- PCI DSS Level 1
- Acquiring side runs under topropay's PCI DSS Level 1 service-provider posture; sub-merchants inherit the posture across every connected acquirer.
- Card scheme membership
- Acquirer-side scheme membership and licensing sit with the licensed connected acquirers. Issuing-side scheme membership sits with the licensed partner BIN sponsor.
- Scheme programmes (VDMP / VAMP / ECP)
- Acquiring-side scheme programme positions (VDMP / VAMP / VFMP for Visa, ECP / EFMP for Mastercard) surfaced per connected acquirer in the dashboard.
- SCA & PSD2
- Selective EMV 3DS2 on the acquiring authorisation path keeps approval high in Europe. Issuing-side SCA sits with the partner BIN sponsor per scheme rules.
- Sanctions & AML alignment
- Sanctions screening at onboarding on both sides; AML monitoring on acquiring side by topropay, on issuing side by the partner BIN sponsor.
- Licensed verticals only
- Licensed gaming, regulated financial services and other compliance-bound verticals supported only where current operating licences exist. Grey and black-market verticals are out of scope on both the acquiring and issuing sides.