Payments & Operations

Domain ID	BD06
Owner	Head of Payments
Systems	SD01 · SD04
Repos	bank-core, bank-payments
Applicability	Platform — SD04 delivers payment processing, fraud controls, and FX capability. In Track 2 the tenant is the scheme participant; the platform processes payments on their behalf.

Payment processing, card operations, settlement, fraud prevention, and real-time ledger posting.

Functions

Domestic payment processing (NZ/AU) · Real-time payments (NPP / Payments NZ) · Card operations & scheme management · Cross-border & FX settlement · Fraud operations & prevention · Ledger posting & reconciliation

Key systems

• SD01 Core Banking — real-time ledger posting, balance engine
• SD04 Payments Platform — payment gateway, fraud detection, FX settlement

Regulatory highlights

NPP Rules (AU) and Payments NZ rules govern real-time payment participation. PCI DSS 4.0 applies to all cardholder data. AU Scam-Safe Accord (2023) introduces scam reimbursement obligations.

Risk domains

• D06 Payments & Settlement
• D03 AML / Financial Crime
• D09 Operational Resilience

Policies owned

• PAY-001 — Payment Operations Policy
• PAY-002 — Settlement Risk Policy
• PAY-003 — Card Scheme Compliance Policy
• PAY-005 — Payment Fraud Prevention Policy
• PAY-006 — PCI DSS Compliance Policy
• PAY-008 — Payment Routing, Sponsor & Card-Scheme Abstraction Policy
• PAY-009 — Payment Exceptions, Returns & Reversals Policy
• PAY-010 — Open Banking & API access

Policies applicable

• AML-008 — Cross-Border Transfer Reporting Policy
• OPS-004 — Operational Risk Policy
• PAY-004 — Cross-Border Payments & FX Policy

---

Compiled 2026-05-22 from source/entities/business-domains/BD06.yaml