ISO/TS 12812-5:2017 PDF

Overview

ISO/TS 12812-5:2017 - Core banking: Mobile financial services - Part 5: Mobile payments to businesses defines a technical framework for how a person uses a mobile device to initiate payments to a merchant. It covers both traditional merchant point-of-interaction (POI) scenarios and non‑traditional flows that use mobile devices to initiate, authorize and process transactions outside legacy payment networks. The specification supports push and pull payments, proximate and remote payments, and modern enablers such as QR codes, cloud services, biometrics, and geo‑location. The document is intended for implementers of mobile retail payment solutions and complements other parts of the ISO 12812 series.

Key topics and technical requirements

ISO/TS 12812-5 addresses the full technical and operational stack needed for mobile payments to businesses, including:

• Device, network and application selection requirements - guidance on selecting appropriate endpoints and connectivity models for reliable payment initiation.
• Security requirements - principles for authentication, authorization and risk management in mobile payments (including proximate and remote scenarios).
• Logging and receipt requirements - transactional logging, receipt formats and audit trails to support dispute resolution and regulatory compliance.
• Notice and data privacy requirements - consumer notification, privacy protections and handling of personally identifiable information.
• Types of mobile payments - proximate (contactless/NFC) and remote (server‑mediated) payments, plus alternative channels such as QR‑based, SMS, mobile airtime, and mobile wallets.
• Payment instruments - supported instruments include direct debit, credit transfer, payment cards, stored value accounts (SVA), and mobile bill accounts.
• Use cases and risk controls - detailed proximate and remote use cases, user verification methods (UVMs), interoperability models, and dispute/redress procedures.
• Implementation neutrality - the standard does not endorse specific vendors or technologies; it promotes interoperability and references existing message standards (e.g., ISO 8583, ISO 20022).

Applications

ISO/TS 12812-5 is practical for:

• Designing and deploying mobile point‑of‑sale (mPOS) and contactless merchant systems.
• Building mobile wallet solutions and secure remote payment servers.
• Integrating QR, biometric or geo‑location authentication into payment flows.
• Implementing compliance, logging, receipt and dispute resolution processes for mobile retail payments.

Who should use this standard

• Banks and mobile financial service providers (MFSPs)
• Payment processors, acquirers, POS and mPOS vendors
• Mobile network operators and trusted service managers
• Fintech developers, system integrators and regulators seeking interoperable, secure mobile retail payment solutions

Related standards

• ISO 12812‑1 (General framework)
• ISO/TS 12812‑2 (Security)
• Payment messaging standards such as ISO 8583 and ISO 20022

Using ISO/TS 12812-5 helps organizations implement secure, interoperable mobile payment systems that meet consumer protection and regulatory expectations while remaining technology‑agnostic.