Payment Systems Guidelines August 2017
Payment Systems Guidelines August 2017
Payment Systems Guidelines August 2017
FOR
AND INSTRUMENTS
CONTENTS
1 Scope and Objectives ....................................................................................................... 3
2 Definitions ......................................................................................................................... 4
3 Authorization .................................................................................................................... 7
4 Governance ....................................................................................................................... 8
10 Outsourcing .................................................................................................................... 16
12 Liability ........................................................................................................................... 19
13 Remittances..................................................................................................................... 19
20 Prohibitions..................................................................................................................... 24
2
1 Scope and Objectives
1.4. To this end, any entity wishing to operate a retail payment system and/or
issue and manage a retail payment instrument must comply with the
authorization requirements established by the Reserve Bank of
Zimbabwe (“Reserve Bank”) under these Guidelines and/or any
additional measures adopted by the Reserve Bank. To the same end, the
standards for the management of retail payment systems, the outsourcing
of parts of relevant activities and the use of agents are covered in the
guidelines.
1.5. These Guidelines are issued in line with the Reserve Bank of Zimbabwe
mandate over the national payment system as stipulated under the
Reserve Bank of Zimbabwe Act [Chapter 22:15] and the National
Payment Systems Act [Chapter 24:23].
3
1.6. These Guidelines do not confer on any entity the right to conduct deposit
taking business, which may only be conducted by licensed and
supervised deposit taking institutions (DTIs) by the Reserve Bank of
Zimbabwe.
2 Definitions
2.1. Acquirer means the payment service provider (PSP) processing payments
on behalf of a merchant.
2.2. Agent means a person acting in the name and on behalf of, and so
representing one or more PSP issuing a retail payment instrument vis-à-
vis users. The issuing PSP is subject to all relevant Zimbabwe rules on
principal-agent relationship. By virtue of the agency agreement, the agent
is permitted to conduct solely and specifically the services indicated in
the agreement.
4
excludes any electronic means to only permit transfers to/from a deposit
or current account.
2.5. Escrow account means a form of account held by a bank into which e-
money is deposited and for proper accounting of the funds as agreed by
the parties. This includes trust and banking services accounts all managed
by the same trustees.
2.7. Infrastructure sharing is the use of existing and future physical, virtual
properties by two or more operators or issuers subject to an agreement
specifying relevant technical and commercial terms and conditions.
2.8. Merchant means any person that accepts retail payment instruments, as
well as e-money as payment for their goods and services.
2.9. Operator means the entity that provides and manages a retail payment
system.
5
2.11. Payment Service Provider (PSP) means an entity that provides services
enabling funds to be deposited and withdrawn from an account; payment
transactions involving transfers of funds; the issuance and/or acquisition
of payment instruments such as cheques, e-money, credit cards, debit
cards; remittances and other services central to the transfer of funds.
2.12. Remittance service provider means an institution that accepts cash and
other payment instruments in one location and pays a corresponding sum
in cash or other form to a beneficiary in another location by means of a
communication, a message, transfer or through a clearing network to
which the remittance service provider belongs.
6
2.15. Scheme means the rules, standards and procedures governing the
operational framework permitting the operation of the retail payment
system and instrument and the linking of all stakeholders.
2.17. User means any person who uses a retail payment instrument or any
person to whom e-money has been issued
3 Authorization
3.1. No operator can operate a system or an issuer can issue and manage retail
payment instruments unless it has been authorized by the Reserve Bank.
7
3.3. Authorization and Approval or Approved shall refer to sanctioning by
Reserve Bank of Zimbabwe and in some cases by market players through
recognised self-regulatory bodies (SRO) under the jurisdiction of the
Reserve Bank.
4 Governance
4.1 An operator or an issuer shall establish adequate governance
arrangements, which are effective and transparent, to ensure the continued
integrity of its scheme or product, which shall include, among others, the
following:
4.2 The above matters will be considered in respect of the persons, for the
functions and duties to be undertaken by any of these persons that are
involved in any payment systems regulated activities.
8
iv. Any proceedings of a disciplinary or criminal nature, or has been
notified of any potential proceedings or of any investigation which
might lead to those proceedings;
v. Contravention of any of the requirements and standards of any
regulatory system;
vi. Subjection of any justified complaint relating to regulated
activities;
vii. Involvement with an institution that has been refused registration,
authorisation, membership or a licence to carry out a trade,
business or profession, or has had that registration, authorisation,
membership or licence revoked, withdrawn or terminated, or has
been expelled by a regulatory or government body;
viii. Removal of the relevant licence, registration or other authority,
leading to the person being refused the right to carry on a trade,
business or profession requiring a licence, registration or other
authority;
ix. Director, partner, or concerned in the management, of a business
that has gone into insolvency, liquidation or administration while
the person has been connected with that organisation or within one
year of that connection;
x. Person, or any business with which the person has been involved,
has been investigated, disciplined, censured or suspended or
censored by a regulatory or professional body, a court or Tribunal,
whether publicly or privately;
xi. Dismissal, or asked to resign and resigned, from employment or
from a position of trust, fiduciary appointment or similar;
xii. Disqualified from acting as director or disqualified from acting in
any managerial capacity;
xiii. In the past, the person has been candid and truthful in all his
dealings with any regulatory body and whether the person
demonstrates a readiness and willingness to comply with the
9
requirements and standards of the regulatory system and with other
legal, regulatory and professional requirements and standards.
i. Whether the person has been the subject of any judgment debt or
award, in Zimbabwe or elsewhere, that remains outstanding or was
not satisfied within a reasonable period;
ii. Whether, in Zimbabwe or elsewhere, the person has made any
arrangements with his creditors, filed for bankruptcy, had a
bankruptcy petition served on him, been adjudged bankrupt, been the
subject of a bankruptcy restrictions order (including an interim
10
bankruptcy restrictions order), offered a bankruptcy restrictions
undertaking, had assets sequestrated, or been involved in proceedings
relating to any of these.
iii. Whether there are any indicators that the person will not be able to
meet its debts as they fall due;
iv. Whether relevant solvency requirements are met;
v. Whether the person has been subject to any judgment debt or award
that remains outstanding or has not been satisfied within a reasonable
period;
vi. Whether the person has made arrangements with creditors, filed for
bankruptcy or been adjudged bankrupt or had assets sequestered;
vii. Whether the person has been able to provide the Financial Regulator
with a satisfactory credit reference.
4.6 Management and shareholders should ensure capital adequacy in line with
the minimum requirements at all times;
iv. Those already recognized should migrate to the same (4.1e) within two
years from the date of issuing this guideline.
11
4.7 The operator or issuer must implement internal policies that are compliant
with Reserve Bank requirements, including at a minimum:
a. Comprehensive risk management;
b. Capital adequacy
c. Liquidity management;
d. System integrity and audit;
e. Business continuity and contingency plan;
f. Security of the network used for communication and transfers;
g. Comprehensive consumer experience and protection management;
h. Complaints, dispute management arrangements and redress
mechanisms;
i. Interoperability and Infrastructure sharing;
j. Approved best practices and standards including;
i. ICT and Technical
ii. Governance
k. Management of agents;
l. Anti-money laundering and counter financing of terrorism
5 Operational Requirements
5.1 An operator or an issuer shall establish adequate operational
arrangements for its scheme or product, which shall include:
a. rules and procedures setting out the rights, responsibilities and
liabilities of the issuer, third parties providing parts of the activities
in outsourcing, agents, merchants, users and any other relevant
stakeholder;
12
b. measures to ensure safety, security and operational reliability of the
scheme or product, including contingency arrangements and disaster
control procedures, to be applied to all relevant systems, and
platforms whether internal or outsourced;
d. separate records and accounts for its activities related to the retail
payment instrument that it provides from its other activities.
5.2 The Reserve Bank reserves the right to impose to issuers of retail
payment instruments any relevant standards to ensure safe and reliable
issuance and management of an instrument. More specifically, the
Reserve Bank reserves the right to impose on issuers such conditions and
limits on the nature of e-money products that may be offered, the
quantity of e-money products that may be issued over a particular period
and limits on the monetary values that may be transferred or funded to
particular e-money products.
6 Capital Requirements
7 Risk Management
7.1 An operator or issuer shall establish appropriate risk management
mechanisms to mitigate financial risk and ensure safety and integrity of
the payment system and relevant transfers. Likewise, it shall implement
operational and security safeguards in proportion to the scale and
complexity of the scheme.
7.2 An operator or issuer shall ensure that they have resources and capacity
in terms of expertise, hardware, software, and other operating capabilities
14
to deliver consistently reliable service. Measures to ensure operational
reliability shall include:
a. an appropriate system(s) which is robust in its design, development,
testing, implementation and monitoring;
b. strong internal controls for systems and personnel administration;
c. comprehensive and well documented operational and technical
procedures to ensure operational reliability;
d. a system(s) designed with sufficient capacity which is monitored and
upgraded ahead of business changes;
e. robust clearing and settlement arrangements;;
f. robust business continuity, including a reliable back-up system;
g. timely and accurate audit trail and the capability to provide
statistical information and reports;
h. adequate accounting systems and proper reconciliation processes.
15
9 Records Management
9.2 The minimum retention period for such records shall be ten
years unless a higher minimum period is prescribed in terms of
AML/CFT or electronic communications legislation in the
country.
10 Outsourcing
10.4 Once an issuer outsources important functions, it must comply with the
following conditions: (i) the outsourcing shall not result in the delegation
16
by senior management of its responsibility; (ii) the relationship and
obligations of the issuer towards the users of any relevant payment
instrument shall not be altered; (iii) the conditions with which the issuer
is to comply in order to be authorised and remain so in accordance with
these Guidelines shall not be undermined; and (iv) none of the other
conditions subject to which the authorization was granted shall be
removed or modified.
11 Use of Agents
11.1 When an issuer intends to offer a payment instrument to users through an
agent network, it shall submit the following minimum information and
documents to the Reserve Bank:
(a) criteria for appointing the agents:
i. the name, address;
ii. nature of business;
iii. company/individual profile;
iv. major source of funds;
v. Valid license/vendor number or Partnership Agreement,
Certificate of Incorporation, CR14(for Corporates);
vi. Tax clearance certificates(where necessary)
vii. Capacity (e.g. Electronic float and cash to assist customers);
viii. Signed agent application form;
ix. Passport size photo of the directors;
x. Copies of directors’ National Identity Documents (ID) or
individual owners;
xi. Proof of residence of the directors/owners or proof of physical
address for business premises (For all forms of business, proof
of residence can be, bank statement or utility bill that is not older
than 3 months, a valid trading license showing the business
address;
17
xii. a copy of lease agreement for rented premises supported by
landowners’ ID or an affidavit with a Commissioner of Oaths or
police stamp, In rural areas where this may not always be
available;
xiii. a copy of ID of the landowner and a letter from the landowner
confirming that they are operating from their premises;
11.2 When the Reserve Bank receives the information in accordance with sub-
section 11.1, it shall review it and decide whether to authorise the
agreement as contemplated or with amendments. No agent shall carry
out any activities under the agency agreement prior to this being
authorised. Before authorizing the agreement, the Reserve Bank may, at
its discretion, take further action to verify the information received. If,
after taking action to verify the information, the Reserve Bank is not
satisfied that the information provided is accurate, it shall reserve the
right to deny the authorization.
18
11.3 The principal shall ensure that agents acting on its behalf inform
customers of their acting as agents of a specific principal and shall
publish their list on its website.
11.4 The issuer is expected to supervise, equip and train its contracted agents.
Issuer is also expected to provide compliance reports on their agents as
advised by the Reserve Bank from time to time,
12 Liability
12.1 When an operator or an issuer relies on third parties for the performance
of operational or managerial functions, they shall take reasonable steps to
ensure that the requirements of these Guidelines and any further
measures by the Reserve Bank are complied with.
12.2 The operator or issuer shall remain fully liable for any acts of their
employees, or any agent, branch or entity to which activities are
outsourced.
13 Remittances
13.1 All authorised or licensed remittances service providers, both domestic
and international, for both in-bound and out-bound remittances need to be
registered, licensed and are subject to regulation by the Reserve Bank.
19
13.2 Payment services providers, participants and agents shall ensure
compliance with local and international remittances standards in line with
market developments for the benefit of consumers.
20
b. ensures that users understand terms and conditions on a continuous
basis;
c. puts in place effective and efficient dispute resolution mechanisms;
d. provides adequate warning statements to users and merchants on any
known pending or potential threats, lost or stolen payment
instruments or access devices, or fraudulent transactions.
15.3 An issuer shall provide clear terms and conditions for use of the
instrument, which should be made publicly available. The issuer must
obtain acknowledgement from its users and merchants prior to their
participation in the scheme. In this regard automatic registration of
customers is not permissible.
21
15.6 Approved procedures for reversal of funds should at a minimum provide
for the following:
a) Reversal of funds should be procedurally conducted immediately
after the operator receives the request from the sender that the
transaction was a result of genuine error.
b) The receiver of the funds should have his/her wallet account frozen
by the same amount and advised immediately.
15.7 A record of all reversals should be kept and submitted to the Reserve
Bank through monthly return or periodic return.
22
17 Management of Escrow /Trust /Banking Services Account
17.1 An issuer of e-money or operator shall establish a trust account in a
deposit taking financial institution for purposes of effective management
of consumer funds.
17.2 Every trust account shall be administered by a board of trustees approved
by the Reserve Bank in line with an approved constitution and trust deed.
17.3 The issuer shall ensure that, the necessary documentation to
operationalize the trust account are in place and include among others the
following:
a) Trust Deed, and
b)Charter or constitution
18 Reporting Requirements
18.1 An issuer shall submit or avail to the Reserve Bank:
a. Its audited financial statements, management accounts, internal
and external audit reports.
23
e. Mechanism to enable on line read only functions to the platform
for monitoring purposes.
20 Prohibitions
20.1 An issuer shall not:
a. issue e-money at a discount;
b. use the money collected from or on behalf of
users to extend loans;
c. extend credit to the user, or pay interest or profits
on the e-money balances, or anything else that
would add to the monetary value of the e-money;
d. associate, link or use the e-money scheme or
platform to conduct or facilitate illegal activities.
24
e. Provide any other service not approved by
Reserve Bank
25
23 Existing Schemes, Systems or Products
23.1 Any entity offering retail payment instruments or
operating retail payment systems on the effective date
of these Guidelines shall structure their organization,
administration, and operations to the requirements of
these Guidelines within six months from the effective
date of these Guidelines or any extended period as the
Reserve Bank may determine.
26
standardization of business conduct for the
development of payment systems.
ooo0ooo
27