Let’s assume we are on an aircraft (with no wifi) and want to make offline payments, duty free tat or whatever.
What is the offline transaction limit?
How does it tie-in with the £100 contactless limit, does it count towards it as even though a PIN may have been entered, it was still offline (and sometimes it takes hours/days for the transactions to post)?
Not 100% clear about the limits, but I’ve used contactless, chip & pin and magstripe (activated prior to boarding, just-in-case) on planes without issue - probably a maximum single transaction of £45 in my case.
Has this changed recently? They said it was last time you asked
1 Like
phildawson
(Sorry, I will have to escalate this.)
8
Yeah I spoke to chat at the time and they said the only the £30 limit is the contactless limit by tapping that’s baked in which didnt sound right either. It does tally up but not to £30 from memory.
I spoke to Starlings chat too and they said something like a rolling 24hrs and it resets.
I’ll ask on chat and let you know in a couple of weeks when I get a reply.
1 Like
phildawson
(Sorry, I will have to escalate this.)
9
Long screenshot, max 10 transactions and I would say that’s confirmation that’s it’s decision to have had £30 from the beginning.
This would lean into why they thought they would reduce £135 down to £100 as it was a way to ensure it could never exceed 150 euro equivalent.
I don’t know of any other bank that have purposely baked in such a small offline amount.
Makes sense otherwise people would be able to run up large unauthorised overdrafts offline
1 Like
phildawson
(Sorry, I will have to escalate this.)
11
Yeah I’m impressed, I was expecting mid January after having it ignored for a week then being raised to Advocacy team by Monzo, then ignored for another week in answering.
Anyway Monzo to my knowledge is the only bank to have restricted their offline to just £30 in the chip which is why they are the only ones to do the £100/£30 because they can whilst other banks have no way of controlling offline and doesn’t help if the built in ticker is £10000 or such.
The £100 is £30 lower that what we’re allowed to auth without SCA.
So if you consumed the entire £100 limit plus the extra £30 offline limit you would just be touching the max amount that can be authed via contactless without SCA.
Most airlines just ignore what the card says, and send us presentments later (i.e. they just take the money later, when we can’t prevent it).
In these cases Mastercard rules require us to make a best effort attempt to recover the money, but ultimately we can claim back any money we loose via a chargeback.
The airlines have decided to take on the risk of getting a chargeback, presumably because it allows them to sell more stuff. Also older banks don’t seem to bother with chargeback, we do, and this has caused some strife with airlines like EasyJet.
If you were to contest such a payment because SCA wasn’t applied, I’m not 100% sure what would happen. PSD2 gives us the legal right to reclaim the money from the airline, because they didn’t allow us to apply SCA properly (you might enter your PIN, but the card would refuse to authorise which would mean that technically SCA wasn’t completed). However we also have no obligation to refund you if we believe you were acting fraudulently i.e. getting a refund for something you actually bought on the plane.
Can you make only a single transaction of £30 offline using contactless before authentication is required, or can you make an arbitrary number (even 3000 separate offline contactless transactions of 1p) before authentication is required?
Up to 10 offline transactions, or £30 in summed value, whichever comes first.
As a general rule we don’t really like merchants using offline transactions, they’re very difficult to control because we only find out about them after it’s too late to prevent the transaction.
Yeah. It seems that a lot of merchants implicitly rely on the idea that getting a UK bank account is difficult as their primary fraud prevention tool.
Mastercard provides them with all the tools they need to actually prevent fraud (and we support all of those tools), but many don’t seem interested in using them .
They then break the Mastercard rules by summarily banning entire organisations’ debit cards rather than carry out due diligence themselves. And then get sniffy when the organisation throws the rules back at them. Interesting.