Procedure for Submitting Reports on the Activities of Payment Systems

1 "Registered" By the Ministry of Justice of the Republic of Tajikistan under No. 982 dated July 30, 2019 "Approved" By the Resolution of the Board of the National Bank of Tajikistan under No. 76 dated July 5, 2019

Procedure for Submitting Reports on the Activities of Payment Systems

Procedure for Submitting Reports on the Activities of Payment Systems (hereinafter referred to as the "Procedure") is developed for the purpose of supervising the payment system of the Republic of Tajikistan in accordance with Article 28 of the Law of the Republic of Tajikistan "On Payment Services and the Payment System". It establishes the procedure for payment system operators to submit reports (hereinafter referred to as "Information") on the activities of the payment system and its participants, as well as the forms, deadlines, and methodology for compiling this reporting.

CHAPTER 1. GENERAL PROVISIONS

1. The following main concepts are used in this Procedure: issuer bank – a credit financial organization engaged in the issuance of bank payment cards in accordance with the technology and rules of the payment system;

acquirer bank – a credit financial organization carrying out activities for issuing cash to cardholders and accepting bank payment cards as a means of payment for sold goods and services in the terminal network based on contractual relations with trade and service enterprises;

e-commerce – activities aimed at the sale of goods and services using communication information technologies based on network interactions between the buyer and the seller;

categories of trade and service enterprises – a classification of the type of activity of trade and service enterprises when conducting transactions for the payment of goods and services using electronic payment instruments in trade and service enterprises;

electronic wallet – an electronic payment instrument, microprocessor (chip), computer software, and other software-technical means in which electronic money is stored and through which electronic funds transfers are carried out;

2

P2P transfers – online transfers of funds from one bank payment card to another bank payment card;

fraudulent operations – illegal intentional deceptive actions (or abuse of trust) aimed at unauthorized access to and use of information related to bank secrecy to obtain funds from the bank accounts of participants of the payment system and/or their clients.

CHAPTER 2. FORMS AND DEADLINES FOR SUBMITTING REPORTS

2. Information is submitted to the National Bank of Tajikistan in accordance with the established forms of this Procedure.

3. Information is submitted in paper form to the General Department of the National Bank of Tajikistan and in electronic form to the electronic address of the corresponding subdivision of the National Bank of Tajikistan.

4. The electronic form of Information is provided in Excel format. Information provided electronically must be identical to Information provided on paper.

5. The payment service provider performing the functions of the payment system operator submits Information in accordance with this Procedure, as well as within the framework of monthly statistical banking reporting.

6. The payment system operator submits Information starting from the reporting period following the reporting period in which it received the license of the payment system operator.

7. Information on monthly reports is submitted no later than the fifteenth day of the month following the reporting period.

8. Information on quarterly reports is submitted no later than the end of the second month following the reporting period.

9. In case the deadline for providing Information does not coincide with a working day, the last deadline for submitting Information is considered the next working day.

10. The data provided in accordance with this Procedure are indicated in the currency used in the preparation of reporting in the payment system.

11. The payment system operator annually provides to the National Bank of Tajikistan:

• a financial report on its activities, together with a copy of the audit opinion;
• any other information on the activities of the payment system requested by the National Bank of Tajikistan.

12. When compiling and providing Information, the payment system operator ensures the completeness of filling, accuracy, and compliance with the deadlines for their submission.

3

13. In case of detection of facts of providing inaccurate Information, the payment system operator who allowed distortions in the reporting data re-submits corrected Information to the National Bank of Tajikistan together with explanations of the corrections made, within a period of no more than five working days after the day of detection of the fact of inaccuracy of previously provided Information.

CHAPTER 3. METHODOLOGY FOR COMPILING REPORTING

14. The payment system operator carrying out activities using bank payment cards submits Information in accordance with Appendix No. 1 to this Procedure (hereinafter referred to as Form No. 1 - PSO).

15. Information in Form No. 1 - PSO for transactions carried out in foreign currency is submitted in the national currency (Somoni) at the official exchange rate established by the National Bank of Tajikistan on the first day of the month following the reporting period.

16. The operator of an international payment system carrying out activities using bank payment cards submits Information in accordance with Appendix No. 2 to this Procedure (hereinafter referred to as Form No. 2 - PSO).

17. The payment system operator carrying out payment acceptance submits Information in accordance with Appendix No. 3 to this Procedure (hereinafter referred to as Form No. 3 - PSO).

18. The payment system operator carrying out money transfers submits Information in accordance with Appendix No. 4 to this Procedure (hereinafter referred to as Form No. 4 - PSO).

19. In the Report Forms, all corresponding rows must be filled. In the absence of data for one or more indicators, a zero is entered in the corresponding row of the Report Form for numerical indicators and a dash for symbolic indicators (unless otherwise provided by this Procedure).

20. On the title page of Form No. 1-PSO, No. 2 – PSO, No. 3 – PSO, and No. 4 - PSO, the name of the payment system operator, the name of the payment system, the reporting period, the currency of the report, the surname, first name, and patronymic of the head and chief accountant of the payment system operator are indicated, as well as the surname, first name, patronymic, and phone number of the report preparer, and the date of preparation of the report in the format "day/month/year".

21. Procedure for filling out Form No. 1 – PSO "Information on the payment system using bank payment cards" (Appendix No. 1):

Sheet 1 Table 1.1. "Information on participants of the payment system": Table 1.1. contains information on participants of the payment system operating on the territory of the Republic of Tajikistan.

4

such Information is submitted to the National Bank of Tajikistan quarterly.

Table 1.1. is filled out as follows:

Table 1.1.

No.

of column	Name	Explanation
1	No.	Sequential number of the row
2	Name of the participant	The name of the participant of the payment system engaged in the issuance and maintenance of bank payment cards is indicated.
3	Status of the participant in the payment system	The status of the participant in the payment system according to the terms of participation in the payment system is indicated.
4	Date of commencement of participation	The date of signing the agreement on participation in the payment system is indicated.
5	Date of completion of participation	The date of exit from the payment system in the reporting period is indicated.

Sheet 2 Table 1.2. "Information on transactions carried out using bank payment cards of participants of the payment system": Table 1.2. contains information on transactions that were carried out using bank payment cards in the terminal network of participants of the payment system for the reporting period; such Information is submitted to the National Bank of Tajikistan quarterly.

Table 1.2. is filled out as follows:

Table 1.2.

No.

of row	Name	Explanation

1. | Operations of clients of the participant in the terminal network of the participant | Operations using bank payment cards of clients of the participant of the payment system in the terminal network of the participant are indicated.
2. | Operations of clients of other participants in the terminal network of the participant | Operations using bank payment cards of clients of other participants of the payment system in the terminal network of the participant of the payment system are indicated.

5

3. | Operations of clients of foreign banks in the terminal network of the participant | Operations using bank payment cards of cardholders of foreign banks in the terminal network of the participant of the payment system are indicated.

No.

of column	Name	Explanation
1	No.	Sequential number of the row
2	Name of participants of the payment system	The name of the participant of the payment system engaged in the issuance and maintenance of bank payment cards is indicated.
3 - 4	Total number and amount of operations	The total number and amount of all operations carried out using bank payment cards in the reporting period are indicated.
5 - 6	Cash withdrawal, number and amount of operations	The total number and amount of operations for the withdrawal of cash funds using bank payment cards in the reporting period are indicated.
7 - 8	Cash withdrawal, number and amount of operations (foreign currency)	The total number and amount of operations for the withdrawal of cash funds in foreign currency using bank payment cards in the reporting period are indicated.
9 - 10	Payment for goods and services, number and amount of operations	The total number and amount of operations for the payment of goods and services using bank payment cards in the reporting period are indicated.
11-12	E-commerce, number and amount of operations	The total number and amount of e-commerce operations carried out using bank payment cards in the computer network of participants of the payment system in the reporting period are indicated.

6

13-14 | Money transfers (P2P), number and amount of operations | The total number and amount of operations for the transfer of funds using bank payment cards (P2P transfers) in the reporting period are indicated.

Sheet 3 Table 1.3. "Information on the number and volume of cashless payments carried out using bank payment cards in the terminal network of banks - acquirers in trade and service enterprises": Table 1.3. contains information on the number and amount of operations for the payment for goods and services using bank payment cards in the reporting period, carried out in the terminal network of banks - acquirers - participants of the payment system, established in trade and service enterprises; such Information is submitted to the National Bank of Tajikistan quarterly.

Table 1.3. is filled out as follows:

Table 1.3.

No.

of column	Name	Explanation
1	No.	Sequential number of the row
2	TSP Code	Codes of categories of trade and service enterprises established in accordance with international standards (ISO 18245) are indicated.
3	Categories of trade and service enterprises	The type of service of trade and service enterprises is indicated.
4 – 9	Payment for goods and services, number and amount of operations	The number and amount of operations for the payment for goods and services in trade and service enterprises by month are indicated.

No.

of row	Name	Explanation
1	4131, Buses	The total number of operations and the amount of payment by bank payment cards for bus travel are indicated.
2	4511, Air tickets	The total number of operations and the amount of payment by bank payment cards for air tickets are indicated.
3	4121, Taxi	The total number of operations and the amount of payment by bank payment cards for taxi services are indicated.

7

4 | 4011, Railways | The total number of operations and the amount of payment by bank payment cards for railway tickets are indicated. 5 | 4784, Road and bridge tolls/fees | The total number of operations and the amount of payment by bank payment cards for road and bridge tolls/fees are indicated. 6 | 4789, Other transport services | The total number of operations and the amount of payment by bank payment cards for any other transport services not listed above are indicated. 7 | 4722, Travel agencies and tour operators | The total number of operations and the amount of payment by bank payment cards for services of travel agencies offering tourist information and ticket booking services are indicated. Such points act as agents on behalf of tourists for ordering and purchasing tickets for flights, bus tours, sea cruises, car rentals, train travel, and accommodation. Also included are excursion organizers who provide services for organizing and selecting excursions for sale through travel agencies or directly to the consumer. 8 | 4814, Telecommunication services (mobile communication, Internet, etc.) | The number and amount of operations for payment by bank payment cards to providers of telecommunication services, such as mobile and landline communication, post, Internet services, etc., are indicated. 9 | 4899, Cable television, satellite broadcasting, etc. | The number and amount of operations for payment by bank payment cards for connection and direct delivery of television programs on a paid basis are indicated.

8

10 | 4900, Housing and utility services | The number and amount of operations for payment by bank payment cards for housing and utility services are indicated. 11 | 5541, Gas stations and car service stations | The number and amount of operations for payment by bank payment cards at points of sale that sell fuel for consumer use, at car service stations, and auto repair shops are indicated. 12 | 5812, Restaurants and public catering | The number and amount of operations for payment by bank payment cards in restaurants and public catering establishments are indicated. 13 | 5912, Pharmacies | The number and amount of operations for payment by bank payment cards in pharmacies are indicated. 14 | 5999, Wholesale and retail trading centers and points | The number and amount of operations for payment by bank payment cards in wholesale and retail trading centers and points are indicated. 15 | 6300, Insurance | The number and amount of operations for payment by bank payment cards for insurance services are indicated. 16 | 7011, Hotels | The number and amount of operations for payment by bank payment cards for hotel services are indicated. 17 | 7542, Car washes | The number and amount of operations for payment by bank payment cards for car wash services are indicated. 18 | 7996, Cultural and entertainment services | The number and amount of payment by bank payment cards for cultural and entertainment services are indicated.

9

19 | 7999, Resorts, sanatoriums, recreation zones | The number and amount of payment by bank payment cards at points of rest, treatment, and provision of entertainment services are indicated. 20 | 8099, Medical institutions | The number and amount of payment by bank payment cards for services provided by medical institutions and medical specialists are indicated. 21 | 8299, Educational institutions | The number and amount of payment by bank payment cards for services in educational institutions, including preschool, school, secondary specialized, and higher educational institutions, and other educational institutions are indicated. 22 | 8675, Driving range | The number and amount of payment by bank payment cards for driving range services and taking exams during the issuance of a driver's license are indicated. 23 | 9222, Fines | The number and amount of operations for payment by bank payment cards for fines credited to the state budget are indicated. 24 | 9311, Taxes, customs duties/fees | The number and amount of operations for payment by bank payment cards for taxes and customs duties/fees credited to the state budget are indicated. 25 | 9399, Other state fees | The number and amount of operations for payment by bank payment cards for other state fees are indicated. 26 | 9999, Other services | The number and amount of operations for payment by bank payment cards for any other services not listed above are indicated.

10

Sheet 4. Table 1.4. "Information on incidents": Table 1.4. contains information on incidents that occurred in the payment system in the reporting period; such Information is submitted to the National Bank of Tajikistan no later than the next day after the detection of the incident.

By incident is meant the following cases: any case of service failure for more than 30 minutes; any case of fraud or theft in an amount exceeding 20 indicators for calculations; any case of disclosure of client data, namely phishing, cyber, and other attacks, as well as cases aimed at hacking the operating system to gain unauthorized access to data of bank payment cards of participants of the payment system.

Table 1.4. is filled out as follows:

Table 1.4.

No. of row	Name	Explanation
1	Name of the payment system	The name of the payment system in which the incident occurred is indicated.
2	Type of incident	The type of incident is indicated according to the drop-down list.
3	Location	The location where the incident occurred is indicated.
4	Date	The date of the occurrence of the incident is indicated.
5	Causes of occurrence and description of the incident	Detailed information about the incident that occurred and the causes of the incident is indicated.
6	Actual amount of loss	The amount of loss incurred by the payment system or clients of participants of the payment system as a result of the incident is indicated.
7	Measures taken to eliminate the consequences of the incident	Measures taken to eliminate the consequences of the incident are indicated.
8	Report prepared by	The surname, first name, and patronymic of the employee who prepared the report are indicated.
9	Position	The position of the employee who prepared the report is indicated.

11

10 | Date of preparation of the report | The date of preparation of the report is indicated.

Sheet 5 Table 1.5. "Information on incidents": Table 1.5. contains summary information on incidents that occurred in the payment system in the reporting period; such Information is submitted to the National Bank of Tajikistan quarterly.

Table 1.5. is filled out as follows:

Table 1.5.

No. of row	Name	Explanation
1	No.	Sequential number of the row
2	Type of incident	The type of incident is indicated according to the drop-down list.
3	Date of detection of the incident	The date of detection of the incident is indicated.
4	Date of occurrence of the incident	The date of occurrence of the incident is indicated.
5	Region of occurrence of the incident	The region in which the incident occurred is indicated.
6	Cause of the incident	The cause of the occurrence of the incident is indicated.
7	Consequences of the incident	The consequences of the incident that occurred are indicated, namely the amount of loss and damage incurred by the payment system as a result of the incident.
8	Affected participant of the payment system	The name of the participant of the payment system that suffered as a result of the incident is indicated.
9	Number of affected clients	The number of affected clients as a result of the incident is indicated.
10	Description of actions taken to eliminate the consequences of the incident	Specific measures taken to eliminate the consequences of the incident are indicated.
11	Description of actions taken to prevent the occurrence of the incident	Specific measures taken to prevent the occurrence of the incident are indicated.

12

Sheet 6 Table 1.6. "Information on fraudulent operations carried out using bank payment cards (from the perspective of the issuer bank)": Table 1.6. contains summary information on the number and amount of fraudulent operations with and without the participation of bank payment cards, carried out in the own network of the participant and other participants of the payment system in the reporting period. Information is provided from the perspective of the issuer bank; such Information is submitted to the National Bank of Tajikistan quarterly.

Table 1.6. is filled out as follows:

Table 1.6.

No. of row	Name	Explanation
1	Fraudulent operations using lost, stolen cards	Fraudulent operations carried out using lost or stolen bank payment cards in the reporting period are indicated.
2	Fraudulent operations using counterfeit cards	Fraudulent operations carried out using counterfeit bank payment cards in the reporting period are indicated.
3	Fraudulent use of card number on the Internet	Fraudulent operations carried out using the number of a bank payment card on the Internet in the reporting period are indicated.
4	Other	Any other fraudulent operations not listed above are indicated.

No.

of column	Name	Explanation
1	No.	Sequential number of the row
2	Classification of fraudulent operations	The main types of fraudulent operations with bank payment cards according to international practice are indicated.
3 - 4	Total, total number and amount of operations	The total number and amount of all fraudulent operations carried out using bank payment cards of participants of the payment system in the reporting period are indicated.
5 - 6	Cash withdrawal, number and amount of operations	The total number and amount of fraudulent operations for the withdrawal of cash funds carried out using bank payment cards of participants of the payment system in the own network of participants in the reporting period are indicated.
7 - 8	Payment for goods and services, number and amount of operations	The total number and amount of fraudulent operations for the payment of goods and services carried out using bank payment cards of participants of the payment system in the own network of participants in the reporting period are indicated.

13

9 - 10 | Money transfer (P2P), number and amount of operations | The total number and amount of fraudulent operations for money transfers (P2P) carried out using bank payment cards of participants of the payment system in the own network of participants in the reporting period are indicated. 11-12 | Cash withdrawal, number and amount of operations | The total number and amount of fraudulent operations for the withdrawal of cash funds carried out using bank payment cards of participants of the payment system in the network of other participants of the payment system in the reporting period are indicated. 13-14 | Payment for goods and services, number and amount of operations | The total number and amount of fraudulent operations for the payment of goods and services carried out using bank payment cards of participants of the payment system in the network of other participants of the payment system in the reporting period are indicated. 15-16 | Money transfer (P2P), number and amount of operations | The total number and amount of fraudulent operations for money transfers (P2P) carried out using bank payment cards of participants of the payment system in the network of other participants of the payment system in the reporting period are indicated.

22. Procedure for filling out Form No. 2 – PSO "Information on the international payment system using bank payment cards" (Appendix No. 2):

Sheet 1 Table 2.1. "Information on participants of the payment system": Table 2.1. contains information on participants of the payment system operating on the territory of the Republic of Tajikistan; such Information is submitted