Frequently Asked Questions

Carta Worldwide FAQs

When was Carta Worldwide founded?

Carta Worldwide was founded in 2008 in its headquarters in Toronto, Ontario, Canada

Where is Carta Worldwide based?

Carta Worldwide has its Canadian headquarters in Toronto, as well as offices in London, Casablanca, and Charlottetown, PEI.

Does Carta Worldwide have a parent company?

Yes, Carta Worldwide is owned by Vancouver based Mogo Inc. following an acquisition in early 2021.

Mogo is a Canadian fintech with a mission to bring financial health and substantiable financial solutions to the market. While Carta Worldwide continues to operate as an independent business providing technology and services globally, the combined organizations bring together a powerful level of partnership to accelerate product innovation and reach.

Carta Worldwide Platform FAQs

Where can Carta Worldwide process?

Carta Worldwide are currently certified to process in EU, Canada, USA, Caribbean, Australia, New Zealand, Hong Kong, Singapore and Japan, with more regions coming onboard shortly.

What type of processing does Carta Worldwide provide?

Carta Worldwide is an issuer processor offering both card management and account management processing functionality, operating either as the System of Record for balances or as a switch by passing the authorisation messages through to an external client account management system. Carta Worldwide has clients operating a combination of the two models, where Carta Worldwide holds the balance but the client is in the authorisation flow and makes the decision as to whether to approve the transaction or not.

Does Carta Worldwide support mobile payments?

Carta Worldwide is certified with MDES and VTS to support all major mobile payment solutions: ApplePay, SamsungPay, AndroidPay, etc.

In fact, Carta Worldwide was part of the development team that produced ApplePay and was the first processor in the world to perform an ApplePay transaction.

Does Carta Worldwide provide virtual cards?

Yes, Carta Worldwide can provide virtual, mobile and physical cards.

Does Carta Worldwide process Debit, Prepaid and Credit?

Carta Worldwide are certified to process, Debit, Prepaid and Credit.

Which schemes does Carta Worldwide work with?

Carta Worldwide is certified and live with Visa and Mastercard in Europe, North America, and Asia Pacific regions.

Does Carta Worldwide have an admin portal?

Yes, Carta Worldwide provides an Administration Portal that allows our clients to manage the configuration of their programs and to support all standard Customer Servicing tasks.

What authorisation interfaces does Carta Worldwide use?

Carta has both ISO and JSON external authorisation interfaces.

What domain restrictions does Carta Worldwide have?

Domain Restrictions are a mechanism that allows apply real-time spending restrictions or enablement to be applied at a sub-account/product level, and at a per customer level. Typically they are set-up at the Project Delivery stage but all aspects can be managed by API or in bulk by batch files.

The Domain Restrictions are comprised of combinations of the following data elements: Network/Scheme, MCC, Country, Currency, POS Entry Mode, and Merchant List

Does Carta Worldwide support 3DS?

Carta Worldwide works with best in class third party providers to enable 3DS for our clients.

Does Carta Worldwide provide Fraud Management?

The Carta Worldwide Fraud Portal is a tool that can be used to view and monitor the fraud alerts which were chosen or inputted by clients and set up on the Carta Worldwide Platform on the Program implementation level.

Fraud alerts are generated by a rules-based algorithm in the system, intended to spot different behaviour patterns which may indicate fraudulent activities occurring during the transactional use of cards. Rules can be set up by clients to either just alert or to alert and auto-suspend.

Can Carta Worldwide provide Just-in-Time (JIT) funding solutions?

Yes, Carta Worldwide can support JIT funding programs.

Compliance FAQs

Is Carta Worldwide PCI DSS Level One compliant?

Yes, Carta Worldwide is PCI DSS Level One compliant. Being PCI level 1 compliant ensures that the highest level of security is in place for the protection of cardholder data. These protective measures are all verified by a third party QSA during an intensive validation process.

Is Carta Worldwide SOC1 and SOC2 compliant?

Yes, Carta Worldwide is SOC1 and SOC2 compliant. SOC compliance was a voluntary assessment that Carta Worldwide underwent which was developed by the American Institute of CPAs and specifies how organizations should manage customer data. This standard is based on security, availability, processing integrity, confidentiality, and privacy.