⚠️RISK ALERT — Visa VIRP Daily Monitoring Requirements

Visa's Integrity Risk Program (VIRP), under Visa Rules §10.4.5.2, requires acquirers and PayFacs sponsoring high-integrity-risk merchants to retain at least four data points per day — including gross sales volume.

Non-compliance can trigger audit failures and Visa enforcement action.

VIRP replaced the Global Brand Protection Program in May 2023. This is a reported review of existing requirements, not a new rule announcement.

Who's affected: Acquirers, PayFacs, ISOs, and high-integrity-risk merchants.

🔗 Source: https://finqub.io/learn/visa-integrity-risk-program/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

🔥🔥

RISK ALERT: Mastercard Global Payment Outage — Aug 15, 2026

Mastercard confirmed a worldwide card-payment outage starting ~04:01 UTC. Worldpay (Global Payments) opened incident INC0619188 at 04:28 UTC citing Mastercard Debit network errors.

📌 At least 5 processors (Worldpay, Stripe, Adyen, Windcave,
Cybersource) reported failures

📌 Mastercard told media the disruption stemmed from a scheduled system update

📌 Recovery began ~05:30 UTC per at least one gateway; resolved within hours

Impact: Merchants, acquirers, and PayFacs on Mastercard routing saw authorization failures and possible settlement delays. High-risk merchants on single-network setups face added chargeback exposure during downtime.

This was a temporary outage, not a permanent shutdown.

🔗 https://statusisdown.com/en/articles/mastercard-outage-payment-failures-processors-august-2026

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Danish FSA Orders Inpay to Halt New Online Gaming Onboarding

Denmark's Financial Supervisory Authority ordered Inpay A/S to immediately stop establishing new business customer relationships in online gaming after a March 2026 inspection found serious AML violations.

🔎 What was found:
• Insufficient customer due diligence when circumstances changed
• Inadequate assessment of purpose and nature of high-risk gaming relationships

📌 What this means:
• New iGaming merchants cannot be onboarded by Inpay until violations are resolved
• Existing customers, including current gaming clients and all private customers, are unaffected
• Acquirers and PSPs with Danish gaming exposure may face heightened scrutiny

🔗 Source: https://fxnewsgroup.com/forex-news/payments/danish-fsa-orders-inpay-to-stop-establishing-new-business-customer-relationships-within-online-gaming/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️⚠️⚠️💯

Treasury Proposes Stablecoin Rules Under GENIUS Act

Treasury published a proposed rule on Aug 17, 2026 implementing Section 3 of the GENIUS Act.

🗓️ Issuers must obtain federal/state licenses by Jan 18, 2027
🗓 Platforms barred from selling non-licensed stablecoins to US customers starting Jul 18, 2028
🗓 Public comments due Oct 19, 2026

The proposal extends to offshore activity involving US customers. Helping buyers bypass location checks (e.g., IP) would be treated as a potential violation.

⚠️ Acquirers and PayFac operators with crypto portfolios should monitor which stablecoin products may remain processable.

🔗 Source: https://decrypt.co/375817/treasury-rules-sell-stablecoins-us

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

🚨 ⚠️🖥🖥💯

Visa Seeks New Stablecoin Settlement Partner After Mastercard Acquired BVNK

Visa is actively searching for a stablecoin settlement and OTC partner with crypto exchange licenses in the U.S., Canada, UK, and Singapore, per documents seen by CoinDesk.

🔹 Mastercard's BVNK acquisition removed Visa's prior settlement partner

🔹 New partner would also settle the Open USD project (backed by Stripe, Visa, Mastercard)

🔹 Status: reported, not officially announced by Visa

Potential impact for crypto merchants, PayFac operators, and fintechs exploring stablecoin rails: settlement infrastructure options may shift as networks compete for digital-asset partners.

🔗 Source: https://www.coindesk.com/business/2026/08/18/visa-is-looking-for-a-new-stablecoin-settlement-partner-now-that-bvnk-is-owned-by-mastercard

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Mastercard Announces GMAP, Revises QMAP (July 28, 2026)

Mastercard confirmed a new merchant monitoring strategy:

🔹 GMAP — Global Merchant Audit Program announced; standards take effect April 1, 2027
🔹 QMAP — Questionable Merchant Audit Program revised: lower thresholds, shorter investigation window, greater risk for enrollment
🔹 SMMP — Scam Merchant Monitoring Program entered enforcement phase July 24, 2026

Who may be affected:
High-risk merchants, PayFac operators, acquiring banks, processors, and risk/compliance teams.

What to watch: GMAP takes effect April 1, 2027 — acquirers and processors should map reporting workflows ahead of that date. Merchants already under SMMP now face an additional audit layer.

🔗 Source: https://www.altopay.com/mastercard-monitoring-programs-2026/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Danish FSA Orders Inpay to Freeze New iGaming Customers

Finanstilsynet has ordered Inpay A/S to halt new relationships with online gaming companies after a March inspection found serious AML control failures.

📌 What happened: Regulator found gaps in how Inpay assessed and documented iGaming customer relationships, especially those with higher money-laundering exposure.

📌 What's required: Inpay must demonstrate corrective action before expanding its gaming customer base.

📌 Who should care: Processors, PayFac operators, and acquiring banks with iGaming exposure should review onboarding documentation and ongoing monitoring procedures.

Status: Confirmed enforcement. Inspection occurred in March 2026; order announced Aug 20, 2026.

🔗 Source: https://www.casinonewsdaily.com/blog/2026/08/20/inpay-faces-denmark-igaming-business-restriction/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Visa Tightens VIRP MCC Enforcement for Adult, Escort & Dating Merchants

Visa has reportedly updated its Visa Integrity Risk Program (VIRP) guidance, tightening MCC enforcement for adult, escort, and dating merchants.

📌 What's changing:
• Stricter MCC classification scrutiny
• Higher fees, tighter compliance expectations
• MCC accuracy now key to Tier 1 monitoring

📌 Who's affected:
• Adult, escort & dating merchants under VIRP
• PayFacs/ISOs serving these verticals
• Acquirers with adult/escort portfolios

📌 What to watch: Miscoded merchants risk escalation and added fees. Verify MCC assignment aligns with current VIRP guidance.

Status: Reported by LegitScript; not yet confirmed via an official Visa bulletin reviewed by this channel.

🔗 https://www.legitscript.com/regulatory-and-card-brand-compliance/adult-escort-and-dating-merchants-are-your-practices-in-line-with-virp-updates/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: UK PSR Issues Specific Direction 22

The UK Payment Systems Regulator published Specific Direction 22, requiring Mastercard and Visa to give acquirers clearer scheme and processing fee information — and to report compliance progress to the PSR.

✍️ Affected: UK acquirers, sponsor banks, PayFacs, processors, ISOs, and the card networks themselves.

🔍 What changes: Networks must improve fee disclosure to acquirers over time. The reporting obligation sits with Mastercard and Visa, not acquirers; merchant pricing is not directly altered.

🗓 Status: Direction confirmed, in force since 30 July 2026. Substantive requirements take effect 30 July 2027.

🔗 https://www.psr.org.uk/media/sllkoc5r/specific-direction-22-itc-july-2026.pdf

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

RISK ALERT | Mastercard Confirms GMAP Timeline

Mastercard confirmed its technology platform will include required GMAP data elements by October 2026, giving acquirers time to build monitoring strategies.

🗓 GMAP standards effective: April 1, 2027

🗓 First billing: May 2027 (for April violations)

🗓 Threshold revisions: Jan 1, 2029 / 2030 / 2031

Acquirers and PayFac operators sponsoring high-risk merchants should prepare systems for GMAP data capture before the October 2026 platform update.

🔗 Source: https://www.altopay.com/gmap/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

💸UK FCA BNPL Rules Now Effective — Acquirer Compliance Burden Shifts

FCA rules governing Buy Now Pay Later took effect July 15, 2026, bringing Deferred Payment Credit agreements into the mainstream UK consumer credit regime with mandatory affordability checks.

Industry analysts note the deeper challenge sits in acquiring rails:

🔹 Regulated and unregulated BNPL travel on the same processing infrastructure
🔹 Acquirers must now distinguish between them at the transaction level
🔹 New Section 75 refund exposure, dispute/reporting obligations, and consumer duty requirements apply

Processors lacking granular transaction data may face compliance gaps. Merchants offering BNPL should verify their acquirer can properly attribute and report under the new framework.

🔗 Source: https://thefintechtimes.com/bnpl-regulation-shifts-compliance-burden-onto-payment-processors/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai