This document outlines the process for credit card issuers to update Anti-Money Laundering (AML) rules related to Merchant Category Code (MCC) allow/block lists.
Prerequisites
Ensure you have been assigned the AML ADMIN role. This is a sensitive permission and should only be granted to trusted personnel. When this role is assigned, notifications are sent to all users with the COMPLIANCE role to maintain transparency and an audit trail.
Navigating to MCC Administration
- Log in to the system.
- Go to Platform → MCC Administration.
- You will see a grid displaying the following columns:
- MCC: The Merchant Category Code.
- Description: A brief explanation of the MCC.
- Blocked: Roles that are restricted from transacting with this MCC.
- Allowed: Roles permitted to transact with this MCC.
Note: For issuers, the only applicable role is ‘everyone’.
Making Changes
- Hover over the row you wish to modify.
- Click the edit icon on the right side of the row.
- Modify the ‘everyone’ role by adding or removing it from the Allow or Block lists as needed.
- Click the green check mark to save changes or the red X to cancel.
Changes will take effect across all issuer-related tenants within approximately 5 minutes.
Bypassing Global MCC Rules
Some customers may require an exception from the global MCC rules. To accommodate this:
- Grant the feature Operations/DisableCalMCCAutomations to the specific tenants that should be exempt from global MCC lists.
- To request this, open a support ticket by emailing support@custodia.co.il, specifying the tenant to which the feature should be applied (enterprise-level only).
Note: to see how to do this as a tenant please go to How do I update MCC Allow/Block lists for tenants?