Module 7 of 22 · Practitioner · 75 min
Terminal risk management and action analysis
The part of EMV that decides rather than authenticates: the TVR in tag 95, Terminal and Issuer Action Codes, the zero floor limit, and Visa's published action codes decoded bit by bit, then the 2026 result showing one of those bits was never bound to anything.
Enrollment required
Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.
The course is tied to your account, so you sign in first and come straight back here.
One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.
No hardware is sold here, and none is needed to read the course.
Payments are final. Module 1 is free so you can judge the course before you pay. Terms
Already enrolled? Sign in
Open the free workbench →What this module covers
- 01Three answers, one command
- 02The TVR is only a record
- 03The card signs the terminal's notes
- 04Action codes turn the record into a decision
- 05Reading Visa's real numbers
- 06The zero floor limit
- 07Terminal Type, and why an ATM is not a till
- 08Quick Chip: removing what an online market never uses
- 09When the network is gone
- 10A bit that turned out to be load-bearing
- 11What the setup was
- 12What to actually look at