3 - Virtual Card Numbers

3.1.1 - Usage

A virtual card number is 16 digits where the digits 2 through 6 are 99999, e.g. 4999993986001010. The first digit in a virtual card number is the same as the first digit of the card number. In the 3DSecure version of Corporate Payments, that is in full compliance with the new SCA Regulatory Update, virtual card numbers are on a Guid format (Globally Unique Identifier).

Each virtual card number is connected with a specific merchant agreement, and they can only be used to perform payments under that agreement.

Web services FaSyndarkortnumer (non-3DSecure) and FaSyndarkortnumer (3DSecure) return virtual card numbers.

3.1.1.1 - Changes for virtual number generation when using 3DSecure

Unlike the old virtual numbers, you can create a new virtual number many times for the same card and agreement. The FaSyndarkortnumer operation will always return a new virtual number, regardless if the card and agreement have been registered before.

When creating a virtual card number an authorization of amount 0 in the agreement currency is performed. This authorization must be fully authenticated by the cardholder and is used in subsequent payments, perfomed with the FaHeimild endpoint, as confirmation of the business relationship between the cardholder and the merchant.

Cvv (Oryggisnumer) is now required, along with AudkenningNidurstada_TXID and AudkenningNidurstada_CAVD, but those values need to come from the cardholder authentication, obtained with the FaAudkenningu endpoint.

For a better explanation of this process see the 3DSecure chapter or FaAudkenningu webservice chapter.

3.1.1.2 - Initiator Usage for FaSyndarkortnumer endpoint

Also the merchant needs to define the Initiator of the virtual card subsequent transactions, to be done with the FaHeimild endpoint.

• If the cardholder is going to be initiating the transaction then the parameter HverNotarKortid must be set to 'C'.
• If the merchant is going to be initiating the transaction the parameter HverNotarKortid must be set to 'M'.

3.1.2 - Migration from older version of Corporate Payments Web Service

In older versions of Corporate payments a virtual card number is 16 digits where the digits 2 through 6 are 99999, e.g. 4999993986001010. The first digit in a virtual card number is the same as the first digit of the card number.

If you are migrating from an older version of Corporate Payments Web Service to the latest one with 3DSecure authentication, then you can still use this type of virtual card numbers, but only for cards created in the old version before October 30th 2020.

A virtual card number of the old format is modulus correct. A virtual card number can only be used with the contract number associated with the same Icelandic social security number as was given at the time of application for a virtual card number.

In the new 3DSecure version you can only use virtual cards with the merchant agreement it was created with.

Warning

Please note that usage of the old version of Corporate payments does not comply with the SCA Regulatory Update.