Global Security

Bulletin No. 5 • 13 May 2011

In this bulletin... 3 Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines 12 MasterCard Acquirer Notification of Merchants with Subsequent Fraud 18 Recommended Fraud Prevention Measures for CVC 1 Verification—Reminder 20 Revised Date—Algeria, Egypt, Jordan, and Lebanon Participation in Chip Liability Shift for ATM Transactions 22 ADC Operational Reimbursement Fixed Deductible—Update 23 Standards for Area of Use—Reminder 27 Vendors for Card Production Services—Monthly Edition 31 Recent MasterCard Member Publications 34 Acquirers No Longer Accepting Chargebacks 36 Notification of Chargebacks Under the Global Merchant Audit Program 39 Notification of Chargebacks Under the Cardholder-Merchant Collusion Program

Enclosures Calendar of Events Certified Vendors (for Card Production Services of Any MasterCard®, Maestro®, or Cirrus® Card) Acquirers No Longer Accepting Chargebacks Global Merchant Audit Program Chargebacks Cardholder-Merchant Collusion Program Chargebacks Legal Notices

©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Contact Information

About This Bulletin The monthly Global Security Bulletin is the primary source of changes to security information for member security personnel. Changes to international Standards announced in this bulletin with an effective date are effective as of that date, regardless of when any such change is published in a manual or other document. If no effective date is specified in the article, the change is effective immediately. NOTE All articles apply to all members unless specified otherwise.

For More Information Some articles in this bulletin include specific contacts for more information. Members with questions about other articles should contact their regional Help Desks or the Customer Operations Services team in their region or in St. Louis, Missouri, USA at:

Phone: 1-800-999-0363 (in Canada and U.S. regions) 1-636-722-6176 1-636-722-6292 (Spanish language support) Fax: 1-636-722-7192 E-mail: Canada, Latin America and the Caribbean, [email protected] Europe, South Asia/Middle East/Africa, and U.S. regions Asia/Pacific: Australia and New Zealand [email protected] Brunei/Malaysia [email protected] Cambodia/Laos/Vietnam [email protected] China, Hong Kong, and Taiwan [email protected] Indonesia [email protected] Japan/Guam [email protected] Korea [email protected] Philippines [email protected] Singapore [email protected] Thailand [email protected] Spanish language support [email protected] Vendor Relations, all regions [email protected]

2 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines Claire Le Gal, Business Leader, Payment System Integrity

Topic(s): Authorization, Dual Message System Release 11.Q4, Fraud/Risk, Merchant, Rules/Standards, Security, Single Message System Release 11.Q4

Applies to: � Issuers � Acquirers � Processors

Summary: Effective for transactions occurring on or after 8 November 2011, MasterCard will revise its Standards regarding acquirer and merchant conversion of issuer-approved card-not-present (CNP) transactions to declines. Action Indicator: M Mandate F Financial impact C Coding or development changes typically required A Attention warranted

Effective Date: Transactions occurring on or after 8 November 2011

Background Historically, MasterCard has permitted merchants to decline a face-to-face transaction (which occurs when the card, the cardholder, and the merchant agent are all present at the time of the transaction), even if authorized, when it appears to the merchant that fraudulent activity may occur. However, MasterCard Standards are tacit as to whether merchants may do so in the non–face-to-face environment.

Revisions to the Standards Effective for transactions occurring on or after 8 November 2011, MasterCard will:

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines Global Security Bulletin No. 5, 13 May 2011 3 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due • Allow acquirers and their merchants to convert issuer-approved CNP transactions into declines when the acquirer or the merchant has a good faith reason to believe that the transaction is fraudulent. • Consider a Reversal Request/0400 or an Acquirer Reversal Advice/0420 message sent for the full transaction amount as a cancellation of the original authorization request when such message includes a reason code indicating that the transaction was declined by the acquirer or the merchant due to perceived fraud.

The fraud potential of a transaction typically is determined through fraud screening and fraud scoring services that involve the storage, transmission, or processing of card or transaction data in compliance with the Payment Card Industry Data Security Standard (PCI DSS). Systematic acquirer or merchant declines of CNP transactions from a specific card, a specific issuer, or a specific issuing country or the like do not qualify as high-fraud risk; and MasterCard will continue to consider these declines as a violation of the Standards.

Merchants and third parties may be affected by these revised Standards, subject to an acquirer authorizing a merchant or a third party to act on the acquirer’s behalf for purposes of declining transactions that either the acquirer or the merchant, in good faith, believes to be fraudulent.

The revisions to the Standards apply to the MasterCard and Maestro brands.

Requirements In conjunction with allowing acquirers and their merchants to convert issuer-approved CNP transactions into declines when the acquirer or the merchant has a good faith reason to believe that the transaction is fraudulent, the following requirements apply.

Acquirer and Merchant Requirements The following requirements apply to acquirers and merchants: 1. As is already required, an acquirer must register with MasterCard each third-party entity that will provide fraud screening and fraud scoring services as a Third Party Processor (TPP). 2. The acquirer or merchant must determine whether to proceed with a transaction believed, in good faith, to be fraudulent within 72 hours of the original authorization request.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines 4 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due 3. Upon deciding not to proceed with a transaction and still within 72 hours of the original authorization request, the acquirer or merchant must: a. Generate a Reversal Request/0400 or an Acquirer Reversal Advice/0420 message for the full transaction amount that includes a reason code indicating that the transaction was declined by the merchant or by the acquirer due to perceived fraud; and b. Disclose to the cardholder that the transaction cannot be completed at that time and provide the cardholder with valid customer service contact information (phone number or e-mail address) to respond to cardholder calls or e-mail messages related to the cancelled order. MasterCard does not recommend or require the acquirer, merchant, or third party provider to share the specific reason(s) for the cancellation or decline. 4. The acquirer must be able to recognize and act upon a Reversal Request Response/0410 or Acquirer Reversal Advice Response/0430 message by updating its records to mark the original authorization request as cancelled.

MasterCard no longer will rule in favor of the acquirer and the merchant for compliance cases because the acquirer or the merchant cancelled a transaction with a reversal and submitted a subsequent transaction for an equal to or lesser amount than the original transaction and that subsequent transaction was declined by the issuer.

Issuer Requirements The following requirements apply to issuers: 1. As required by current Standards, the issuer must: a. Upon receipt of a Reversal Request/0400 or an Acquirer Reversal Advice/0420 message, generate a Reversal Request Response/0410 or Acquirer Reversal Advice Response/0430 message, so that the message may be forwarded to the acquirer. b. Ensure that the hold on the cardholder’s account is adjusted within 60 minutes of the issuer matching the reversal message to the original authorization request. 2. The issuer also promptly must act upon a Reversal Request/0400 or an Acquirer Reversal Advice/0420 message to ensure that its customer service applications are updated in a timely manner to reflect the reversal information, to reflect the cancellation of the original authorization with the reversal, and to allow the customer service representative to handle any cardholder questions regarding the reversal.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines Global Security Bulletin No. 5, 13 May 2011 5 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Acquirer and Merchant Compliance Upon MasterCard request, the acquirer must substantiate that conversion of issuer-approved CNP transactions into declines only took place on transactions that the acquirer or the merchant had a good faith reason to believe were fraudulent or, as otherwise allowed by existing Standards, when the order was cancelled by the cardholder, or by the merchant, due to the unavailability of the item(s) ordered or its inability to provide services.

If the issuer determines that the acquirer or the merchant is converting issuer-approved CNP transactions into declines for reasons other than those permitted by the Standards, the issuer should contact its MasterCard representative with supporting documentation, so that MasterCard may determine whether an investigation of a particular acquirer or merchant is warranted.

MasterCard will publish the acquirer and merchant incentives associated with the revised Standards and the new reversal requirement in an upcoming Global Pricing Bulletin.

New Reversal Reason Code for 11.Q4 Releases In conjunction with the requirement to include a reason code in the Reversal Request/0400 and Acquirer Reversal Advice/0420 messages, MasterCard will update the Single Message System and Dual Message System to provide for the new reversal request reason code, effective 8 November 2011, as follows: • In the Dual Message System, the new reason code will be available in data element (DE) 39 (Response Code), with the creation of a new code 34 (Suspect Fraud). • In the Single Message System, the new reason code will be available in DE 60 (Advice Reason Code), subfield 2 (Advice Reason Detail Code), with the creation of a new code 450 0021 (Suspect Fraud).

For details about these system enhancements, refer to the Single Message System Release 11.Q4 Document and to the Dual Message System Release 11.Q4 Document.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines 6 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Overview of Revised Standards Please review the revisions to the publications indicated in the table below and make appropriate plans to support the revised Standards.

Effective Date Changes to Standards in… Will be Published in… 8 November 2011 MasterCard Rules Chapter 3—Member Obligations 8 November 2011 Maestro Global Rules Chapter 9—Processing Requirements

8 November 2011 Chargeback Guide Chapter 4—Arbitration Procedures

MasterCard will incorporate the revised Standards into a future edition of these manuals. The manuals are available on MasterCard OnLine® via the Member Publications product.

Revised Standards—MasterCard Rules MasterCard will revise the MasterCard Rules manual to include these Standards. Additions to the Standards are underlined. Deletions are indicated with a strikethrough.

Chapter 3—Member Obligations

3.8 Authorization Service

3.8.3 Full and Partial Reversals An Issuer receiving a Reversal Request/0400 message or an Acquirer Reversal Advice/0420 message must release any hold placed on the Cardholder’s account for the amount specified within 60 minutes of matching the reversal message to the original authorization request message.

A reversal message sent for the full transaction amount cancels the original authorization request it is associated with.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines Global Security Bulletin No. 5, 13 May 2011 7 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due 3.8.3.1 Reversal for Conversion of Approval to Decline An Acquirer or Merchant may convert an approval authorization request response (herein, an “Issuer-approved authorization”) into a decline for a Card-Not-Present (CNP) Transaction believed, in good faith, by the Acquirer or Merchant to be fraudulent solely in accordance with the following procedure: 1. The Acquirer or Merchant must determine whether to proceed with a Transaction believed, in good faith, to be fraudulent within 72 hours of sending the original authorization request message. 2. Upon deciding not to proceed with the transaction and still within 72 hours of the original authorization request, the Acquirer or Merchant must: a. Generate a reversal message for the full transaction amount that includes a reason code indicating that the transaction was declined by the Acquirer or the Merchant due to perceived fraud; b. Disclose to the Cardholder that the transaction cannot be completed at that time, and provide the Cardholder with valid customer service contact information (phone number or e-mail address) to respond to Cardholder calls or e-mail messages related to the cancelled order. The contact information should be that of the Acquirer, Merchant, or third party provider that made the decision not to proceed with the transaction. Sharing the specific reason(s) for the decline is not recommended or required.

The fraud potential of a Transaction typically is determined through fraud screening and fraud scoring services that involve the storage, transmission or processing of Card or Transaction data in compliance with the Payment Card Industry Data Security Standard (PCI DSS). The Acquirer must register any third party provider of such services as a Third Party Processor (TPP) as set forth in Rule 7.6.1. The systematic decline by an Acquirer or Merchant of CNP Transactions arising from particular Cards, Issuers, or geographic locations is a violation of Rule 5.8.1. NOTE A Rule on this topic appears in Chapter 15, “United States Region Rules.”

The remainder of this chapter is unchanged.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines 8 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Revised Standards—Maestro Global Rules MasterCard will revise the Maestro Global Rules manual to include these Standards. Additions to the Standards are underlined. Deletions are indicated with a strikethrough.

Chapter 9—Processing Requirements

9.2 POS Transaction Types

9.2.1 Issuer Online POS Transactions An Issuer receiving a Reversal Request/0400 or an Acquirer Reversal Advice/0420 message must release any hold placed on the Account for the amount specified within 60 minutes of matching the reversal message to the original authorization response message.

The remainder of this section is unchanged.

9.2.2 Acquirer Online POS Transactions

9.2.2.2 Optional Online POS Transactions Acquirers and Merchants may offer, any or all of the following online Transactions, to the extent permitted by law, regulations, or both, and as permitted within a Region:

11. Reversal

An Acquirer or Merchant may convert an approved authorization of a Card-Not-Present (CNP) Transaction believed, in good faith, by the Acquirer or Merchant to be fraudulent into a decline solely in accordance with the following procedure: a. The Acquirer or Merchant must determine whether to proceed with a Transaction believed, in good faith, to be fraudulent within 72 hours of sending the original authorization request message.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines Global Security Bulletin No. 5, 13 May 2011 9 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due b. Upon deciding not to proceed with the Transaction and still within 72 hours of the original authorization request, the Acquirer or Merchant must: i. Generate a reversal message that includes a reason code indicating that the Transaction was declined by the Acquirer or by the Merchant due to perceived fraud; ii. Disclose to the Cardholder that the transaction cannot be completed at that time, and provide the Cardholder with valid customer service contact information (phone number or e-mail address) to respond to Cardholder calls or e-mail messages related to the cancelled order. The contact information should be that of the Acquirer, Merchant, or third party provider that made the decision not to proceed with the transaction. Sharing the specific reason(s) for the decline is not recommended or required.

The fraud potential of a Transaction typically is determined through fraud screening and fraud scoring services that involve the storage, transmission or processing of Card or Transaction data in compliance with the Payment Card Industry Data Security Standard (PCI DSS). The Acquirer must register any third party provider of such services as a Third Party Processor (TPP) as set forth in section 14.6.1 of this rulebook. The systematic decline by an Acquirer or Merchant of CNP Transactions arising from particular Cards, Issuers or geographic locations is a violation of section 7.1.8 (d) of this rulebook.

The remainder of this section is unchanged.

Revised Standards—Chargeback Guide MasterCard will revise the Chargeback Guide manual to include these Standards. Additions to the Standards are underlined. Deletions are indicated with a strikethrough.

Chapter 4—Arbitration Procedures

4.7 Arbitration Case Examples

4.7.16 Example 16—Merchant Reversals An issuer initiated a chargeback for message reason code 4808—Requested/Required Authorization Not Obtained, based on a transaction for USD 100 that posted to an account that was recently closed because of non-payment of the account.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines 10 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due The second presentment included an authorization date and an authorization amount for USD 100.

The issuer reviewed its authorization records and found that an authorization was approved before the account was closed, but soon thereafter, a merchant authorization reversal was processed for USD 100. Following the merchant authorization reversal, the merchant requested an authorization for USD 150; however, the authorization was declined. Based on the combination of the merchant authorization reversal and decline, the issuer submitted an arbitration chargeback. The acquirer filed an arbitration case for USD 100 with Dispute Resolution Management (DRM).

Staff’s decision would support the acquirer issuer. When an authorization is obtained by the merchant, and a merchant authorization reversal for the full transaction amount is processed, the authorization will be superseded by the reversal unless there is a subsequent authorization request the transaction is considered cancelled upon the issuer’s generation of a reversal response message. Once the merchant attempts to gain an authorization after a merchant authorization reversal, the merchant may process a transaction equal to the subsequent approved transaction; or, if the subsequent authorization is declined, the merchant may process a transaction up to the amount of the original transaction. The merchant cannot proceed with the transaction unless a new authorization request is submitted and approved by the issuer.

Issuers should take note of any merchant authorization reversals and any activity from the same merchant, acquirer, or both.

The remainder of this chapter is unchanged.

For More Information Members with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

Revised Standards for Acquirer and Merchant Conversion of Issuer-Approved CNP Transactions to Declines Global Security Bulletin No. 5, 13 May 2011 11 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due MasterCard Acquirer Notification of Merchants with Subsequent Fraud

Pamela DeMars, Senior Business Leader, Fraud Strategy and Investigations

Topic(s): Fraud/Risk, MasterCard Alerts, Security

Applies to: � Acquirers � Processors

Summary: MasterCard is offering acquirers optional merchant notification reporting that provides the acquirer with a list of its merchants identified as transacting an elevated number of accounts that were subsequently used in reported counterfeit transactions. The MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting is offered at no additional charge to acquirers licensed to receive MasterCard Alerts™. Action Indicator: R Member must register to have access to product or service A Attention warranted

Effective Date: 1 June 2011

Overview As part of its continuing effort to reduce fraud, MasterCard is introducing the MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting. The optional reporting provides an acquirer with a list of its merchants identified as transacting an elevated number of accounts that were subsequently used in reported counterfeit transactions. The reporting also provides back to the acquirer transaction data, including MasterCard® card account numbers, used in valid transactions at those merchants before such account numbers were used in reported counterfeit transactions.

At this time, the reports only include account numbers used in reported card-present counterfeit fraud transactions.

Available Reports The MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting provides weekly reports. MasterCard has prepared historical merchant summary and detail reports to better enable acquirers to perform analyses. Reports are only available when merchants meeting certain criteria are identified.

MasterCard Acquirer Notification of Merchants with Subsequent Fraud 12 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Risk Assessment Acquirers can use the information provided by the MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting to better assess the risk that a merchant may pose. (Refer to the sample Merchant Summary Report [MSR] and the sample Merchant Details Report [MDR] shown later in this article.)

MasterCard highly recommends that each acquirer perform a security assessment of all of its merchants, as well as define and monitor each merchant’s risk remediation efforts, if applicable. Aspects of the assessment may include: • Evaluating the current Payment Card Industry Data Security Standard (PCI DSS) compliance status of the merchant. • Reviewing or requesting the latest Approved Scanning Vendor (ASV) scans to determine whether the: – Merchant is performing scans. – Scan result was “Pass” or “Fail.” – Scope of the ASV scan accurately corresponded to the merchant’s environment (for example, verifying that the correct Internet Protocol [IP] addresses were scanned). • Requesting data about the merchant’s current payment application to determine whether a vulnerable payment application is in use. • Determining whether the merchant is storing sensitive authentication or other data. • Evaluating the merchant’s remote access settings for its payment application or any remote access to the cardholder data environment. • Evaluating the merchant’s terminals to determine whether skimming devices are present. Refer to the PCI Security Standards Council (SSC) document Skimming Prevention—Best Practices for Merchants available at www.pcisecuritystandards.org/pdfs/skimming_prevention_form.pdf for more information.

By acting quickly to investigate and address the potential security vulnerabilities at identified merchants, the acquirer is better positioned to reduce its potential financial liability associated with an account data compromise (ADC) event, as well as protect the reputation of the MasterCard brand.

As a reminder, each acquirer must report ADC or potential ADC events to MasterCard in accordance with section 10.2 of the Security Rules and Procedures manual.

MasterCard Acquirer Notification of Merchants with Subsequent Fraud Global Security Bulletin No. 5, 13 May 2011 13 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Background To help reduce fraud, MasterCard designed the MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting to provide an acquirer with a list of its merchants that entered into transactions using account numbers that were subsequently reported to have been used in counterfeit transactions within the following 17 weeks. The criteria used to determine whether a report is generated is deemed proprietary MasterCard information. The reporting leverages MasterCard analysis of transactional data, as well as counterfeit fraud transactions reported to the System to Avoid Fraud Effectively (SAFE).

Since 2005, MasterCard has used algorithms to identify merchants that transacted an elevated number of valid account numbers that were subsequently used in counterfeit transactions. Results from a pilot program have been positive and indicate that more than 80 percent of the merchants identified in the pilot were either: • Subsequently confirmed as points of compromise, or • Found to have technological vulnerabilities associated with ADC events.

Analysis MasterCard uses algorithms to identify merchants that have what MasterCard deems to be an elevated number of account numbers used in valid transactions and subsequently reported to SAFE as used in counterfeit transactions. MasterCard does not warrant or represent that the identified merchants have security vulnerabilities or the accuracy or utility of the reporting. Merchants are identified only to the acquirer(s) of record.

The report selects account numbers in a weekly cycle if they were used at a common merchant during the first 16 of the preceding 17 weeks. Every account number used at a common merchant inherits its merchant score as an account score. Account numbers used at multiple merchants receive the score of the highest-scoring merchant where the account was used. If the report lists an account number in an earlier week and the score of the highest-scoring merchant associated with that account number has increased, the report re-lists that merchant and account number along with an asterisk (*).

MasterCard uses this analysis to determine whether to initiate an ADC investigation. By addressing potential merchant vulnerabilities earlier, the acquirer may be able to limit fraud losses and may eliminate or reduce its financial responsibilities related to an ADC event.

MasterCard Acquirer Notification of Merchants with Subsequent Fraud 14 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due How to Enroll Acquirers interested in the MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting may enroll by accessing the MasterCard Alerts license request form in the MasterCard OnLine® Product Catalog and completing the section of the form titled At-Risk Service.

Acquirers that have questions about completing the form or that want additional information should contact Customer Operations Services using the Contact Information provided in this bulletin, or send an e-mail message to:

E-mail: [email protected]

Reporting Availability The MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting will be available 1 June 2011 at no additional charge to all acquirers and acquiring processors licensed to receive MasterCard Alerts, and will be accessible to enrolled acquirers within 10 days of registration.

Accessing Merchant Notifications

Acquirers may use the At-Risk User menu available on MasterCard Alerts to access information, along with the potentially compromised accounts.

Registered users can access the MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting by following these steps: 1. Go to www.mastercardonline.com. 2. Log on using your User ID and Security Information. 3. From the My Products drop-down menu, click MasterCard Alerts. 4. Read the disclaimer, and then click Accept to view the MasterCard Alerts home page. 5. Select At-Risk Summary. 6. Click Merchant Information located below the main tabs at the top of the At-Risk User page, as illustrated in the following sample screen shot.

MasterCard Acquirer Notification of Merchants with Subsequent Fraud Global Security Bulletin No. 5, 13 May 2011 15 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Acquirers may download the summary of merchants identified in the weekly report, as illustrated in the following sample Merchant Summary Report (MSR).

The corresponding implicating account number level (weekly) report may be downloaded for investigation purposes, as illustrated in the following sample Merchant Details Report (MDR). The sample MDR shows two at-risk merchants listed—one with six implicating transactions and the other with four.

MasterCard Acquirer Notification of Merchants with Subsequent Fraud 16 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due NOTE Acquirers must appropriately safeguard this information as prescribed by MasterCard Standards.

For More Information Acquirers that have questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

MasterCard Acquirer Notification of Merchants with Subsequent Fraud Global Security Bulletin No. 5, 13 May 2011 17 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Recommended Fraud Prevention Measures for CVC 1 Verification—Reminder John Brady, Senior Business Leader, Customer Security and Risk Services

Topic(s): Authorization, Fraud/Risk, Security

Applies to: � Issuers � Processors

Summary: Due to recent fraud incidents, MasterCard is reminding issuers about specific fraud prevention measures they can use to verify the card validation code 1 (CVC 1) values. Action Indicator: A Attention warranted

Effective Date: Immediate and ongoing

Background In Global Security Bulletin No. 5, 14 May 2010, MasterCard notified members about counterfeit fraud incidents involving transaction authorization requests containing the invalid service code 000 in the Track 1 or Track 2 data. Counterfeit cards containing the service code 000 pass issuers’ CVC 1 checks when the: • Encoded CVC value on the magnetic stripe is actually the CVC 2, and • Issuer uses the same cryptographic Data Encryption Standard (DES) keys for CVC 1 and CVC 2 validation.

Recently, MasterCard has learned of additional occurrences of this type of fraud.

Issuers and processors that use the same cryptographic DES keys for CVC 1 and CVC 2 validation are therefore reminded that MasterCard strongly recommends that they: • Set their authorization system parameters to recognize 000 as an invalid service code when verifying the CVC 1 value encoded on Track 1 or Track 2, and • Decline those magnetic stripe transactions as a fraud prevention measure. (This recommendation applies to magnetic stripe-only cards, as well as to EMV1 cards used in magnetic stripe environments.)

1. EMV is a global standard established by EMVCo LLC for credit and debit payment cards based on chip card technology. EMVCo LLC was formed in 1999 by Europay, MasterCard, and Visa to manage, maintain, and enhance the EMV® Integrated Circuit Card Specifications for Payment Systems. Go to www.emvco.com for details.

Recommended Fraud Prevention Measures for CVC 1 Verification—Reminder 18 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Overview of Fraud Incidents MasterCard has become aware of incidents where criminals created counterfeit cards using data gained through “phishing” or other methods, even if the track data was not captured. In a recent case, the criminals posing as issuer representatives obtained account information from cardholders, including the card number, expiration date, CVC 2, and personal identification number (PIN) associated with their cards. The criminals used the phished cardholder data (such as the primary account number [PAN] and expiry date) to produce counterfeit magnetic stripe cards encoded with the service code of 000 and with the phished CVC 2 value in place of the CVC 1 value in the track data.

When issuers use the same cryptographic DES key to verify the CVC 1 and CVC 2 values, criminals were able to commit ATM fraud with the phished PIN, as the transactions were able to pass the CVC 1 check and were authorized by issuers.

The service code, a three-digit numeric value that must comply with ISO 7813 (Identification Cards—Financial Transaction Cards), is encoded in the Track 1 and Track 2 data of a card and indicates to a magnetic stripe-reading terminal the transaction acceptance parameters of the card. All MasterCard®, Debit MasterCard®, MasterCard Electronic™, Maestro®, and Cirrus® cards must use service code values that are compliant with ISO 7813.

The service code value of 000 is not a valid value under ISO 7813 (for example, for encoding on the magnetic stripe data) and is prohibited in MasterCard Standards for verification of the CVC 1 value. A service code value of 000 is valid only for CVC 2 verification.

Recommendation In light of the recent fraud incidents suffered by some issuers, MasterCard strongly recommends that issuers: • Use different cryptographic DES keys for CVC 1 and CVC 2 verifications, or • Implement system edits to automatically reject authorization requests when track data is present and the service code value is equal to 000.2

For More Information Members with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

2. As stated previously, this recommendation applies to magnetic stripe-only cards, as well as to EMV cards used in magnetic stripe environments.

Recommended Fraud Prevention Measures for CVC 1 Verification—Reminder Global Security Bulletin No. 5, 13 May 2011 19 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Revised Date—Algeria, Egypt, Jordan, and Lebanon Participation in Chip Liability Shift for ATM Transactions

Caroline Dionisio, Business Leader, Franchise Development, Rules, Standards, and Strategy

Topic(s): Chargebacks, Chip, Rules/Standards, Security

Applies to: � Issuers � Acquirers � Processors

Summary: MasterCard is announcing that Algeria, Egypt, Jordan, and Lebanon will participate in the global Chip Liability Shift Program for ATM transactions effective 15 July 2011. Action Indicator: M Mandate F Financial impact C Coding or development changes typically required

Effective Date: Effective for ATM transactions dated on or after 15 July 2011

Overview MasterCard previously announced that Algeria, Egypt, Jordan, and Lebanon will be participating in the global Chip Liability Shift Program for MasterCard®, Maestro®, and Cirrus® ATM transactions effective 15 April 2011. (Refer to the article “Revised Standards for the Expansion of the Chip Liability Shift Program” in Global Operations Bulletin No. 3, 1 March 2010.)

Due to recent events, the participation of Algeria, Egypt, Jordan, and Lebanon will now take effect for ATM transactions dated on or after 15 July 2011.

Chargeback Processing Acquirers in Algeria, Egypt, Jordan, and Lebanon may represent chargebacks submitted with NICS™ reason code 70 (Chip Liability Shift) or Integrated Product Messages (IPM) message reason code 4870 (Chip Liability Shift) relating to ATM transactions dated before 15 July 2011.

Revised Date—Algeria, Egypt, Jordan, and Lebanon Participation in Chip Liability Shift for ATM Transactions 20 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due For More Information Members with questions about the Chip Liability Shift Program and chargeback rights should contact:

Dispute Resolution Management

Phone: 1-636-722-3952

Fax: 1-636-722-7215

E-mail: [email protected]

Revised Date—Algeria, Egypt, Jordan, and Lebanon Participation in Chip Liability Shift for ATM Transactions Global Security Bulletin No. 5, 13 May 2011 21 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due ADC Operational Reimbursement Fixed Deductible—Update

Pamela DeMars, Senior Business Leader, Fraud Strategy and Investigations

Topic(s): Fraud/Risk, Pricing/Fees, Security

Applies to: � Issuers � Acquirers � Processors

Summary: As previously announced, MasterCard is changing the date on which it will update and publish the account data compromise (ADC) Operational Reimbursement fixed deductible. In addition, this article provides a revised target date for when MasterCard will share the results of the 2011 deductible with members. Action Indicator: F Financial impact A Attention warranted

Effective Date: Immediately

Background In accordance with section 10.2.4.4 of the Security Rules and Procedures manual, MasterCard updates and publishes the ADC program’s Operational Reimbursement fixed deductible yearly in the March issue of the Global Security Bulletin. However, as previously announced in Global Security Bulletin No. 3, 15 March 2011, MasterCard is changing the date on which it will release the yearly fixed deductible results from March to the third quarter.

The next edition of the Security Rules and Procedures manual will be updated to reflect the revised date.

Target Publication of 2011 Results MasterCard has modified the date that it will share the results of the 2011 deductible with members from the March 2011 to the July 2011 issue of the Global Security Bulletin.

For More Information Members with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

ADC Operational Reimbursement Fixed Deductible—Update 22 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Standards for Area of Use—Reminder Suzanne Oshatz, Program Leader, Franchise Development, Rules, Standards, and Strategy

Topic(s): Fraud/Risk, Rules/Standards, Security

Applies to: � Issuers � Acquirers � Processors

Summary: This article summarizes the Standards relating to the area of use of a member’s license. Action Indicator: A Attention warranted

Effective Date: Currently effective

Area of Use The “area of use” of a member’s license is the country or countries in which the member is licensed by MasterCard to use the mark(s) specified on the license. With limited exceptions, each member licensed to conduct issuing activity, acquiring activity, or both involving any of the MasterCard brands (MasterCard®, Maestro®, Cirrus®, MasterCard Electronic™, and MasterCard Cash™) may do so only within a country included in the area of use of the license. Furthermore, such activity must be conducted using a member ID/ICA number and bank identification number (BIN) assigned by MasterCard for that country.

Extensions of Area of Use If a member wants to conduct issuing activity, acquiring activity, or both outside the current area of use for which it is licensed, the member must apply for and pay the appropriate fee to be granted an extension of the area of use (EAU) of its license. Please refer to the appropriate regional MasterCard Consolidated Billing System manual for the fees associated with obtaining an EAU.

Eight limited exceptions apply to the requirement to obtain an EAU, as provided in Rule 2.3.1 of the MasterCard Rules manual. Notwithstanding these exceptions, no member may issue MasterCard, Maestro, or Cirrus cards in India; provide such cards to India residents; or acquire MasterCard or Maestro transactions from merchants located in India, unless the member is licensed by MasterCard to use the marks in India and obtains written authorization from the Reserve Bank of India.

Members licensed in the Europe region may centrally acquire merchants located in the Europe region in accordance with the central acquiring rules set forth in Rule 2.3.2 of Chapter 12, “Europe Region Rules,” of the MasterCard Rules manual.

Standards for Area of Use—Reminder Global Security Bulletin No. 5, 13 May 2011 23 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due NOTE To apply for an EAU, existing members must first contact the appropriate regional office of Franchise Development to discuss their plans and next steps.

Existing MasterCard members must complete a Change in Membership and Activity (Form 637), which is available on MasterCard OnLine® under the Main Menu, Resources, and then Business Forms. The form must be submitted along with all required additional documentation, including current financial statements and ICA/BIN Request (Form 658), to the appropriate regional office of Franchise Development at the address listed on the form. The initial call to Franchise Development will help guide members through the afore-referenced process.

To be considered for an EAU, a member must comply with the following requirements: 1. Unless MasterCard expressly permits otherwise or the member is located in the European Economic Area, New Zealand, or South Africa, the member must issue cards, as described in Rule 2.6 of the MasterCard Rules manual. The following exceptions exist: a. Any member that does not issue or have outstanding any MasterCard cards of a competing card program within the U.S. region is not obligated to issue MasterCard cards to customers in the U.S. region before it may acquire MasterCard transactions from merchants located in the U.S. region. b. A member that is licensed to acquire MasterCard transactions in the U.S. region that extends its area of use to acquire transactions in Puerto Rico is not required to issue MasterCard cards in Puerto Rico if its acquiring activity in Puerto Rico is limited to only the transactions of merchants located in Puerto Rico that are also located and have headquarters in the United States, and with whom the member has an existing acquiring relationship in the United States. 2. Each request for an EAU must be deemed by MasterCard to benefit the brands in the requested area of use. 3. Members applying for the EAU must ensure that they: a. Have obtained local regulatory approval to engage in the proposed activity, and b. Are regulated and supervised with respect to their financial condition relating to their licensed activities in the new country (by their home regulator or by the local regulator), and c. At all times conform with the Standards and applicable local law or regulation.

Members to which MasterCard grants an EAU must use a separate member ID/ICA number and BIN, assigned by MasterCard for that particular country, to conduct issuing activity, acquiring activity, or both.

Standards for Area of Use—Reminder 24 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Determining a Merchant’s Location A member must ensure that any merchant acquiring activity occurs within the member’s licensed area of use, unless a permitted exception applies. A merchant’s location is determined based on the totality of circumstances, and generally will be deemed to be where the merchant has its most significant presence. This usually is where the merchant is headquartered, manufactures goods, or provides services. The location of a merchant conducting electronic commerce (e-commerce), mail order, phone order, or recurring payment transactions may be determined based in full or in part on where the merchant holds a license to conduct business, pays taxes, or maintains an address for purposes of receiving mail.

In the event of a dispute, MasterCard has the right, but not the obligation, to determine a merchant’s location for purposes of any matter applicable to MasterCard programs and other activities.

To determine where a merchant is located, the member generally should first consider the address set forth in the agreement between the acquirer and the merchant. The member also should consider: • The location of the merchant’s physical premises • The jurisdiction where the merchant pays taxes • The currency the merchant uses • Whether the address on the merchant agreement reflects where the merchant has a substantial presence, or is used to attempt to establish a presence within the member’s area of use • Other similar factors

Any disagreement among members as to a merchant’s location may be referred to MasterCard for determination in its sole discretion.

Merchants in Multiple Countries Merchants that would like to effect MasterCard transactions in more than one country must enter into a merchant agreement with an acquirer authorized to conduct MasterCard activity in such country. A merchant that travels from country to country must have its transactions acquired by a member that is licensed to acquire in each of the countries in which the merchant engages in MasterCard transactions.

Merchants with No Fixed Location Transactions that arise from a point of interaction with no fixed location, such as aboard a train or ship, generally are deemed to take place in the country where the transaction is processed.

Standards for Area of Use—Reminder Global Security Bulletin No. 5, 13 May 2011 25 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Military Bases Transactions that arise on a military base take place within the country of the particular military, not the country in which the base is located physically.

Compliance Failure to comply with the afore-referenced Standards may subject members to Category A noncompliance assessments. The Compliance Framework is outlined in Chapter 3 of the MasterCard Rules manual.

For More Information Members with questions about the area of use exception under which a member, under certain conditions, may acquire airline transactions taking place in a country in which the member is not licensed, should refer to the article “Cross-border Airline Acquiring—Reminder” published in Global Operations Bulletin No. 12, 1 December 2009.

Members with questions about conducting activity in India should refer to the article “Revised Standards to Prohibit Issuing or Acquiring in India without a License” published in Global Operations Bulletin No. 2, 1 February 2011.

Members with questions about the Standards applicable to licensing and area of use should refer to Chapter 2 of the MasterCard Rules manual, or contact:

Suzanne Oshatz Program Leader, Franchise Development, Rules, Standards, and Strategy

Phone: 1-914-249-5711 Fax: 1-914 249-4385

E-mail: [email protected]

Members with questions about compliance should contact:

Paul Paolucci Business Leader, Fraud Detection and Review

Phone: 1-914-249-5447 Fax: 1-914-249-4257

E-mail: [email protected]

Standards for Area of Use—Reminder 26 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Vendors for Card Production Services—Monthly Edition

Werner Fischer, Business Leader, Global Information Security

Topic(s): Chip, Cirrus, Debit, Fraud/Risk, Maestro, Security

Applies to: � Issuers � Processors

Summary: Each month in the Global Security Bulletin, MasterCard publishes a list of vendors certified as meeting the following requirements for card production services of any MasterCard®, Maestro®, or Cirrus® card: – MasterCard Physical Security Standards for Plastic Card Vendors – Logical Security Requirements for Card Personalization – Security Requirements for Mobile Payment Provisioning The requirements also pertain to derived branded products and related sensitive components and data. Action Indicator: I Informational only (no action required)

Effective Date: 13 May 2011

Background Previously, MasterCard published a list twice per year in the Global Security Bulletin that identified the vendors certified for the card production services. MasterCard now publishes a monthly edition of the list of certified vendors in the Global Security Bulletin.

The Certified Vendors (for Card Production Services of Any MasterCard®, Maestro®, or Cirrus® Card) list provides vendor names by region and includes the various services that they provide. In addition, the list indicates vendors by country for convenience of use.

NOTE MasterCard also provides the vendor listing by country to give members a clearer view of the market within their own countries.

Vendors for Card Production Services—Monthly Edition Global Security Bulletin No. 5, 13 May 2011 27 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due MasterCard publishes the monthly edition of the list of certified vendors to provide members with critical changes regarding: • New vendors • Vendor decertification or partial decertification • Vendor extension of the card production activities certified • Change of company name or legal entity ownership • Vendor site address change • Contact information changes

NOTE The vendor list is organized into three categories of services to simplify member searches for any given service: classic vendor services, data preparation facilities, and mobile provisioning services.

Please refer to Chapter 2 of the Security Rules and Procedures manual, or to Global Security Bulletin No. 7, 15 July 2008, for a description of the Global Vendor Certification Program, its program management, the certification process, the Logical Security Program requirements, and member obligations.

Definitions of Services MasterCard defines the list of services as follows.

Service Definition Card manufacturing Card production process composed of the following phases: • Pre-press (card design layout, printing films, and printing plates generation) • White plastic sheets printing • Sheets assembly • Sheets lamination • Sheets cutting or punching • Hologram and signature panel hot stamping Card embossing Personalization process that produces raised characters on the plastic card body. MasterCard embossing requirements may vary by card program, but generally include: • Cardholder account number • Cardholder name • Validity dates • Company identification (optional) Card encoding Process by which data is written to the magnetic stripe located on the card

Vendors for Card Production Services—Monthly Edition 28 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Service Definition Card mailing Process by which the card is attached to a letter and: • Inserted into a personalized envelope (optional) • Packed and delivered to the cardholder or to the bank branch Card personalizing Process of personalization on the plastic card body of bank and cardholder information that may vary by card program, but generally includes: • Bank branch identification (optional) • Cardholder account number • Cardholder name • Valid dates • Company identification (optional) Personalization uses technology other than embossing, such as: • Laser engraving • Thermal transfer • Indent printing Chip embedding Process by which a fully assembled chip is attached firmly into a plastic card. Chip personalizing Process by which issuer data, cardholder data, or any potentially sensitive data specific to a MasterCard card is stored inside a chip by electrical or electromagnetic interaction between the chip and the personalization device. The chip normally is embedded within a plastic card before chip personalization, but writing sensitive data that is specific to MasterCard to a chip before or during embedding it into a plastic card or when a physical card is not present also is considered chip personalization. Data preparation Process by which issuer or cardholder data, related to any MasterCard, Maestro, or Cirrus card, is prepared whether as a stand-alone service or in combination with the card personalization production services. Mobile provisioning Process by which issuer or cardholder data specific to a MasterCard account number is stored at this location explicitly for subsequent over the air personalization of a mobile device.

Vendors for Card Production Services—Monthly Edition Global Security Bulletin No. 5, 13 May 2011 29 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Monthly Edition The enclosed Certified Vendors (for Card Production Services of Any MasterCard®, Maestro®, or Cirrus® Card) list provides a current listing of all vendors certified for card production services, effective 13 May 2011. NOTE This vendor list supersedes all lists that MasterCard previously published.

For More Information Please send an e-mail message to the MasterCard Global Vendor Certification Program central e-mail address listed below or to any of the following individuals if you: • Have any questions about the program, the vendors on the enclosed list, or the activity that the vendors are certified to perform • Find that a vendor listed does not comply with the MasterCard Physical Security Standards for Plastic Card Vendors, the Logical Security Requirements for Card Personalization, the Security Requirements for Mobile Payment Provisioning, or all applicable MasterCard Standards and security best practices • Want to receive a copy of the MasterCard Physical Security Standards for Plastic Card Vendors, the Logical Security Requirements for Card Personalization, or the Security Requirements for Mobile Payment Provisioning

NOTE The MasterCard Physical Security Standards for Plastic Card Vendors and the Logical Security Requirements for Card Production documents are published on MasterCard OnLine® in the Member Publications product.

Name Contact Information

Werner Fischer Phone: 1-914-249-1371 Global Vendor Certification Program Fax: 1-914-249-4256 E-mail: [email protected]

Helen Paschenko Phone: 1-914-249-6295 Product Management Fax: 1-914-249-4256 E-mail: [email protected]

Help Desk E-mail: [email protected] Global Vendor Certification Program

Vendors for Card Production Services—Monthly Edition 30 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Recent MasterCard Member Publications Virginia Hayden, Senior Business Leader, Manuals and Publications

Topic: Documentation, MasterCard OnLine

Applies to: � Issuers � Acquirers � Processors

Summary: MasterCard provides instructions members can use to view documents published during the previous month on MasterCard OnLine®. If you receive paper publications, please allow several days for distribution. Action Indicator: I Informational only (no action required) R Member must register to have access to product or service

Effective Date: As indicated

Recent Member Publications MasterCard published new and updated documents through the Member Publications product in the previous month. To view the Recently Published page, follow these steps: 1. Go to www.mastercardonline.com. 2. Log on using your User ID and Security Information. 3. From the Products menu, click My Products, and then click Member Publications. The Member Publications home page is displayed. 4. On the Member Publications home page, under the Quick Links menu at the left, click Recently Published. A list of the most recent English-language documents available in the Member Publications library is displayed. To view recently published Spanish or Portuguese manuals, click the corresponding button at the top of the page.

When an update is published, discontinue using any previous editions.

Recent MasterCard Member Publications Global Security Bulletin No. 5, 13 May 2011 31 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Recent MasterCard Bulletins MasterCard published a number of bulletins through MasterCard Bulletins in the previous month. To view a list of new bulletins that MasterCard published in the past month, follow these steps: 1. Go to www.mastercardonline.com. 2. Log on using your User ID and Security Information. 3. From the Main Menu, click Bulletins. The MasterCard Bulletins home page is displayed. 4. Click the arrow next to View By..., and then click New Bulletins. A list of new bulletins will display in the Bulletins Browser pane at the left.

Publications Information Publications are available online, and MasterCard provides some in printed format or CD-ROM format. Signing up for Member Publications does not remove your name from the mail list for a printed publication. You will continue to receive printed publications until you remove your name from the subscription list using the Ordering Publications tool.

To add or remove your name from a mail list, use the Ordering Publications tool by clicking Resources from the main menu bar on the MasterCard OnLine® home page. Then click Ordering Publications. If you do not have access to , go to the MasterCard OnLine Web site and click Sign Up.

Web Site: www.mastercardonline.com

Subscribing to Member Publications MasterCard Member Publications are available in an online format on MasterCard OnLine for licensed users. The Member Publications product contains more than 300 publications. The online manuals are easy to use and generally are available to members before printed manuals can reach them.

If you are not using the Member Publications product on MasterCard OnLine and would like to subscribe, follow these steps: 1. Go to www.mastercardonline.com. 2. Log on using your User ID and Security Information. 3. From the Products menu, click Order Products. 4. On the Shop tab, find the View: drop-down box, and select All Products. The Find: box will display. 5. To filter, type Member Publications in the Find: box, and then click go. 6. From the list that displays, select Member Publications, and then click Subscribe Now. 7. Complete the request form and submit it for processing.

Recent MasterCard Member Publications 32 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Accessing MasterCard Bulletins Global, regional, and country bulletins are available online through the MasterCard Bulletins product on MasterCard OnLine. The MasterCard Bulletins product allows members to view and search bulletin articles by type, date, topic, and language. Access to MasterCard Bulletins is free of charge to all MasterCard OnLine users. To access MasterCard Bulletins, click Bulletins from the Main Menu on the MasterCard OnLine home page.

Printed Publications To add or remove your name from a mail list, use the Ordering Publications tool by clicking Resources from the main menu bar on the MasterCard OnLine home page. Then click Ordering Publications. If you do not have access to MasterCard OnLine, go to the MasterCard OnLine Web site and click Sign Up.

Web Site: www.mastercardonline.com

Send Us Your Comments and Suggestions Please send your comments or suggestions about MasterCard publications to:

Manuals and Publications

Fax: 1-636-722-7107

E-mail: [email protected]

Recent MasterCard Member Publications Global Security Bulletin No. 5, 13 May 2011 33 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Acquirers No Longer Accepting Chargebacks

Alexey Lopukhin, Program Leader, Franchise Development

Topic(s): Chargebacks, Fraud/Risk, Security

Applies to: � Issuers � Acquirers � Processors

Summary: Effective immediately, MasterCard no longer requires the acquirers listed in the attached Microsoft® Excel file to accept chargebacks for fraudulent transactions that occurred at the merchant locations listed. Issuers no longer may charge back any transactions as specified in a previous Global Security Bulletin, regardless if the central processing date occurred within the period listed in the previous bulletin. Action Indicator: F Financial impact

Effective Date: Effective immediately

Background Recent Global Security Bulletins identified the acquirers for the merchant locations listed in the attached Microsoft Excel file for violations of the Global Merchant Audit Program (GMAP) as referenced in Rule 8.2 of the Security Rules and Procedures manual. NOTE The merchant information is shown as it appears in the System to Avoid Fraud Effectively (SAFE) database. To ensure that the data is accurate, members should carefully enter the merchant information into SAFE.

Acquirer Responsibilities MasterCard no longer requires the acquirers for these merchants to accept chargebacks for fraudulent transactions at these merchant locations for message reason code 4849—Questionable Merchant Activity.

Acquirers No Longer Accepting Chargebacks 34 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Merchant Listings To view the merchant chargeback information, open the attached Microsoft Excel file. MasterCard also provides the chargeback information in the portable document format (PDF) bulletin file in the MasterCard Bulletins product on MasterCard OnLine®.

Acquirers are listed numerically by member ID (acquirer ID) within each region. Merchants are listed alphabetically. Not applicable (N/A) indicates that a chargeback period no longer applies to the acquirer and merchant listed, as of the date of the merchant’s first publication in the Acquirers No Longer Accepting Chargebacks file. Actual dates listed in the Chargeback End Date column are in the mm/dd/yy format. The Month/Year Added column indicates the month and year in which MasterCard added the merchant to the file. NOTE MasterCard recommends that users sort the information by date to review the applicable chargebacks.

MasterCard no longer requires acquirers to accept chargebacks for the merchants listed as of the date of the merchant’s first publication in the Acquirers No Longer Accepting Chargebacks file, which corresponds to the month and year listed in the Month/Year Added column.

For More Information Members with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

Acquirers No Longer Accepting Chargebacks Global Security Bulletin No. 5, 13 May 2011 35 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Notification of Chargebacks Under the Global Merchant Audit Program

Alexey Lopukhin, Program Leader, Franchise Development

Topic(s): Chargebacks, Fraud/Risk, Security

Applies to: � Issuers � Acquirers � Processors

Summary: The acquirers listed in the attached Microsoft® Excel file must accept chargebacks for all fraudulent transactions (excluding fraudulent application, account takeover, and never-received-issue transactions) that occurred at the merchant locations listed, during the time period listed for each merchant. Issuers may charge back transactions reported to the System to Avoid Fraud Effectively (SAFE) to the appropriate acquirers. Action Indicator: F Financial impact

Effective Date: Effective immediately

Background Effective 2 August 2005, MasterCard replaced the Merchant Audit Program and Excessive Counterfeit Merchant Program with the Global Merchant Audit Program (GMAP), as described in Rule 8.2 of the Security Rules and Procedures manual. NOTE The merchant information is shown as it appears in the SAFE database. To ensure that the data is accurate, members should carefully enter the merchant information into SAFE.

Acquirer Responsibilities MasterCard requires each acquirer listed in the attached Microsoft Excel file to accept chargebacks for all fraudulent transactions (excluding fraudulent application, account takeover, and never-received-issue transactions) that occurred at the merchant locations identified herein for the period indicated.

Notification of Chargebacks Under the Global Merchant Audit Program 36 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due If MasterCard extends a chargeback end date for a merchant location listed in the attached file, the acquirer must accept chargebacks for the merchant through the chargeback extended date. These chargebacks are for violations of the GMAP, as described in Rule 8.2 of the Security Rules and Procedures manual. NOTE A number of the reported violations may have resulted from member failure to cooperate with the MasterCard audit requirements.

Issuer Chargeback Rights Issuers may charge back fraudulent transactions reported to SAFE to the appropriate acquirers according to the chargeback procedures outlined in section 3.24 of the Chargeback Guide for message reason code 4849—Questionable Merchant Activity. Issuers have 120 days from the St. Louis Operations Center (Central Site) processing date, or an extended period of 120 days from the publication date of the first Global Security Bulletin that listed the merchant location, to charge back fraudulent transactions that occurred during the chargeback period.

For the purposes of calculating the extended 120-day period, the Month/Year Added column indicates the month and year that corresponds to the first bulletin publication that listed the merchant location.

Merchant Listings To view the merchant chargeback information, open the attached Microsoft Excel file. MasterCard also provides the chargeback information in the portable document format (PDF) bulletin file in the MasterCard Bulletins product on MasterCard OnLine®.

Acquirers are listed numerically by member ID (acquirer ID) within each region. Merchants are listed alphabetically. Dates listed in the Chargeback Start Date, Chargeback End Date, and Chargeback Extend Date columns are in the mm/dd/yy format. Merchant information will remain in the file each month for 120 days past the Chargeback End Date, or Chargeback Extend Date if populated. The Month/Year Added column indicates the month and year in which MasterCard added the merchant to the file. NOTE MasterCard recommends that users sort the information by date to review the applicable chargebacks.

Notification of Chargebacks Under the Global Merchant Audit Program Global Security Bulletin No. 5, 13 May 2011 37 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due For More Information Members with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

Notification of Chargebacks Under the Global Merchant Audit Program 38 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due Notification of Chargebacks Under the Cardholder-Merchant Collusion Program

Jonathan Trivelas, Program Manager, Fraud Detection and Review

Topic(s): Chargebacks, Fraud/Risk, Security

Applies to: � Issuers � Acquirers � Processors

Summary: The acquirers listed in the attached Microsoft® Excel file must accept chargebacks for all fraudulent transactions reported to the System to Avoid Fraud Effectively (SAFE) that occurred at the merchant locations listed, during the time period listed for each merchant. Issuers may charge back transactions reported to SAFE to the appropriate acquirers. Action Indicator: F Financial impact

Effective Date: Effective immediately

Background In February 2006, MasterCard launched the Cardholder-Merchant Collusion (CMC) Program, as described in section 8.4 of the Security Rules and Procedures manual.

Acquirer Responsibilities MasterCard requires each acquirer listed in the attached Microsoft Excel file to accept chargebacks for all fraudulent transactions reported to SAFE that occurred at the merchant locations identified herein for the period indicated. These chargebacks are for violations of the CMC rules, as described in section 8.4 of the Security Rules and Procedures manual.

Issuer Chargeback Rights Issuers may charge back fraudulent transactions reported to SAFE to the appropriate acquirers according to the chargeback procedures outlined in section 3.24 of the Chargeback Guide for message reason code 4849—Questionable Merchant Activity.

Notification of Chargebacks Under the Cardholder-Merchant Collusion Program Global Security Bulletin No. 5, 13 May 2011 39 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due The issuer may charge back eligible reported fraudulent transactions that occurred at the identified merchant listed in the Global Security Bulletin during the applicable chargeback period stated in the Global Security Bulletin.

The issuer must submit chargebacks no later than 120 calendar days after the first Global Security Bulletin publication date that listed the merchant location, or within 120 calendar days of the St. Louis Operations Center (Central Site) processing date of the transaction. NOTE MasterCard counts the Global Security Bulletin publication date as the first day of the 120-day calculation.

Merchant Listings To view the merchant chargeback information, open the attached Microsoft Excel file. MasterCard also provides the chargeback information in the portable document format (PDF) bulletin file in the MasterCard Bulletins product on MasterCard OnLine®.

Acquirers are listed numerically by member ID (acquirer ID) within each region. Merchants are listed alphabetically. Merchant information will remain in the file each month for 120 days past the Chargeback End Date. The Month/Year Added column indicates the month and year in which MasterCard added the merchant to the file. The Issuer Notification Date column indicates the date that the issuer notified MasterCard that the issuer believed the merchant was engaging in transactions on a cardholder bust-out account. NOTE MasterCard recommends that users sort the information by date to review the applicable chargebacks.

For More Information Members with questions about the information in this article should contact Customer Operations Services using the Contact Information provided in this bulletin, their regional Help Desk, or a regional Customer Security and Risk Services representative.

Notification of Chargebacks Under the Cardholder-Merchant Collusion Program 40 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Production Review—Due

Calendar of Events The calendar of events provides significant dates for security-related events. Refer also to the consolidated Calendar of Events on MasterCard OnLine®.

May 2011 New! 13 MasterCard has published a monthly edition of the list of vendors certified as meeting the MasterCard Physical Security Standards

for Plastic Card Vendors for card production services of any MasterCard, Maestro, or Cirrus card. For more information, refer to Global Security Bulletin No. 5, 13 May 2011. New! 18 MasterCard Academy will host “Exploring M/Chip Advance” in Vienna, Austria. To register, please go to http://www.mastercardacademy.com . 19–20 MasterCard Academy will host “MasterCard Chargeback Seminar” in Vienna, Austria. To register, please go to http://www.mastercardacademy.com. 23–24 MasterCard Academy of Risk Management will host “Fraud and Risk Management with Chip” in Cairo, Egypt. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 28–29 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Acquirers” in Waterloo, Belgium. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected]

June 2011 New! 1 MasterCard will implement the MasterCard Acquirer Notification of Merchants with Subsequent Fraud reporting. For more

information, refer to Global Security Bulletin No. 5, 13 May 2011. 7–8 MasterCard Academy of Risk Management will host “Efficient Chargeback Processing” in Las Vegas, Nevada, USA. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected]

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Calendar-1

June 2011 7–8 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Issuers and Acquirers” in Dubai, United Arab Emirates. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 14 MasterCard will revise its Standards to support mobile remote payment transactions. For more information, refer to Global Security Bulletin No. 9, 15 September 2010. 14–15 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Issuers and Acquirers” in Manama, Bahrain. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 15 MasterCard Academy of Risk Management will host “SAFE Workshop” in Casablanca, Morocco (in French language). To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 15–16 MasterCard Academy will host “MasterCard Chargeback Seminar” in Istanbul, Turkey. To register, please go to http://www.mastercardacademy.com. 22–23 MasterCard Academy of Risk Management will host “Introduction to MasterCard Fraud Management and Compliance” in Tokyo, Japan (in Japanese language). To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 28–1 MasterCard will host the annual Global Risk Management Conference—Asia/Pacific, Middle East, and Africa in Beijing, China (in English and Chinese languages). To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] For more information, refer to Global Security Bulletin No. 3, 15 March 2011. 30 MasterCard will revise its Standards regarding the Site Data Protection (SDP) Program for Level 1 and Level 2 merchants. For more information, refer to Global Security Bulletin No. 12, 15 December 2009.

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 Calendar-2 ©2011 MasterCard. Proprietary. All rights reserved.

July 2011 4–5 MasterCard Academy of Risk Management will host “Introduction to MasterCard Fraud Management and Compliance” in Nairobi, Kenya. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 5–6 MasterCard Academy of Risk Management will host “SAFE Workshop” in Muscat, Oman. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 6–7 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Issuers and Acquirers” in Nairobi, Kenya. To register, please go to www.mastercard.com/arm or send an e- mail message to [email protected]

August 2011 1–2 MasterCard Academy of Risk Management will host “Introduction to MasterCard Fraud Management and Compliance” in Riyadh, Saudi Arabia. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 16–18 MasterCard Academy of Risk Management will host “Efficient Chargeback Processing, Arbitration, and Compliance” in O’Fallon, Missouri, USA. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected]

September 2011 15 MasterCard Academy of Risk Management will host “MasterCard Insights for Issuers” in Chicago, Illinois, USA. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 19–20 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Issuers and Acquirers” in Kuwait City, Kuwait. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected]

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Calendar-3

September 2011 19–23 MasterCard will host the annual Global Risk Management Conference—Europe in Prague, Czech Republic. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] For more information, refer to Global Security Bulletin No. 4, 15 April 2011. 21–22 MasterCard Academy will host “MasterCard Chargeback Seminar” in Rome, Italy. To register, please go to http://www.mastercardacademy.com. New Date! 27–28 MasterCard Academy will host “Exploring the EMV 4.2 Standard” in London, England. To register, please go to http://www.mastercardacademy.com. 28–29 MasterCard Academy will host “MasterCard Chargeback Seminar” in Moscow, Russian Federation (in Russian language). To register, please go to http://www.mastercardacademy.com.

New Date! 29–30 MasterCard Academy will host “Security and Key Management for Chip Cards” in London, England. To register, please go to http://www.mastercardacademy.com.

October 2011 4 MasterCard Academy will host “Understanding the Chip Advantage” in Waterloo, Belgium. To register, please go to http://www.mastercardacademy.com. 4 MasterCard Academy will host “SAFE Workshop” in Rome, Italy. To register, please go to http://www.mastercardacademy.com. 5 MasterCard Academy of Risk Management will host “PCI: Lessons to be Learned from Data Breaches” in O’Fallon, Missouri, USA. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 5–6 MasterCard Academy will host “Optimizing Your Chip Solution” in Waterloo, Belgium. To register, please go to http://www.mastercardacademy.com.

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 Calendar-4 ©2011 MasterCard. Proprietary. All rights reserved.

October 2011 14 Effective for first chargebacks occurring on or after 14 October 2011, MasterCard will implement a MasterCard® SecureCode™ merchant-only liability shift for electronic commerce (e- commerce) transactions involving an issuer and an acquirer located within the U.S. region. For more information, refer to Global Security Bulletin No. 8, 13 August 2010. 18–19 MasterCard Academy of Risk Management will host “Efficient Chargeback Processing” in Purchase, New York, USA. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 19–20 MasterCard Academy will host “Introduction to MasterCard Fraud Management and Compliance” in Moscow, Russian Federation (in Russian language). To register, please go to http://www.mastercardacademy.com. 19–20 MasterCard Academy will host “MasterCard Advanced Chargeback Seminar” in Waterloo, Belgium. To register, please go to http://www.mastercardacademy.com. 19–20 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Acquirers” in Li Jiang, China (in Chinese language). To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 26 MasterCard Academy of Risk Management will host “MasterCard Insights for Acquirers” in Las Vegas, Nevada, USA. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 26–28 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Issuers and Acquirers” in Melbourne, Australia. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected]

November 2011 New! 8 MasterCard will revise its Standards for acquirer and merchant conversion of issuer-approved card-not-present (CNP) transactions to declines . For more information, refer to Global Security Bulletin No. 5, 13 May 2011.

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Calendar-5

November 2011 10 MasterCard Academy of Risk Management will host “SAFE Workshop” in Tokyo, Japan (in Japanese language). To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 14 MasterCard Academy will host “Understanding the M/Chip 4” in London, England. To register, please go to http://www.mastercardacademy.com. 15–16 MasterCard Academy will host “How Chip Works for Debit and Credit Cards” in London, England. To register, please go to http://www.mastercardacademy.com. 16–17 MasterCard Academy will host “Principles of Fraud Management for Issuers” in Stockholm, Sweden. To register, please go to http://www.mastercardacademy.com. 17 MasterCard Academy will host “Exploring M/Chip Advance” in London, England. To register, please go to http://www.mastercardacademy.com. 18 MasterCard Academy will host “PayPass Technical Workshop” in London, England. To register, please go to http://www.mastercardacademy.com.

New Date! 23–24 MasterCard Academy will host “MasterCard Chargeback Seminar” in London, England. To register, please go to http://www.mastercardacademy.com. 23–24 MasterCard Academy of Risk Management will host “Introduction to MasterCard Fraud Management and Compliance” in Auckland, New Zealand. To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected] 23–25 MasterCard Academy of Risk Management will host “Principles of Fraud Management for Issuers and Acquirers” in Taipei, Taiwan (in Chinese language). To register, please go to www.mastercard.com/arm or send an e-mail message to [email protected]

New Date! 25 MasterCard Academy will host “Debit: ATM and Maestro Chargeback Seminar” in London, England. To register, please go to http://www.mastercardacademy.com.

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 Calendar-6 ©2011 MasterCard. Proprietary. All rights reserved.

December 2011 13–14 MasterCard Academy will host “Principles of Fraud Management for Acquirers” in London, England. To register, please go to http://www.mastercardacademy.com. 15 MasterCard Academy will host “SecureCode” in London, England. To register, please go to http://www.mastercardacademy.com.

April 2012 13 Acquirers must include the Cardholder Verification Method (CVM) Results (tag ‘9F34’) in all authorization messages containing data element (DE) 55 that are transmitted from acquirer chip systems certified by MasterCard on or after 13 April 2012. For more information, refer to Global Security Bulletin No. 8, 13 August 2010.

July 2012 1 MasterCard will revise its Standards regarding the Site Data Protection (SDP) Program to require all merchants and Service Providers that use third party-developed payment applications to use Payment Application Data Security Standard (PA-DSS)- compliant applications and validate PPA-DSS compliance. For more information, refer to Global Security Bulletin No. 12, 15 December 2009.

April 2017 1 Acquirers must include the Cardholder Verification Method (CVM) Results (tag ‘9F34’) in all authorization messages containing data element (DE) 55. For more information, refer to Global Security Bulletin No. 8, 13 August 2010.

Calendar of Events Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved. Calendar-7

Certified Vendors (for Card Production Services of Any MasterCard®, Maestro®, or Cirrus® Card)

Published 13 May 2011

2011 MasterCard. Proprietary. All rights reserved.

Table of Contents

Vendor Card Manufacturers, Personalizers, Embossers, Encoders, and Mailers; and Chip Embedders and Personalizers ...... 2 Asia/Pacific Region ...... 2 Canada Region ...... 20 Europe Region ...... 21 Latin America and the Caribbean Region ...... 46 South Asia/Middle East/Africa Region ...... 53 U.S. Region ...... 62

Vendor Data Preparation Facilities ...... 68 Asia/Pacific Region ...... 68 Europe Region ...... 69

Vendor Mobile Provisioning ...... 70 Asia/Pacific Region ...... 70 Europe Region ...... 71 U.S. Region ...... 71

Vendors by Country ...... 72 Asia/Pacific Region ...... 72 Canada Region ...... 74 Europe Region ...... 74 Latin America and the Caribbean Region ...... 79 South Asia/Middle East/Africa Region ...... 80 U.S. Region ...... 82

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 1

Vendor Card Manufacturers, Personalizers, Embossers, Encoders, and Mailers; and Chip Embedders and Personalizers

MasterCard has certified the following vendors for the services indicated. The key contacts are listed as follows: • (P) = Primary contact • (S) = Security contact

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Abnote (Australasia) Pty. Ltd. 90524 61-2-9829-0111 61-2-9829-0196 Personalizes, 81 Williamson Road embosses, encodes, Ingleburn, New South Wales 2565 and mails cards; Australia personalizes chips (P) Andrew Smith (S) Gregoire Maes Abnote NZ Ltd. 90533 64-3-349-9500 64-3-349-7166 Manufactures, 25 Halwyn Drive personalizes, Hornby, Christchurch embosses, encodes, New Zealand 8042 and mails cards; (P) Andrew Smith embeds and (S) Stephen Morgan personalizes chips Asdion Data Services Sdn. Bhd. 90853 603-6272-7878 603-6272-7373 Manufactures cards; Asdion Business Centre embeds chips No. 9, Persiaran Industri Bandar Sri Damansara Wilayah Persekutuan Kuala Lumpur 52200 Malaysia (P) George Yap (S) Yap Tai Tee Asia Pacific Card and System 90826 603-3176-6700 603-3176-5700 Manufactures cards; Sdn. Bhd. embeds chips No. 1, Lebuh 1, Bandar Sultan Sulaiman, Taiwanese Industrial Park, Pelabuhan Klang Selangor 42000 Malaysia (P) Eddie Huo Shao Wei (S) NG Soon Teck

2011 MasterCard. Proprietary. All rights reserved. 2 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Asia Smart Cards Centre 90775 603-2148-1181 603-2148-0181 Personalizes, (Malaysia) Sdn. Bhd. embosses, encodes, LG Floor, Wisma Boustead, 71 and mails cards; Jalan Raja Chulan, 50200 personalizes chips Kuala Lumpur Malaysia (P) Koh Chor Meng (S) Khadijah Bt. Engku Salleh Beautiful Card Corporation 90814 886-3-318-3128 886-3-327-7193 Manufactures, No. 4, Wenming 1st St. personalizes, Guishan Shiang embosses, encodes, Taoyuan County 33383 and mails cards; Taiwan (R.O.C.) embeds and (P) Tina Cheng personalizes chips (S) Jacob Wu Biosmart Co., Ltd. 90515 82-2-3218-9000 82-41-546-7142 Manufactures, Office: personalizes, KBC B/D, 4-22 Nonhyeon-dong embosses, encodes, Gangnam gu and mails cards; Seoul embeds and Korea Post 135-010 personalizes chips Plant: 82-2-3218-9042 82-2-3218-9020 312-31 Duk San-Dong, Asan City Chung Nam Korea 336-120 (P) Andy Yun (S) Jessie Ryu Card Alliance Company Ltd. 90724 852-3768-9798 852-3768-9702 Personalizes, 19/F Western Harbor Center embosses, encodes, 181 Connaught Road West and mails cards Hong Kong SAR China (P) Richard Sei (S) Stephen Hon

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 3

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Cassis Services Sdn. Bhd. 90801 603-2300-2801 603-2300-1371 Personalizes, Suite P5-01, Fifth Floor embosses, encodes, Podium Block, Menara Keck Seng and mails cards; 203 Jalan Bukit Bintang personalizes chips Kuala Lumpur 55100 Malaysia (P) Christina Lai Hui Fuen (S) Chua Tian Yue Chan Wanich Security 90770 662-635-3333 662-236-7176 Manufactures, Printing Company Ltd. personalizes, Office: embosses, encodes, Kongboonma Building and mails cards; 699 Silom Road embeds and Bangkok 10500 personalizes chips Thailand Plant: 662-815-6969 662-815-5605 192 Suksawad Road Prasamutjedee Samutprakarn Bangkok 10290 Thailand (P) Marachai Kongboonma (S) Paul Iu Dai Nippon Printing Co. Ltd. 90504 81-74-544-1121 81-74-543-2055 Manufactures, Nara Plant: personalizes, 712-10 Oaza Toin Kawanishi-Cho Telex: J22737 embosses, encodes, Shiki-gun, Nara Pref. DNPRINT and mails cards; Japan 636-0293 embeds and (P) Masahisa Tanaka personalizes chips (S) Tadaki Fujioka Dai Nippon Printing Co. Ltd. 90725 81-298-75-2211 81-298-75-2301 Manufactures, Ushiku Plant: personalizes, 70 Tsukuba-Minami Okubara embosses, encodes, Industrial Park and mails cards; 1650 Okubara-cho embeds and Ushiku-shi, Ibaraki-ken personalizes chips Japan 300-1283 (P) Yoshitsugu Morioke (S) Tetsuo Nogami

2011 MasterCard. Proprietary. All rights reserved. 4 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Data Products Toppan Forms 90756 662-318-1700 662-318-1726 Manufactures, Ltd. personalizes, 2387 New Petchburi Road embosses, encodes, Huaykwang, Bangkapi and mails cards; Bangkok embeds and Thailand 10320 personalizes chips (P) Apichart Ariyaviriyanant (S) Chatree Ekmanee Plant: 662-318-1700 662-318-1726 218 Latkrabang Industrial Estate 23 Chalongkrung Road Lumpratiew, Latkrabang Bangkok Thailand 10520 (P) Apichart Ariyaviriyanant (S) Jaroonruk Prakobwaithayakij Data Sonic Corporation Sdn. 90783 603-2087-6000 603-2087-6001 Personalizes, Bhd. embosses, encodes, Office: and mails cards; Level 6, Bangunan Setia 1 personalizes chips No. 15, Lorong Dungun Damansara Heights 50490 Kuala Lumpur Malaysia Plant: 90783 603-7781-9868 603-7781-1798 No. 11G, Ground Floor The Highway Centre, Jalan 205 Section 51 Petaling Jaya 46050 Selangor Malaysia (P) Danny Chew (S) Hoo Kok Kwan Dz Card (Malaysia) Sdn. Bhd. 90506 60-3-9221-9388 60-3-9221-9788 Manufactures, 5, Jalan Empat 4 off, Jalan Chan personalizes, Sow Lin Kuala Lumpur embosses, encodes, Malaysia 55200 and mails cards; (P) Harry Gundelach embeds and (S) Jothie Krishnan personalizes chips

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 5

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Dz Card (Thailand) Ltd. 90507 66-2-705-1938 66-2-705-1938 Manufactures, 139 Bangplee Industrial Estate personalizes, M00 17 Bangna-Trad Road embosses, encodes, Bangplee, Samutprakan 10540 and mails cards; Thailand embeds and (P) Harry Gundelach personalizes chips (S) Joergen Schmidt Dz Card (Philippines) Inc. 90784 632-851-1870 632-852-2147 Personalizes, dz Card Building, Sta. Agueda embosses, encodes, Avenue, Pascor Drive, Sto. Nino and mails cards; Paranaque City 1704 personalizes chips Philippines (P) Jean Jacobi (S) Jona Casi Eastcom Peace Smart Card Co. 90781 86-756-8682892 86-756-8695237 Manufactures, Ltd. personalizes, encodes, No. 8 Ping Gong Zhong Road and embosses cards; Nanping, Zhuhai embeds chips Guangdong China 519060 (P) Megan Joo (S) Catherine Lee Eyede NZ LP 90521 64-9-415-5000 64-9-415-5002 Personalizes, 12 Piermark Drive embosses, encodes, Albany, Auckland 0752 and mails cards; New Zealand personalizes chips (P) David Haynes (S) Linsey Churton Foongtone Technology Co., 90550 886-2-2222-8861 886-2-2222-9983 Manufactures, Ltd. personalizes, No. 7-1 Lane 365, Sec 1 embosses, encodes, Chung Yung Road and mails cards; Tu Chen City, Taipei HSien embeds and Taiwan 236 personalizes chips (P) John Tu (S) P.J. Lee

2011 MasterCard. Proprietary. All rights reserved. 6 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Gemalto Pte Ltd. 90531 65-6317-3333 65-6775-1817 Manufactures, 12, Ayer Rajah Cresent personalizes, Singapore 139941 embosses, encodes, (P) Ramon Padiernos and mails cards; (S) Chue Fook Wah embeds and personalizes chips Gemalto Taiwan Ltd. 90525 65-8268-3378 65-6775-1817 Personalizes, Basement 1, No. 192 embosses, encodes, Lien Chien Road and mails cards; Chung Ho, Taipei County 235 personalizes chips Taiwan (P) Fook Wah Chue (S) Alex Huang Gemalto Sdn. Bhd. 90726 603-2035-2888 603-2035-2800 Personalizes, Suites 0201, 0202, 0203, and 0204 embosses, encodes, Level 2, Plaza See Hoy Chan and mails cards; Jalan Raja Chulan personalizes chips 50200 Kuala Lumpur Wilayah Persekutuan Malaysia (P) Chue Fook Wah (S) Akhmad Fadlilah HS Giesecke & Devrient 90742 61-3-9765-1200 61-2-9763-5455 Personalizes, Australasia Pty Ltd. embosses, encodes, and mails cards; Victoria Plant: embeds and 94 Rushdale Street personalizes chips Knoxfield, Victoria 3180 Australia (P & S) Byron Gilmore Sydney Plant: 90780 61-3-9765-1200 61-3-9763-5455 Personalizes, 9 Rachael Close, Silverwater embosses, encodes, Silverwater NSW 2128 and mails cards; Australia personalizes chips (P) Ajith Chandrathilaka (S) Scott O’Hara

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 7

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Giesecke & Devrient (China) 90785 86-791-811-2355 86-791-810-0958 Personalizes, Information Technologies Co., embosses, encodes, Ltd. and mails cards; 399 Huoju Avenue embeds and Nanchang High-New Tech. personalizes chips Development Zone Nanchang City Jiangxi Province 330096 P.R. of China (P) Yang Limin (S) Zhu Hongying GK Power 90516 82-70-8782-5711 82-2-445-5585 Manufactures cards; Presscenter B2, embeds chips Taepyung-Ro 1-Ga-25 Junggu, Seoul South Korea 100-750 (P) Paul YP Jeon (S) Paul Jeon Goldpac Secur-Card Ltd. 90510 86-756-866-0888 86-756-866-0808 Manufactures, Goldpac Building personalizes, Fuxi-QianShan embosses, encodes, Zhuhai and mails cards; China 519075 embeds and (P) David Lu personalizes chips (S) Roger Lu Goldpac Secur-Card Ltd. 90839 86-21-6872-7198 86-21-6872-6668 Personalizes, Shanghai Branch embosses, encodes, No. 166 of Min Dong Road and mails cards; Pudong New Area personalizes chips Shanghai China 201209 (P) David Lu (S) Jason Zhang

2011 MasterCard. Proprietary. All rights reserved. 8 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Guangdong Chutian Dragon 90881 86-769-8750-8618 86-769-8750-8618 Manufactures, Smart Card Co., Ltd. personalizes, Zhuweitian Yifa Industrial Zone embosses, and of Fenggang encodes cards; Dongguan embeds chips Guangdong Province China 523697 (P) Johnny Zhan (S) Joy Fu Hengbao Co. Ltd 90514 86-10-6601-7777 86-10-6601-5566 Manufactures, Hengtang Industrial Zone personalizes, Dangyang City, Jiangsu Province embosses, encodes, China 212355 and mails cards; (P) Zhou Jiang embeds and (S) Wang Yan personalizes chips Huangshi G&D Wanda 90511 86-714-635-9988 86-714-635-5382 Manufactures, Security Card Ltd. personalizes, Hangzhou Road West, Huangshi embosses, encodes, City, Huangshi, Hubei Province China 435000 and mails cards; (P) Dr. Roland Savoy embeds and (S) Guoxin Luo personalizes chips IC Korea Co., Ltd. 90512 82-2-416-7822 82-2-416-7825 Manufactures cards; Office: embeds chips 13FI, Kumbok Building, 45-2 Pangi-Dong, Songpa-Gu Seoul Korea 138-050 Plant: 82-53-592-3433 82-53-592-3438 96BL, 1Lb, Sungseo 3rd Industrial Complex Dalseo-Gu, Daegu Korea 704-240 (P) Daniel Lee (S) Min Soo Bang

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 9

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Innerex Co., Ltd. 90517 82-2-593-0100 82-2-599-3460 Manufactures cards; Office: embeds chips 5F Pum Yang Bldg. 750-14 Bangbae-Dong Seocho-Ku Seoul Korea 137-060 Plant: 82-2-521-3450 82-2-521-3234 451-42, Hangmok-Ri Shinchang-Myon, Asan City Chungnam Korea 336-880 (P) Seong Kim (S) Jae-young Lee IRIS Corporation Berhad 90819 603-8996-0788 603-8996-0441 Manufactures, IRIS Smart Technology Complex, personalizes, Technology Park Malaysia; Bukit embosses, encodes, Jalil and mails cards; Kuala Lumpur 57000 embeds and Malaysia personalizes chips (P) Chim Ka Kew (S) Mohd Shahriman Ezham JDC Tech Co., Ltd. 90513 82-2-739-0771 82-2-739-3020 Manufactures, Office: personalizes, No. 39, Pyung-Dong embosses, encodes, Jongro-Gu, Seoul and mails cards; Korea 1121-020 embeds and personalizes chips Plant: 82-31999-5532 82-31996-5322 370-12 Daemvung-ri, Daegot- mvun Kimpo, Kyunggi-do Korea, 415-823 (P) Lee Haeseung (S) James Kim

2011 MasterCard. Proprietary. All rights reserved. 10 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Jing King Technology 90722 852-2344-3170 852-2343-2464 Manufactures, Holdings Ltd. personalizes, Office: embosses, and Unit H-J, 7/F, Block 3, Camel encodes cards; Paint Building embeds and 60 Hoi Yuen Road, Kwun Tong personalizes chips Kowloon Hong Kong SAR China Plant: 86-755-4692088 86-755-4693088 Jing King Weder Technology Company Ltd. Ping Shin Road, Qiu Kong Keng Industrial Estate, Shang MuGu Ping Hu, ShenZhen GuangDong China 518111 (P) Anton Ho (S) Alex Yu KONA Media Co., Ltd. 90893 82-8-2168-7552 82-2-769-1670 Manufactures cards; 1174-28 Sagok-Ri embeds chips Iwol-Myun Jincheon-Gun Chungcheongbuk- Do Korea 365-823 (P) Daniel Lee (S) April Kim Kyodo Printing Co. Ltd. 90721 81-3-3817-2525 81-3-3817-6825 Manufactures, Office: personalizes, 4-14-12, Koishikawa, Bunkyo-ku embosses, encodes, Tokyo and mails cards; Japan 112-8501 embeds and (P) Hideyuki Suzaki personalizes chips (S) Akio Shouji Plant: 81-3-3817-2595 81-49-286-6128 6-2 12 Fujimi Tsurugashima Shi Saitama-Ken Japan 350-2201

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 11

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Maxell Seiki Ltd. 90789 81-75-957-2921 81-75-952-5873 Manufactures, 45-101, Kagamida Oyamazaki-cho personalizes, Otokuni-gun, Kyoto 618-8558 embosses, encodes, Japan and mails cards; (P) Ikuo Yamazaki embeds and (S) Shigeo Komori personalizes chips MK Smart Joint Stock 90880 84-4-3813-4646 84-4-3813-4648 Manufactures, Company personalizes, Lot 40, Quang Minh Industrial embosses, encodes, Zone, Me Linh and mails cards; Hanoi embeds and Vietnam personalizes chips (P) Nguyen Quoc Bao (S) Nguyen Thai Khang Natec Incorporated 90526 81-72-229-3423 81-72-229-9266 Manufactures cards; 2-2-25, Minamishimizu-cho embeds chips Sakai City, Osaka, 590-0005 Japan (P) Shunsuke Shimazu (S) Keiji Rikuno Network for Electronic 90740 65-6513-0754 65-6513-0701 Personalizes, Transfers (Singapore) Pte Ltd. embosses, encodes, 1094 Lower Delta Road #07-01 and mails cards; Motorway Building personalizes chips Singapore 169205 (P) Lawrence Houng (S) Toh Chai Hou Nihonboueki Printing 90527 81-45-811-2771 81-45-813-4800 Personalizes, Co., Ltd. embosses, encodes, 1968 Kamiyabe-cho, Totsuka-ku and mails cards; Yokohama-shi personalizes chips Kanagawa 245-8550 Japan (P) Shane Hirooka (S) Toshiyuki Yokokawa

2011 MasterCard. Proprietary. All rights reserved. 12 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Oberthur Card Systems 90845 86-755-2671-7012 86-755-2671-7218 Manufactures, Science and Technology personalizes, (Shenzhen) Co., Ltd. embosses, encodes, 4/F, Great Wall Technology and mails cards; Building 3#, No. 2 Kefa Road embeds and Science and Technology Park personalizes chips Nanshan District 518057 Shenzhen China (P) Bosson Didier (S) Rene Dela Vega Oberthur Technologies 90838 61-0287-866500 61-0297-565345 Personalizes, Australia Pty Ltd. embosses, encodes 23 Tarlington Place and mails cards; Smithfield 2164 personalizes chips NSW Australia (P) Jackie Fitzpatrick (S) Darren Nellies Oberthur Technologies— 90806 82-2-3446-6277 82-2-3466-6276 Personalizes, Korea Inc. embosses, encodes HC Haus Building, 38-7 and mails cards; Nonhyeon-dong, personalizes chips Gangnam-gu Seoul 135-010 Korea (P) Chris Park (S) CK Kim Oberthur Technologies 90818 63-2-892-2583 63-2-892-9938 Personalizes, (Philippines) Inc. embosses, encodes Warehouse 2-B, Building I, and mails cards; Jannov Plaza, 2295 Chino Roces personalizes chips Avenue Makati City Philippines (P) Ernal Espanola (S) Cesar Cecillano

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 13

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Omnisystem Co., Ltd. 90894 82-43-532-8930 82-43-533-8930 Manufactures cards; 827 Sayang-ri, Munback-myun embeds chips Jincheon-Gun South Korea 365-862 (P) Jason Kim (S) Young mo Yang Placard Pty. Ltd. 90528 61-3-9722-5200 61-3-9722-5201 Manufactures, 40 London Drive personalizes, Bayswater, Victoria 3153 embosses, encodes, Australia and mails cards; (P) Tess Barone embeds and (S) Peter Hall personalizes chips Qingdao Rongjia Security 90875 86-532-8584-9576 86-532-8584-9576 Manufactures cards Printing Co., Ltd. No.31,A, Shandong Road Shandong Province QingDao China 266071 (P) Zhimin Sui (S) Weijiang Han Shanghai Oriental Magnetic 90867 86-21-69212216 86-21-69212468 Manufactures cards; Card Engineering Co. Ltd. embeds chips No. 98 XinGao Road QingPu Industry Park Shanghai Shanghai China 201706 (P) Eric Li (S) Snow Xue Shanghai Pu Jiang Smart 90534 86-21-3997-3828 86-21-3997-3351 Manufactures cards Card Systems Co. Ltd. No.100, Lane 7488, HuTai Road Shanghai China 201809 (P) Zhou Yun (S) Hou Bin

2011 MasterCard. Proprietary. All rights reserved. 14 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided ShenZhen Einolda Smart 90862 86-755-2991-2513 86-755-2991-2499 Manufactures cards; Card Manufacturing Co. Ltd. embeds chips Build. 8, 2nd Industrial Park Xinxing, Xinhe, Fuyong Town Shenzhen, Baoan District China 518103 (P) Ricky Lee (S) Coco Lo Shenzhen Takcere Credit 90786 86-755-2861-4268 86-755-2861-4053 Manufactures, Card Manufacturing Ltd. personalizes, Block 3 embosses, and Anliang Shanjiaolong Industrial encodes cards; Zone Henggang Town embeds and Shenzen 518115 personalizes chips China (P) Kevin Wong (S) Ali Chen Shoei Printing Co. Ltd. 90535 81-44-977-4561 81-44-9770-4538 Personalizes, 2-17-1 Mizusawa 2 Chome embosses, encodes, Miyamae-Ku and mails Kawasaki City, Kanagawa-Ken cards;personalizes Japan 216-8631 chips (P) Tomohiro Nakata (S) Yasushi Kikuchi Shoei Printing Co. Ltd. 90536 81-6-6717-1181 81-6-6712-0101 Manufactures cards; 3-23-1-Chome embeds chips Momodani, Ikuno-Ku Osaka Japan 544-8686 (P) Tomohiro Nakata (S) Yasushi Kikuchi Taiwan Name Plate Co. Ltd. 90538 886-3-3270567 886-3-3270267 Manufactures, No. 36, Hwa Ya 1st Road personalizes, Hwa Technology Park, Kueishan embosses, encodes, Tao Yuan 333 and mails cards; Taiwan embeds and (P) Karl Cheng personalizes chips (S) Linda Wong

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 15

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided TECO Smart Technologies 90778 886-3-473-6630 886-3-473-0003 Manufactures, Co. Ltd. ext. 1010 personalizes, No. 1568, Chung Shan Road embosses, encodes, Section 1, Kuang-In, Taoyuen 328 and mails cards; Taiwan embeds and (P) Julie Hsiao personalizes chips (S) Frank Chiu Thai British Security Printing 90539 662-261-5215-20 662-661-9580 Manufactures, Public Co. Ltd. personalizes, 41/1 Moo 10, Soi Wat Suan Som embosses, encodes, Poochao-Sarming Prai Road and mails cards; Somrongtai, Prapradaeng embeds and Samutprakarn 10130 personalizes chips Thailand (P) Amnart Boonkwan (S) Wachiranuch Tuankam Tianjin Global Magnetic Card 90765 86-22-5858-5636 86-22-5858-5633 Manufactures, Co. Ltd. personalizes, No. 325 Jiefang Nan Road embosses, encodes, Hexi District Tianjin and mails cards; China 300 202 embeds and (P) Vivian Yang personalizes chips (S) Jinhong Lee Toppan Communication 90543 81-48-482-4904 81-48-478-7327 Personalizes, Products Co. Ltd. (Asaka) embosses, encodes, 21-33 Nobidome 7 Chome and mails cards; Niza-Shi Saitama personalizes chips Japan 352-8561 (P) Hiroaki Tomatsu (S) Ken Nakanishi Toppan Communication 90544 81-795-48-9612 81-795-48-9613 Manufactures, Products Co. Ltd. personalizes, (Takino) embosses, encodes, 355-17, Kotaka, Kato-shi and mails cards; Hyogo Prefecture personalizes chips Japan 679-0221 (P) Michihiro Hagio (S) Hiroyuki Shibayama

2011 MasterCard. Proprietary. All rights reserved. 16 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Toppan Communication 90545 81-493-61-1401 81-493-61-1404 Manufactures cards; Products Co. Ltd. (Ranzan) embeds chips 6-2 Hanamidai Ranzan-machi, Hiki-gun Saitama Prefecture, 355-0204 Japan (P) Tomiyoshi Shibuya (S) Atsushi Murata Toppan Forms Card 90540 852-2519-6388 852-2519-6063 Manufactures, Technologies Ltd. personalizes, Office: embosses, encodes, Unit 1050A-1075A and mails cards; Hong Kong International Trade embeds and and Exhibition Centre personalizes chips 1 Trademart Drive, Kowloon Bay Hong Kong SAR China Plant: 852-2470-0888 852-2470-0836 27 Wang Lok Street Yuen Long Industrial Estate Wang Chau, Yuen Long, N.T. Hong Kong SAR China (P) Welcome Chan (S) Nichols Leung Toppan Forms Company Ltd. 90741 81-3-5665-6461 81-3-3615-2169 Personalizes, (Tokyo) embosses, encodes, 1-13-15 Sengoku, Koutou-ku and mails cards; Tokyo personalizes chips Japan 135-0015 (P) Keizo Mashihara (S) Senju Tsuyuki Toppan Forms Tokai Co. Ltd. 90541 81-537-74-4122 81-537-74-4759 Manufactures cards; 6400 Naka, Kakegawa-shi, embeds chips Shizuoka Prefecture 437-1405 Japan (P) Shuji Komatsu (S) Takeshi Yamamoto

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 17

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Toppan Printing Co. Ltd. 90546 86-21-5822-1212 86-21-5822-1543 Manufactures, (Shanghai) personalizes, 5583 Hunan Road, Pu Dong embosses, encodes, Shanghai and mails cards; China 201316 embeds chips (P) John Woo (S) Luo Juichen UFIT Co., Ltd. 90547 81-568-24-7170 81-568-24-7184 Personalizes, Shikatsu Building Honkan 8F embosses, encodes, Card Center and mails cards; 3962-2, Shikata, Kitanagoya-shi personalizes chips Aichi 481-8585 Japan (P) Koji Tsunekawa (S) Shinji Miura Wuhan Tianyu Information 90878 86-027-8792-0478 86-027-8792-0451 Personalizes, Industry Co., Ltd. embosses, encodes, Tianyu Building and mails cards; Huazhong University of Science embeds and and Technology Industry Park personalizes chips East Lake Zone JWuhan City, Hubei Province China 430223 (P) Yuan Wangjin (S) Zhu Jianxin YBL Co. Ltd. 90729 82-31-943-2002 82-31-943-3200 Manufactures cards; Head Office and Plant: embeds chips 239-2, Punsu-ri, Kwangtan-myon Paju-si, Kyonggi-Do 413-853 Korea (P) Simon Sung (S) Park-IL Seoul Office: 82-2-357-7114 82-2-359-6230 3F, BYC Building, 464-4 Galhyeon-dong, Eunpyoung-gu Seoul 122-813 Korea

2011 MasterCard. Proprietary. All rights reserved. 18 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Zhongchao Credit Card 90502 86-10-62965956 86-10-60298008 Manufactures, Industry Development Co. Ltd. personalizes, No. 28 Shengfang Rd, Daxing embosses, encodes, Industry Development Zone and mails cards; Daxing District embeds chips Beijing 102628 China (P) Sonia GU (S) Lina Zhao

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 19

Canada Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided CPI Card Group – Canada, Inc. 90553 1-905-761-8222 1-905-761-8220 Manufactures, 460 Applewood Crescent personalizes, Concord, Ontario L4K4Z3 embosses, encodes, Canada and mails cards; (P) Felipe Papaleo embeds and (S) Guillaume Grincourt personalizes chips Gemalto Canada Inc. 90800 1-905-335-9681 1-905-335-9147 Personalizes, 5437 John Lucas Drive embosses, encodes, Burlington, Ontario L7L6A8 and mails cards; Canada personalizes chips (P) Vincent Lussiez (S) Tomas Velaniskis Giesecke & Devrient Systems 90552 1-905-475-1333 1-905-975-0300 Manufactures, Canada Inc. personalizes, 316 Markland Street embosses, encodes, Markham, Ontario L6C0C1 and mails cards; Canada embeds and (P) Fred Hopper personalizes chips (S) Mark McGinnis

2011 MasterCard. Proprietary. All rights reserved. 20 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Abnote Czech s.r.o. 1002507 420-595-691-111 420-595-691-116 Manufactures, Jelinkova 1174/3 personalizes, Ostrava – Svinov 721 00 embosses, encodes, Czech Republic and mails cards; (P) Blanka Havlásková embeds and (S) Stanislav Pospisek personalizes chips Agencija za Komercijalnu 1000018 385-1-3657-611 385-1-4843-001 Personalizes, Djelatnost d.o.o embosses, and Savska cesta 31c encodes cards; Zagreb 10000 embeds and Croatia personalizes chips (P & S) Blaz Svilicic Allami Nyrt. (State 1001295 36-1-431-3500 36-1-431-3555 Manufactures, Printing Plc.) personalizes, Halom Utca, 5 embosses, encodes, 1102 Budapest and mails cards; Hungary embeds and personalizes chips Plant: Fatyolka u. 1-3 Budapest, H-1106 Hungary (P) Kristof Kalauz (S) Gabor Peter Allpay Limited 1002515 44-844-225-5729 44-844-557-8350 Manufactures, Fortis et Fides personalizes, Whitestone Business Park embosses, encodes, Hereford and mails cards; United Kingdom HR1 3SE embeds and (P) Mark Thomas personalizes chips (S) Simon Cook Austria Card Plastikkarten und 1001123 43-1-61-065-0 43-1-61-065-700 Manufactures, Ausweissysteme Ges. GmbH personalizes, Lamezanstrasse 4-8 embosses, encodes, 1230 Vienna and mails cards; Austria embeds and (P) Georg Pruefert personalizes chips (S) Olga Czapova

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 21

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Azericard Ltd. 5759 994-12-4982005 994-12-5984386 Personalizes, 67, Nizami Street 994-12-989166 994-12-982006 embosses, and AZ1005 Baku encodes cards; Azerbaijan personalizes chips (P) Elmar Sadigov (S) Emil Karimov BamCard 1002367 387-33-722-217 387-33-659-647 Personalizes, TRG Heroja 10/II embosses, and Saravejo 71000 encodes cards; Bosnia and Herzegovina personalizes chips (P) Alma Ahmic (S) Kenan Pasic Bank Zachodni WBK S.A. 1000779 48-61-856-52-73 48-61-856-54-46 Personalizes, Pl. Wolności 15 embosses, encodes, 60-967 Poznanń and mails cards; Poland personalizes chips (P) Marcin Maslowski (S) Olga Kaczmarowska Bilesim A.S. 1000973 90-212-367-17-17 90-212-328-25-40 Personalizes, Buyukdere Caddesi embosses, encodes, NO:41 C BLOK MASLAK and mails cards; Istanbul personalizes chips Turkey 34398 (P) Birhan Bilgic (S) Melih Buzluk Borica – Bankservice AD 1000525 359-2- 9712-461 359-2-971-30-93 Personalizes, 117 Tzarigradsko Chaussee Blvd. embosses, and 1784 Sofia encodes cards; Bulgaria personalizes chips (P) Valeri Ivanov (S) Christo Kostov Cartoplast S.A. 1001131 33-3-89-73-29-73 33-3-89-73-29-72 Manufactures cards 13, Rue de Colmar PO Box 118 68153 Ribeauville France (P) Laurent Schmerber (S) Rachel Freyermuth

2011 MasterCard. Proprietary. All rights reserved. 22 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Cedicam 1002410 33-472-52-78-17 33-472-52-78-34 Personalizes, Centre d’Exploitation de Lyon embosses, encodes, 90 Avenue Lanessan and mails cards; 69410 Champagne au Mont d’Or personalizes chips France (P) Gilbert Lyonnet (S) Christophe Dumas Centrum Kart Spolka Akcyjna. 1002061 48-22-534-23-43 48-22-534-23-44 Personalizes, Ul. Gieldowa 5 embosses, encodes, 01-211 Warsaw and mails cards; Poland personalizes chips (P) Antares Gryczan (S) Maria Siekierzycka Cetis, Graphic & 1000664 386-3-4278-500 386-3-4278-836 Personalizes, Documentation Services embosses, encodes, Copova 24 and mails cards; 3000 Celje personalizes chips Slovenia (P) Roman Znidaric (S) Bostjan Kolar Comcard GmbH 1001084 49-37-45-7690 49-37-45-5069 Personalizes, Hammerbrucker Strasse 3 embosses, encodes, 08223 Falkenstein and mails cards; Germany embeds and (P) Ralph Siegel personalizes chips (S) Ulrich Thoss Compunet Cards s.r.l.Zona 1002526 39-95-29-20-37 39-95-29-23-74 Manufactures cards; Industriale – embeds chips Blocco Palma 2 Catania 95100 Italy (P) Antonio Fiorini (S) Andrea Trombetta

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 23

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Contiforme–Soluçoes Graficas 1001172 351-21-448-16-00 351-21-448-16-58 Personalizes, Integradas S.A. embosses, encodes, Estrada Nacional 249, Km 7 and mails cards; Aboboda-Lisboa 2776-903 personalizes chips Carcavelos Portugal (P) Antonio Ribeiro de Almeida (S) Marco Bandeira Cosecal S.A. 1001404 34-98-339-90-88 34-98-339-94-35 Personalizes, Huertas 36 embosses, encodes, 47005 clValladolid and mails cards; Spain personalizes chips (P) Eduardo Martin Martin (S) Daniel Hedesa Hemandez CPS Technologies 1001188 33-4-78-44-71-00 33-4-78-57-99-85 Personalizes, 14 Rue des Aqueducs embosses, encodes, 69290 Craponne and mails cards; France personalizes chips (P) Anthony Come (S) Julien Schilling Dz Card (Denmark) A/S 1000958 45-96-34-50-00 45-96-34-50-09 Personalizes, Sofiendalsvej 74 embosses, encodes, Aalborg and mails cards; Denmark 9200 embeds and (P) Dorte Ravn Pedersen personalizes chips (S) Kim Vestergaard Dzetta Processing Center 1001734 7-495-740-4040 7-495-946-2233 Personalizes, 2d Silikatniy proezd, 8 embosses, and 123007 – Moscow encodes cards; Russian Federation personalizes chips (P) Oleg Kolosinskiy (S) Astemir Datiev

2011 MasterCard. Proprietary. All rights reserved. 24 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided EDB Card Services AS 1001014 47-75-12-81-10 47-75-12-81-11 Personalizes, Sondregt 11 embosses, encodes, 8622 Mo I Rana and mails cards; Norway embeds and personalizes chips Plant: Mellomvika 1 8622 Mo I Rana Norway (P) Ivar Erlandsen (S) Christer Jonsson EDB Card Services AB 1002552 46-10-588-57-00 46-20-588-00-01 Personalizes, Ekenbergsvegen 113 embosses, encodes, Solna and mails cards; Sweden 171 79 personalizes chips (P) Tommy Johansson (S) Christer Jonsson E-Kart Electronik Kart 1001485 90-262-648-58-00 90-262-648-58-98 Manufactures, Sistemleri San. Ve Tic. A.S. personalizes, 500 Sokak No. 503 embosses, encodes, 41480 – Gebze – Izmit and mails cards; Turkey embeds and personalizes chips Plant: GOSB, Kemal Nehrozoglu Cad. No. 503 Kocaeli, Gebze Turkey 41480 (P) Gozde Koksal (S) Adil Culha Elkart Sp.z.o.o. 1001478 48-22-635-72-89 48-22-635-73-01 Personalizes, UI. Rybaki 35/33 embosses, encodes, 00-221 Warsaw and mails cards; Poland personalizes chips (P) Jerzy Switek (S) Hubert Kaczorowski

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 25

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided EPC Electronic Payment Cards 1001142 49-8022-964-0 49-8022-964-400 Manufactures, GmbH personalizes, Louisenthal 1 embosses, encodes, 83703 Gmund am Tegernsee and mails cards; Germany embeds and (P) Dr. Jurgen Moll personalizes chips (S) Martin Fischer Euro P3C 1001191 33-3-89-60-80-80 33-3-89-60-80-90 Personalizes, 49 Rue Marc Seguin embosses, encodes, Zone Artisanale de la Mer Rouge and mails cards; 68200 Mulhouse personalizes chips France (P) Thierry Rigate (S) Patrick Loiseau Euro P3C 1001095 33-2-41-20-40-00 33-2-41-20-40-40 Personalizes, 2 Bis, Rue du Pavillon embosses, encodes, Z.I. de Beaucouze and mails cards; 49070 Beaucouze Cedex personalizes chips France (P) Thierry Rigate (S) Patrick Loiseau Fabrica Nacional de Moneda 1001200 34-91-566-67-39 34-91-566-65-59 Manufactures, y Timbre personalizes, Calle Jorge Juan 106 embosses, encodes, 28009 Madrid and mails cards; Spain embeds and (P) Alberto Sanchez Bermejo personalizes chips (S) Jose Deza First Data Hellas S.A. 1001603 30-210-624-4000 30-210-339-7097 Personalizes, Stratopedou ABIP 2 embosses, encodes, Krioneri, and mails cards; 14568 Attica personalizes chips Greece (P) Pavlos Binopoulos (S) Efstathios Mavrovouniotis

2011 MasterCard. Proprietary. All rights reserved. 26 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided First Data Lietuva 1002132 370-5-215-17-25 370-5-213-19-03 Personalizes, Ukmerges Street 220 embosses, encodes, LT-07166, Vilnius and mails cards; Lithuania personalizes chips (P) Ricardas Navardauskas (S) Tomas Cerniauskas First Data Personalizacja SP 1000519 48-22-515-30-45 48-22-515-34-74 Personalizes, z.o.o. embosses, encodes, 92 Jerozolimskie Avenue and mails cards; 00-807 Warsaw personalizes chips Poland Plant: 56 Zelazna Street 00-852 Warsaw Poland (P Konrad Jeziorski (S) Andrzej Ulejczyk First Data Slovakia a.s. 1001155 421-2-6828-5424 421-2-6241-2852 Personalizes, Rontgenova 1 embosses, encodes, P.O. Box 79 and mails cards; SK-850 00 Bratislava 5 personalizes chips Slovakia (P) Martin Navara (S) Robert Slavkovsky Gemalto Danmark A/S 1001017 45-44-82-74-00 45-44-66-80-56 Personalizes, Borupvang 1B embosses, encodes, 2750 Ballerup and mails cards; Denmark personalizes chips (P) Michael Reimer (S) Steve Adamson Gemalto AB 1002219 46-8-7-09-25-15 46-8-7-09-25-01 Personalzes, Vastberga Alle 36C, Hägersten embosses, encodes, Stockholm 12630 and mails cards; Sweden personalizes chips (P) Janne Saarinen (S) Philippe Piet

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 27

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Gemalto GmbH 1001127 49-7158-185-0 49-7158-185-150 Personalizes, Mercedesstr. 13 embosses, encodes, D-70794 Filderstadt (Sielmingen) and mails cards; Germany embeds and (P) Klaus Meyer personalizes chips (S) Reiner Weber Gemalto LLC Moscow 1001019 7-495-9330540 7-495-9330541 Personalizes, 9 Godovikova Street, Bldg. 31 embosses, and Moscow encodes cards; Russian Federation 129085 embeds and (P) Jean-Paul Ternisien personalizes chips (S) Igor Vasiliev Gemalto Oy 1001130 358-9-89-41-43-41 358-9-891-887 Personalizes, Turvalaaksontie 1 embosses, encodes, PO Box 31 and mails cards; 01740 Vantaa embeds and Finland personalizes chips (P) Helvi Salminen (S) Janne Saarinen Gemalto S.A. 1001085 33-247-74-86-86 33-247-74-86-83 Personalizes, 14 Route du Saint-Laurent embosses, encodes, BP 40129 and mails cards; 37171 Champray-les Tours Cedex personalizes chips France (P) Jacques Klufts (S) Peter Cairns Gemalto S.A. 1002024 33-4-42-36-50-00 33-4-42-36-59-99 Personalizes, Avenue du Pic de Bertagne embosses, encodes, Parc d’Activites de Gemenos and mails cards; BP100 embeds and 13420 Gemenos Cedex personalizes chips France (P) Claire Sylvestre (S) Alain Rolfi

2011 MasterCard. Proprietary. All rights reserved. 28 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Gemalto SP S.A. 1001139 34-93-462-83-00 34-93-462-83-27 Manufactures, Calle Llevant 12 personalizes, Poligono Industrial del Llevant embosses, encodes, 80150 Parets del Valles and mails cards; Barcelona embeds and Spain personalizes chips (P) Alex Dinh (S) Nicolas Seoane Gemalto Sp. z o.o. 1002517 48-58-7734-500 48-58-7734-665 Personalizes, ul. Skarszewska 2 embosses, encodes, Tczew 83-110 and mails cards; Poland personalizes chips (P) Marek Baberowski (S) Krzysztof Matraszek Gemalto UK Ltd. 1002530 44-1-489-88-96-00 44-1-489-88-96-50 Personalizes, 300, 350 NEST Business Park embosses, encodes, Havant – Hampshire PO9 5TL and mails cards; United Kingdom personalizes chips (P) Howard Berg (S) Steve Adamson Gemalto UK Ltd. 1001133 44-1-489-88-96-00 44-1-489-88-96-50 Manufactures, Concorde Way personalizes, Segensworth North embosses, encodes, Fareham – Hampshire and mails cards; PO 15 5RX embeds and United Kingdom personalizes chips (P) Steve Adamson (S) Mark Smith Ghirlanda Cards Srl Socio 1000986 39-02-97-23-3203 39-02-97-61-749 Manufactures, Unico personalizes, Via Galileo Ferraris 80/90 embosses, encodes, 20010 Marcallo Con Casone and mails cards; Italy embeds and (P) Andrea Gambini personalizes chips (S) Flaviano Modini

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 29

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Giesecke & Devrient GB Ltd. 1001466 44-208-799-8100 44-208-799-8126 Personalizes, Unit 1, Westlinks embosses, encodes, Alperton Lane, Wembley and mails cards; Middlesex HA0 1ER personalizes chips United Kingdom (P) Deborah McCluskey (S) David Williams Giesecke & Devrient GmbH 1001011 49-89-4119-3320 49-89-4119-3032 Personalizes, Prinzregentenstrasse 159 embosses, encodes, 81677 Munchen and mails cards; Germany personalizes chips (P) Fulvio Famularo (S) Manfred Sixt Giesecke & Devrient N.V. 1001124 32-2-712-05-00 32-2-720-29-60 Personalizes, Leuvensteenweg 573/11 embosses, encodes, 1930 Zaventem and mails cards; Belgium personalizes chips (P) Van Eenoo Jan (S) Hans Van der Haegen Giesecke & Devrient Slovakia 1002528 421-37-6419-125 421-37-6419-180 Manufactures, s.r.o. Ltd. personalizes, Dolne Hony 11 embosses, encodes, 94901 Nitra and mails cards; Slovakia embeds and (P) Dr. Ivan Moroz personalizes chips (S) Filip Zelingr Global Payments Europe, s.r.o. 1000515 420-2-67-197-111 420-2-67-197-393 Personalizes, V Olsinach 80/626 embosses, encodes, 100 00 Praha 10 and mails cards; Czech Republic personalizes chips (P) Miroslav Immer (S) Mroslav Janak Grafocard d.o.o. 1002521 381-11-3191831 381-11-8255-713 Manufactures cards; Partizanski Put 515B, Nemenikuce embeds chips Sopot 11450 Serbia (P) Nebojsa Maric (S) Dalibor Dedic

2011 MasterCard. Proprietary. All rights reserved. 30 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided GyD Iberica Unipersonal S.A. 1001137 34-93-477-6258 34-93-477-6212 Manufactures, Calle Industria 3-5 personalizes, 08970 Sant Joan Despi embosses, encodes, Barcelona and mails cards; Spain embeds and (P) Francesc Leiva personalizes chips (S) Rosa Aguilo GyD Iberica Unipersonal S.A. 1001961 34-93-202-7258 34-93-477-6212 Personalizes, C/ Verano 15 embosses, encodes, Torrejon de Ardoz and mails cards; Madrid 28850 personalizes chips Spain (P) Francesc Leiva (S) Rosa Aguilo Hungarian Banknote Printing 1001688 36-1-885-51-96 36-1-885-51-965 Manufactures; Shareholding Co. personalizes, Marko Utca 17 embosses, encodes, 1055 Budapest and mails cards; Hungary embeds and (P) Peter Huszar personalizes chips (S) Peter Kopacsi ID Data Cards Ltd. 1001741 44-1730-235-700 44-1730-235-711 Manufactures, The New Mint House personalizes, Bedford Road embosses, encodes, Petersfield, Hampshire and mails cards; GU 32 3AL embeds and United Kingdom personalizes chips (P) John Cooke (S) Andrew Connor Imprensa Nacional Casa da 1001136 351-21-781-07-00 351-21-781-08-15 Manufactures, Moeda S.A. (INCM) personalizes, Avenida Antonio Jose de Almeida embosses, encodes, 1000-043 Lisboa and mails cards; Portugal embeds and (P) Jose Rosmaninho personalizes chips (S) Cristina Rainha

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 31

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Info Direct Barcelona 2003 s.l. 1001708 34-93-474-63-04 34-93-474-01-46 Personalizes, Avda. Dels Alps, 50-52 embosses, encodes, 08940 Cornella de Llobregat and mails cards; Barcelona personalizes chips Spain (P) Josep Artigas (S) Oscar Ferre Lecum Inform Processing Lykos S.A. 1001455 30-210-6694-500 30-210-6694-555 Personalizes, 7th klm Varis – Koropi Av. embosses, encodes, 194 00 Koropi – Attiki and mails cards; Greece personalizes chips (P) Spyridon Manias (S) Leonidas Kalathas Intaremit S.A. 1001211 34-94-672-03-51 34-94-672-25-71 Personalizes, Calle Vitoria, 21 Bis embosses, encodes, Zona Industrial 10 and mails cards; Naves 3 a 6 personalizes chips Anuntzibai 01400 Areta (Alava) Spain (P) Joseph Schembri (S) Jose Luis Delgado International Card System 1002057 389-2-3293-879 389-2-3293-844 Personalizes, (CASYS) AD embosses, encodes, Kuzman Josifovski Puti 1 and mails cards; 1000 Skopje personalizes chips Republic of Macedonia (P) Lidija Vucidolova Bogoevska (S) Atanas Atanasov JCC Payment Systems Ltd. 3238 357-22-868-436 357-22-868-439 Personalizes, 1 Stadiou Street, Nissou Industrial embosses, encodes, Area, Nicosia 2571 and mails cards; Cyprus personalizes chips (P) Andreas Savva (S) Paris Erotokritou

2011 MasterCard. Proprietary. All rights reserved. 32 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided JSC Novacard 1000662 7-8312-57-87-77 7-8312-57-87-18 Manufactures, Kazanskaya Square, 1 personalizes, 603001 embosses, encodes, Russian Federation and mails cards; (P) Vladimir Krupnov embeds and (S) Vasily Zakhartsov personalizes chips Mega Network SRL 1002188 39-0773-523-006 39-0773-523-008 Manufactures, Via Migliara, 46 personalizes, 04016 Sabaudia (LT) embosses, encodes, Italy and mails cards; (P) Vari Massimiliano embeds and (S) Mioara Ciobanu personalizes chips Metalplex S.p.A. 1002131 39-08-24-35-02-01 39-08-24-35-02-19 Personalizes, Zona Industriale Ponte Valentino embosses, encodes, 82100 Benevento and mails cards; Italy embeds and (P) Pierpaolo Gallucci personalizes chips (S) Michele Gallucci MFGroup SPA (Publicenter 1001617 39-051-677-6511 39-051-677-6512 Manufactures cards; Division) personalizes, Via Braine, 54 embosses, encodes, Rioveggio (Bologna) – 40036 and mails cards; Italy embeds and (P) Sandro Mucelli personalizes chips (S) Gabriele Fornasini “Millikart” Limited Liability 1002348 994-12-498-75-80 994-12-498-75-80 Personalizes, Company (LLC) embosses, and 32, Rashid Behbudov Str. encodes cards; Baku AZ 1014 personalizes chips Azerbaijan (P) Jalal Orujov (S) Emil Amirov Morpho 1001091 31-237-995-111 31-23-7995-180 Personalizes, Oudeweg 32 embosses, encodes, Postbus 5300 and mails cards; 2000 GH Haarlem personalizes chips The Netherlands (P) Coen Postma (S) Gertjan Koudijs

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 33

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Multicard Ltd. 1001026 36-1-424-60-70 36-1-228-61-04 Manufactures, Haros ur 7 personalizes, 1222 Budapest XXII embosses, encodes, Hungary and mails cards; (P) Katalin Hiller embeds and (S) Peter Berzlanovits personalizes chips MultiCarta Ltd. 1001005 7-095-784-6055 7-095-785-1224 Personalizes, 43 Vorontsovskaya Street embosses, encodes, 109147 Moscow and mails cards Russian Federation (P) Kirill Solntsev (S) Andrew Buzin Nagra ID 1002378 41-32-924-04-04 41-32-924-04-00 Manufactures, Cret-du-Locle 10 personalizes, PO Box 1161 embosses, encodes, 2322 La Chaux-de-Fonds and mails cards; NE / Switzerland embeds and (P) Claude-Olivier Gertsch personalizes chips (S) Monika Castelan Giron National Bank of Serbia, The – 1002475 381-111-35-40-897 381-11-35-31-505 Personalizes, The Institute for Manufactur- embosses, encodes, ing Banknotes and Coins and mails cards; Pionirska 2 personalizes chips Belgrade 11030 Serbia (P) Minja Medenica (S) Bojana Jovanovic National Credit Cards (CJSC) 1002569 7-84-8240-7163 7-84-8240-7163 Personalizes, 22a Novopromyshlennaya str. embosses, and Region encodes cards Togliatti 445009 Russian Federation (P) Vadim Surodeev (S) Vladimir Ponimanskiy

2011 MasterCard. Proprietary. All rights reserved. 34 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Nitecrest Ltd. 1002527 44-1772-431888 44-1772-436888 Personalizes, Unit 25-32 Marathon Place embosses, encodes, Moss Side Industrial Estate and mails cards; Leyland personalizes chips Lancashire PR26 7QN England (P) Kathryn Jeffers (S) John Hart Oberthur Technologies The 1001143 31-46-420-2400 31-46-420-2401 Personalizes, Netherlands B.V. embosses, encodes, Fisherpad 100 and mails cards; 6135 KS Sittard personalizes chips The Netherlands (P) Danny Heijltjes (S) Harry Lormans Oberthur Card Systems 1000810 40-37-4200-010 40-37-4200-011 Personalizes, Romania SRL embosses, encodes, 46 Iancului Street, District 2 and mails cards; 518057 Bucharest personalizes chips Romania (P) Bogdan Brasov (S) Radu Opris Oberthur Technologies 1001016 44-7775-8000-54 44-1684-8542-02 Personalizes, Ve Zlíbku 1800 embosses, encodes, Horní Počernice and mails cards; 19 3000 Prague personalizes chips Czech Republic (P) Pierre Alain Bauer (S) Hrvoje Vincekovic Oberthur Technologies Iberica 1001626 34-93-672-05-12 34-93-672-54-52 Manufactures cards S.A.U. Pol. Ind. can Mascaro c/Vial Uno, 10 -11 08756 La Palma de Cervello Barcelona Spain (P) Frederic Moreno (S) Jesus Este

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 35

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Oberthur Technologies 1002493 34-91-735-54-50 34-91-735-5452 Personalizes, Iberica S.A.S.U. embosses, encodes, C/Metano, 4B and mails cards; 28850 Torrejon de Ardoz embeds and Madrid personalizes chips Spain (P) Ignacio Ureta (S) Antonio Sierra Oberthur Technologies kft. 1002217 36-23-531-800 36-23-531-801 Personalizes, Oberthur Building embosses, encodes, To-Park, 3301/21 and mails cards; 2045 – Torokbalint personalizes chips Hungary (P) Gabriella Rajki (S) Zoltan Ugron Oberthur Technologies S.A. 1001599 33-3-80-53-21-00 33-3-80-53-21-10 Personalizes, 14, Rue des Cortots embosses, encodes, Centre Industriel des Cortots and mails cards; Parc d’Activites de Cortots personalizes chips 21121 Fontaine-les-Dijon France (P) Jean Christophe Baille (S) Yves Rouyez Oberthur Technologies 1002516 358-9-5915-900 358-9-5915-9090 Personalizes, Finland Oy embosses, encodes, Vallikallionkatu 7 and mails cards; Espoo FI-02650 embeds and Finland personalizes chips (P) Christer Johansson (S) Satu Seppanen Oberthur Technologies S.A. 1001030 33-2-99-74-73-71 33-2-99-74-23-22 Manufactures cards; Avenue d’Helmstedt embeds chips BP 90308 Vitre France 35503 (P) Laurent Augneur (S) Laurent Gary

2011 MasterCard. Proprietary. All rights reserved. 36 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Oberthur Technologies 1001470 39-02-38-217-172 39-02-38-217-329 Manufactures, Italia SRL personalizes, Via Monte Spluga, 58 embosses, encodes, 20021 Baranzate di Bollate and mails cards; Milano embeds and Italy personalizes chips (P) Claudio Valle (S) Cristiana Dho Oberthur Technologies Latvia 1002379 371-7892-678 371-7892-679 Personalizes, SIA embosses, encodes, Varkalu Street 13 and mails cards; LV 1067 Riga personalizes chips Latvia (P) Erik Madsen (S) Janis Brezinskis Oberthur Technologies 1001093 47-51-80-71-00 47-51-80-71-01 Personalizes, Norway embosses, encodes, Godesetdalen 10/PB 283 and mails cards; 4066 Stavanger personalizes chips Norway (P) Frank Hermansen (S) Bente Larsen Oberthur Technologies 1002509 4822-763-4800 4822-763-4801 Personalizes, Poland Sp. z o.o embosses, encodes, ul. Napoleona 4c and mails cards; Kobylka k/Warszawy personalizes chips Poland 05-230 (P) Magdalena Kolacz-Frelik (S) Zbigniew Cwikla Oberthur Technologies 1002137 46-152-266-00 46-152-146-30 Manufactures cards Printing Sweden AB Markorvagen 2-4 64582 Strangnas Sweden (P) Mikael Svensson (S) Pär Andersson

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 37

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Oberthur Technologies 1001148 46-152-266-00 46-152-146-30 Personalizes, Sweden AB embosses, encodes, Markorvagen 2–4 and mails cards; 64582 Strangnas embeds and Sweden personalizes chips (P) Mikael Svensson (S) Lennart Johansson-Ax Oberthur Technologies UK Ltd. 1001472 44-1684-290290 44-1684-854-202 Manufactures, Alexandra Way personalizes, Ashchurch Business Centre embosses, encodes, Tewkesbury, Gloucestershire and mails cards; GL20 8GA embeds and United Kingdom personalizes chips (P) Nigel Barnes (S) Warren McIvor OK Processing Ltd. 1001415 7-495-727-1200 7-499-152-3056 Personalizes, 6/21 Building 3 Liza Chaikina embosses, encodes, Street and mails cards 125315 Moscow Russian Federation (P) Alexey Kolabukhov (S) Zina Iastrebtseva

ooo Alioth 1000881 7-495-509-03-81 7-495-509-03-81 Manufactures, ZAO Plemkhos Naro-Osanovsky personalizes, Village Sof’ino embosses, encodes, Naro-Osanovsky rural district and mails cards; Odintsovsky region embeds and 143075 Moscow personalizes chips Russian Federation (P) Dmitry Bubnov (S) Igor Krasnov Orga Zelenograd Smart Cards 1000663 7-495-785-8346 7-495-532-92-67 Personalizes, & Systems embosses, encodes, Solnechnaya alleya, 3 and mails cards; Moscow, Zelenograd – 124527 embeds and Russian Federation personalizes chips (P) Vladislav Moskowchuk (S) Dmitry Prokofyev

2011 MasterCard. Proprietary. All rights reserved. 38 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided OTP Card Factory Ltd. 1002356 36-1-298-40-86 36-1-298-40-8 Personalizes, 9 Baber Street embosses, encodes, Budapest, H-1131 and mails cards; Hungary personalizes chips (P) Tamas Szabo (S) Gabor Lehel Perm Printing Factory of 1001112 7-342-220-85-30 7-342-228-08-08 Manufactures cards; Goznak embeds chips Shosse Kosmonavtov, 115 Perm 614990 Russian Federation (P) A.P. Nikitin (S) V.R. Izmailov Plastic Card Enterprise Limited 1001801 380-44-585-03-03 380-44-585-02-92 Manufactures, 4, Novopromyslova St. personalizes, Novi Petrivtsi, Vyshgorodskyi embosses, encodes, Region, Kyivska obl. and mails cards; 07354 – Ukraine embeds and (P) Natali Perevertaylo personalizes chips (S) Helena Tanakova PlastKart – Akilli Kart Iletisim 1002135 90-212-736-12-00 90-212-736-15-75 Manufactures, Sistemleri San ve Tic A.S. personalizes, Alipasa Koyu embosses, encodes, Sinekli Yolu and mails cards; Sillivri 34570 – Istanbul embeds and Turkey personalizes chips (P) Ali Yildiz (S) Burak Peker Polly-Service Ltd. 1002554 380-44-452-0686 380-44-450-7565 Personalizes, 64, Lenina Str embosses, encodes, 02088 Kiev and mails cards; Ukraine personalizes chips (P) Galina Hagen (S) Roman Danilyuk PPC Card Systems B.V. 1001135 31-50-368-77-77 31-50-368-77-20 Personalizes, Neutronstraat 8 embosses, encodes, PO Box 70040 and mails cards; 9743 AM Groningen personalizes chips The Netherlands (P) Dirk-Jan van den Berg (S) Johan de Vries

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 39

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided PPC Card Systems GmbH 1001146 49-5251-15-83-117 49-5251-15-83-251 Manufactures, Senefelderstrasse 10 personalizes, 33100 Paderborn embosses, encodes, Germany and mails cards; (P) Frank Ludwig embeds and (S) Uwe Krieger personalizes chips Provus Service Provider S.A. 1001537 40-21-202-69-00 40-21-315-95-57 Personalizes, 2h Vasile Milea Blvd, Sector 6 embosses, and Bucharest 061344 encodes cards; Romania personalizes chips (P) Idris Berber (S) Alida Roman Provus Bilisim Hiz. A.S. 1000994 90-212-329-06-66 90-212-329-06-99 Personalizes, Deposite Is Merkezi/ A6 Blok embosses, encodes, at:2 No:209-211-212-213-214-215- and mails cards; 216 personalizes chips Ikitelli Organize Sanayi olgesi/Basaksehir Istanbul Turkey (P) Hasan Peksen (S) Hasan Kaya PWPW S.A. 1002216 48-22-336-19-80 48-22-336-19-05 Manufactures cards; Karczunkowska Street, 30 embeds chips Warsaw 00-222 Poland (P) Andrzej Lis (S) Dariusz Mellin Quipu Shpk 1000877 381-38-246-010 381-38-248-490 Personalizes, Rexhep Mala Nr. 16 embosses, and 10000 Prishtina encodes cards; Kosovo personalizes chips (P) Björn Pysall (S) Ardian Xh. Behluli Rabobank Netherland 1001145 31-40-219-51-29 31-40-219-52-73 Personalizes, De Maas 11 embosses, encodes, 5684 PL Best and mails cards; The Netherlands personalizes chips (P) Rob Aerdts (S) Jacques Bloos

2011 MasterCard. Proprietary. All rights reserved. 40 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Radece Papir 1001096 386-356-80-500 386-356-80-501 Manufactures cards; Njivice 7 embeds chips 1433 Radece Slovenia (P) Janez Pezdirc (S) Marko Kadunc Raiffeisendruckerei GmbH 1001128 49-2631-506-0 49-2631-506-111 Manufactures, Niederbieberer Strasse 124 personalizes, 56567 Neuwied-Ortsteil Segendorf embosses, encodes, Germany and mails cards; (P) Gunther Visse embeds and (S) Pia Mayer-Korbach personalizes chips Rosan Finance 1000660 7-495-933-8505 7-495-933-8510 Manufactures, 9/4, Svyazistov str. personalizes, Krasnoznamensk, Moscow Region encodes, embosses, Russian Federation 143090 and mails cards; (P) Oleg Aibazov embeds and (S) Alexey Belov personalizes chips Rosan SPb 1000985 7-812-603-2616 7-812-603-2613 Personalizes, 10 A, Kurchatova Street encodes, embosses, St. Petersburg and mails cards; Russian Federation 194223 personalizes chips S.A.E.T.I.C., S.A. 1001158 34-93-372-94-61 34-93-372-10-50 Manufactures cards; Calle Bonavista 3b embeds chips 08960 Sant Just Desvern/Barcelona Spain (P) Gustavo Guillamet (S) Natalia Alos Julia Sagem Orga GmbH (dba 1001141 49-5251-889-2213 49-5251-889-2952 Manufactures, Morpho) personalizes, Konrad-Zuse-Ring 1 embosses, encodes, 24220 Flintbek and mails cards; Germany embeds and (P) Philippe Bertiaux personalizes chips (S) Christopher Goulet

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 41

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Sberbank of 5037 7-495-771-39-52 7-495-668-31-39 Personalizes, 19 Vavilova Street embosses, and 117997 Moscow encodes cards; Russian Federation personalizes chips (P) Denis V. Aksenov (S) Sergei N. Bondarev S.C. Inform Lykos S.A. 1000795 40-21-4084-500 40-21-4084-600 Personalizes, ODAI 347-363 embosses, encodes, 1st Urban District, Sector 1 and mails cards; 013604 Bucharest personalizes chips Romania (P) Daniela Stanoiu (S) Liviu Anghel SELP-SECURE SAS 1002551 33-5-45-25-17-00 33-5-45-25-17-09 Manufactures cards Rue Louis Pergaud 16600 Angouleme France (P) Matthieu Leclerc (S) Patricia Gadaldi Sia First Data Latvia 1000052 371-709-2500 371-709-2509 Personalizes, Dzirnavu 37 embosses, encodes, LV-1010, Riga and mails cards; Latvia personalizes chips (P) Peeter Torim (S) Janis Smits SIBS - Cartoes, Produçao e 10777 351-21-416-78-00 351-21-416-78-77 Personalizes, Processamento de Cartoes S.A. embosses, encodes, Avenida Paul Harris, 1 - Bloco B and mails cards; Vale Flores, Ranholas personalizes chips 2710-724 Sintra Portugal (P) Rui Pina (S) Eduardo Galvao Sigma Schede Srl 1000015 39-06-91-08616 39-06-91-07931 Manufactures, Via dei Castelli Romani, 19 personalizes, 00040 Pomezia (ROMA) embosses, encodes, Italy and mails cards; (P) Giulia Martella embeds and (S) Fabio Coscarella personalizes chips

2011 MasterCard. Proprietary. All rights reserved. 42 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Sistemas y Tratamientos 1001013 34-91-519-96-12 34-91-413-22-29 Personalizes, Tecnicos S.A. (STT) embosses, encodes, C/ Aragoneses 2, Acceso 1 and mails cards; 28108 Alcobendas (Madrid) personalizes chips Spain (P) Alejandro Guillamet (S) Venancio Guillamet Sitronics Smart Technologies, 1002558 7-495-229-77-63 7-495-229-77-63 Manufactures, LLC personalizes, 12-2, 1st Zapadnyi proezd embosses, encodes, Moscow, Zelenograd and mails cards; Russian Federation 124460 embeds and (P) Anna Pershina personalizes chips (S) Sergey Mikerin Smart Paynetwork S.A. 1002059 40-212-209-210 40-212-246-913 Personalizes, 94 Capt. Octav Cocarascu embosses, encodes, 011294 Bucharest and mail cards; Romania personalizes chips (P) Dana Isaila (S) Marius Cornea Soar 1001825 39055-649-3619 39055-649-3602 Personalizes, Via Duca di Calabria, 120/1 embosses, encodes, 50125 Firenze and mails cards; Italy personalizes chips (P) Emmanuele Messeri (S) Marco Monti ST Incard srl 1001540 39-08-23-630-111 39-08-23-630-247 Manufactures, Z.I. Marcianise Sud personalizes, 81025 Marcianise (CE) embosses, encodes, Italy and mails cards; (P) Dr. Giancarlo Scigliano embeds and (S) Dr. Franco Tolentino personalizes chips Swiss Post Solutions GmbH 1001557 49-951-94-26-0 49-951-94-26- Personalizes, Kronacher Strasse 61 34-93 embosses, encodes, 96052 Bamberg and mails cards; Germany embeds and (P) Bernd Reichert personalizes chips (S) Uwe M. Storc

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 43

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Systems & Cards SRL 1002346 39-2-972-331 39-2-97-61-749 Personalizes, Via Ferraris embosses, encodes, 20010 Marcallo con Casone (MI) and mails cards; Italy personalizes chips (P) Flaviano Modini (S) Antonio Donvito Tag Systems Finland Oy 1000875 358-10-2184-300 358-10-2184-301 Personalizes, Koivuhaantie 2-4 embosses, encodes, 01510 Vantaa and mails cards; Finland embeds and (P) Timo Rinne personalizes chips (S) Tero Veijonen Tag Systems S.A. 1001413 376-879-600 376-879-606 Manufactures cards; Ctra de la Cornella, nº 49 embeds chips AD 500 Andorra La Vella Principality of Andorra (P) Joaquim Miro (S) Assumpcio Majoral Tag Systems Smart Solutions, 1000966 34-91-886-31-27 34-91-830-86-33 Personalizes, S.L. embosses, encodes, Torres De La Alameda and mails cards; Madrid personalizes chips Spain 28813 (P) Miguel Lobo Abad (S) David Palacios Burgos TC&S Technologies Cards & 1002449 49-6102-816-800 49-6102-816-8015 Personalizes, Services GmbH embosses, encodes, Odenwaldstrasse 19 and mails cards; 63263 Neu-Isenburg embeds and Germany personalizes chips (P) Torsten Bruns (S) Georg Vaskor Thames Card Technology Ltd. 1001520 44-1268-775-555 44-1268-777-660 Manufactures, Thames House – Arterial Road personalizes, SS6 7UO Rayleigh, Essex embosses, encodes, United Kingdom and mails cards; (P) Leigh Garner embeds and (S) John Millard personalizes chips

2011 MasterCard. Proprietary. All rights reserved. 44 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Trub AG 1001126 41-62-832-00-00 41-62-832-01-31 Personalizes, Hintere Bahnhofstrasse 12 embosses, encodes, 5001 Aarau and mails cards; Switzerland embeds and (P) Jörg Kyburz personalizes chips (S) Michael Steiner Trub Baltic AS 1001573 372-6-132-911 372-6-132-920 Personalizes, Laki 5 embosses, encodes, Tallinn (Laki) 10621 and mails cards; Estonia personalizes chips (P) Andreas Lehmann (S) Liis Vilde Trub Cards AG 1001125 41-62-832-00-00 41-62-832-01-00 Manufactures cards Suhrenmattstrasse 23 5035 Unterentfelden Switzerland (P) Jörg Kyburz (S) Michael Steiner United Card Service 1001249 7-095-234-1829 7-095-234-1821 Personalizes, Smolnava, 22 embosses, encodes, 125445 Moscow and mails cards; Russian Federation personalizes chips (P) Vladimir Komlev (S) Evgeny Sysoev Winter AG 1001147 49-89-330-34102 49-89-330-341021 Personalizes, Edisonstraat 3 embosses, encodes, D-85716 and mails cards; Unterschleiβheim, Munich embeds and Germany personalizes chips (P) Stefan Lefnaer (S) Uwe Gail Znak, Ltd. 1002366 38-044-561-25-94 38-044-561-25-96 Manufactures cards; 64, Lenin St. embeds chips Kiev 02088 Ukraine (P) Igor Popovich (S) Elena Bandura

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 45

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided AMF Seguridad S.A. 90831 56-2-5974-600 56-2-2212-767 Manufactures, Av. Quilin 3700, Macul personalizes, Santiago de Chile Region embosses, encodes, etropolitana and mails cards Chile 7810895 (P) Rodrigo Zamudio Wehrhahn (S) Orlando Toro American Bank Note Ltda. 90665 55-11-4772-7812 55-11-4619-4295 Personalizes, Estrada do Ingai, 200 embosses, encodes, 06428-000 – Barueri – Sao Paulo and mails cards; Brazil embeds and (P) Daniel Impieri personalizes chips (S) Julio Cardassi Archivert S.A. 90890 56-2-478-5100 56-2-646-0470 Manufactures and Alberto Pepper 179 mails cards Región Metropolitana Santiago Chile 8641196 (P) Jaime Romero (S) Antonio Vial Asociados Undurraga 90871 56-2-382-2000 56-2-382-2100 Manufactures cards Impresores Ltda. Juan Miranda 1020 Quinta Normal, Santiago 8530203 Santiago Region Metropolitana Chile (P) Carlos Undurraga (S) Nicolas Orrego Bancard, S.A. 1863 595-21-416-1000 595-21-416-1179 Personalizes, Avda. Brasilia 765 C/Siria embosses, encodes, Republica de Siria Y Fray Luis de and mails cards Leon Asuncion Paraguay 01434 (P) Josefina Cabral (S) Daniel Ruiz

2011 MasterCard. Proprietary. All rights reserved. 46 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Editora Alterosa Ltda. 90667 55-31-3073-2300 55-31-3073-2399 Manufactures, Av. Tom Jobim, 2700 Cidade personalizes, Industrial embosses, encodes, 32210-190 – Contagem Minas and mails cards; Minas Gerais embeds and Brazil personalizes chips (P) Carlos Alberto Rangel Proenca (S) Alexandre Araujo Rezende FIS Card Processing Services 90678 56-2-230-1642/ 56-2-230-1620 Personalizes, S.A. 1600 embosses, encodes, Marchant Pereira 10, 18–19th Floor and mails cards Providencia, Santiago 7500024 Chile (P) Patricia Arrau Krause (S) Mandana Behirad GD Burti S/A 90671 55-11-4646-660 55-11-4646-630 Manufactures, Estrada de Santa Isabel, 7235 personalizes, 08586-260 Itaquaquecetuba embosses, encodes, Sao Paulo and mails cards; Brazil embeds and (P) Sergio Cabette personalizes chips (S) Andre Martins Gemalto Mexico S.A. of C.V. 90681 525-55-5445-2900 525-59-5445-2900 Manufactures, Trigo No. 150, Col. Granjas personalizes, Esmeralda embosses, encodes, Mexico D.F. C.P. 09810 and mails cards; (P) Emilio Espinosa embeds and (S) Othon Gonzalez Orendain personalizes chips Gemalto do Brazil Cartoes e 90679 55-41-2169-8400 55-41-2169-8424 Manufactures cards; Terminais Ltda. embeds chips Rod. Dep. Joao Leopoldo Jacomel, 13.102 83323-410 – Pinhais – Parana Brazil (P) Paulo Moreira (S) Jose Luiz Pellegrini

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 47

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Gemalto do Brazil Cartoes e 90824 55-11-3787-8100 55-41-2169-8424 Personalizes, Terminais Ltda. embosses, encodes, Rua Bahia, 277 and mails cards; Barueri personalizes chips Sao Paulo 06465 – 110 Brazil (P) Jose Kayo (S) Sandro Mitsuhashi General Plastic Corp S.A. 90840 54-11-4943-4878 54-11-4943-4878 Manufactures cards Los Patos 2526 Capital Federal Buenos Aires Argentina 1283 (P) Eduardo Voloschin (S) Sergio Jose Giesecke y Devrient de Mexico, 90673 52-555-5039-9900 52-555-3674-450 Manufactures, S.A. de C.V. personalizes, Av. Santa Rosa No. 11, Col. La embosses, encodes, Joya Ixtacala, Tlalneplantla de and mails cards; Baz CP - 54160 embeds and Estado de Mexico personalizes chips Mexico (P) Rafael Oscos (S) Oscar Marquez Hogier Gartner and Cia S/A 90674 57-1-437-8484 57-1-437-8485 Manufactures, Carrera 65 No. 80-16 personalizes, Bogota, Cundinamarca embosses, encodes, Colombia and mails cards; (P) Alvaro Gartner Valencia embeds and (S) Carlos Gartner personalizes chips Informatica y 90885 58-212-954-1004 58-212-951-3047 Personalizes, Telecomunicaciones embosses, and Av. Principal de Boleíta Norte c/ encodes cards; alle Moraima personalizes chips Edificio DRAZA Piso 3 1012 Caracas Venezuela (P) Claret Ortiz (S) Margarita Rodriguez

2011 MasterCard. Proprietary. All rights reserved. 48 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Intelcav Cartoes Ltda. 90787 55-11-2858-4600 55-11-4688-2727 Personalizes, Alameda Caiapos, 493 embosses, encodes, 06460-110 – Barueri – Sao Paulo and mails cards; Brazil embeds and (P) Marten Peter personalizes chips (S) Agnaldo Goncalves Intelcav Cartoes Ltda. 90675 55-54-3341-4100 55-54-3341-4100 Manufactures cards Rua Irmao Gabriel Leao,1102 99900-000 - Getulio Vargas Rio Grande do Sul Brazil (P) Jorge Tamajusuku (S) Cleder Benvenutti MyCard S.A. de C.V. 90870 52-414-273-3400 52-414-273-3400 Manufactures, Boutros #1 x 105 personalizes, (El Sauz) Tequisquiapan embosses, encodes, Tequisquiapan Queretaro and mails cards Mexico 76796 (P) Liliana Garcia Aguirre (S) Alejandro Vázquez Oberthur Technologies De 90857 52-55-5980-2147 52-55-5603-7421 Personalizes, Mexico S. DE R.L. DE C.V. embosses, encodes, Anahuac 150B, Col. El Mirador and mails cards; C.P. 04950 personalizes chips Mexico Distrito Federal Mexico (P) Monica Morales (S) Leonardo Chong de los Palos Oberthur Technologies Ltda. 90794 571-691-4100 571-691-4106 Personalizes, Diagonal 19D – No. 36-04 embosses, encodes, Barrio Cundinamarca and mails cards; 111611 Bogota DC personalizes chips Colombia (P) Ian Walmsley (S) Adriana Hernandez

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 49

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Oberthur Technologies – 90792 55-11-2147-0900 55-11-2147-0922 Manufactures, Sistemas de Cartões Ltda. personalizes, Rua Soluçôes do Lar Cotia, Sao Paulo embosses, encodes, Brazil and mails cards; (P) Orlando Berne embeds and (S) Xavier Libret personalizes chips Operadora de Tarjetas de 90723 56-2-420-8000 56-2-420-8099 Personalizes, Crédito NEXUS S.A. embosses, encodes, Mac-Iver 440, Piso 15 and mails cards; Santiago personalizes chips Chile 8320123 (P) Christian Cordoba (S) Nicolas Ortiz Castillo Procesos de Medios de Pago 7963 51-1-2131600 51-1-2131604 Manufactures, S.A. personalizes, Porta 111 - 6th floor embosses and Miraflores encodes, Lima Peru L18 (P) Mario Bibolotti (S) Mariella Alcalde Sagem Orga do Brasil S/A 90666 55-12-2125-6546 55-12-2125-6535 Manufactures, (dba Morpho) personalizes, Av. Independencia, 3451 embosses, encodes, 12032-000 – Taubate – Sao Paulo and mails cards; Brazil embeds and (P) Eliel Marcos R. Fonseca personalizes chips (S) Richard Marques Thomas Greg & Sons Grafica e 90829 55-11-4176-8800 55-11-4176-8952 Manufactures, Servicos Ltda. personalizes, Rua Gal. Bertoldo Klinger, embosses, encodes, 69/89/131 and mails cards; Sao Bernardo Do Campo embeds and Sao Paulo personalizes chips 09688-000 Brazil (P) Cleber Rodrigo Costa (S) Ivo Giaretton

2011 MasterCard. Proprietary. All rights reserved. 50 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Thomas Greg & Sons de 90779 58-25-1266-3436 58-25-1266-3436 Manufactures cards; Venezuela, C.A. EMA embeds chips Avenida Florencio Jimenez c/calle 15 de Pueblo Nuevo Nro. 15-26 Barquisimeto Lara 3002 Venezuela (P) Litzey Abreu de Jimenez (S) Moises Diaz Total System Services de 90683 52-722-279-1500 52-722-279-1586 Personalizes, Mexico, S.A. de C.V. embosses, encodes, Parque Industrial Toluca 2000 and mails cards; Av. Central Manzana 2 Lote II personalizes chips Toluca, Edo. Mexico 50200 (P) Ernesto Berber Nava (S) Ignacio Solis Alfaro Valid Soluciones 90684 54-11-4912-4100 54-11-4912-4101 Manufactures, Calle Jose C. Paz 3640 personalizes, C1437IQP Capital Federal embosses, encodes, Buenos Aires and mails cards Argentina (P) Daniel Futej (S) Pablo Heller Valid Solucoes E Servicos De 90791 55-11-3412-6699 55-15-3412-6341 Manufactures, Seguranca Em Meios De personalizes, Pagamento E Identificacao S.A. embosses, encodes, Rua Laura Maiello Kook, 511 and mails cards 18052-445 – Sorocaba – Sao Paulo Brazil (P) Higrio Carvalho (S) Juarez Costa Valores Plasticar S.A.S. 90668 572-661-81-61 57-2-651-0561 Personalizes, Avenida El Dorado No. 90–10 embosses, encodes, Bogota, Cundinamarca and mails cards; Colombia personalizes chips (P) Carlos Narvaez (S) Mario Ordonez

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 51

Latin America and the Caribbean Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Valores Plasticar S.A.S. 90669 572-661-81-61 57-2-651-0561 Manufactures, Calle 29 Norte No. 6AN–40 personalizes, Cali, Valle embosses, encodes, Colombia and mails cards; (P) Carlos Narvaez embeds and (S) Mario Ordoñez personalizes chips Valores Plasticar S.A.S. 90670 572-661-81-61 57-2-651-0561 Personalizes, Cra. 42 Autopista Sur No. 85A–95 embosses, encodes, Autopista Itagui and mails cards; Medellin personalizes chips Colombia (P) Carlos Narvaez (S) Mario Ordonez

2011 MasterCard. Proprietary. All rights reserved. 52 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Abaker Printing Co. 90803 966-1265-1000 966-1265-2229 Manufactures cards; Zone 3, New Industrial Area embeds chips Post Box 1 11383 Riyadh Kingdom of Saudi Arabia (P) Nasser Al Jarboa (S) Geevarghese Daniel Advanced Smart Card Co. 90815 202-3832-4957 202-3832-1225 Manufactures cards; Lot 13/C, Second Industrial Zone embeds chips 6 of October City Giza 12451 Egypt (P) Dr. Hany Mohamed Assal (S) Mohamed Desouky Arab Financial Services 2629 973-1729-0333 973-1729-1323 Personalizes, Company B.S.C. embosses, encodes, AFS Tower and mails cards; Tarfa Bin Al Abd Avenue personalizes chips Bldg. 155, Road 2004 Al Hoora 320 – Manama Kingdom of Bahrain (P) Mansour Djebli (S) Adnan Almaskati Berkeley Cupola Nigeria Ltd. 90886 234-806-092-6648 234-1-2719489 Personalizes, 6B Akwuzu Street embosses, encodes, Lekki Phase 1 and mails cards; Lekki, Lagos personalizes chips Nigeria (P) Tunde Kilaso (S) Adebola Adeola Cleopatra Silicon Valley 90833 20-2-2735-1577 20-2-2735-1577 Manufactures cards; Area A1A Third Industrial Area embeds chips 10th of Ramadan Egypt 44629 (P) Mohammed Halawa (S) Safaa Abdelwahed Behairy

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 53

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided CMS Info Systems Pvt. Ltd. 90788 91-22-30-888-881 91-22-30-888-856 Personalizes, Plot No. – 3, Sector – 19E embosses, encodes, Vashi and mails cards; New Mumbai, Maharahtra 400705 personalizes chips India (P) Mokam Singh (S) Manoj Yadav Cupola Plastics Cards Limited 90687 971-4-8069-400 971-4-8814-906 Manufactures; PO Box 17349, Plot No. MO-0142 personalizes, Jebel Ali Free Zone embosses, encodes, Dubai and mails cards; United Arab Emirates embeds and (P) Muhammad Abid personalizes chips (S) Iftikhar Kathawala CV Mekar Abadi Utama 90865 62-815-776-3333 62-247-601-617 Manufactures cards 8 , Gunung Sawo 50237 Semarang Jawa Tengah Indonesia (P) Bintoro Hadiprodjo (S) Wijono Pranoto De la Rue Currency and 90810 254-20-856-0086 254-20-856-0787 Personalizes, Security Print Limited embosses, and Ruaraka, Off Thika Road encodes cards Nordin Road PO Box 38622-00623 Nairobi Kenya (P) Ian Richter (S) David Hepple Dz Card (India) Pvt. Ltd. 90798 91-12-4412-8888 91-12-4412-8899 Personalizes, Plot No. 23-24, EHTP embosses, encodes, Sector – 34 and mails cards; Gurgaon–Haryana personalizes chips 122001 – India (P) Shailesh Patel (S) Harry Gundelach

2011 MasterCard. Proprietary. All rights reserved. 54 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Electronic Document Center 90813 971-4-3340340 971-4-3340040 Personalizes, L.L.C. embosses, encodes, Karama Central Post Office Bldg. and mail cards, P.O. Box 50000, personalizes chips Dubai 50000 United Arab Emirates (P) Abdulla M. Alashram (S) Anwar Yousuf Electronic Payplus Limited 90883 234-1-271-0960-2 234-1-271-0962 Personalizes, KM 34, Lekki- Epe Expressway, embosses, encodes, Lakowe and mail cards; Ibeju-Lekki personalizes chips Lagos Nigeria 234-01 (P) Bayo Adeokun (S) Leke Orekoya Emirates National Factory for 90760 971-6-5385388 971-6-5386446 Manufactures, Plastic Ind. L.L.C. personalizes, Industrial Area – 13 embosses, encodes, PO Box 23874 and mails cards; Sharjah embeds and United Arab Emirates personalizes chips (P) Samir Bayerli (S) Muthu Ganesan Finatech 90569 212-559-2681 212-559-2694 Personalizes, N 9, lot 92 embosses, encodes, Zone Industrielle Taoufik and mails cards; Bouskoura personalizes chips Casablanca Morocco (P) Ali Naguib (S) Abdelouahed Megoussi Gemalto (Pty) Ltd. 90690 27-11-458-0000 27-11-608-0952 Manufactures, 39 Galaxy Avenue personalizes, Linbro Business Park embosses, encodes, Johannesburg and mails cards; South Africa 2054 embeds and (P) Graham Adams personalizes chips (S) Francois Smidt

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 55

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Giesecke & Devrient India 90892 91-124-4168500 91-124-4168511 Personalizes, Pvt. Ltd. embosses, encodes, Pacifica Tech Park, No. 23 and mails cards; Rajiv Gandhi Salai (OMR) Navalur personalizes chips Chennai Tamilnadu India 603103 (P) Colin Mayne (S) Gurpal Singh Global Payment Services 90854 973-1720-1666 973-1720-1677 Personalizes, Road 383, Block 316, Building embosses, encodes, 128 and mails cards; Manama personalizes chips Kingdom of Bahrain (P) Ali Arab (S) Ebrahim Amin Gulf Printing Products 90688 966-1-265-1123 or 966-1-265-1323 Manufactures cards Manufacturers Factory 66-1-265-1311 (GEPCOM) PO Box 297 2nd Industrial City Riyadh 11383 Kingdom of Saudi Arabia (P) Ahmed Taleb Abed (S) Abdullah Abed Inkript Cards sal 90834 96-1-580-8081 96-1-580-8081 Manufactures cards; Bldg. 7, Str. 12, Sector 1 embeds chips Bshamoun Industrial Zone Beirut Lebanon (P) Joanna Maouad (S) Hadi Abou Rahhal International Smart Card 90842 966-1-489-2700 966-1-489-3482 Personalizes, Factory Company ext. 2 embosses, encodes, Building No.84/45 and mails cards; King Fahad Rd. Al-Aqeeq embeds and Riyadh 13515-3858 personalizes chips Kingdom of Saudi Arabia (P) Bassem Cheaib (S) Amr Salah

2011 MasterCard. Proprietary. All rights reserved. 56 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Jeraisy Group Cardtec Factory 90689 966-1-265-0080 966-1-265-2129 Manufactures, Industrial District 2 or 66-1-265-0186 personalizes, PO Box 477 embosses, encodes, Riyadh 11383 and mails cards; Kingdom of Saudi Arabia embeds and (P) Khalil Kassas personalizes chips (S) Placido A. Mora, Jr. Madras Security Printers 90837 91-44-2591-6086 91-44-2591-3385 Manufactures cards; 72, Thiruvottiyur High Road embeds chips Tamil Nadu Chennai India 600 081 (P) P. Rajah Sunder Singh (S) P. Sam Prasad Masria Card 90790 202-2-2914179 202-2-2904562 Manufactures, Aziz Sedqy Compound, Dawar Al personalizes, Ashir, Third Industrial Zone embosses, and 10th of Ramadan Industrial City encodes cards; Cairo 11341 embeds and Egypt personalizes chips (P) Rana Nafie (S) Adrian Lane MCT Cards & Technology 90851 91-820-257-4822 91-820-257-4827 Manufactures, Pvt. Ltd. personalizes, Property on Plot No.22, Survey embosses, encodes, o.433/1, Shivalli Village and mails cards; Industrial Area embeds and Karnataka State personalizes chips Manipal 576 104 India (P) Rajesh Shet (S) Alok Singh MCT Cards & Technology 90852 91-22-276-26061 91-820-257-4827 Personalizes, Pvt. Ltd. embosses, encodes, D197 D.T.C Industrial Area and mails cards MIDC Turbhe Maharashtra State Navi Mumbai 400 705 India (P) Rajesh Shet (S) Alok Singh

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 57

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Obernet International LLC 3676 971-4405-3281 971-4349-5377 Personalizes, Al Wasel Road Jumeirah embosses, encodes, Dubai 4487 and mails cards; United Arab Emirates personalizes chips (P) Muhammad Arsalan (S) Mehmet Ascioglu Oberthur Technologies India 90812 91-120-3911-700 91-120-3911-710 Personalizes, Private Limited embosses, encodes, A-201, Sector – 63 and mails cards; Noida – 201303 personalizes chips Gautam Budh Nagar India (P) Mark Garvie (S) Pankaj Gupta Oberthur Technologies South 90686 27-11-622-0400 27-11-622-5874 Manufactures, Africa (Pty) Ltd. personalizes, 10 Cleveland Road embosses, encodes, PO Box 2022 and mails cards; Cleveland embeds and South Africa 2022 personalizes chips (P) David Ramalapa (S) Jerome Rademeyer Payment Exchange 90882 230-465-1001 230-467-1717 Personalizes, International (a.k.a. Payment embosses, encodes, Express Ltd.) (PEX) and mails cards; 45 Cyber City, c/o MINDSPACE personalizes chips Ebene Mauritius (P) Umesh Keetharuth (S) Chitra Gunnoo Plastic Card’s Manufacturing 90888 966-2-6080118 966-2-6080117 Manufactures cards; Company Ltd. embeds chips. Street 415, Jeddah Industrial City Phase 4 P.O. Box :2824 Jeddah, Western 21461 Kingdom of Saudi Arabia

2011 MasterCard. Proprietary. All rights reserved. 58 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided PT Gemalto Smart Cards 90861 62-21-797-4978 62-21-797-5416 Personalizes, Suit 105E & 106E, Building E embosses, encodes, Mulia Business Park and mails cards; Jl. M.T. Haryono Kav 58-60 personalizes chips Jakarta 12780 Indonesia (P) Fikri Firdaus (S) Akhmad Fadlilah Helmy Salim PT Oberthur Technologies 90816 62-21-5591-3433 62-21-5591-3432 Personalizes, Indonesia embosses, encodes, Soewarna Annex Building, and mails cards; Soewarna Business Park, Block G personalizes chips Lot 3, Soekarno Hatta International Airport Jakarta 19110 Indonesia (P) Winarja Wahyudi (S) Frans Mesona Hulu PT Wahyu Kartumasindo 90869 62-21-8911-7872 62-21-8911-7873 Manufactures cards; International embeds chips Jalan.Beringin Blok F-12, No.3 Delta Silicon II Lippo Cikarang (Jakarta) 17550 West Java Indonesia (P) Tirtahardja Kartawinatta (S) Louis W. Janto Secure ID Limited 90846 234-1-471-9891 234-1-4522-501 Personalizes, Plot K9 Apapa embosses, encodes, Oshodi Express Way and mails cards; Iyana – Isolo embeds and 234 Lagos personalizes chips Nigeria (P) Kofo Akinkugbe (S) Linda Mkpuluma

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 59

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided United Plastic Cards Co. – 90799 966-3-812-3496 966-3-812-3491 Manufactures, UniCard personalizes, Makkah Street embosses, encodes, PO Box 4735 and mails cards; Second Industrial City embeds and Damman Al-Khobar 31952 personalizes chips Kingdom of Saudi Arabia (P) Adel Al-Majhad (S) Sami Nassar Universal Cards Company 90796 966-1265-5626 966-1265-5477 Personalizes, 2nd Industrial City embosses, encodes, PO Box 297 and mails cards; Riyadh 11383 embeds and Kingdom of Saudi Arabia personalizes chips (P) Ahmed Taleb Abed (S) Abdullah Abed Universal Payment Services 90822 965-2247-5686 965-2475-687 Personalizes, 4th Ring Road, Block 1 embosses, encodes, Stars Complex, Al Ray and mails cards; Kuwait 13150 personalizes chips (P) Yasser Muzaffar (S) Babu Varughese Venture Infotek Global 90763 91-22-4042-4007 91-22-4042-4400 Personalizes, Private Ltd. embosses, encodes, DEI Tech Centre, Cross B Road and mails cards; JB Nagar MIDC, Andheri (East) personalizes chips Mumbai 400059 India (P) P. Ravindra (S) Yogesh Nakhwa Venture Infotek Global 90877 91-22-4042-4000 91-22-4042-4401 Personalizes, Private Ltd. embosses, encodes, Plot No 38-A1, Doddanekkundi and mails cards; Indl Area II Phase, Mahadevapura personalizes chips Bengaluru (Bangalore) India 560 048 (P) P. Ravindra (S) Yogesh Nakhwa

2011 MasterCard. Proprietary. All rights reserved. 60 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

South Asia/Middle East/Africa Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Versatile Card Technology 90548 91-44-2478-1551 91-44-2478-1571 Manufactures, Private Ltd. personalizes, AC 21, IV Main Road embosses, encodes, SIDCO Industrial Estate and mails cards; Thirumudivakkam, Chennai embeds chips Tamil Nadu India 600044 (P) Pethi T. Sarguru (S) Push Venkitasamy Xantium Integrated Solutions 90823 27-11-472-9330 27-11-865-131089 Personalizes, (Pty) Ltd. embosses, encodes, 22 Yaron Avenue, Lea Glen and mails cards; Florida, Roodepoort personalizes chips Johannesburg 1710, Gauteng South Africa (P) Graham Beck (S) Anthony Roux

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 61

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided ABnote USA 90835 1-617-325-9600 1-617-327-1235 Manufactures cards 255 Rivermoor Street Boston, MA 02132 USA (P) Matthew O’Connell (S) Lynne McDevitt Arroweye Solutions Inc. 90866 1-702-938-6720 1-702-938-6731 Manufactures, 7485 Commercial Way, Suite 100 personalizes, Henderson, NV 89011 embosses, encodes, USA and mails cards (P) Robert McCormick (S) Brian Huse CompoSecure, LLC 90868 1-908-518-0500 1-908-518-0569 Manufactures cards 269 Sheffield Street, Unit #3 Mountainside, NJ 07092 USA (P) Michele Logan (S) Mary Levitsky CPI Card Group – Colorado, 90695 1-303-973-9311 1-303-973-8420 Manufactures, Inc. personalizes, 10368 W. Centennial Road embosses, encodes, Littleton, CO 80127 and mails cards; USA embeds and (P) Mary Martinez personalizes chips (S) Tim Enright CPI Card Group – Indiana, Inc. 90720 1-260-424-4920 1-260-969-0256 Manufactures cards 613 High Street PO Box 10748 Fort Wayne, IN 46808-3440 USA (P) David Rambo (S) Andy Sappenfield CPI Card Group – Minnesota, 90807 1-651-631-8282 1-651-636-6163 Manufactures, Inc. personalizes, 1975 County Rd. B2 embosses, and Roseville, MN 55113 encodes cards USA (P) Stacy Jensen (S) Paul Boge

2011 MasterCard. Proprietary. All rights reserved. 62 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided EFT Source, Inc. 90696 1-615-834-0123 1-615-834-0192 Personalizes, 556 Metroplex Drive embosses, encodes, Nashville, TN 37211 and mails cards; USA personalizes chips (P) William S. Dinker (S) Andrew Klein Fidelity National Information 90704 1-630-378-6600 1-630-378-6720 Personalizes, Services embosses, encodes, 1165 Arbor Drive and mails cards; Romeoville, IL 60446 personalizes chips USA (P) Daniel Mankowski (S) Robert Stoll Fidelity National Information 90694 1-727-227-2380 1-727-227-2781 Personalizes, Services, Inc. (FIS) embosses, encodes, 11601 Roosevelt Boulevard, TA58 and mails cards St. Petersburg, FL 33716 USA (P) Dan Mankowski (S) Robert Stoll Fidelity National Information 90841 1-630-378-6000 1-630-378-6720 Personalizes, Services, Inc. (FIS) embosses, encodes, 8151 Interchange Parkway and mails cards San Antonio, TX 78218 USA (P) Dan Mankowski (S) Robert Stoll Fifth Third Bank 1340 1-513-579-6032 1-513-534-3577 Personalizes, 5001 Kingsley Drive embosses, encodes, Cincinnati, OH 45227 and mails cards USA (P) Jill Fallon (S) Christy Lutterbie First Data Resources 90698 1-757-413-7719 1-757-413-7851 Personalizes, 7007 N. 97th Circle embosses, encodes, Omaha, NE 68122 and mails cards; USA personalizes chips (P) Bill Larson (S) Michael Marushia

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 63

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided First Data Resources 90699 1-757-413-7719 1-757-413-7851 Personalizes, 1449 Kristina Way embosses, encodes, Cheasapeake, VA 68122 and mails cards; USA personalizes chips (P) Bill Larson (S) Michael Marushia Fiserv Output Solutions 90710 1-651-846-3600 1-651-846-3850 Personalizes, St. Paul embosses, encodes, 1880 Park View Drive and mails cards; Suite 100 personalizes chips Shoreview, MN 55126-2910 USA (P) John Kassen (S) Brett Humphrey Fiserv Solutions, Inc. 90759 1-615-238-8000 1-615-238-8103 Manufactures cards 575 Brick Church Park Drive Nashville, TN 37207 USA (P) Robert Stonehill (S) Steve Knapp Fiserv Solutions, Inc. 90711 1-317-576-6700 1-317-576-6730 Personalizes, 2307 Directors Row embosses, encodes, Indianapolis, IN 46241 and mails cards; USA personalizes chips (P) Jerry Carson (S) Jimmy Gregory Gemalto, Inc. 90701 1-215-390-2000 1-215-390-2319 Manufactures cards; 101 Park Drive embeds chips Montgomeryville, PA 18936 USA (P) Larry Lippold (S) Scott Dollahon Giesecke and Devrient 90702 1-330-425-1515 1-330-425-9105 Manufactures cards; America, Inc. embeds chips 2020 Enterprise Parkway Twinsburg, OH 44087-2210 USA (P) David Gurganus (S) Nancy Langshaw

2011 MasterCard. Proprietary. All rights reserved. 64 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Global Card Services Inc. 90703 1-630-960-3337 1-630-960-3618 Personalizes, 1213 Butterfield Road embosses, encodes, Downers Grove, IL 60515 and mails cards; USA personalizes chips (P) Yogan Ponnusamy (S) Douglas Henk Integrated Printing Solutions, 90876 1-303-221-1110 1-303-221-2220 Manufactures, Inc. personalizes, 7025 South Fulton Street, Suite 100 embosses, encodes, Centennial, CO 80112 and mails cards USA (P) Scott Bennett (S) John Benjamin MT&L Card Products and 90821 1-615-254-9471 1-615-248-6816 Manufactures, Fulfillment Services personalizes, 2911 Kraft Drive Nashville, TN 37204 embosses, and USA encodes cards (P) Michael Hale (S) Adam Wittekind Oberthur Technologies of 90705 1-610-524-2410 1-610-524-2412 Manufactures cards; America Corp. embeds chips Oaklands Corporate Center 523 James Hance Court Exton, PA 19341 USA (P) Albert Muccilli (S) Mike Murphy Oberthur Technologies of 90706 1-703-263-0100 1-703-263-7134 Personalizes, America Corp. ext. 205 embosses, encodes, 4250 Pleasant Valley Road and mails cards; Chantilly, VA 20151 personalizes chips USA (P) Ken Abner (S) Mike Murphy Oberthur Technologies of 90708 1-310-884-7997 1-310-884-7904 Personalizes, America Corp. embosses, encodes, 3150 East Ana Street and mails cards; Rancho Dominguez, CA personalizes chips 90221-5678 USA (P) James Peterson (S) Mike Murphy

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 65

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Omni Prepaid, LLC 90849 1-877-746-6664 1-412-539-1042 Personalizes, 495 Mansfield Avenue embosses, encodes, Pittsburgh, PA 15205 and mails cards USA (P) Chris Billiar (S) Leigh Forejt Perfect Plastic Printing Corp. 90709 1-630-584-1600 1-630-584-0648 Manufactures, mails, 345 Kautz Road encodes, and St. Charles, IL 60174 embosses cards; USA embeds chips (P) Carl Velenti (S) Dave Maresca Qualteq, Inc. 90712 1-908-668-0999 1-908-668-7976 Manufactures, 800 Montrose Avenue, CN 1037 ext. 266 personalizes, South Plainfield, NJ 07080-1027 embosses, encodes, USA and mails cards (P) Merrill Martin (S) Frank Bottazzi Shoreline Business Forms, Inc. 90716 1-401-885-9330 1-401-885-6410 Personalizes, 275 Circuit Drive embosses, encodes, North Kingstown, RI 02852 and mails cards USA (P & S) Patricia Angell Source One Direct 90782 1-678-420-5000 1-678-420-5011 Personalizes, 1800 B Northeast Expressway embosses, encodes, Atlanta, GA 30329 and mails cards; USA personalizes chips (P) Jim Beatty (S) John Scarborough Springbok Services, Inc. 90804 1-303-397-4257 1-303-397-4233 Personalizes, 345 Inverness Drive S. embosses, encodes Buiding A, Suite 130 and mails cards Englewood, CO 80112 USA (P) Sherry Chesmore (S) Holly Jacob

2011 MasterCard. Proprietary. All rights reserved. 66 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided TecniCard Inc. 90717 1-305-442-0018 1-305-442-1150 Personalizes, 3191 Coral Way embosses, and Suite 800 encodes cards Miami, FL 33145 USA (P) Carlos Lopez (S) Oscar Galvez Total System Services Inc. 90718 1-706-649-4940 1-706-649-3506 Manufactures, 7101 Stonemill Drive B200 personalizes, Columbus, GA 31909 embosses, encodes, USA and mails cards; (P) Will Allred personalizes chips (S) Todd Brandenburg Versatile Card Technology, 90719 1-630-852-5600 1-630-852-5817 Manufactures cards; Inc. embeds chips 5200 Thatcher Road Downers Grove, IL 60515 USA (P) Nikola Kirov (S) Push Venkitasamy Western Graphics & Data 90805 1-503-222-1731 1-503-222-1731 Personalizes, 11603 SE Foster Road encodes, and mails Portland, OR 97266 cards USA (P) Scott Mitton (S) Kevin Christensen

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 67

Vendor Data Preparation Facilities

MasterCard has certified the following vendors for the services indicated. The key contacts are listed as follows: • (P) = Primary contact • (S) = Security contact

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Dai Nippon Printing Co. Ltd. 90503 81-48-444-1111 81-48-420-1119 Prepares data Warabi Plant: 4-5-1, Nishiki-Cho Telex: J22737 Warabi-shi, Saitama-ken DNPRINT Japan 335-0005 (P) Yuji Egawa (S) Masayuki Iijima Toppan Communication 90863 81-48-482-4906 81-48-478-7327 Prepares data Products Co., Ltd. Honjo Data Receiving Center 32-5, Honjo 1-chome Sumida-ku Tokyo 130-0004 Japan (P) Hiroaki Tomatsu (S) Masahiro Ishizaki

2011 MasterCard. Proprietary. All rights reserved. 68 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided First Data International 1000578 44-1268-296-734 44-1268-296-348 Prepares data First Data House Christopher Martin Road Basildon SS14 9AA Essex United Kingdom (P) Paul Hickson (S) Steve Madley Provus Bilisim Hizmetleri A.S. 1001761 90-212-329-06-01 90-212-329-06-99 Prepares data Maslak Yoly 5 Ayazaga Mah Sisli 34396 Istanbul Turkey (P) Tunc Dasar (S) Hasan Peksen

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 69

Vendor Mobile Provisioning

MasterCard has certified the following vendors for the services indicated. The key contacts are listed as follows: • (P) = Primary contact • (S) = Security contact

Asia/Pacific Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Cassis Services Sdn. Bhd. 90801 603-2300-2801 603-2300-1371 Mobile provisioning Suite P5-01, Fifth Floor Podium Block, Menara Keck Seng 203 Jalan Bukit Bintang Kuala Lumpur 55100 Malaysia (P) Christina Lai Hui Fuen (S) Chua Tian Yue Gemalto Taiwan Ltd. 90525 88-62-2240-7890 88-62-2243-8233 Mobile provisioning Basement 1, No. 192 ext. 22 Lien Chien Road Chung Ho, Taipei County 235 Taiwan (P) Alex Huang (S) Ray Chien Telecommunication 90873 886-3-424-5334 886-3-424-4129 Mobile provisioning Laboratories Chunghwa Telecom Co., Ltd. 12, Lane 551, Min-Tsu Road Sec. 5 Yang-Mei 32601 Taoyuan County Taiwan (P) Chien-Ming Li (S) Jian-Ming Lee

2011 MasterCard. Proprietary. All rights reserved. 70 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided Oberthur Technologies S.A. 1001599 33-3-80-53-21-00 33-3-80-53-21-10 Mobile provisioning 14, Rue des Cortots Centre Industriel des Cortots Parc d’Activites de Cortots 21121 Fontaine-les-Dijon France (P) Jean Christophe Baille (S) Yves Rouyez Venyon GmbH 1000959 49-89-452-133-412 49-89-452-133-400 Mobile provisioning Prinzregentenstr. 159 c/o Giesecke & Devrient GmbH 81677 Munich Germany (P) Jukka Yliuntinen (S) Oliver Pannke

U.S. Region Company Name and Address/ MCBS Billing Phone Fax Services P & S Contact Code Number Number Provided SK C&C USA, Inc. 90895 1-678-892-6630 1-770-745-9232 Mobile provisioning 375 Riverside Parkway, S150 Lithia Springs, GA 30122 USA (P) Steve Bacastow (S) Kevin Zhu

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 71

Vendors by Country

The following pages contain a listing of vendors grouped by region, and sorted by country. These tables provide only the names of certified vendors in specific countries. For detailed information about each vendor, refer to the previous section.

Asia/Pacific Region Country Vendor Name Australia Abnote (Australasia) Pty. Ltd. Australia Giesecke & Devrient Australasia Pty Ltd. Australia Oberthur Technologies Australia Pty Ltd. Australia Placard Pty. Ltd. China Eastcom Peace Smart Card Co. Ltd. China Giesecke & Devrient (China) Information Technologies Co., Ltd. China Goldpac Secur-Card Ltd. China Guangdong Chutian Dragon Smart Card Co., Ltd. China Hengbao Co. Ltd. China Huangshi G&D Wanda Security Card Ltd. China Jiangxi G&D Chip Card Systems Co. Ltd. China Jing King Weder Technology Company Ltd. (Plant) China Oberthur Card Systems Science and Technology (Shenzhen) Co., Ltd. China Qingdao Rongjia Security Printing Co., Ltd. China Shanghai Oriental Magnetic Card Engineering Co. Ltd. China Shanghai Pu Jiang Smart Card Systems Co. Ltd. China ShenZhen Einolda Smart Card Manufacturing Co. Ltd. China Shenzhen Takcere Credit Card Manufacturing Ltd. China Tianjin Global Magnetic Card Co. Ltd. China Toppan Printing Co. Ltd. China Wuhan Tianyu Information Industry Co., Ltd. China Zhongchao Credit Card Industry Development Co. Ltd. Hong Kong Card Alliance Company Ltd. Hong Kong Jing King Technology Holdings Ltd. (Office)

2011 MasterCard. Proprietary. All rights reserved. 72 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Asia/Pacific Region Country Vendor Name Hong Kong Toppan Forms Card Technologies Ltd. Japan Dai Nippon Printing Co. Ltd. Japan Kyodo Printing Co. Ltd. Japan Maxell Seiki Ltd. Japan Natec Incorporated Japan Nihonboueki Printing Co., Ltd. Japan Shoei Printing Co. Ltd. Japan Toppan Communication Products Co. Ltd. Japan Toppan Forms Tokai Co. Ltd. Japan UFIT Co., Ltd. Korea Biosmart Co., Ltd. Korea GK Power Korea IC Korea Co., Ltd. Korea Innerex Co., Ltd. Korea JDC Tech Co., Ltd. Korea KONA Media Co. Ltd. Korea Oberthur Technologies—Korea Inc. Korea YBL Co. Ltd. Malaysia Asdion Data Services Sdn. Bhd. Malaysia Asia Pacific Card and System Sdn. Bhd. Malaysia Asia Smart Cards Centre (Malaysia) Sdn. Bhd. Malaysia Cassis Services Sdn. Bhd. Malaysia Data Sonic Corporation Sdn. Bhd. Malaysia Dz Card (Malaysia) Sdn. Bhd. Malaysia Gemalto Sdn. Bhd. Malaysia IRIS Corporation Berhad New Zealand Abnote NZ Ltd. New Zealand Eyede NZ LP Philippines Dz Card (Philippines) Inc.

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 73

Asia/Pacific Region Country Vendor Name Philippines Oberthur Technologies (Philippines) Inc. Singapore Gemalto Pte Ltd. Singapore Network for Electronic Transfers (Singapore) Pte Ltd. South Korea Omnisystem Co., Ltd. Taiwan Beautiful Card Corporation Taiwan Foong Tone Technology Co., Ltd. Taiwan Gemalto Taiwan Ltd. Taiwan Taiwan Name Plate Co. Ltd. Taiwan TECO Smart Technologies Co. Ltd. Thailand Chan Wanich Security Printing Company Ltd. Thailand Data Products Toppan Forms Ltd. Thailand Dz Card (Thailand) Ltd. Thailand Thai British Security Printing Public Co. Ltd. Vietnam MK Smart Joint Stock Company

Canada Region Country Vendor Name Canada CPI Card Group – Canada, Inc. Canada Gemalto Canada Inc. Canada Giesecke & Devrient Systems Inc.

Europe Region Country Vendor Name Andorra, Principality Tag Systems S.A. Austria Austria Card Plastikkarten und Ausweissysteme Ges. GmbH Azerbaijan Azericard Ltd.

2011 MasterCard. Proprietary. All rights reserved. 74 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Country Vendor Name Azerbaijan “Millikart” Limited Liability Company (LLC) Belgium Giesecke & Devrient N.V. Bosnia and Herzegovina BamCard Bulgaria Borica – Bankservice AD Croatia Agencija za Komercijalnu Djelatnost d.o.o Cyprus JCC Payment Systems Ltd. Czech Republic Abnote Czech s.r.o. Czech Republic Global Payments Europe, s.r.o. Czech Republic Oberthur Technologies Denmark Dz Card (Denmark) A/S Denmark Gemalto Denmark England Nitecrest Ltd. Estonia Trub Baltic AS Finland Gemalto Oy Finland Oberthur Technologies Finland Oy Finland Tag Systems Finland Oy France Cartoplast S.A. France Cedicam France CPS Technologies France Euro P3C France Gemalto S.A. France Oberthur Technologies S.A. France SELP-SECURE SAS Germany Comcard GmbH Germany EPC Electronic Payment Cards GmbH Germany Gemalto GmbH Germany Giesecke & Devrient GmbH Germany PPC Card Systems GmbH Germany Raiffeisendruckerei GmbH

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 75

Europe Region Country Vendor Name Germany Sagem Orga GmbH (dba Morpho) Germany Swiss Post Solutions GmbH Germany TC&S Technologies Cards & Services GmbH Germany Winter AG Greece First Data Hellas S.A. Greece Inform Processing Lykos S.A. Hungary Allami Nyomda Nyrt. (State Printing Plc.) Hungary Hungarian Banknote Printing Shareholding Co. Hungary Multicard Ltd. Hungary Oberthur Technologies kft. Hungary OTP Card Factory Ltd. Italy Compunet Cards s.r.l. Italy Ghirlanda Cards Srl Socio Unico Italy Mega Network SRL Italy Metalplex S.p.A. Italy MFGroup SPA (Publicenter Division) Italy Oberthur Technologies Italia SRL Italy Sigma Schede Srl Italy Soar Italy ST Incard srl Italy Systems & Cards SRL Kosovo Quipu Shpk Latvia Sia First Data Latvia Lithuania First Data Lietuva Macedonia, Republic of International Card System (CASYS) AD Netherlands Morpho Netherlands Oberthur Technologies The Netherlands B.V. Netherlands PPC Card Systems B.V. Netherlands Rabobank Netherland

2011 MasterCard. Proprietary. All rights reserved. 76 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Country Vendor Name Norway EDB Card Services AS Norway Oberthur Technologies Norway Poland Bank Zachodni WBK S.A. Poland Centrum Kart Spolka Akcyjna. Poland Elkart Sp.z.o.o. Poland First Data Personalizacja SP z.o.o. Poland Gemalto Sp. z o.o. Poland Oberthur Technologies Poland Poland PWPW S.A. Portugal Contiforme–Soluçoes Graficas Integradas S.A. Portugal Imprensa Nacional Casa da Moeda S.A. (INCM) Portugal SIBS – Cartoes, Produçao e Processamento de Cartoes S.A. Romania Oberthur Card Systems Romania SRL Romania Pay Net SRL Romania Provus Service Provider S.A. Romania S.C. Inform Lykos S.A. Romania Smart Paynetwork S.A. Russian Federation Dzetta Processing Center Russian Federation Gemalto LLC Moscow Russian Federation JSC Novacard Russian Federation MultiCarta Ltd. Russian Federation National Credit Cards (CJSC) Russian Federation OK Processing Ltd. Russian Federation ooo Alioth Russian Federation Orga Zelenograd Smart Cards & Systems Russian Federation Perm Printing Factory of Goznak Russian Federation Rosan Finance Russian Federation Rosan SPb Russian Federation Sberbank of Russia

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 77

Europe Region Country Vendor Name Russian Federation Sitronics Smart Technologies, LLC Russian Federation United Card Service Serbia Grafocard d.o.o. Serbia National Bank of Serbia, The – The Institute for Manufacturing Banknotes and Coins, The Slovakia First Data Slovakia a.s. Slovakia Giesecke & Devrient Slovakia s.r.o. Ltd. Slovenia Cetis, Graphic & Documentation Services Slovenia Radece Papir Spain Cosecal S.A. Spain Fabrica Nacional de Moneda y Timbre Spain Gemalto SP S.A. Spain GyD Iberica Unipersonal S.A. Spain Info Direct Barcelona 2003 s.l. Spain Intaremit S.A. Spain Oberthur Technologies Iberica S.A.S.U. Spain S.A.E.T.I.C., S.A. Spain Sistemas y Tratamientos Tecnicos S.A. (STT) Spain Tag Systems Smart Solutions, S.L. Sweden EDB Card Services AB Sweden Gemalto AB Sweden Oberthur Technologies Printing Sweden AB Sweden Oberthur Technologies Sweden AB Switzerland Nagra ID Switzerland Trub AG Switzerland Trub Cards AG Turkey Bilesim A.S. Turkey E-Kart Electronik Kart Sistemleri San. Ve Tic. A.S. Turkey PlastKart – Akilli Kart Iletisim Sistemleri San ve Tic A.S.

2011 MasterCard. Proprietary. All rights reserved. 78 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

Europe Region Country Vendor Name Turkey Provus Bilisim Hiz. A.S. Turkey Provus Bilisim Hizmetleri A.S. Ukraine Plastic Card Enterprise Limited Ukraine Polly-Service Ltd. Ukraine Znak, Ltd. United Kingdom Allpay Limited United Kingdom Gemalto UK Ltd. United Kingdom Giesecke & Devrient GB Ltd. United Kingdom ID Data Cards Ltd. United Kingdom Oberthur Techologies UK Ltd. United Kingdom Thames Card Technology Ltd.

Latin America and the Caribbean Region Country Vendor Name Argentina General Plastic Corp S.A. Argentina Valid Soluciones Brazil American Bank Note Ltda. Brazil Editora Alterosa Ltda. Brazil GD Burti S/A Brazil Gemalto do Brazil Cartoes e Terminais Ltda. Brazil Gemplus Bank Note Brazil Intelcav Cartoes Ltda. Brazil Oberthur Technologies – Sistemas de Cartões Ltda. Brazil Sagem Orga do Brasil S/A (dba Morpho) Brazil Thomas Greg & Sons Grafica e Servicos Ltda. Brazil Valid Solucoes E Servicos De Seguranca Em Meios De Pagamento E Identificacao S.A. Chile AMF Seguridad S.A.

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 79

Latin America and the Caribbean Region Country Vendor Name Chile FIS Card Processing Services S.A. Chile Operadora de Tarjetas de Crédito NEXUS S.A. Colombia Hogier Gartner and Cia S/A Colombia Oberthur Technologies Ltda. Colombia Valores Plasticar S.A.S. Mexico Gemalto Mexico S.A. of C.V. Mexico Giesecke y Devrient de Mexico, S.A. de C.V. Mexico MyCard S.A. de C.V. Mexico Oberthur Technologies De Mexico S. DE R.L. DE C.V. Mexico Total System Services de Mexico, S.A. de C.V. Paraguay Bancard, S.A. Peru Procesos de Medios de Pago S.A. Venezuela Informatica y Telecomunicaciones Venezuela Thomas Greg & Sons de Venezuela, C.A. EMA

South Asia/Middle East/Africa Region Country Vendor Name Bahrain, Kingdom of Arab Financial Services Company B.S.C. Bahrain, Kingdom of Global Payment Services Egypt Advanced Smart Card Co. Egypt Cleopatra Silicon Valley Egypt Masria Card India CMS Info Systems Pvt. Ltd. India Dz Card (India) Pvt. Ltd. India Giesecke & Devrient India Pvt. Ltd. India Madras Security Printers India MCT Cards & Technology Pvt. Ltd.

2011 MasterCard. Proprietary. All rights reserved. 80 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

South Asia/Middle East/Africa Region Country Vendor Name India Oberthur Technologies India Private Limited India Venture Infotek Global Private Ltd. India Versatile Card Technology Private Ltd. Indonesia CV Mekar Abadi Utama Indonesia PT Gemalto Smart Cards Indonesia PT Oberthur Technologies Indonesia Indonesia PT Wahyu Kartumasindo International Kenya De la Rue Currency and Security Print Limited Kuwait Universal Payment Services Lebanon Inkript Cards sal Mauritius Payment Exchange International Morocco Finatech Nigeria Berkeley Cupola Nigeria Ltd. Nigeria Electronic Payplus Limited Nigeria Secure ID Limited Saudi Arabia, Kingdom of Abaker Printing Co. Saudi Arabia, Kingdom of Gulf Printing Products Manufacturers Factory (GEMCO) Saudi Arabia, Kingdom of International Smart Card Factory Company Saudi Arabia, Kingdom of Jeraisy Group Cardtec Factory Saudi Arabia, Kingdom of Plastic Card's Manufacturing Company Ltd. Saudi Arabia, Kingdom of United Plastic Cards Co. – UniCard Saudi Arabia, Kingdom of Universal Cards Company South Africa Gemalto (Pty) Ltd. South Africa Oberthur Technologies South Africa (Pty) Ltd. South Africa Xantium Integrated Solutions (Pty) Ltd. United Arab Emirates Cupola Plastics Cards Limited United Arab Emirates Electronic Document Center L.L.C. United Arab Emirates Emirates National Factory for Plastic Ind. L.L.C. United Arab Emirates Obernet International LLC

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 81

U.S. Region Country Vendor Name USA ABnote USA USA Arroweye Solutions Inc. USA CompoSecure, LLC USA CPI Card Group – Colorado, Inc. USA CPI Card Group – Indiana, Inc. USA CPI Card Group – Minnesota, Inc. USA EFT Source, Inc. USA Fidelity National Information Services USA Fidelity National Information Services, Inc. (FIS) USA Fifth Third Bank USA First Data Resources USA Fiserv Output Solutions St. Paul USA Fiserv Solutions, Inc. USA Gemalto, Inc. USA Giesecke and Devrient America, Inc. USA Global Card Services Inc. USA Integrated Printing Solutions, Inc. USA MT&L Card Products and Fulfillment Services USA Oberthur Technologies of America Corp. USA Oberthur Technologies of America Corp. USA Omni Prepaid, LLC USA Perfect Plastic Printing Corp. USA Qualteq, Inc. USA Shoreline Business Forms, Inc. USA SK C&C USA, Inc. USA Source One Direct USA Springbok Services, Inc.

2011 MasterCard. Proprietary. All rights reserved. 82 13 May 2011 • Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card)

U.S. Region Country Vendor Name USA TecniCard Inc. USA Total System Services Inc. USA Versatile Card Technology, Inc. USA Western Graphics & Data

2011 MasterCard. Proprietary. All rights reserved. Certified Vendors (for Card Production Services of Any MasterCard, Maestro, or Cirrus Card) • 13 May 2011 83

May 2011 - Acquirers No Longer Required to Accept Chargebacks

MasterCard Global Merchant Audit Program (GMAP). May 2011 Global Security Bulletin - NO LONGER REQUIRED TO ACCEPT CHARGEBACKS Acquirer Merchant Merchant Region ID Acquirer Name Merchant Name Merchant City State Country Chargeback End Date Month/Year Added LAC 7843 SCOTIABANK TRINIDAD AND TOBAGO LIMI TSTT LTD PORT OF SPAIN TTO December 31, 2010 June 1, 2010 USA 1019 BANK OF AMERICA, NATIONAL ASSOCIATI MIDLAND FFI 447010525 MIDLAND TX USA January 31, 2011 July 1, 2010 USA 7660 HSBC BANK USA, NATIONAL ASSOCIATION MICROSOFT MSDN 800-759-5474 CA USA June 30, 2011 September 1, 2010 USA 8692 WESTAMERICA BANK DFS/M RESORT HENDERSON NV USA May 31, 2011 August 1, 2010 May 2011 - Global Merchant Audit Program (GMAP) Chargebacks

MasterCard Global Merchant Audit Program (GMAP). May 2011 Global Security Bulletin - Accepting Chargebacks - (IPM) Reason Code 4849 Acquirer Merchant Merchant Chargeback Start Chargeback End Month/ Year Region ID Acquirer Name Merchant Name Merchant City State Country Date Date Added Chargeback Extend Date MPAYMENT AP 2089 DBS BANK LTD SERVICES SINGAPORE SGP October 1, 2010 March 31, 2011 Jun-10

AP 6944 ANZ BANK (SAMOA) LIMITED FUNWAY RENTALS APIA WSM August 1, 2010 January 31, 2011 Apr-10 RELIANCE COMM. AP 8104 CITIGROUP PTY LIMITED (AUST) MELBOURNE AUS April 1, 2011 September 30, 2011 Dec-10 EUR 1031 EUROPAY FRANCE SAS WEBA VIN MALIN LIEUSAINT CED FRA October 1, 2010 March 31, 2011 May-10 CAJA DE AHORROS Y PENSIONES EUR 1253 DE BARC LOGITRAVEL 00000 MILANO ITA August 1, 2010 January 31, 2011 Apr-10 CAJA DE AHORROS Y PENSIONES TODO PARA EUR 1625 DE BARC ORDENADORES VIGO ESP August 1, 2010 January 31, 2011 Apr-10 NATIONAL WESTMINSTER BANK EUR 2515 PLC EQUITA LTD NORTHAMPTON GBR February 1, 2011 July 31, 2011 Oct-10

NATIONAL WESTMINSTER BANK LONDON BOROUGH EUR 2515 PLC OF HARR HARROW GBR June 1, 2011 November 30, 2011 Feb-11 EUR 2746 BANQUE INVIK S.A. ZETURF LTD CURACAO LUX August 1, 2010 January 31, 2011 Apr-10 CESKOSLOVENSKA OBCHODNA EUR 4097 BANKA A.S. KB TIME ROZNAVSKE B CZE December 1, 2010 May 31, 2011 Aug-10 VIKTORIJA-HOTEL- EUR 5535 SC CITADELE BANKA CAKA RIGA LVA August 1, 2010 January 31, 2011 Apr-10 BANCA MONTE DEI PASCHI DI OMNITICKET: EUR 9184 SIENA BIGLIETTI MILANO ITA October 1, 2010 March 31, 2011 May-10 BANCA MONTE DEI PASCHI DI EUR 9184 SIENA WWW.BZBRAIN.IT ROMA ITA October 1, 2010 March 31, 2011 Jun-10 PUBLIC JOINT STOCK COMPANY EUR 9518 "UKRSOTS MOYO SHOP KYIV UKR February 1, 2011 July 31, 2011 Oct-10 EUR 9864 BARCLAYS BANK PLC. 02 (UK) LTD LEEDS 044 GBR May 1, 2011 October 31, 2011 Jan-11 JOINT STOCK COMMERCIAL BANK EUR 11127 "ROSBAN ATM FIL SPB SANKT-PETERSB RUS February 1, 2011 July 31, 2011 Oct-10 MAGYAR TAKAREKSZOVEKEZETI NAPSUGAR 3000 EUR 12113 BANK RT. KFT. BALATONFOLDVA HUN June 1, 2011 November 30, 2011 Feb-11

LAC 3006 BANCO NACIONAL DE MEXICO, S.A. SORIANA COM CIB MONTERREY MEX January 1, 2011 June 30, 2011 Sep-10 UNIV VALLE DE LAC 3006 BANCO NACIONAL DE MEXICO, S.A. MEX CIB CIUDAD DE ME MEX January 1, 2011 June 30, 2011 Sep-10 MOCA TRADING LAC 3610 BANCO GENERAL S.A. INC. PANAMA PAN September 1, 2010 February 28, 2011 May-10

LAC 5049 BANESCO, BANCO UNIVERSAL CA INEDITAS UNICA VEN February 1, 2011 July 31, 2011 Oct-10

LAC 5636 RBTT BANK JAMAICA LIMITED SELECT AUTO PAR BLACK RIVER JAM May 1, 2011 October 31, 2011 Jan-11 BANCO MERCANTIL DEL NORTE, LAC 5667 S.A. (DB SSA060921HY0 GAS CUAUTITLAN IZ MEX August 1, 2010 January 31, 2011 Apr-10 ACCESS LAC 6207 REDECARD, S.A. INTERNAC CAMPINAS BRA August 1, 2010 January 31, 2011 Apr-10 ASSAI CAMPINHO LAC 6207 REDECARD, S.A. RJ RIO DE JANEIR BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. BRASTEMP SAO PAULO BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. CHOPERIA 3000 SAO PAULO BRA August 1, 2010 January 31, 2011 Apr-10 ELECTROLUX DO LAC 6207 REDECARD, S.A. BRASIL CURITIBA BRA August 1, 2010 January 31, 2011 Apr-10 GB COM INTER LAC 6207 REDECARD, S.A. LTDA NATAL BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. GIFT EXPRESS SAO PAULO BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. KAMIKASI SAO PAULO BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. LANCOME RIO DE JANEIR BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. MEGA BRASIL SAO PAULO BRAPage 1 ofAugust 3 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. NEW SUN LIFE SANTO ANDRE BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. PENHA INTERNET CURITIBA BRA August 1, 2010 January 31, 2011 Apr-10 May 2011 - Global Merchant Audit Program (GMAP) Chargebacks

MasterCard Global Merchant Audit Program (GMAP). May 2011 Global Security Bulletin - Accepting Chargebacks - (IPM) Reason Code 4849 Acquirer Merchant Merchant Chargeback Start Chargeback End Month/ Year Region ID Acquirer Name Merchant Name Merchant City State Country Date Date Added Chargeback Extend Date LAC 6207 REDECARD, S.A. R C C SAO PAULO BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. R M NOTECENTER CAXIAS DO SUL BRA August 1, 2010 January 31, 2011 Apr-10 LAC 6207 REDECARD, S.A. REI DO BACALHAU DUQUE DE CAXI BRA August 1, 2010 January 31, 2011 Apr-10

LAC 6207 REDECARD, S.A. RIO DE JANEIRO 36 RIO DE JANEIR BRA August 1, 2010 January 31, 2011 Apr-10 SENDAS TAQUARA LAC 6207 REDECARD, S.A. 1621 RIO DE JANEIR BRA August 1, 2010 January 31, 2011 Apr-10 VISAO 34 LAC 6207 REDECARD, S.A. DISTRIBUIDORA RIO DE JANEIR BRA August 1, 2010 January 31, 2011 Apr-10 VRM COM MAT LAC 6207 REDECARD, S.A. CONSTRUCAO SAO PAULO BRA August 1, 2010 January 31, 2011 Apr-10 CARIBBEAN OASIS LAC 6593 BANCO DI CARIBE N.V. RENTAL WILLEMSTAD ANT August 1, 2010 January 31, 2011 Apr-10 KWIHI LAC 6593 BANCO DI CARIBE N.V. ENTERPRISES NV WILLEMSTAD ANT March 1, 2011 August 31, 2011 Nov-10 LAC 6593 BANCO DI CARIBE N.V. TOKO JANBOOS WILLEMSTAD ANT April 1, 2011 September 30, 2011 Dec-10 DIST E INV LA LAC 7028 BANCO DE VENEZUELA, S.A.C.A. ROKA CA CCS NOROESTE VEN January 1, 2011 June 30, 2011 Sep-10 SCOOBYS'RENTAL LAC 7172 GIROBANK N.V. S SCOOTE CURACAO ANT August 1, 2010 January 31, 2011 Apr-10 BANCO BICENTENARIO BANCO SERVI COMPUT & LAC 7458 UNIVERSAL, ELECT, GUACARA VEN April 1, 2011 September 30, 2011 Dec-10 BANCO POPULAR DOMINICANO, C. EXELENZIA TRAVEL LAC 7638 POR A. HUB SANTO DOMINGO DOM August 1, 2010 January 31, 2011 Apr-10 FEATHER LAC 9421 CREDOMATIC INTERNATIONAL, S.A. STARFISH B FOU SAN JOSE CRI October 1, 2010 March 31, 2011 Jun-10 BANCO CITIBANK DE COSTA RICA AEROSUR E LAC 10813 S.A. COMERCE EURO MADRID CRI August 1, 2010 January 31, 2011 Apr-10 BANCO CITIBANK DE COSTA RICA LAC 10813 S.A. AVIANCA COM C R SAN JOSE CRI October 1, 2010 March 31, 2011 Jun-10 GLOBAL MARINE LAC 11868 MADURO & CURIEL'S BANK N.V. ENGINE S ST MAARTEN ANT August 1, 2010 January 31, 2011 Apr-10 LAC 11868 MADURO & CURIEL'S BANK N.V. KEREN HAPUC CURACAO ANT August 1, 2010 January 31, 2011 Apr-10 KOOYMAN LAC 11868 MADURO & CURIEL'S BANK N.V. MEGASTORE CURACAO ANT May 1, 2011 October 31, 2011 Jan-11 STANDARD BANK OF SOUTH SAMEA 1264 AFRICA, LTD. JUST BAG MELVILLE ZAF February 1, 2011 July 31, 2011 Oct-10 STANDARD BANK OF SOUTH MOTORSPORT SAMEA 1264 AFRICA, LTD. ACCESSORIES SUNNYSIDE ZAF January 1, 2011 June 30, 2011 Sep-10 STANDARD BANK OF SOUTH SAMEA 1264 AFRICA, LTD. VIVA RECYCLNG ROSSLYN ZAF January 1, 2011 June 30, 2011 Sep-10

SAMEA 1802 RIYAD BANK MATRAT NADA EST RIYADH SAU December 1, 2010 May 31, 2011 Aug-10 BARCLAYS BANK (SEYCHELLES) SAMEA 3254 LTD VILLA BANANIER SEYCHELLES SYC August 1, 2010 January 31, 2011 Apr-10 AMAN BANK FOR COMMERCE AND SAMEA 4104 INVESTME CHAJARA HOTEL TRIPOLY DAHRA LBY March 1, 2011 August 31, 2011 Nov-10

SAMEA 4705 BLOM BANK SAL ZINK BEIRUT LBN August 1, 2010 January 31, 2011 Apr-10

SAMEA 5071 BANK MUSCAT (SAOG) OMAN MOBILE MUSCAT OMN August 1, 2010 January 31, 2011 Apr-10 MOHAMMED SAMEA 6285 SAUDI HOLLANDI BANK BAJSEER EST. JEDDAH SAU August 1, 2010 January 31, 2011 Apr-10 BANCO INTERNACIONAL DE PETROMOC SASOL SAMEA 8739 MOCAMBIQUE(B ZI-CO MAPUTO MOZ January 1, 2011 June 30, 2011 Sep-10 USA 1601 WELLS FARGO BANK, N.A. WAL-MART #5068 MASSAPEQUA (L NY USA January 1, 2011 June 30, 2011 Sep-10 USA 1601 WELLS FARGO BANK, N.A. WAL-MART #5293 VALLEY STREAM NY USA December 1, 2010 May 31, 2011 Aug-10 Page 2 of 3 USA 2349 CHEVRON FEDERAL CREDIT UNION CHEVRON 0306150 MONTEBELLO CA USA March 1, 2011 August 31, 2011 Nov-10 May 2011 - Global Merchant Audit Program (GMAP) Chargebacks

MasterCard Global Merchant Audit Program (GMAP). May 2011 Global Security Bulletin - Accepting Chargebacks - (IPM) Reason Code 4849 Acquirer Merchant Merchant Chargeback Start Chargeback End Month/ Year Region ID Acquirer Name Merchant Name Merchant City State Country Date Date Added Chargeback Extend Date

USA 2349 CHEVRON FEDERAL CREDIT UNION TEXACO 0353849 CHAMBLEE GA USA March 1, 2011 August 31, 2011 Nov-10 WETSERN USA 2557 WESTAMERICA BANK AMERICAN, INC. 816-421-3000 MO USA August 1, 2010 January 31, 2011 Apr-10 HSBC BANK USA, NATIONAL USA 3140 ASSOCIATION RICE UNIV-JGSB HOUSTON TX USA August 1, 2010 January 31, 2011 Apr-10 TRU HOLIDAY USA 3425 WELLS FARGO BANK, N.A. EXPRESSQPS YONKERS NY USA May 1, 2011 October 31, 2011 Jan-11 SHADOW USA 5110 HARRIS NATIONAL ASSOCIATION MANAGEMENT INC COLUMBIA SC USA August 1, 2010 January 31, 2011 Apr-10 PRECISION FLOW USA 6300 WESTAMERICA BANK LLC WILLIAMSTOWN NJ USA May 1, 2011 October 31, 2011 Jan-11 RADIANTFOIL.COM USA 6300 WESTAMERICA BANK ART CA HAILEY ID USA February 1, 2011 July 31, 2011 Oct-10 HSBC BANK USA, NATIONAL USA 6371 ASSOCIATION WAL MART FEDERAL WAY WA USA April 1, 2011 September 30, 2011 Dec-10 HSBC BANK USA, NATIONAL WALMART.COM USA 6371 ASSOCIATION RELOAD BENTONVILLE AR USA February 1, 2011 July 31, 2011 Oct-10 HSBC BANK USA, NATIONAL WALMART.COM USA 6371 ASSOCIATION RELOAD 8004117942 AR USA March 1, 2011 August 31, 2011 Nov-10 HSBC BANK USA, NATIONAL USA 6371 ASSOCIATION WM SUPERCENTER CHARLOTTE (W) NC USA December 1, 2010 May 31, 2011 Aug-10 HSBC BANK USA, NATIONAL USA 6371 ASSOCIATION WM SUPERCENTER ATLANTA (GRES GA USA January 1, 2011 June 30, 2011 Sep-10 HSBC BANK USA, NATIONAL USA 6371 ASSOCIATION WM SUPERCENTER LAS VEGAS (MC NV USA February 1, 2011 July 31, 2011 Oct-10 HSBC BANK USA, NATIONAL USA 6371 ASSOCIATION WM SUPERCENTER KELLER TX USA May 1, 2011 October 31, 2011 Jan-11 BANK OF AMERICA, NATIONAL SAM ASH MUSIC USA 6715 ASSOCIATI #05 BROOKLYN NY USA February 1, 2011 July 31, 2011 Oct-10 BANK OF AMERICA, NATIONAL VICTORIA'S USA 6715 ASSOCIATI SECRET 057 BROOKLYN NY USA August 1, 2010 January 31, 2011 Apr-10 USA 6744 SYNOVUS BANK LAFITTES BISTRO NEW ORLEANS LA USA August 1, 2010 January 31, 2011 Apr-10 MURPHY7084ATWA USA 7239 RBS CITIZENS, N.A. LMRT HIALEAH FL USA February 1, 2011 July 31, 2011 Oct-10 HSBC BANK USA, NATIONAL PEOPLES USA 7660 ASSOCIATION JEWELLERS 800-211-2272 PA USA April 1, 2011 September 30, 2011 Dec-10 BEST BUY@ZOOMSHOP USA 7918 WELLS FARGO BANK, N.A. (BBR LAS VEGAS NV USA January 1, 2011 June 30, 2011 Sep-10 FOOD USA 8106 FIRST SAVINGS BANK, FSB DISTRIBUTORS SHERMAN OAKS CA USA August 1, 2010 January 31, 2011 Apr-10 BANCO CITIBANK DE COSTA RICA AEROSUR E USA 10813 S.A. COMERCE MIAMI FL USA August 1, 2010 January 31, 2011 Apr-10 NET SPEED USA 11564 WELLS FARGO BANK, N.A. HOSTING LLC TEMPE AZ USA May 1, 2011 October 31, 2011 Jan-11 PHOTOLIBRARY USA 12093 SYNOVUS BANK GROUP INC NEW YORK NY USA January 1, 2011 June 30, 2011 Sep-10 USA 12564 WELLS FARGO BANK, N.A. AMF FARMS INC 360-7552299 WA USA June 1, 2011 November 30, 2011 Feb-11

Page 3 of 3 May 2011 - Cardholder-Merchant Collusion (CMC) Program Chargebacks

Month/Year Acquirer Merchant Merchant Chargeback Start Chargeback End Issuer Notification Added to Region ICA Acquirer Name Merchant Name Merchant Legal Name Merchant City State Country Date Date Date Bulletin BANQUE LIBANO FRANCAISE SAMEA 1520 SAL MED TOURS MED TOURS RAS BEYROUT LBN July 15, 2010 July 14, 2011 February 18, 2010 Jul-10 BANK AUDI AUDI SARADAR SAMEA 2711 GROUP MED.TOURS MED.TOURS KOREITEM LBN July 15, 2010 July 14, 2011 February 18, 2010 Jul-10 SAMEA 3751 JORDAN AHLI BANK BOUTIQUE SALAMEH BOUTIQUE SALAMEH BEIT LAHEM PSE June 15, 2010 June 14, 2011 October 5, 2009 Jun-10

SAMEA 3844 FRANSABANK SAL MED TOURS/RAS BEIRUT MED TOURS/RAS BEIRUT BEIRUT LBN July 15, 2010 July 14, 2011 February 18, 2010 Jul-10 SAMEA 6639 BANK OF PALESTINE LTD SALAMEH BOUTIQUE SALAMEH BOUTIQUE BETH LEHEM PSE June 15, 2010 June 14, 2011 October 5, 2009 Jun-10 PARENT- FIRST NATIONAL ACAPULCO JEWELRY USA 1117 BANK OF OMAHA ACAPULCO JEWELRY PLAZA PLAZA LOS ANGELES CA USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 US BANK NATIONAL LASKA ENTERTAINMENT USA 1734 ASSOCIATION ND LASKA ENTERTAINMENT LLC LLC PASADENA CA USA June 15, 2010 June 14, 2011 February 26, 2010 Jun-10 US BANK NATIONAL USA 1734 ASSOCIATION ND MI RAE MEDICAL CLINIC MI RAE MEDICAL CLINIC LOS ANGELES CA USA June 15, 2010 June 14, 2011 December 21, 2009 Jun-10 US BANK NATIONAL MILLION ROSES USA 1734 ASSOCIATION ND MILLION ROSES FLOWERS FLOWERS NORTH HOLLYWO CA USA February 15, 2011 February 14, 2012 April 23, 2010 Feb-11 US BANK NATIONAL NORTH HOLLYWOOD NORTH HOLLYWOOD USA 1734 ASSOCIATION ND WIRELESS WIRELESS VALLEY VLG CA USA October 15, 2010 October 14, 2011 June 4, 2010 Oct-10 US BANK NATIONAL USA 1734 ASSOCIATION ND VIONALDO EXPRESS INC VIONALDO EXPRESS INC POMPANO BEACH FL USA July 15, 2010 July 14, 2011 February 1, 2010 Jul-10 COLUMBUS BANK TRUST USA 1752 COMPANY CEZAR'S FIREPLACES CEZAR'S FIREPLACES SAN FERNANDO CA USA April 15, 2010 April 14, 2011 November 25, 2009 Apr-10 BANK OF AMERICA NATIONAL LION CONSTRUCTION & LION CONSTRUCTION & USA 1836 ASSOCIATION REMODELING REMODELING, INC TARZANA CA USA June 15, 2010 June 14, 2011 February 1, 2010 Jun-10 BANK OF AMERICA NATIONAL METROPOLE PROPERTIES USA 1836 ASSOCIATION LLC SAM ABBOUSHI TUSTIN CA USA March 15, 2010 March 14, 2011 September 29, 2009 Mar-10 BANK OF AMERICA NATIONAL PARAGON ENTERPRISES USA 1836 ASSOCIATION PARAGON ENTERPRISES NC INC ARCHDALE NC USA March 15, 2010 March 14, 2011 December 4, 2009 Mar-10 BANK OF AMERICA NATIONAL USA 1836 ASSOCIATION SANYAS ART STUDIO ALEXANDR GONCHAROV WHITTIER CA USA February 15, 2010 February 14, 2011 September 30, 2009 Feb-10 HSBC BANK USA NATIONAL CARE 4 HEALTH USA 2135 ASSOCIATION CARE 4 HEALTH LOGISTICS LOGISTICS GLENDALE CA USA March 15, 2010 March 14, 2011 September 21, 2009 Mar-10 HSBC BANK USA NATIONAL USA 2135 ASSOCIATION MY RODIO MY RODIO INC. PALISADES PAR NJ USA September 15, 2010 September 14, 2011 February 18, 2010 Sep-10 HSBC BANK USA NATIONAL USA 2135 ASSOCIATION PAK LAND AUTO REPAIR PAK LAND AUTO REPAIR JAMAICA NY USA August 13, 2010 August 12, 2011 March 29, 2010 Aug-10 HSBC BANK USA NATIONAL WORLD TOUCH CREDIT WORLD TOUCH CREDIT USA 2135 ASSOCIATION SERVICE SERVICE FLUSHING NY USA July 15, 2010 July 14, 2011 February 2, 2010 Jul-10 HSBC BANK USA NATIONAL VIVA ACAPULCO USA 2135 ASSOCIATION VIVA ACAPULCO JEWELRY JEWELRY LOS ANGELES CA USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 NORTON HILL TRADING, USA 2557 WESTAMERICA BANK NORTON HILL TRADING, INC. INC. NEW HYDE PARK NY USA June 15, 2010 June 14, 2011 January 11, 2010 Jun-10 WOODFOREST NATIONAL USA 2814 BANK NANCYS JEWELS INC NANCYS JEWELS INC NORTH HOLLYWO CA USA March 15, 2010 March 14, 2011 December 8, 2009 Mar-10 WOODFOREST NATIONAL USA 2814 BANK ROYAL DIAMONDS ROYAL DIAMONDS LOS ANGELES CA USA February 15, 2010 February 14, 2011 October 3, 2008 Feb-10 ENHANCE NETWORK USA 2950 WELLS FARGO BANK NA ENHANCENETW COMMUNICAION, INC. CUPERTINO CA USA March 15, 2010 March 14, 2011 October 5, 2009 Mar-10 USA 2950 WELLS FARGO BANK NA WORLDWIDETR PAYPAL 2127798000 NY USA February 15, 2011 February 14, 2012 July 15, 2010 Feb-11 LASKA ENTERTAINMENT USA 3286 JP MORGAN CHASE BANK NA LASKA ENTERTAINMENT LLC LLC PASADENA CA USA June 15, 2010 June 14, 2011 February 26, 2010 Jun-10 NORTH HOLLYWOOD USA 3286 JP MORGAN CHASE BANK NA N HOLLYWOOD WIRELESS WIRELESS INC 818-985-2900 CA USA September 15, 2010 September 14, 2011 June 4, 2010 Sep-10 USA 3583 WELLS FARGO BANK NA ELITE AUTO BROKERS ELITE AUTO BROKERS LOS ANGELES CA USA February 15, 2011 February 14, 2012 May 19, 2010 Feb-11 EXOTIC DIAMOND & USA 3583 WELLS FARGO BANK NA EXOTIC DIAMOND & JEWEL JEWELRY LOS ANGELES CA USA February 15, 2011 February 14, 2012 April 23, 2010 Feb-11 G1 GROUP COMPANY USA 3583 WELLS FARGO BANK NA G1 GROUP COMPANY INC INC PASADENA CA USA March 15, 2010 March 14, 2011 October 16, 2009 Mar-10 LION CONSTRUCTION & LION CONSTRUCTION & USA 3583 WELLS FARGO BANK NA REMODELING, INC REMODELING, INC TARZANA CA USA June 15, 2010 June 14, 2011 February 1, 2010 Jun-10 May 2011 - Cardholder-Merchant Collusion (CMC) Program Chargebacks

Month/Year Acquirer Merchant Merchant Chargeback Start Chargeback End Issuer Notification Added to Region ICA Acquirer Name Merchant Name Merchant Legal Name Merchant City State Country Date Date Date Bulletin TALK WITH US USA 3583 WELLS FARGO BANK NA TALK WITH US WIRELESS WIRELESS INC LOS ANGELES CA USA December 15, 2010 December 14, 2011 February 26, 2010 Dec-10 USA 3583 WELLS FARGO BANK NA YURA'S ART STUDIO YURA'S ART STUDIO WHITTIER CA USA February 15, 2010 February 14, 2011 September 30, 2009 Feb-10 FIRST NATIONAL BANK OF USA 3813 OMAHA RAJA JEWELERS RAJA JEWELERS JERSEY CITY NJ USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 MERRICK BANK USA 3948 CORPORATION SWEETARTS JEWEL SWEETARTS JEWEL LOS ANGELES CA USA April 15, 2011 April 14, 2012 August 5, 2010 Apr-11 MERRICK BANK KARAT 22 JEWELERS OF KARAT 22 JEWELERS OF USA 3983 CORPORATION LONDON LONDON JACKSON HGTS NY USA July 15, 2010 July 14, 2011 February 2, 2010 Jul-10 FIRST NATIONAL BANK OF USA 4117 OMAHA ARTS FIREPLACE ARTS FIREPLACE SAN FERNANDO CA USA April 15, 2010 April 14, 2011 November 25, 2009 Apr-10

MERRICK BANK KAWMAT CONSTRUCTION KAWMAT USA 4354 CORPORATION USA CONSTRUCTION USA INC JAMAICA NY USA April 15, 2010 April 14, 2011 January 11, 2010 Apr-10 MERRICK BANK REHMAN JEE TRADERS USA 4354 CORPORATION REHMAN JEE TRADERS INC INC JAMAICA NY USA June 15, 2010 June 14, 2011 January 20, 2010 Jun-10 MERRICK BANK 149 ARTCOLLECTION USA 4355 CORPORATION 149 ARTCOLLECTION CORP CORP COMMACK NY USA September 15, 2010 September 14, 2011 March 23, 2010 Sep-10 MERRICK BANK USA 4355 CORPORATION BLUE FASHION CORP BLUE FASHION CORP FORT LEE NJ USA October 15, 2010 October 14, 2011 April 6, 2010 Oct-10 MERRICK BANK USA 4355 CORPORATION GOLDBUG 100 INC GOLDBUG 100 INC FORT LEE NJ USA October 15, 2010 October 14, 2011 April 23, 2010 Oct-10 MERRICK BANK USA 4355 CORPORATION STAR 72 JEWELRY INC STAR 72 JEWELRY INC FORT LEE NJ USA August 13, 2010 August 12, 2011 February 25, 2010 Aug-10 MERRICK BANK MILLENNIUM EXPORT USA 4361 CORPORATION MILLENNIUM EXPORT IMPORT IMPORT VAN NUYS CA USA August 13, 2010 August 12, 2011 February 25, 2010 Aug-10 FIRST NATIONAL BANK OF KAWMAT CONTRUCTION USA 4554 OMAHA KAWMAT CONTRUCTION USA USA JAMAICA NY USA April 15, 2010 April 14, 2011 January 11, 2010 Apr-10 FIRST NATIONAL BANK OF USA 4554 OMAHA VALLEY CELLULAR VALLEY CELLULAR INC VALLEY VLG CA USA September 15, 2010 September 14, 2011 December 11, 2009 Sep-10 USA 4794 WELLS FARGO BANK NA LEE SUNG WHOLESALE LEE SUNG WHOLESALE LOS ANGELES CA USA June 15, 2010 June 14, 2011 November 17, 2009 Jun-10 TALK WITH US USA 4950 HEARTLAND BANK TALK WITH US WIRELESS WIRELESS INC LOS ANGELES CA USA September 15, 2010 September 14, 2011 February 26, 2010 Sep-10 BANK OF AMERICA NATIONAL ANUSH & LISA'S USA 5078 ASSOCIATION ANUSH & LISA'S FLOWERS FLOWERS GLENDALE CA USA March 15, 2010 March 14, 2011 November 25, 2009 Mar-10 BANK OF AMERICA NATIONAL USA 5078 ASSOCIATION H & R JEWELRY LOAN CO H & R JEWELRY LOAN CO N HOLLYWOOD CA USA March 15, 2010 March 14, 2011 October 2, 2009 Mar-10 HARRIS NATIONAL USA 5110 ASSOCIATION BREEZE FABRIC BREEZE FABRIC JAMAICA NY USA June 15, 2010 June 14, 2011 January 20, 2010 Jun-10 HARRIS NATIONAL USA 5110 ASSOCIATION FINEST BUSINESS SOLUTION ARTUR NAZARYAN GLENDALE CA USA October 15, 2010 October 14, 2011 February 18, 2010 Oct-10

HARRIS NATIONAL KAWMAT CONSTRUCTION KAWMAT USA 5110 ASSOCIATION USA CONSTRUCTION USA INC JAMAICA NY USA April 15, 2010 April 14, 2011 January 11, 2010 Apr-10 HARRIS NATIONAL MULTI ART PROMOTER USA 5110 ASSOCIATION MULTI ART PROMOTER INC NEW YORK NY USA May 14, 2010 May 13, 2011 December 31, 2008 May-10 HARRIS NATIONAL DIRECT INSURANCE USA 5110 ASSOCIATION SCK INSURANCE SERVICES SERVICES INC VALLEY VLG CA USA October 15, 2010 October 14, 2011 February 15, 2010 Oct-10 HARRIS NATIONAL USA 5110 ASSOCIATION VALLEY WIRELESS VALLEY WIRELESS INC VALLEY VLG CA USA September 15, 2010 September 14, 2011 December 11, 2009 Sep-10 ACAPULCO JEWELRY USA 5172 WELLS FARGO BANK N.A. ACAPULCO JEWELRY PLAZA PLAZA LOS ANGELES CA USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 G & A PROPERTY USA 5172 WELLS FARGO BANK NA G & A PROPERTY INVESTMENTS BURBANK CA USA March 15, 2010 March 14, 2011 October 16, 2009 Mar-10 MEDICAL USA 5172 WELLS FARGO BANK NA MED TECH INC TECHNOLOGIES INC GLENDALE CA USA March 15, 2010 March 14, 2011 October 16, 2009 Mar-10 USA 5172 WELLS FARGO BANK NA ROYAL DIAMONDS PEOPLE'S LOOK INC LOS ANGELES CA USA February 15, 2010 February 14, 2011 October 3, 2008 Feb-10 HARRIS NATIONAL USA 5177 ASSOCIATION WIRELESS PLANET WIRELESS PLANET SHERMAN OAKS CA USA December 15, 2010 December 14, 2011 July 16, 2010 Dec-10 May 2011 - Cardholder-Merchant Collusion (CMC) Program Chargebacks

Month/Year Acquirer Merchant Merchant Chargeback Start Chargeback End Issuer Notification Added to Region ICA Acquirer Name Merchant Name Merchant Legal Name Merchant City State Country Date Date Date Bulletin BURBANK CITY USA 6204 WELLS FARGO BANK NA BURBANK CITY JEWELERS JEWELERS BURBANK CA USA April 15, 2011 April 14, 2012 September 17, 2010 Apr-11 USA 6204 WELLS FARGO BANK NA EVO'S ART GALLERY EVRIK ZATIKIAN LOS ANGELES CA USA December 15, 2010 December 14, 2011 July 15, 2010 Dec-10 NORTH HOLLYWOOD NORTH HOLLYWOOD NORTH USA 6204 WELLS FARGO BANK NA WIRELESS WIRELESS HOLLYWOOD CA USA September 15, 2010 September 14, 2011 June 4, 2010 Sep-10 DONG S KIM USA 6412 WELLS FARGO BANK NA DONG S KIM WHOLESALE WHOLESALE LOS ANGELES CA USA June 15, 2010 June 14, 2011 November 17, 2009 Jun-10 MERRICK BANK BEST CHOICE WHOLESALE BEST CHOICE USA 6525 CORPORATION INC WHOLESALE INC LOS ANGELES CA USA March 15, 2010 March 14, 2011 December 4, 2009 Mar-10 MERRICK BANK USA 6525 CORPORATION PARADISE CAGE COMPANY TATEVIK HAYRAPETYAN VAN NUYS CA USA March 15, 2010 March 14, 2011 November 20, 2009 Mar-10 USA 6809 WELLS FARGO BANK NA RAJA JEWELERS RAJA JEWELERS JERSEY CITY NJ USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 USA 6812 WELLS FARGO BANK NA EDWARD M,HA,CPA EDWARD M,HA,CPA RIDGEFIELD NJ USA June 15, 2010 June 14, 2011 February 18, 2010 Jun-10 GENEX LABORATORY GENEX LABORATORY USA 6812 WELLS FARGO BANK NA SERVICES SERVICES GLENDALE CA USA August 13, 2010 August 12, 2011 March 23, 2010 Aug-10 CHAUDHRY BROKERAGE CHAUDHRY BROKERAGE USA 6897 WELLS FARGO BANK NA CORP CORP BROOKLYN NY USA April 15, 2010 April 14, 2011 December 29, 2009 Apr-10 GREENWICH VILLAGE USA 6897 WELLS FARGO BANK NA GREENWICH VILLAGE CATE CATERI WOODHAVEN NY USA December 15, 2010 December 14, 2011 April 23, 2010 Dec-10 NORTH USA 6897 WELLS FARGO BANK NA P & A BEVERAGES, INC P & A BEVERAGES, INC HOLLYWOOD CA USA March 15, 2010 March 14, 2011 September 30, 2009 Mar-10 ACAPULCO JEWELRY USA 7039 APPLIED BANK ACAPULCO JEWELRY PLAZA PLAZA LOS ANGELES CA USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 VIVA ACAPULCO USA 7101 GE MONEY BANK VIVA ACAPULCO JEWELRY JEWELRY LOS ANGELES CA USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 PAKLAND AUTO MECHANICAL PAKLAND AUTO USA 7561 WELLS FARGO BANK NA INC MECHANICAL INC JAMAICA NY USA August 13, 2010 August 12, 2011 March 29, 2010 Aug-10 HSBC BANK USA NATIONAL USA 7785 ASSOCIATION A1 WIRELESS 7186348000 A1 WIRELESS WOODHAVEN NY USA December 15, 2010 December 14, 2011 April 23, 2010 Dec-10 HSBC BANK USA NATIONAL USA 7785 ASSOCIATION BLUE FASHION CORP BLUE FASHION CORP FORT LEE NJ USA October 15, 2010 October 14, 2011 April 6, 2010 Oct-10 HSBC BANK USA NATIONAL USA 7785 ASSOCIATION FOR YOUR JOY LLC FOR YOUR JOY LLC PALISADES PAR NJ USA September 15, 2010 September 14, 2011 February 25, 2010 Sep-10 HSBC BANK USA NATIONAL USA 7785 ASSOCIATION LU 72 FASHION INC LU 72 FASHION INC FORT LEE NJ USA August 13, 2010 August 12, 2011 February 25, 2010 Aug-10

USA 7825 JP MORGAN CHASE BANK NA FAIRVIEW SOUND INC FAIRVIEW SOUND INC BROOKLYN NY USA May 14, 2010 May 13, 2011 July 30, 2009 May-10

USA 7825 JP MORGAN CHASE BANK NA MY SECRET BOUTIQUE MY SECRET BOUTIQUE GLENDALE CA USA May 14, 2010 May 13, 2011 September 30, 2009 May-10 USA 7918 WELLS FARGO BANK NA SAPNA FASHIONS, INC SAPNA FASHIONS, INC JAMAICA NY USA February 15, 2011 February 14, 2012 April 21, 2010 Feb-11 USA 7918 WELLS FARGO BANK NA THE LACE THE LACE LOS ANGELES CA USA February 15, 2010 February 14, 2011 October 3, 2008 Feb-10

USA 7919 JP MORGAN CHASE BANK NA PARADISE CAGE COMPANY TATEVIK HAYRAPETYAN VAN NUYS CA USA March 15, 2010 March 14, 2011 November 20, 2009 Mar-10 WACHOVIA BANK NATIONAL USA 8168 ASSOCIATION ARTS FIREPLACES ARTS FIREPLACES SAN FERNANDO CA USA April 15, 2010 April 14, 2011 November 25, 2009 Apr-10 A & M BEST WIRELESS USA 8756 JP MORGAN CHASE BANK NA A & M BEST WIRELESS USA LLC WOODHAVEN NY USA December 15, 2010 December 14, 2011 April 23, 2010 Dec-10 KEYBANK NATIONAL USA 8776 ASSOCIATION GRILL WORKS GRILL WORKS SHERMAN OAKS CA USA December 15, 2010 December 14, 2011 May 24, 2010 Dec-10 KEYBANK NATIONAL USA 8776 ASSOCIATION GRILL WORKS QPS GRILL WORKS QPS SHERMAN OAKS CA USA December 15, 2010 December 14, 2011 May 24, 2010 Dec-10 KEYBANK NATIONAL VIVA ACAPULCO USA 9784 ASSOCIATION VIVA ACAPULCO JEWELRY JEWELRY LOS ANGELES CA USA May 14, 2010 May 13, 2011 November 6, 2008 May-10 WESTERN CONSTRUCTION AND USA 9820 WELLS FARGO BANK NA WESTERN CONSTRUCTION DEVELOPMENT VAN NUYS CA USA July 15, 2010 July 14, 2011 February 1, 2010 Jul-10 FIRST NATIONAL BANK OF PAKLAND AUTO MECHANICAL PAKLAND AUTO USA 9898 OMAHA INC MECHANICAL INC JAMAICA NY USA August 13, 2010 August 12, 2011 March 29, 2010 Aug-10 USA 10201 WELLS FARGO BANK NA THE LACE THE LACE LOS ANGELES CA USA February 15, 2010 February 14, 2011 October 3, 2008 Feb-10 May 2011 - Cardholder-Merchant Collusion (CMC) Program Chargebacks

Month/Year Acquirer Merchant Merchant Chargeback Start Chargeback End Issuer Notification Added to Region ICA Acquirer Name Merchant Name Merchant Legal Name Merchant City State Country Date Date Date Bulletin G & A PROPERTY USA 10249 WELLS FARGO BANK NA G & A PROPERTY INVESTMENTS BURBANK CA USA March 15, 2010 March 14, 2011 October 16, 2009 Mar-10 TAZMAHAL CATERING USA 10250 WELLS FARGO BANK NA TAZMAHAL CATERING AND AND PARTY JAMAICA NY USA February 15, 2011 February 14, 2012 July 16, 2010 Feb-11 THE STUFFED PUFFS USA 10445 WELLS FARGO BANK NA GRILL WORKS CO., I SHERMAN OAKS CA USA December 15, 2010 December 14, 2011 May 24, 2010 Dec-10 STAR AUTO SALES & USA 10762 WELLS FARGO BANK NA STAR AUTO SALES & LEASING LEASING VALLEY VILLAGE CA USA November 15, 2010 November 14, 2011 May 19, 2010 Nov-10 GENEX LABORATORY GENEX LABORATORY USA 10854 MERIDIAN BANK SERVICES INC SERVICES GLENDALE CA USA August 13, 2010 August 12, 2011 March 23, 2010 Aug-10 HARUTYUN USA 11457 WELLS FARGO BANK NA ARTS FIREPLACE MAMIKONYAN SAN FERNANDO CA USA April 15, 2010 April 14, 2011 November 25, 2009 Apr-10 Legal Notices

Standards From time to time, the author of an article appearing in this Bulletin may attempt to describe, explain, clarify or otherwise elucidate upon a Rule or other Standard or revision thereof. No such description, explanation, clarification or other elucidation shall be deemed to be a Rule or other Standard nor be deemed to accurately describe, explain, clarify or otherwise elucidate upon a Rule or other Standard. In the event the Corporation, in its sole judgement, determines at any time there to be a conflict or discrepancy between a Rule or other Standard and any description, explanation, clarification or other elucidation thereof appearing in this Bulletin, the text of the Rule or other Standard shall be afforded precedence and the conflicting or discrepant description, explanation, clarification or other elucidation shall be deemed of no effect as if never published herein. Trademarks Trademark notices and registration symbols used in this bulletin reflect the registration status of MasterCard trademarks in the United States. Please consult with the Customer Operations Services team or the MasterCard Law Department for the registration status of particular product, program, or service names outside the United States. All third-party product and service names are trademarks of their respective owners. Routing MasterCard frequently recommends that persons having certain responsibilities read certain articles. Each member is responsible for ensuring that it remains in compliance with MasterCard Standards at all times. Thus, it is the responsibility of each member to determine who within its organization is afforded access to MasterCard information. Revisions In the event of a conflict between this document and a subsequently published edition, the subsequently published edition shall have precedence. Proprietary Rights The information contained in this document is proprietary and confidential to MasterCard International Incorporated, one or more of its affiliated entities (collectively “MasterCard”), or both. This material may not be duplicated, published, or disclosed, in whole or in part, without the prior written permission of MasterCard.

Legal Notices 1 Global Security Bulletin No. 5, 13 May 2011 ©2011 MasterCard. Proprietary. All rights reserved.