← Payment Systems: Magstripe, Tokenization, NFC and EMV
Level 2 · Practitioner75 min
Terminal risk management and action analysis
The part of EMV that decides rather than authenticates: the TVR in tag 95, Terminal and Issuer Action Codes, the zero floor limit, and Visa's published action codes decoded bit by bit — then the 2026 result showing one of those bits was never bound to anything.
Enrolment required
Module 1 of this course is free to read. The rest needs an enrolment — and so does nothing else on this site: the workbench, the APDU decoder and the whole capture corpus stay open to everyone, signed in or not.
What this module covers
- 01Three answers, one command
- 02The TVR is a record, not a decision
- 03The card signs the terminal's notes
- 04Action codes turn the record into a decision
- 05Reading Visa's real numbers
- 06The zero floor limit
- 07Terminal Type, and why an ATM is not a till
- 08Quick Chip: removing what an online market never uses
- 09When the network is gone
- 10A bit that turned out to be load-bearing
- 11What the setup was
- 12What to actually look at