• About EMVCo
  • News
  • Technical Resources
  • Trademark Centre
  • Knowledge Hub
  • Contact EMVCo
Open Search Bar EMVCo Login
Close Search Bar
EMVCo Logo
  • Why EMV®?
  • EMV® TechnologiesMore options of
  • EMV® SpecificationsMore options of EMV® Specifications
  • Approved and EvaluatedMore options of Approved and Evaluated
  • RegisteredMore options of
  • Industry CollaborationMore options of
Open/Close Burger Menu

Card & Mobile

  • Laboratory Accreditation Process
  • Product Approval Process
  • Accredited Laboratories, Auditors and Qualified Test Tools
  • Approved Products

Acceptance Device

  • Laboratory Accreditation Process
  • Product Approval Process
  • Accredited Laboratories, Auditors and Qualified Test Tools
  • Approved Products

3-D Secure

  • Laboratory Accreditation Process
  • Platform Provider Qualification and Accreditation
  • Product Approval Process
  • Accredited Laboratories, Auditors and Test Platform Providers
  • Approved Products

Security Evaluation

  • Product Evaluation Process
  • Accredited Laboratories
  • Evaluated Products

Level 3

  • Qualification Service Provider
  • Tools Qualification Process
  • Qualified Test Tools
Overview
Registration Processes

Process for designated payment systems and providers to be issued identifiers.

Registered IDs

Identifiers for designated payment systems and providers

For Review

  • Public review
  • Associate review
All Specifications

By Technology

  • 3-D Secure
  • Contact
  • Contactless
  • Level 3 Testing
  • Mobile
  • Payment Tokenisation
  • QR
  • Secure Remote Commerce

By Type

  • Draft Specification
  • Draft Specification Bulletins
  • Specifications
  • Specification Bulletins
  • General Bulletin
alt=

What are EMV® Specifications?

EMV® Specifications are technical requirements for designing payment products to work seamlessly and securely everywhere.

Overview
EMV® 3-D Secure

EMV 3DS allows seamless authentication of consumers to prevent card-not-present (CNP) fraud and increase the security of e-commerce payments.

EMV® Contact Chip

EMV Contact Chip supports seamless and secure in-store payments and helps prevent card fraud.

EMV® Contactless Chip

EMV Contactless Chip supports seamless and secure transactions made with contactless chip cards and NFC enabled mobile devices.

EMV® Electric Vehicle Open Payments

As EV adoption accelerates globally, supporting the charging infrastructure to meet growing demand is an urgent priority for industry stakeholders and policymakers across the world.

EMV® Level 3 Testing

EMVCo manages an EMV® Level 3 (L3) Testing Framework and the qualification process of related EMV L3 test tools.

EMV® Mobile

EMV Mobile supports the growing use of mobile devices for secure and convenient payments.

EMV® Payment Tokenisation

EMV Payment Tokenisation replaces valuable card data with payment tokens to increase the security of mobile and e-commerce transactions.

EMV® QR Codes

EMV QR Codes support consistent, efficient and convenient QR code payments.

EMV® Secure Remote Commerce

EMV SRC simplifies e-commerce checkout to make the payment process quicker, easier and more secure.

Overview
EMVCo Associates & Subscribers

Participating organisations

Industry Partners & Liaisons

Technical bodies and associations

Ways to Participate

Participation options

Events

EMVCo and industry events

EMVCo Login
  • Why EMV®?
  • EMV® Technologies
    • Overview
    • EMV® 3-D Secure
    • EMV® Contact Chip
    • EMV® Contactless Chip
    • EMV® Electric Vehicle Open Payments
    • EMV® Level 3 Testing
    • EMV® Mobile
    • EMV® Payment Tokenisation
    • EMV® QR Codes
    • EMV® Secure Remote Commerce
  • EMV® Specifications
    • View all specifications
    • For Review
      • Public review
      • Associate review
    • By Technology
      • 3-D Secure
      • Contact
      • Contactless
      • Level 3 Testing
      • Mobile
      • Payment Tokenisation
      • QR
      • Secure Remote Commerce
    • By Type
      • Draft Specification
      • Draft Specification Bulletins
      • Specifications
      • Specification Bulletins
      • General Bulletin
    • What are EMV® Specifications?
  • Approved and Evaluated
    • Overview
    • Card & Mobile
      • Laboratory Accreditation Process
      • Product Approval Process
      • Accredited Laboratories, Auditors and Qualified Test Tools
      • Approved Products
    • Acceptance Device
      • Laboratory Accreditation Process
      • Product Approval Process
      • Accredited Laboratories, Auditors and Qualified Test Tools
      • Approved Products
    • 3-D Secure
      • Laboratory Accreditation Process
      • Platform Provider Qualification and Accreditation
      • Product Approval Process
      • Accredited Laboratories, Auditors and Test Platform Providers
      • Approved Products
    • Security Evaluation
      • Product Evaluation Process
      • Accredited Laboratories
      • Evaluated Products
    • Level 3
      • Qualification Service Provider
      • Tools Qualification Process
      • Qualified Test Tools
  • Registered
    • Overview
    • Registration Processes
    • Registered IDs
  • Industry Collaboration
    • Overview
    • EMVCo Associates & Subscribers
    • Industry Partners & Liaisons
    • Ways to Participate
    • Events
  • About EMVCo
  • News
  • Technical Resources
  • Trademark Centre
  • Knowledge Hub
  • Contact EMVCo
EMV® 3-D Secure Whitepaper
Open/Close Burger Menu Open/Close Search
Introduction
  • Audience and Structure
  • Notational Conventions
Improving Risk Analysis and Frictionless Flow
  • Business Overview
  • Technical Features
    • Trust List Managed by the ACS
    • Trust List Flow and Data
    • Alternative Use Case – Trust List Managed by the DS
    • Device Binding
    • Alternative Use Case – Device Binding Managed by the 3DS Server/3DS Requestor
    • Alternative Use Case – Device Binding Managed by the DS
Out-of Band (OOB) Authentication
  • Business Overview
  • OOB – Introduction
  • OOB Flow for Browser Channel
    • OOB Flow for Browser Channel
    • Browser Channel – Alternative OOB Flow
  • OOB Flow: App Channel – Manual Switching
    • OOB Flow: App Channel – Manual Switching
    • OOB User Interface for 3DS Version 2.2 and 2.3.1
  • OOB Flow App Channel – Automatic Switching to the 3DS Requestor App
    • OOB Flow App Channel – Automatic Switching to the 3DS Requestor App
    • Technical Variant: the Device Operating System Cannot Match the 3DS Requestor App URL to an Installed App
    • Technical Variant: the 3DS Requestor App URL Is Invalid or Is Based on a Custom Device Operating System
    • 3DS Version 2.2 and Above Data Elements
    • OOB User Interface for 3DS Version 2.2 and Above
  • OOB Flow: App Channel – Automatic Switching to the OOB App
    • OOB Flow: App Channel – Automatic Switching to the OOB App
    • Technical Variant – the Device Operating System Cannot Match the OOB App URL to an Installed App
    • Technical Variant – the OOB App URL is Invalid or is Based on a Custom Device Operating System
    • 3DS Version 2.3.1 Data Elements
    • OOB User Interface for Version 2.3.1
Recurring and Instalment Transactions
  • Business Overview
  • Technical Features
    • Cardholder-Initiated Flow (App-Based or Browser-Based Device Channels)
    • Merchant-Initiated Flow (3RI Device Channel)
  • Use Cases
    • Use Cases for Version 2.2
    • Use Cases for Version 2.3.1
3-D Secure Documentation
  • 3-D Secure Specification v2.2.0
  • 3-D Secure Specification v2.3.1
  • 3-D Secure SDK — Device Information
  • Other Supporting Documentation
Download PDF
Back to EMVCo
  1. Home
  2. /
  3. EMV® Technologies
  4. /
  5. EMV® 3-D Secure
  6. /
  7. Out-of Band (OOB) Authentication
  8. /
  9. OOB Flow App Channel – Automatic Switching to the 3DS Requestor App

OOB Flow App Channel – Automatic Switching to the 3DS Requestor App

For version 2.2 and above of the 3DS Specification, it is possible to automate the switching from the OOB Authentication App to the 3DS Requestor App.

During the challenge, the ACS instructs the Cardholder to manually switch from the payment/checkout page to the OOB Authentication App. When the Cardholder has completed the authentication, the Authentication App will automatically return to the Challenge screen on the 3DS Requestor App, assuming that the two apps are on the same device.

Preconditions

The ACS has defined, deployed, and communicated an OOB authentication process to the Cardholder.

The OOB Authentication App can handle the 3DS Requestor App URL.

The 3DS Requestor provides the 3DS Requestor App URL to the 3DS SDK.

The ACS provides the 3DS Requestor App URL to the OOB Authentication App.

The 3DS Requestor App and the OOB Authentication App are on the same device.

The 3DS Requestor App URL is a Universal App Link (refer to Table 1.3 in version 2.2 of the 3DS Specification).

Sequence Diagram

The Cardholder authenticates the transaction using an OOB Authentication App that is on the Device used for the purchase.

  1. The Cardholder makes a purchase on the 3DS Requestor App and proceeds to checkout.
  2. The 3DS Requestor initiates a 3DS authentication.
  3. The 3DS Server sends an AReq message.
  4. The ACS responds with an ARes message requesting a challenge.
  5. The 3DS Requestor triggers the 3DS SDK to proceed with a challenge. The 3DS SDK connects to the ACS and provides the 3DS Requestor App URL to the ACS.
  6. The ACS provides the UI to the 3DS SDK and instructs the Cardholder to proceed with an OOB authentication.
    The ACS conveys the 3DS Requestor App URL to the OOB Authentication App.
    Note: The ACS also displays the “Complete” button if the OOB Authentication App is on a different device.
  7. The Cardholder switches to the OOB App on the same device, and completes the authentication as instructed by the ACS or authentication system provider.
    The OOB authentication is defined and controlled by the ACS, and thus falls outside the scope of the 3DS Specification.
  8. The OOB Authentication App uses the 3DS Requestor App URL (Universal App Link) to automatically return the Cardholder to the 3DS Requestor App.
  9. The Cardholder does not need to select the “Complete” button, the 3DS SDK detects that the 3DS Requestor App is back in the foreground and sends a Challenge Request (CReq) message to the ACS (Automatic CReq). The 3DS SDK sends the “OOB complete” information to the ACS.
  10. The ACS sends the results of the authentication in an RReq message through the DS to the 3DS Server, and the 3DS Server acknowledges it by sending an RRes message.
  11. The ACS sends a Final CRes message to the 3DS SDK, the 3DS SDK conveys the information to the 3DS Requestor App.
  12. The 3DS Requestor App updates the UI according to the outcome of the authentication and/or authorisation.

Note: In Step 9, the ACS may continue the challenge if the OOB authentication was not performed or if it failed, before sending the Final CRes message.

Note: If the ACS receives or knows the result of the OOB authentication (pass or fail) before the Cardholder confirms completion, it may send the RReq before receiving the “OOB complete” information from the 3DS SDK.

User Experience

  1. The Cardholder makes a purchase and proceeds to checkout. The 3DS Requestor App displays the processing screen while waiting for the ACS’s response.
  2. The 3DS SDK displays the UI provided by the ACS to proceed with an OOB authentication.
  3. The Cardholder manually switches to the OOB App.
  4. When the OOB authentication is completed, the OOB App invokes the 3DS Requestor App URL, and the Cardholder is automatically taken back to the 3DS Requestor App.
  5. The 3DS SDK detects that it is in the UI foreground and automatically sends the OOB complete information. The Cardholder does not need to select the “Complete” button.
  6. The 3DS Requestor App displays the purchase completion information.

Note: After Step 4, the ACS may continue the challenge if the OOB authentication was not performed or if it failed, OR send the Final CRes message as shown.

Prototype: Native OOB v2.2

Screen Prototype

Technical Variant: the Device Operating System Cannot Match the 3DS Requestor App URL to an Installed App

User Experience

  1. The Cardholder makes a purchase and proceeds to checkout. The 3DS Requestor App displays the processing screen while waiting for the ACS’s response.
  2. The 3DS SDK displays the UI provided by the ACS to proceed with an OOB authentication.
    Note: The ACS also displays the “Complete” button in case the OOB Authentication App is on a different device.
  3. The Cardholder manually switches to the OOB App.
  4. When the OOB authentication is completed, the OOB Authentication App invokes the 3DS Requestor App URL (Universal App Link) to return to the 3DS Requestor App, but the Device Operating System cannot resolve the URL and opens the default Device Browser.
    Note: The 3DS Requestor would need to provide a landing page to instruct the Cardholder to manually switch to the 3DS Requestor App.
  5. The Cardholder manually switches to the 3DS Requestor App.
  6. The 3DS SDK detects that it is in the UI foreground and automatically sends the OOB complete information to the ACS. The Cardholder does not need to select the “Complete” button.
  7. The 3DS Requestor App displays the purchase completion information.

Note: After Step 4, the ACS may continue the challenge if the OOB authentication was not performed or if it failed OR send the Final CRes message as shown.

Prototype: Native OOB v2.2. The Device Operating System Cannot Match the 3DS Requestor App URL to an Installed App

Screen Prototype

Technical Variant: the 3DS Requestor App URL Is Invalid or Is Based on a Custom Device Operating System

User Experience

  1. The Cardholder makes a purchase and proceeds to checkout. The 3DS Requestor App displays the processing screen while waiting for the ACS’s response.
  2. The 3DS SDK displays the UI provided by the ACS to proceed with an OOB authentication.
    Note: The ACS also displays the “Complete” button in case the OOB authentication App is on a different device.
  3. The Cardholder manually switches to the OOB App.
  4. When the OOB authentication is completed, the OOB App invokes the 3DS Requestor App URL to return to the 3DS Requestor App, but the Device Operating System cannot resolve the URL and returns an error to the OOB Authentication App. The OOB Authentication App displays a page to instruct the Cardholder to manually switch to the 3DS Requestor App.
    Note: The OOB Authentication App needs to interpret the error returned by the Device Operating System and be able to display the instructions to the Cardholder.
  5. The Cardholder manually switches to the 3DS Requestor App.
  6. The 3DS SDK detects that it is in the UI foreground and automatically sends the OOB complete information to the ACS. The Cardholder does not need to select the “Complete” button.
  7. The 3DS Requestor App displays the purchase completion information.

Note: After Step 4, the ACS may continue the challenge if the OOB authentication was not performed or if it failed OR send the Final CRes message as shown.

Prototype: Native OOB v2.2. the 3DS Requestor App URL is Invalid or is Based on a Custom Device Operating System

Screen Prototype

3DS Version 2.2 and Above Data Elements

Table 3.3: 3DS Data Elements Related to OOB – Automatic Switching to the 3DS Requestor App

Data Element

Description

Version

3DS Requestor App URL

3DS Requestor App declaring its URL within the CReq 2.3.1 message so that the Authentication App can call the 2.2 3DS Requestor App after OOB authentication has occurred. Each transaction would require a unique Transaction ID by using the SDK Transaction ID.

2.3.1

2.2

ACS UI Template

Identifies the UI Template format that the ACS first presents to the consumer.

2.3.1

2.2

ACS UI Type

User interface type that the 3DS SDK will render, which includes the specific data mapping and requirements.

2.3.1

2.2

Authentication Method

Authentication approach that the ACS used to authenticate the Cardholder for this specific transaction.

2.3.1

2.2

Authentication Type

Indicates the type of authentication method the Issuer will use to challenge the Cardholder, whether in the ARes message or what was used by the ACS when in the RReq message.

2.3.1

2.2

OOB Continuation Label

Label to be used in the UI for the button that the Cardholder selects when they have completed the OOB authentication.

2.3.1

2.2

SDK UI Type

Lists all UI types that the device supports for displaying specific challenge user interfaces within the 3DS SDK.

2.3.1

2.2

OOB User Interface for 3DS Version 2.2 and Above

Native Flow HTML UI
Previous Page OOB Flow: App Channel – Manual Switching
Next Page OOB Flow: App Channel – Automatic Switching to the OOB App

Antitrust Policy Privacy Policy Accessibility Statement Terms of Use Sitemap Cookie Settings

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere.
The EMV trademark is owned by EMVCo, LLC.

© Copyright 2025 EMVCo

EMVCo TERMS OF USE

Last Updated: April 17, 2020

Welcome to EMVCo. By accessing or using the EMVCo website at www.emvco.com (“Site“) or any Site Materials, whether or not you obtained them via the Site, you agree to the following Terms of Use on behalf of yourself individually and the company or organization for which you are using the Site or Site Materials (“Organization“). If you do not agree to the following Terms of Use, do not use the Site or other Site Materials.

In these Terms of Use, “Site Materials” means all email messages sent to you by EMVCo in connection with your registration on the Site or participation in an EMVCo participation program, and all content, files and other materials that are available for viewing or download on the Site, including the EMV® Specifications, requirements, guidelines, white papers or other documents, APIs, SDKs, software, scripts, code, trademarks, videos, text, graphics, pictures, information, and other materials.

You represent that either (a) you are an authorized representative of your Organization with authority to bind your Organization to these Terms of Use, in which case the term “you” refers collectively to both you individually and your Organization, or (b) you are not authorized to bind any Organization to these Terms of Use and are using the Site or Site Materials solely in your personal capacity, in which case the term “you” refers to you individually. EMVCo, LLC (“EMVCo“) reserves the right to modify or replace these Terms of Use at any time and in EMVCo’s sole discretion.

EMVCo will indicate at the top of these Terms of Use the date such document was last updated. Any changes will be effective immediately upon posting the revised version on the Site (or such later effective date as may be indicated at the top of the revised Terms of Use). Your continued use of the Site or Site Materials following the posting of any changes to these Terms of Use will constitute your acceptance of such changes. If you do not agree to the changes, you must stop using the Site and Site Materials. In addition, EMVCo may provide other methods by which you may accept or receive notice of these Terms of Use or changes to these Terms of Use.

  1. Privacy Policy. Please refer to our Privacy Policy for information on how EMVCo collects, uses and discloses personal information.
  2. Terms of Sale; Participation Programs. Except as otherwise stated on the Site, all sales transactions on the Site are governed by EMVCo’s Terms of Sale. Your participation in EMVCo’s participation programs (such as the EMVCo Subscriber Programme or EMVCo Associates Programme) is governed by the applicable EMVCo agreement presented at registration for the program.
  3. Acceptable Use. As a condition of using the Site, you agree not to do any of the following:
    1. use the Site or Site Materials in violation of applicable law or in a manner that facilitates or furthers the violation of applicable law;
    2. use the Site or Site Materials in a way that harms EMVCo or EMVCo’s members, affiliates or vendors, or other users of the Site;
    3. use any portion of the Site as a destination linked from any unsolicited bulk messages or unsolicited commercial messages (such as “spam”);
    4. use or access, or attempt to use or access, any EMVCo account that is not yours;
    5. damage, disable, overburden or impair the Site (or the network(s) connected to the Site) or otherwise interfere with anyone’s use and enjoyment of the Site;
    6. attempt to reverse-engineer or otherwise discover or recreate any part of the Site or Site Materials (including any code, technology or methodology used in connection with the Site);
    7. except as otherwise may be authorized by EMVCo in a separate document, resell or redistribute the Site or Site Materials or any part of the Site or Site Materials, or otherwise use the Site or Site Materials for any purpose other than your own internal business use;
    8. use the Site (including any Site Materials) other than for its intended purpose.
  4. License to Site, Site Materials and Intellectual Property Associated with Compliance with Specifications. The Site Materials are the proprietary property of EMVCo or its licensors. EMVCo hereby grants to you a perpetual, worldwide, nonexclusive, nontransferable, royalty-free, paid-up license (without the right to sublicense) to:
    1. reproduce Site Material documents and files that are specifically made available on the Site for the general public to download without a Subscriber or Associate account (“Public Documents”), and share such Public Documents internally within your Organization, provided that any copyright notices on each page of Public Document reproductions are reproduced in full and that you agree to comply with all such notices;
    2. prepare translations of the Public Documents into your local language(s) solely for internal use within your Organization, without distribution to third parties;
    3. in the past and future, make (including have made), use, sell, offer to sell and/or import integrated circuit cards, terminals, applications and systems that practice, in whole or in part, any final (non-draft) version of the EMV Specifications; and
    4. modify, use, and incorporate into your EMV Products any final (non-draft) API, SDK, software, scripts and other code that are specifically described by EMVCo as being provided for such incorporation.

    In these Terms of Use, “EMV Products” means products or services that are designed to comply with the EMV Specifications. The foregoing license applies retroactively to include activities prior to the date you agreed to these Terms of Use, but is granted solely under the intellectual property rights that EMVCo owns or has the right to license. To the extent the foregoing license includes rights to a third party’s patents, the license is limited to those patents or patent claims that would be necessarily infringed by an entity implementing the mandatory or optional requirements of the EMV Specifications.

  5. License Conditions. The license granted in Section 4 is subject to your compliance with these Terms of Use. Except as expressly provided in the foregoing license grant, such license excludes: (a) any resale of the Site or any Site Materials; (b) any distribution, public performance or public display of any Site Materials; (c) modifying or otherwise making any derivative uses of the Site or any Site Materials; (d) use of any data mining, robots or similar data gathering or extraction, automated account registration, or account utilization methods; (e) downloading (other than the page caching) of any portion of the Site, the Site Materials or any information contained therein; or (f) trademarks on the Site. Any translation of the Site Materials must include the following (or a substantially similar notice) prominently on the cover page of each copy of a translation (with “[Organization]” being replaced with the name of your Organization:
    • This is an unofficial translation for [Organization] internal use only. Do not distribute outside [Organization]. EMVCo is not responsible for this translation. Only documents published by EMVCo are the official versions for EMV testing and approval. EMVCo reserves all rights.

    And after the cover page of each copy of a translation, the following (or a substantially similar notice) must be printed:

    • Unofficial translation for [Organization] internal use only. EMVCo is not responsible for this translation

    Notwithstanding the foregoing, the Public Documents may be subject to a separate agreement you may have with EMVCo or to supplemental terms and conditions that are included in or accompany Public Documents, in which case you agree that such separate agreement or supplemental terms and conditions will apply to your use of the Public Documents. Any use of the Site or Site Materials other than as specifically authorized herein (or in such separate agreement or supplemental terms and conditions) is strictly prohibited and will automatically terminate the foregoing license without notice.

  6. Trademarks. EMVCo, EMV®, the EMVCo logo, the EMV Secure Remote Commerce payment icon, the EMV Contactless Marks, the EMV QR Marks, the EMVCo Certification Marks, EMVCo Relationship Marks, and any other product or service name or slogan contained in the Site are trademarks of EMVCo and its licensors and may not be copied, imitated or used, in whole or in part, without the prior written permission of EMVCo or the applicable trademark holder. Use of any EMVCo trademarks is subject to the trademark license agreement(s) you may have with EMVCo and your compliance with any applicable EMVCo trademark usage guidelines. You may not use any metatags or any other “hidden text” utilizing “EMVCo,” “EMV” or any other name, trademark or product or service name of EMVCo without our prior written permission. In addition, the look and feel of the Site, including all page headers, graphics, button icons and scripts, is the service mark, trademark or trade dress of EMVCo and its licensors and may not be copied, imitated or used, in whole or in part, without our prior written permission. All other trademarks, registered trademarks, product names and company names or logos mentioned on the Site are the property of their respective owners. Reference to any product vendors, laboratories, auditors, test tools, products, services, processes or other information, whether by trade name, trademark, manufacturer, supplier or otherwise, does not constitute or imply endorsement, sponsorship or recommendation thereof by EMVCo.
  7. Framing and Hyperlinks. You may not frame or utilize framing techniques to enclose any EMVCo trademark, logo or other Site Materials, including the images found at the Site, the content of any text or the layout/design of any page or form contained on a page on the Site, without EMVCo’s written consent. EMVCo makes no claim or representation regarding, and accepts no responsibility for, the quality, content, nature or reliability of third-party Web sites accessible by hyperlink from the Site or of Web sites linking to the Site. Such sites are not under the control of EMVCo and EMVCo is not responsible for the contents of any linked site or any link contained in a linked site, or any review, changes or updates to such sites. EMVCo provides these links to you only as a convenience, and the inclusion of any link does not imply affiliation, endorsement or adoption by EMVCo of any site or any information contained therein. When you leave the Site, you should be aware that our terms and policies no longer govern. You should review the applicable terms and policies, including privacy and data gathering practices, of any site to which you navigate from the Site.
  8. Submissions. You agree that any idea, method, concept, invention, suggestion, design, technology, information, process, formula, software, technique, drawings, data, know how, or other item or material which is provided by you (including your Organization or any other employee or representative of your Organization) to EMVCo regarding the Site, Site Materials (including without limitation any EMV Specifications (defined below)), other documents and materials of EMVCo, any EMVCo-related technologies and approval processes, or other offerings of EMVCo or its affiliates in the form of email or through a web form on the Site (“Submissions”) are non-confidential. You agree to grant, and hereby grant, to EMVCo a perpetual, worldwide, nonexclusive, royalty-free, fully sublicensable and irrevocable license to all intellectual property and proprietary rights in any Submissions to (a) make, have made, use, sell, offer for sale, and import integrated circuit cards, terminals, applications, test tools, systems, services and other items that practice, in whole or in part, the EMV® Specifications, and (b) use, reproduce, distribute, prepare derivative works of, publicly perform or display, and otherwise fully exploit any Submissions and any intellectual property and proprietary rights therein. Further, you agree to waive and forego asserting any moral rights you may have in the Submissions. By submitting a Submission to EMVCo, you represent and warrant that you have authority to provide such Submission to EMVCo and grant the rights to the Submission granted herein, and that doing so does not and will not constitute the infringement or misappropriation of the trade secrets or other confidential information of your Organization or any third party. You agree to execute such documents and otherwise provide such reasonable assistance, and to cause your affiliates to execute and provide such assistance, as is necessary to give full force and effect to this paragraph. As used herein, “EMV® Specifications” means any and all existing and future specifications developed or issued by or on behalf of EMVCo, all technical bulletins to such specifications, and any related requirements documents, process documents, guidelines, and related materials. EMV® Specifications are included in the definition of Site Materials.
  9. Disclosure and Use of Information about Site Users. Although it is not EMVCo’s preference to provide governmental authorities with access to information about Site users, you acknowledge that EMVCo may be required to do so from time to time. As such, you authorize EMVCo to deliver or furnish any information about your use of the Site and such other information in connection with your use of the Site, to such governmental authorities as may order or demand the same, with or without notice to you.
  10. Indemnification. You will defend and indemnify EMVCo, its affiliates, independent contractors and service providers, and each of their respective members, directors, officers, employees and agents (“EMVCo Parties”), from and against all claims, damages, costs, liabilities and expenses (including reasonable attorneys’ fees) arising out of or related to your use of, or inability to use, the Site or Site Materials.
  11. Disclaimers. THE SITE AND ALL SITE MATERIALS (INCLUDING THE EMV® SPECIFICATIONS) AND LICENSES ARE PROVIDED ON AN “AS IS” BASIS WITHOUT WARRANTIES OF ANY KIND. EMVCO DOES NOT PROMISE THAT THE SITE OR SITE MATERIALS WILL BE FREE OF INACCURACIES OR ERRORS, OR THAT YOUR USE OF THE SITE OR SITE MATERIALS WILL PROVIDE SPECIFIC RESULTS. EMVCO DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. YOU ARE SOLELY RESPONSIBLE FOR THE ACCURACY OF ANY TRANSLATIONS YOU MAKE.
  12. Limitation of Liability. TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT SHALL ANY OF THE EMVCO PARTIES BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INDIRECT, CONSEQUENTIAL, SPECIAL OR PUNITIVE DAMAGES (INCLUDING LOSS OF PROFITS), WHETHER IN AN ACTION IN CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, ARISING OUT OF OR RELATING TO THE SITE (INCLUDING ANY SITE MATERIALS), EVEN IF AN EMVCO PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT SHALL THE AGGREGATE LIABILITY OF EMVCO PARTIES (WHETHER IN CONTRACT, WARRANTY, TORT, PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY) ARISING OUT OF OR RELATING TO THE SITE OR SITE MATERIALS (INCLUDING THE EMV® SPECIFICATIONS) EXCEED THE AMOUNT YOU PAID, IF ANY, FOR YOUR USE OF THE SITE DURING THE YEAR BEFORE THE CAUSE OF ACTION AROSE.
  13. Applicable Law and Venue. These Terms of Use and your use of the Site and Site Materials shall be governed by and construed in accordance with the laws of the State of Delaware without resort to its conflict of law provisions. You agree that any action at law or in equity arising out of or relating to the Site, Site Materials or these Terms of Use shall be filed only in the state or federal courts located in Delaware, and you hereby irrevocably and unconditionally consent and submit to the exclusive jurisdiction of such courts over any suit, action or proceeding arising out of or relating to the same.
  14. Export Laws; Use by U.S. Government. The Site Materials, including technical data, may be subject to U.S. export control laws, including the U.S. Export Administration Act and its associated regulations, and may be subject to export or import laws and regulations in other countries. You agree to comply strictly with all such laws and regulations and acknowledge that you have the responsibility to obtain any licenses or other approvals, if applicable, to export, re-export, or import the Site Materials. The Site Materials may not be downloaded, or otherwise exported or re-exported (i) into, or to a national or resident of, Cuba, Iran, North Korea, Sudan, Syria or any other country subject to a U.S. embargo; (ii) to any person or entity on the U.S. Treasury Department’s Office of Foreign Assets Control’s list of Specially Designated Nationals, or the U.S. Commerce Department’s Bureau of Industry and Security’s Denied Parties, Unverified or Entity Lists; or (iii) for any purpose prohibited by U.S. export control laws (e.g., nuclear, biological, or chemical weapons or missile technology).Use, duplication or disclosure by the United States government is subject to the restrictions as set forth in the Rights in Technical Data and Computer Software Clauses in DFARS 252.227-7013(c) (1) (ii) and FAR 52.227-19(a) through (d) as applicable.
  15. Termination; Modification of Site Materials. EMVCo reserves the right, without notice and in its sole discretion, to terminate your access to the Site or any Site Materials or features on the Site, and to block or prevent your future access to and use of the Site. EMVCo reserves the right, without notice and in its sole discretion, to terminate any license granted to you under these Terms of Use. In addition, EMVCo reserves the right to change, cancel or delete any and all Site Materials, services and features provided as part of the Site at any time, with or without notice to you.
  16. Severability. If any provision of these Terms of Use shall be deemed unlawful, void or for any reason unenforceable, then that provision shall be deemed severable from these Terms of Use and shall not affect the validity and enforceability of any remaining provisions.
  17. Questions. If you have any questions about EMVCo or the Site, please contact us by submitting a Public Comment at Contact Us or a Query (for Subscribers and Associates) at Submit a Query.
Cancel
Close Login Modal

EMVCo Login

EMVCo's new website and Participant Dashboard are now live. To access your account for the first time on our new website you'll need to carry out a password reset here. You will then be sent an email to reset your password.

Lost your password?

Don't have an account?

EMVCo Associates, Subscribers and public users of emvco.com can create accounts to manage their engagement and participation with EMVCo. Using your EMVCo account, you can create your own watchlist of EMV technologies documents, monitor queries and responses, and manage your profile.

Ways to participate