Collapse to view only § 132.3 - Designated payment systems.

§ 132.1 - Authority, purpose, collection of information, and incorporation by reference.

(a) Authority. This part is issued jointly by the Board of Governors of the Federal Reserve System (Board) and the Secretary of the Department of the Treasury (Treasury) under section 802 of the Unlawful Internet Gambling Enforcement Act of 2006 (Act) (enacted as Title VIII of the Security and Accountability For Every Port Act of 2006, Pub. L. No. 109-347, 120 Stat. 1884, and codified at 31 U.S.C. 5361-5367). The Act states that none of its provisions shall be construed as altering, limiting, or extending any Federal or State law or Tribal-State compact prohibiting, permitting, or regulating gambling within the United States. See 31 U.S.C. 5361(b). In addition, the Act states that its provisions are not intended to change which activities related to horseracing may or may not be allowed under Federal law, are not intended to change the existing relationship between the Interstate Horseracing Act of 1978 (IHA) (15 U.S.C. 3001 et seq.) and other Federal statutes in effect on October 13, 2006, the date of the Act's enactment, and are not intended to resolve any existing disagreements over how to interpret the relationship between the IHA and other Federal statutes. See 31 U.S.C. 5362(10)(D)(iii). This part is intended to be consistent with these provisions.

(b) Purpose. The purpose of this part is to issue implementing regulations as required by the Act. The part sets out necessary definitions, designates payment systems subject to the requirements of this part, exempts certain participants in designated payment systems from certain requirements of this part, provides nonexclusive examples of policies and procedures reasonably designed to identify and block, or otherwise prevent and prohibit, restricted transactions, and sets out the Federal entities that have exclusive regulatory enforcement authority with respect to the designated payments systems and non-exempt participants therein.

(c) Collection of information. The Office of Management and Budget (OMB) has approved the collection of information requirements in this part for the Department of the Treasury and assigned OMB control number 1505-0204. The Board has approved the collection of information requirements in this part under the authority delegated to the Board by OMB, and assigned OMB control number 7100-0317.

(d) Incorporation by reference—relevant definitions from ACH rules. (1) This part incorporates by reference the relevant definitions of ACH terms as published in the “2008 ACH Rules: A Complete Guide to Rules & Regulations Governing the ACH Network” (the “ACH Rules”). The Director of the Federal Register approves this incorporation by reference in accordance with 5 U.S.C. 552(a) and 1 CFR part 51. Copies of the “2008 ACH Rules” are available from the National Automated Clearing House Association, Suite 100, 13450 Sunrise Valley Drive, Herndon, Virginia 20171, http://nacha.org, (703) 561-1100. Copies also are available for public inspection at the Department of Treasury Library, Room 1428, Main Treasury Building, 1500 Pennsylvania Avenue, NW., Washington, DC 20220, and the National Archives and Records Administration (NARA). Before visiting the Treasury library, you must call (202) 622-0990 for an appointment. For information on the availability of this material at NARA, call (202) 741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html 20002.

(2) Any amendment to definitions of the relevant ACH terms in the ACH Rules shall not apply to this part unless the Treasury and the Board jointly accept such amendment by publishing notice of acceptance of the amendment to this part in the Federal Register. An amendment to the definition of a relevant ACH term in the ACH Rules that is accepted by the Treasury and the Board shall apply to this part on the effective date of the rulemaking specified by the Treasury and the Board in the joint Federal Register notice expressly accepting such amendment.

§ 132.2 - Definitions.

The following definitions apply solely for purposes of this part:

(a) Actual knowledge with respect to a transaction or commercial customer means when a particular fact with respect to that transaction or commercial customer is known by or brought to the attention of:

(1) An individual in the organization responsible for the organization's compliance function with respect to that transaction or commercial customer; or

(2) An officer of the organization.

(b) Automated clearing house system or ACH system means a funds transfer system, primarily governed by the ACH Rules, which provides for the clearing and settlement of batched electronic entries for participating financial institutions. When referring to ACH systems, the terms in this regulation (such as “originating depository financial institution,” “operator,” “originating gateway operator,” “receiving depository financial institution,” “receiving gateway operator,” and “third-party sender”) are defined as those terms are defined in the ACH Rules.

(c) Bet or wager. (1) Means the staking or risking by any person of something of value upon the outcome of a contest of others, a sporting event, or a game subject to chance, upon an agreement or understanding that the person or another person will receive something of value in the event of a certain outcome;

(2) Includes the purchase of a chance or opportunity to win a lottery or other prize (which opportunity to win is predominantly subject to chance);

(3) Includes any scheme of a type described in 28 U.S.C. 3702;

(4) Includes any instructions or information pertaining to the establishment or movement of funds by the bettor or customer in, to, or from an account with the business of betting or wagering (which does not include the activities of a financial transaction provider, or any interactive computer service or telecommunications service); and

(5) Does not include—

(i) Any activity governed by the securities laws (as that term is defined in section 3(a)(47) of the Securities Exchange Act of 1934 (15 U.S.C. 78c(a)(47)) for the purchase or sale of securities (as that term is defined in section 3(a)(10) of that act (15 U.S.C. 78c(a)(10));

(ii) Any transaction conducted on or subject to the rules of a registered entity or exempt board of trade under the Commodity Exchange Act (7 U.S.C. 1 et seq.);

(iii) Any over-the-counter derivative instrument;

(iv) Any other transaction that—

(A) Is excluded or exempt from regulation under the Commodity Exchange Act (7 U.S.C. 1 et seq.); or

(B) Is exempt from State gaming or bucket shop laws under section 12(e) of the Commodity Exchange Act (7 U.S.C. 16(e)) or section 28(a) of the Securities Exchange Act of 1934 (15 U.S.C. 78bb(a));

(v) Any contract of indemnity or guarantee;

(vi) Any contract for insurance;

(vii) Any deposit or other transaction with an insured depository institution;

(viii) Participation in any game or contest in which participants do not stake or risk anything of value other than—

(A) Personal efforts of the participants in playing the game or contest or obtaining access to the Internet; or

(B) Points or credits that the sponsor of the game or contest provides to participants free of charge and that can be used or redeemed only for participation in games or contests offered by the sponsor; or

(ix) Participation in any fantasy or simulation sports game or educational game or contest in which (if the game or contest involves a team or teams) no fantasy or simulation sports team is based on the current membership of an actual team that is a member of an amateur or professional sports organization (as those terms are defined in 28 U.S.C. 3701) and that meets the following conditions:

(A) All prizes and awards offered to winning participants are established and made known to the participants in advance of the game or contest and their value is not determined by the number of participants or the amount of any fees paid by those participants.

(B) All winning outcomes reflect the relative knowledge and skill of the participants and are determined predominantly by accumulated statistical results of the performance of individuals (athletes in the case of sports events) in multiple real-world sporting or other events.

(C) No winning outcome is based—

(1) On the score, point-spread, or any performance or performances of any single real-world team or any combination of such teams, or

(2) Solely on any single performance of an individual athlete in any single real-world sporting or other event.

(d) Block means to reject a particular transaction before or during processing, but it does not require freezing or otherwise prohibiting subsequent transfers or transactions regarding the proceeds or account.

(e) Card issuer means any person who issues a credit card, debit card, pre-paid card, or stored value card, or the agent of such person with respect to such card.

(f) Card system means a system for authorizing, clearing and settling transactions in which credit cards, debit cards, pre-paid cards, or stored value cards (such cards being issued or authorized by the operator of the system), are used to purchase goods or services or to obtain a cash advance. The term includes systems both in which the merchant acquirer, card issuer, and system operator are separate entities and in which more than one of these roles are performed by the same entity.

(g) Check clearing house means an association of banks or other payors that regularly exchange checks for collection or return.

(h) Check collection system means an interbank system for collecting, presenting, returning, and settling for checks or intrabank system for settling for checks deposited in and drawn on the same bank. When referring to check collection systems, the terms in this regulation (such as “paying bank,” “collecting bank,” “depositary bank,” “returning bank,” and “check”) are defined as those terms are defined in 12 CFR 229.2. For purposes of this part, “check” also includes an electronic representation of a check that a bank agrees to handle as a check.

(i) Commercial customer means a person that is not a consumer and that contracts with a non-exempt participant in a designated payment system to receive, or otherwise accesses, payment transaction services through that non-exempt participant.

(j) Consumer means a natural person.

(k) Designated payment system means a system listed in § 132.3.

(l) Electronic fund transfer has the same meaning given the term in section 903 of the Electronic Fund Transfer Act (15 U.S.C. 1693a), except that such term includes transfers that would otherwise be excluded under section 903(6)(E) of that act (15 U.S.C. 1693a(6)(E)), and includes any funds transfer covered by Article 4A of the Uniform Commercial Code, as in effect in any State.

(m) Financial institution means a State or national bank, a State or Federal savings and loan association, a mutual savings bank, a State or Federal credit union, or any other person that, directly or indirectly, holds an account belonging to a consumer. The term does not include a casino, sports book, or other business at or through which bets or wagers may be placed or received.

(n) Financial transaction provider means a creditor, credit card issuer, financial institution, operator of a terminal at which an electronic fund transfer may be initiated, money transmitting business, or international, national, regional, or local payment network utilized to effect a credit transaction, electronic fund transfer, stored value product transaction, or money transmitting service, or a participant in such network, or other participant in a designated payment system.

(o) Foreign banking office means:

(1) Any non-U.S. office of a financial institution; and

(2) Any non-U.S. office of a foreign bank as described in 12 U.S.C. 3101(7).

(p) Interactive computer service means any information service, system, or access software provider that provides or enables computer access by multiple users to a computer server, including specifically a service or system that provides access to the Internet and such systems operated or services offered by libraries or educational institutions.

(q) Internet means the international computer network of interoperable packet switched data networks.

(r) Internet gambling business means the business of placing, receiving or otherwise knowingly transmitting a bet or wager by any means which involves the use, at least in part, of the Internet, but does not include the performance of the customary activities of a financial transaction provider, or any interactive computer service or telecommunications service.

(s) Intrastate transaction means placing, receiving, or otherwise transmitting a bet or wager where—

(1) The bet or wager is initiated and received or otherwise made exclusively within a single State;

(2) The bet or wager and the method by which the bet or wager is initiated and received or otherwise made is expressly authorized by and placed in accordance with the laws of such State, and the State law or regulations include—

(i) Age and location verification requirements reasonably designed to block access to minors and persons located out of such State; and

(ii) Appropriate data security standards to prevent unauthorized access by any person whose age and current location has not been verified in accordance with such State's law or regulations; and

(3) The bet or wager does not violate any provision of—

(i) The Interstate Horseracing Act of 1978 (15 U.S.C. 3001 et seq.);

(ii) 28 U.S.C. chapter 178 (professional and amateur sports protection);

(iii) The Gambling Devices Transportation Act (15 U.S.C. 1171 et seq.); or

(iv) The Indian Gaming Regulatory Act (25 U.S.C. 2701 et seq.).

(t) Intratribal transaction means placing, receiving or otherwise transmitting a bet or wager where—

(1) The bet or wager is initiated and received or otherwise made exclusively—

(i) Within the Indian lands of a single Indian tribe (as such terms are defined under the Indian Gaming Regulatory Act (25 U.S.C. 2703)); or

(ii) Between the Indian lands of two or more Indian tribes to the extent that intertribal gaming is authorized by the Indian Gaming Regulatory Act (25 U.S.C. 2701 et seq.);

(2) The bet or wager and the method by which the bet or wager is initiated and received or otherwise made is expressly authorized by and complies with the requirements of—

(i) The applicable tribal ordinance or resolution approved by the Chairman of the National Indian Gaming Commission; and

(ii) With respect to class III gaming, the applicable Tribal-State compact;

(3) The applicable tribal ordinance or resolution or Tribal-State compact includes—

(i) Age and location verification requirements reasonably designed to block access to minors and persons located out of the applicable Tribal lands; and

(ii) Appropriate data security standards to prevent unauthorized access by any person whose age and current location has not been verified in accordance with the applicable tribal ordinance or resolution or Tribal-State Compact; and

(4) The bet or wager does not violate any provision of—

(i) The Interstate Horseracing Act of 1978 (15 U.S.C. 3001 et seq.);

(ii) 28 U.S.C. chapter 178 (professional and amateur sports protection);

(iii) The Gambling Devices Transportation Act (15 U.S.C. 1171 et seq.); or

(iv) The Indian Gaming Regulatory Act (25 U.S.C. 2701 et seq.).

(u) Money transmitting business has the meaning given the term in 31 U.S.C. 5330(d)(1) (determined without regard to any regulations prescribed by the Secretary of the Treasury thereunder).

(v) Operator of a designated payment system means an entity that provides centralized clearing and delivery services between participants in the designated payment system and maintains the operational framework for the system. In the case of an automated clearinghouse system, the term “operator” has the same meaning as provided in the ACH Rules.

(w) Participant in a designated payment system means an operator of a designated payment system, a financial transaction provider that is a member of, or has contracted for financial transaction services with, or is otherwise participating in, a designated payment system, or a third-party processor. This term does not include a customer of the financial transaction provider, unless the customer is also a financial transaction provider otherwise participating in the designated payment system on its own behalf.

(x) Reasoned legal opinion means a written expression of professional judgment by a State-licensed attorney that addresses the facts of a particular client's business and the legality of the client's provision of its services to relevant customers in the relevant jurisdictions under applicable federal and State law, and, in the case of intratribal transactions, applicable tribal ordinances, tribal resolutions, and Tribal-State compacts. A written legal opinion will not be considered “reasoned” if it does nothing more than recite the facts and express a conclusion.

(y) Restricted transaction means any of the following transactions or transmittals involving any credit, funds, instrument, or proceeds that the Act prohibits any person engaged in the business of betting or wagering (which does not include the activities of a financial transaction provider, or any interactive computer service or telecommunications service) from knowingly accepting, in connection with the participation of another person in unlawful Internet gambling—

(1) Credit, or the proceeds of credit, extended to or on behalf of such other person (including credit extended through the use of a credit card);

(2) An electronic fund transfer, or funds transmitted by or through a money transmitting business, or the proceeds of an electronic fund transfer or money transmitting service, from or on behalf of such other person; or

(3) Any check, draft, or similar instrument that is drawn by or on behalf of such other person and is drawn on or payable at or through any financial institution.

(z) State means any State of the United States, the District of Columbia, or any commonwealth, territory, or other possession of the United States, including the Commonwealth of Puerto Rico, the Commonwealth of the Northern Mariana Islands, American Samoa, Guam, and the Virgin Islands.

(aa) Third-party processor means a service provider that—

(1) In the case of a debit transaction payment, such as an ACH debit entry or card system transaction, has a direct relationship with the commercial customer that is initiating the debit transfer transaction and acts as an intermediary between the commercial customer and the first depository institution to handle the transaction;

(2) In the case of a credit transaction payment, such as an ACH credit entry, has a direct relationship with the commercial customer that is to receive the proceeds of the credit transfer and acts as an intermediary between the commercial customer and the last depository institution to handle the transaction; and

(3) In the case of a cross-border ACH debit or check collection transaction, is the first service provider located within the United States to receive the ACH debit instructions or check for collection.

(bb) Unlawful Internet gambling means to place, receive, or otherwise knowingly transmit a bet or wager by any means which involves the use, at least in part, of the Internet where such bet or wager is unlawful under any applicable Federal or State law in the State or Tribal lands in which the bet or wager is initiated, received, or otherwise made. The term does not include placing, receiving, or otherwise transmitting a bet or wager that is excluded from the definition of this term by the Act as an intrastate transaction or an intra-tribal transaction, and does not include any activity that is allowed under the Interstate Horseracing Act of 1978 (15 U.S.C. 3001 et seq.; see § 132.1(a)). The intermediate routing of electronic data shall not determine the location or locations in which a bet or wager is initiated, received, or otherwise made.

(cc) Wire transfer system means a system through which an unconditional order to a bank to pay a fixed or determinable amount of money to a beneficiary upon receipt, or on a day stated in the order, is transmitted by electronic or other means through the network, between banks, or on the books of a bank. When referring to wire transfer systems, the terms in this regulation (such as “bank,” “originator's bank,” “beneficiary's bank,” and “intermediary bank”) are defined as those terms are defined in 12 CFR part 210, appendix B.

§ 132.3 - Designated payment systems.

The following payment systems could be used by participants in connection with, or to facilitate, a restricted transaction:

(a) Automated clearing house systems;

(b) Card systems;

(c) Check collection systems;

(d) Money transmitting businesses solely to the extent they

(1) Engage in the transmission of funds, which does not include check cashing, currency exchange, or the issuance or redemption of money orders, travelers' checks, and other similar instruments; and

(2) Permit customers to initiate transmission of funds transactions remotely from a location other than a physical office of the money transmitting business; and

(e) Wire transfer systems.

§ 132.4 - Exemptions.

(a) Automated clearing house systems. The participants processing a particular transaction through an automated clearing house system are exempt from this regulation's requirements for establishing written policies and procedures reasonably designed to prevent or prohibit restricted transactions with respect to that transaction, except for—

(1) The receiving depository financial institution and any third-party processor receiving the transaction on behalf of the receiver in an ACH credit transaction;

(2) The originating depository financial institution and any third-party processor initiating the transaction on behalf of the originator in an ACH debit transaction; and

(3) The receiving gateway operator and any third-party processor that receives instructions for an ACH debit transaction directly from a foreign sender (which could include a foreign banking office, a foreign third-party processor, or a foreign originating gateway operator).

(b) Check collection systems. The participants in a particular check collection through a check collection system are exempt from this regulation's requirements for establishing written policies and procedures reasonably designed to prevent or prohibit restricted transactions with respect to that check collection, except for the depositary bank.

(c) Money transmitting businesses. The participants in a money transmitting business are exempt from this regulation's requirements for establishing written policies and procedures reasonably designed to prevent or prohibit restricted transactions, except for the operator.

(d) Wire transfer systems. The participants in a particular wire transfer through a wire transfer system are exempt from this regulation's requirements for establishing written policies and procedures reasonably designed to prevent or prohibit restricted transactions with respect to that transaction, except for the beneficiary's bank.

§ 132.5 - Policies and procedures required.

(a) All non-exempt participants in designated payment systems shall establish and implement written policies and procedures reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions.

(b) A non-exempt financial transaction provider participant in a designated payment system shall be considered to be in compliance with the requirements of paragraph (a) of this section if—

(1) It relies on and complies with the written policies and procedures of the designated payment system that are reasonably designed to—

(i) Identify and block restricted transactions; or

(ii) Otherwise prevent or prohibit the acceptance of the products or services of the designated payment system or participant in connection with restricted transactions; and

(2) Such policies and procedures of the designated payment system comply with the requirements of this part.

(c) For purposes of paragraph (b)(2) in this section, a participant in a designated payment system may rely on a written statement or notice by the operator of that designated payment system to its participants that states that the operator has designed or structured the system's policies and procedures for identifying and blocking or otherwise preventing or prohibiting restricted transactions to comply with the requirements of this part as conclusive evidence that the system's policies and procedures comply with the requirements of this part, unless the participant is notified otherwise by its Federal functional regulator or, in the case of participants that are not directly supervised by a Federal functional regulator, the Federal Trade Commission.

(d) As provided in the Act, a person that identifies and blocks a transaction, prevents or prohibits the acceptance of its products or services in connection with a transaction, or otherwise refuses to honor a transaction, shall not be liable to any party for such action if—

(1) The transaction is a restricted transaction;

(2) Such person reasonably believes the transaction to be a restricted transaction; or

(3) The person is a participant in a designated payment system and blocks or otherwise prevents the transaction in reliance on the policies and procedures of the designated payment system in an effort to comply with this regulation.

(e) Nothing in this part requires or is intended to suggest that designated payment systems or participants therein must or should block or otherwise prevent or prohibit any transaction in connection with any activity that is excluded from the definition of “unlawful Internet gambling” in the Act as an intrastate transaction, an intratribal transaction, or a transaction in connection with any activity that is allowed under the Interstate Horseracing Act of 1978 (15 U.S.C. 3001 et seq.; see § 132.1(a)).

(f) Nothing in this part modifies any requirement imposed on a participant by other applicable law or regulation to file a suspicious activity report to the appropriate authorities.

(g) The requirement of this part to establish and implement written policies and procedures applies only to the U.S. offices of participants in designated payment systems.

§ 132.6 - Non-exclusive examples of policies and procedures.

(a) In general. The examples of policies and procedures to identify and block or otherwise prevent or prohibit restricted transactions set out in this section are non-exclusive. In establishing and implementing written policies and procedures to identify and block or otherwise prevent or prohibit restricted transactions, a non-exempt participant in a designated payment system is permitted to design and implement policies and procedures tailored to its business that may be different than the examples provided in this section. In addition, non-exempt participants may use different policies and procedures with respect to different business lines or different parts of the organization.

(b) Due diligence. If a non-exempt participant in a designated payment system establishes and implements procedures for due diligence of its commercial customer accounts or commercial customer relationships in order to comply, in whole or in part, with the requirements of this regulation, those due diligence procedures will be deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions if the procedures include the steps set out in paragraphs (b)(1), (b)(2), and (b)(3) of this section and subject to paragraph (b)(4) of this section.

(1) At the establishment of the account or relationship, the participant conducts due diligence of a commercial customer and its activities commensurate with the participant's judgment of the risk of restricted transactions presented by the customer's business.

(2) Based on its due diligence, the participant makes a determination regarding the risk the commercial customer presents of engaging in an Internet gambling business and follows either paragraph (b)(2)(i) or (b)(2)(ii) of this section.

(i) The participant determines that the commercial customer presents a minimal risk of engaging in an Internet gambling business.

(ii) The participant cannot determine that the commercial customer presents a minimal risk of engaging in an Internet gambling business, in which case it obtains the documentation in either paragraph (b)(2)(ii)(A) or (b)(2)(ii)(B) of this section—

(A) Certification from the commercial customer that it does not engage in an Internet gambling business; or

(B) If the commercial customer does engage in an Internet gambling business, each of the following—

(1) Evidence of legal authority to engage in the Internet gambling business, such as—

(i) A copy of the commercial customer's license that expressly authorizes the customer to engage in the Internet gambling business issued by the appropriate State or Tribal authority or, if the commercial customer does not have such a license, a reasoned legal opinion that demonstrates that the commercial customer's Internet gambling business does not involve restricted transactions; and

(ii) A written commitment by the commercial customer to notify the participant of any changes in its legal authority to engage in its Internet gambling business.

(2) A third-party certification that the commercial customer's systems for engaging in the Internet gambling business are reasonably designed to ensure that the commercial customer's Internet gambling business will remain within the licensed or otherwise lawful limits, including with respect to age and location verification.

(3) The participant notifies all of its commercial customers, through provisions in the account or commercial customer relationship agreement or otherwise, that restricted transactions are prohibited from being processed through the account or relationship.

(4) With respect to the determination in paragraph (b)(2)(i) of this section, participants may deem the following commercial customers to present a minimal risk of engaging in an Internet gambling business—

(i) An entity that is directly supervised by a Federal functional regulator as set out in § 132.7(a); or

(ii) An agency, department, or division of the Federal government or a State government.

(c) Automated clearing house system examples. (1) The policies and procedures of the originating depository financial institution and any third party processor in an ACH debit transaction, and the receiving depository financial institution and any third party processor in an ACH credit transaction, are deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions if they—

(i) Address methods to conduct due diligence in establishing a commercial customer account or relationship as set out in § 132.6(b);

(ii) Address methods to conduct due diligence as set out in § 132.6(b)(2)(ii)(B) in the event that the participant has actual knowledge that an existing commercial customer of the participant engages in an Internet gambling business; and

(iii) Include procedures to be followed with respect to a commercial customer if the originating depository financial institution or third-party processor has actual knowledge that its commercial customer has originated restricted transactions as ACH debit transactions or if the receiving depository financial institution or third-party processor has actual knowledge that its commercial customer has received restricted transactions as ACH credit transactions, such as procedures that address—

(A) The circumstances under which the commercial customer should not be allowed to originate ACH debit transactions or receive ACH credit transactions; and

(B) The circumstances under which the account should be closed.

(2) The policies and procedures of a receiving gateway operator and third-party processor that receives instructions to originate an ACH debit transaction directly from a foreign sender are deemed to be reasonably designed to prevent or prohibit restricted transactions if they include procedures to be followed with respect to a foreign sender if the receiving gateway operator or third-party processor has actual knowledge, obtained through notification by a government entity, such as law enforcement or a regulatory agency, that such instructions included instructions for restricted transactions. Such procedures may address sending notification to the foreign sender, such as in the form of the notice contained in appendix A to this part.

(d) Card system examples. The policies and procedures of a card system operator, a merchant acquirer, third-party processor, or a card issuer, are deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions, if the policies and procedures—

(1) Provide for either—

(i) Methods to conduct due diligence—

(A) In establishing a commercial customer account or relationship as set out in § 132.6(b); and

(B) As set out in § 132.6(b)(2)(ii)(B) in the event that the participant has actual knowledge that an existing commercial customer of the participant engages in an Internet gambling business; or

(ii) Implementation of a code system, such as transaction codes and merchant/business category codes, that are required to accompany the authorization request for a transaction, including—

(A) The operational functionality to enable the card system operator or the card issuer to reasonably identify and deny authorization for a transaction that the coding procedure indicates may be a restricted transaction; and

(B) Procedures for ongoing monitoring or testing by the card system operator to detect potential restricted transactions, including—

(1) Conducting testing to ascertain whether transaction authorization requests are coded correctly; and

(2) Monitoring and analyzing payment patterns to detect suspicious payment volumes from a merchant customer; and

(2) For the card system operator, merchant acquirer, or third-party processor, include procedures to be followed when the participant has actual knowledge that a merchant has received restricted transactions through the card system, such as—

(i) The circumstances under which the access to the card system for the merchant, merchant acquirer, or third-party processor should be denied; and

(ii) The circumstances under which the merchant account should be closed.

(e) Check collection system examples. (1) The policies and procedures of a depositary bank are deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions, if they—

(i) Address methods for the depositary bank to conduct due diligence in establishing a commercial customer account or relationship as set out in § 132.6(b);

(ii) Address methods for the depositary bank to conduct due diligence as set out in § 132.6(b)(2)(ii)(B) in the event that the depositary bank has actual knowledge that an existing commercial customer engages in an Internet gambling business; and

(iii) Include procedures to be followed if the depositary bank has actual knowledge that a commercial customer of the depositary bank has deposited checks that are restricted transactions, such as procedures that address—

(A) The circumstances under which check collection services for the customer should be denied; and

(B) The circumstances under which the account should be closed.

(2) The policies and procedures of a depositary bank that receives checks for collection from a foreign banking office are deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions if they include procedures to be followed by the depositary bank when it has actual knowledge, obtained through notification by a government entity, such as law enforcement or a regulatory agency, that a foreign banking office has sent checks to the depositary bank that are restricted transactions. Such procedures may address sending notification to the foreign banking office, such as in the form of the notice contained in the appendix to this part.

(f) Money transmitting business examples. The policies and procedures of an operator of a money transmitting business are deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions if they—

(1) Address methods for the operator to conduct due diligence in establishing a commercial customer relationship as set out in § 132.6(b);

(2) Address methods for the operator to conduct due diligence as set out in § 132.6(b)(2)(ii)(B) in the event that the operator has actual knowledge that an existing commercial customer engages in an Internet gambling business;

(3) Include procedures regarding ongoing monitoring or testing by the operator to detect potential restricted transactions, such as monitoring and analyzing payment patterns to detect suspicious payment volumes to any recipient; and

(4) Include procedures when the operator has actual knowledge that a commercial customer of the operator has received restricted transactions through the money transmitting business, that address—

(i) The circumstances under which money transmitting services should be denied to that commercial customer; and

(ii) The circumstances under which the commercial customer account should be closed.

(g) Wire transfer system examples. The policies and procedures of the beneficiary's bank in a wire transfer are deemed to be reasonably designed to identify and block or otherwise prevent or prohibit restricted transactions if they—

(1) Address methods for the beneficiary's bank to conduct due diligence in establishing a commercial customer account as set out in § 132.6(b);

(2) Address methods for the beneficiary's bank to conduct due diligence as set out in § 132.6(b)(2)(ii)(B) in the event that the beneficiary's bank has actual knowledge that an existing commercial customer of the bank engages in an Internet gambling business;

(3) Include procedures to be followed if the beneficiary's bank obtains actual knowledge that a commercial customer of the bank has received restricted transactions through the wire transfer system, such as procedures that address

(i) The circumstances under which the beneficiary bank should deny wire transfer services to the commercial customer; and

(ii) The circumstances under which the commercial customer account should be closed.

§ 132.7 - Regulatory enforcement.

The requirements under this part are subject to the exclusive regulatory enforcement of—

(a) The Federal functional regulators, with respect to the designated payment systems and participants therein that are subject to the respective jurisdiction of such regulators under section 505(a) of the Gramm-Leach-Bliley Act (15 U.S.C. 6805(a)) and section 5g of the Commodity Exchange Act (7 U.S.C. 7b-2); and

(b) The Federal Trade Commission, with respect to designated payment systems and participants therein not otherwise subject to the jurisdiction of any Federal functional regulators (including the Commission) as described in paragraph (a) of this section.

Appendix A - Appendix A to Part 132—Model Notice

[Date] [Name of foreign sender or foreign banking office] [Address] Re: U.S. Unlawful Internet Gambling Enforcement Act Notice Dear [Name of foreign counterparty]:

On [date], U.S. government officials informed us that your institution processed payments through our facilities for Internet gambling transactions restricted by U.S. law on [dates, recipients, and other relevant information if available].

We provide this notice to comply with U.S. Government regulations implementing the Unlawful Internet Gambling Enforcement Act of 2006 (Act), a U.S. federal law. Our policies and procedures established in accordance with those regulations provide that we will notify a foreign counterparty if we learn that the counterparty has processed payments through our facilities for Internet gambling transactions restricted by the Act. This notice ensures that you are aware that we have received information that your institution has processed payments for Internet gambling restricted by the Act.

The Act is codified in subchapter IV, chapter 53, title 31 of the U.S. Code (31 U.S.C. 5361 et seq.). Implementing regulations that duplicate one another can be found at part 233 of title 12 of the U.S. Code of Federal Regulations (12 CFR part 233) and part 132 of title 31 of the U.S. Code of Federal Regulations (31 CFR part 132).