStatic Data AuthenticationOffline check where the terminal verifies a fixed issuer signature over static card data. It cannot prove the card is live, so it is vulnerable to cloning and replay.View in glossary → failed
b6 = 0x20ICCIntegrated Circuit CardThe chip embedded in the card — i.e. the EMV “chip” itself.View in glossary → data missing
b5 = 0x10Card on terminal exception file
b4 = 0x08DDADynamic Data AuthenticationOffline check where the card signs unique, per-transaction data with its own private key — proving the chip is genuine and not a clone.View in glossary → failed
b3 = 0x04CDACombined DDA / Application Cryptogram generationThe strongest offline authentication: the card signs the dynamic data and the transaction cryptogram together in one step, preventing tamper (“wedge”) attacks.View in glossary → failed
b2–b1RFUReserved for Future UseBits or bytes with no current meaning, reserved by the spec; they must be set to zero. — must be 0
Byte 2 — Application Version / Usage
b8 = 0x80ICCIntegrated Circuit CardThe chip embedded in the card — i.e. the EMV “chip” itself.View in glossary → and terminal have different application versions
b7 = 0x40Expired application
b6 = 0x20Application not yet effective
b5 = 0x10Requested service not allowed for card product
b4 = 0x08New card
b3–b1RFUReserved for Future UseBits or bytes with no current meaning, reserved by the spec; they must be set to zero. — must be 0
Byte 3 — Cardholder Verification
b8 = 0x80Cardholder verification was not successful
b7 = 0x40Unrecognised CVMCardholder Verification MethodHow the cardholder is verified — for example offline PIN, online PIN, signature, or no CVM required.View in glossary →
b6 = 0x20PIN Try Limit exceeded
b5 = 0x10PIN entry required, PIN pad not present or not working
b4 = 0x08PIN entry required, PIN pad present, PIN was not entered
b3 = 0x04Online PIN entered
b2–b1RFUReserved for Future UseBits or bytes with no current meaning, reserved by the spec; they must be set to zero. — must be 0
Byte 4 — Terminal Risk Management
b8 = 0x80Transaction exceeds floor limit
b7 = 0x40Lower consecutive offline limit exceeded
b6 = 0x20Upper consecutive offline limit exceeded
b5 = 0x10Transaction selected randomly for online processing
b4 = 0x08Merchant forced transaction online
b3–b1RFUReserved for Future UseBits or bytes with no current meaning, reserved by the spec; they must be set to zero. — must be 0
Byte 5 — Issuer / Script Processing
b8 = 0x80Default TDOLTransaction Certificate Data Object ListA card-supplied list telling the terminal which data to include when building the Transaction Certificate hash.View in glossary → used
b7 = 0x40Issuer authentication failed
b6 = 0x20Script processing failed before final GENERATE ACApplication CryptogramA cryptogram the card generates to approve or decline a transaction: TC (approve offline), ARQC (go online), or AAC (decline).
b5 = 0x10Script processing failed after final GENERATE ACApplication CryptogramA cryptogram the card generates to approve or decline a transaction: TC (approve offline), ARQC (go online), or AAC (decline).
b4–b1RFUReserved for Future UseBits or bytes with no current meaning, reserved by the spec; they must be set to zero. — must be 0

Example values

0000008000Only "transaction exceeds floor limit" set
8000000000Offline data authentication not performed

Decode & build this tag

🖥️TVR Decoder🔓EMV TLV Decoder

Related tags

9F0DIssuer Action Code — Default9F0EIssuer Action Code — Denial9F0FIssuer Action Code — Online9BTransaction Status Information (TSI)
← Previous94 Application File Locator (AFL)Next →97 Transaction Certificate DOL (TDOL)