This guide is designed to assist you, a Corporate Card Programme Administrator, to keep your Bank of America Merrill Lynch Corporate Card programme running smoothly. Please ensure that a copy of this guide is available within your organisation, and is shared with the relevant people supporting your card programme. Contents 1. How to Contact Bank of America Merrill Lynch 3 1. Programme Administrator Contact Details 2. Cardholder and Card Activation Contact Details 3. Correspondence Addresses 2. Servicing 4 1. Self-Service Transactions 2. Cardholders 3. Programme Administrators 4. Cardholder Emergencies 5. Data Privacy Notice 3. Contactless 5 4. Cards and Cardholders 5 1. Activation 2. Cardholder Payments 3. Lost or Stolen Cards 4. Cardholder Language Codes 5. Online PIN Check 6. Refunds for Cards in Credit 5. Making Payments 6 1. Payment Processing Times 6. Insurance and Assistance 7 1. Travel Insurance 2. Cardholder Misuse Protection 7. Using the Global Reporting and Account Management Tool 7 1. Getting Access to the Online Tool 2. Logging in to the Online Tool 3. Password Rules 4. Password Security Question 5. Dual Authentication 6. Why is my User ID Locked? 7. What Should I Do if I Forget my Password? 8. How to View/Download Your Statement 9. How to View Transactional Activity 10. User Management EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 2
1. How to contact Bank of America Merrill Lynch 1. Programme Administrator Contact Details A dedicated team supports Programme Administrators with any queries about their company programme, the Global Reporting and Account Management (GRAM) tool, and file delivery processes. Any additional training on GRAM should be requested through this team. To help protect our Clients and the disclosure of sensitive company information, Programme Administrators will be asked at the beginning of each call to provide their password and may be asked to answer additional verification questions. Dedicated Service Director (DSD) U.K. Support Team 08:00 to 18:00 U.K. Time Monday through Friday EMEA Card Technical Help Desk 08:00 to 18:00 U.K. Time Monday through Friday The email and telephone contact details for your Dedicated Service Director will be provided to you directly. For assistance with Programme Administrator queries of a technical nature relating to systems, file feed processes or access issues, please call International Direct Dial +44 (0) 208 313 2700 (Select option 1) These contact details are for Programme Administrators only, and should not be shared with cardholders for general enquiries. 2. Cardholder and Card Activation Contact Details Cardholders should call the numbers below to speak to a servicing representative for support. These numbers also appear on the reverse of the card, on statements and other collateral. Cardholders can call to obtain details on balances, credit limits, available credit, payments due, recent transactions, and make payments via our automated system by providing their debit card details. Global Card Services 24 hours a day Monday through Friday (Enquiries for Lost/Stolen Cards and Cardholder Emergencies are supported 24/7) International Free phone 00800 0456 7890 Or International Direct Dial +44 (0)207 839 1481 Support is available in English, French, German, Italian and Spanish. 3. Correspondence Address If you need to write to us, please use the following address: Programme Administration Bank of America Merrill Lynch AFC Chester Business Park Chester CH4 9FB United Kingdom EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 3
2. Servicing 1. Self-Service Transactions Ordering new or replacement cards (Please refer to page 6 for lost or stolen cards) Changing credit limits on cards Card closures Viewing the last 13 statements Maintaining cardholder information Reviewing the last 30 days of authorization activity These activities can be completed online using the Global Reporting and Account Management tool 2. Cardholders Card Activation Lost/stolen cards Available credit, outstanding balances, enquiries related to payments and transactions Declined transactions New or reissued cards not received Unauthorised or disputed transactions Global Card Services International Free phone 00800 0456 7890 Or International Direct Dial +44 (0)207 839 1481 3. Programme Administrators Adding/amending/deleting Programme Administrators Queries concerning payments Lost and stolen cards Company credit limit amendments Company name change Setting up or cancelling direct debits Credit balance refunds Global Reporting and Account Management queries Contact your Dedicated Service Director 4. Cardholder Emergencies Global Card Services can assist your cardholders if they are stranded whilst travelling with Emergency Card issuance or Emergency Cash available to any cardholders with lost or stolen cards. Please call Global Card Services in this situation using the details provided above. 5. Data Privacy Notice Data privacy notices are available for download at http://www.bofaml.com/en-us/content/data-privacy.html EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 4
3. Contactless Newly issued Bank of America Merrill Lynch card is contactless enabled. Contactless technology allows cardholders to make fast, more secure payments without entering their PIN. For security reasons, cardholders will need to make one Chip and PIN transaction before they can use the contactless feature. From time to time, when making a contactless transaction cardholders will be asked to insert their card and enter their PIN for additional security. There is a transaction limit for contactless payments which varies by country, details are available in our contactless guide. Please review our contactless guide at http://www.bofaml.com/contactless This document helps you understand the basics of using the Bank of America Merrill Lynch contactless card and aims to answer key questions you may have around contactless. 4. Cards and Cardholders 1. Activation Each cardholder may be required to activate their own card using the automated activation system via the Global Card Services telephone number. 2. Cardholder Payments Depending on your card programme type, cardholders may make payments to the Bank. To make this as simple as possible, there are a variety of ways this can be done: Debit cards Direct debit Internet or Telephone Banking Cardholders can make a payment using any Maestro branded debit card, or any Visa debit card issued by a U.K. Bank (and European debit cards). Cardholders should call Europe Card Services and follow the prompts. Payments are debited from the cardholder s bank account, and credited to their card account on the same day (if payment made before 18.00 U.K. time) Regularly scheduled payments can be deducted from any Euro denominated cardholder bank account via the SEPA clearing. Local currency direct debits are also available in Denmark, Norway, Sweden, Switzerland and the U.K. If a new direct debit service is required, please call Global Card Services and request a mandate. Cardholders in the following countries can make a payment to the Bank using their Internet or telephone banking: Belgium, Denmark, Finland, France, Germany, Greece, Ireland, Italy, Netherlands, Norway, Poland, Portugal, Spain, Sweden, Switzerland and the U.K. The account numbers to be used are shown below in section 5. 3. Lost or Stolen Cards Cards for new cardholders should be ordered using the Account Manager function within the online tool. If a card has been lost or stolen, it is critical that the cardholder calls Global Card Services immediately, to cancel the card and to order a new card. Alternatively, a Programme Administrator can refer a lost/stolen card enquiry to the DSD team. This ensures that the old card has been cancelled correctly, reducing the possibility of fraudulent transactions taking place. 4. Cardholder Language Codes EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 5
Cardholders can select from English, French, German, Italian and Spanish which is specified when their initial card requests are sent to the Bank. This code will determine the language of the statement, PIN advice and card details that are sent to the cardholder. If a cardholder wishes to change their language code, they should call Global Card Services. 5. Online PIN Check A cardholder can view their PIN securely online, by visiting http://www.baml.com/pincheck. After registering, the PIN can be accessed securely wherever and whenever is convenient for the cardholder. Where a U.K. cardholder s card has blocked as a result of their entering the wrong PIN, they can use any ATM to unblock their card, provided they can remember the correct PIN. Please advise the cardholder to call Global Card Services before visiting the ATM to unlock their PIN. 6. Refunds for Cards in Credit Requests for credit balance refunds must be made by the Programme Administrator to the DSD team. 5. Making Payments To make a payment, please use the following account details for our clients: Country Currency Sort Code Account SWIFT/BIC IBAN United Kingdom GBP 16 50 50 49389043 BOFAGB22 GB18BOFA16505049389043 Belgium EUR Not required 685753301462 BOFABE3X BE51685753301462 France EUR 41219 16010 0003172501180 BOFAFRPP FR7641219160100003172501180 Germany EUR 50010900 19135019 BOFADEFX DE07500109000019135019 Ireland EUR 990061 55472016 BOFAIE3X IE03BOFA99006155472016 Italy EUR 03380 01600 IT91U0338001600000013982016 BOFAIT2X IT91U0338001600000013982016 Netherlands EUR Not required 266502253 BOFANLNX NL66BOFA0266502253 Spain EUR 1485 0001 070035692017 BOFAES2X ES3814850001070035692017 Switzerland CHF 8726 30782018 BOFACH2X CH4508726000030782018 Portugal EUR Not Required 000700000004601088423 BESCPTPL PT50000700000004601088423 Finland EUR Not Required 33010019006113 ESSEFIHX FI7733010019006113 Denmark DKK Not Required 52950012002785 ESSEDKKK DK3552950012002785 Norway NOK Not Required 97501102486 ESSENOKX NO8397501102486 Sweden SEK Not Required BankGiro 770-2624 - - Poland PLN Not Required 36236000050000004550288700 DABAPLPW PL36236000050000004550288700 When making a payment, please ensure that the full credit card number (or corporate account number for corporate billed programmes) is provided as a reference (your credit card number or corporate account number can be found at the top right of the billing statement). Failure to provide this information may lead to a delay in applying the payment, or the payment being returned. 1. Payment Processing Times EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 6
Payments sent to the Bank will be credited to cardholder and corporate accounts within one business day after the payment is received into one of the above accounts. 6. Insurance and Assistance 1. Travel Insurance All questions on insurance and assistance, or regarding an insurance claim, should be directed to our services provider, Aspire Insurance Advisers Limited. The DSD or Global Card Services teams are unable to respond to queries relating to claims. The insurance and assistance services are provided free of charge to all cardholders as a secondary policy, and copies of the policy documents are available if required. If a cardholder experiences travel delays or is involved in an accident, they should contact the assistance service provider immediately on +44 (0) 207 581 6444. Should you require a certificate of insurance to support a visa application, please contact Aspire Insurance Advisers directly on +44 (0) 208 762 8333. 2. Cardholder Misuse Protection This insurance policy is intended to protect your organisation against deliberate misuse of a card by an employee. If you wish to make a claim, please contact the service provider on +32 (0) 2 714 03 84. 7. Using the Global Reporting and Account Management Tool To improve the efficiency of your card programme management, the online tool allows you to order new cards, maintain cardholder information and authorisation controls, request replacement cards, and view authorisation information online and in real time. Online statements and a suite of reports are also available to you to monitor and review the spending on your programme. Programme Administrators can use the online tool to: Add new cardholders Maintain cardholder account information (e.g. credit limits) Cancel and/or close cards View an electronic copy of your corporate and cardholder statements Access management information reports Monitor spending and identify account-/merchant-related exceptions Generate HMRC (UK Tax Authority) approved electronic invoices for UK Purchase Card merchants To access the online tool, please log onto: http://www.baml.com/globalcard 1. Getting Access to the Online Tool Your Implementation Consultant will provide initial Programme Administrator system access as part of the implementation process. As a Programme Administrator user, you have the ability to add additional users to the system. 2. Logging in to the Online Tool Launch your browser, enter http://www.baml.com/globalcard in the address bar. Enter your User ID and Password. Please note that these are case sensitive. EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 7
On first login, you will be prompted to o Set a new password o Set a security question to aid any future password resets o Set dual authentication security questions 3. Password Rules The password rules are as follows: Must contain a combination of letters and numbers Must be at least eight characters in length At least two of the characters must be numeric Cannot be the same as your User ID Cannot contain spaces 4. Password Security Question The security questions are set to aid automated password resets should you forget your password in the future. It is important to remember which questions you select in case you need to reset it. 5. Dual Authentication For added security, the Global Reporting and Account Management tool offers a secondary authentication process Dual Authentication that requires you to respond to challenge questions in addition to entering a User ID and password when you log in. There are six challenge questions available and you must select and respond to three of those six questions. The Challenge Question Responses must comply with the following rules: Responses must be at least four characters in length Allowable characters are alphanumeric (A Z, a z), numeric (0 9), and the space character No punctuation or special characters are allowed A response may not contain more than two identical characters in a row A given response may not be used for more than one question Select the challenge questions, enter and confirm the responses and click Save. Responses are not case sensitive. For example, the responses smith and SMITH are equivalent. If you enter an incorrect response, your next attempt to log in will be authenticated using the same challenge question. The system does not cycle through your challenge questions; therefore, it is important that you remember all of your responses. If you fail authentication six times, your User ID is locked, and you must contact the DSD team to unlock your User ID. Once the lock is cleared, you will have to specify challenge questions and responses again. Challenge questions are not related to the Security Question used to reset a forgotten password. 6. Why is my User ID Locked? Your user profile will be locked if: After 90 days without a login, a user profile is locked (Inactive) After six unsuccessful login attempts, a user profile is locked (Locked Invalid Password) After six unsuccessful authentication attempts, a user profile is locked (Locked Invalid Challenge Response) Contact the DSD team to unlock your User ID. EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 8
7. What Should I Do if I Forget my Password? In order to reset your password, you should have already set up your security question and answer in your user profile. This enables the system to verify that it s you requesting help to log in. On the Login page, click Forgot your password. In the Password Reset section, enter the required information. Enter your User ID. Select your Security Question from the dropdown options. Enter your Security Answer (as you entered it in your user profile). Click Submit. You will receive a temporary password in an email message. This is a one-time password, which allows you to log in and define a new password. Return to the Login page. Enter your User ID and the temporary password. You will be prompted to answer a Dual Authentication challenge question. After successfully answering your question, you will be prompted to enter a new password. This password is valid for 90 days and then needs to be changed. 8. How to View/Download Your Statement Electronic statements are generated for each account at the end of the statement cycle. The electronic statement (in Adobe PDF format) will be loaded into the online tool within two days of the end of the cycle. The system will store the previous 13 statements. It is possible to configure the system to send an email notification to your cardholders once the statement is available to view. To set up these notifications: Log in to the online tool, then navigate to the Company menu. Select Company Configuration, then Company Site Configuration. In the Programme Settings section, against Allow Email Notification for Online Statements, select Yes from the dropdown list. You can access your statements within the online tool in one of two ways: 1. From the Home screen, the Inbox contains a section entitled Account Statements. This section will show the most recent statements (up to five), with a link to view more. Click on the statement name hyperlink to open or save the PDF file. 2. From the Account Activity menu, select Account Statements. The Account Statements screen will show up to 13 statements. Click on the Description to open or save the PDF file. EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 9
9. How to View Transactional Activity The Global Reporting and Account Management tool enables you to view transactional activity as far back as three years and as recently as the last posting day. Data loads into the online tool on a daily batched basis; transactions charged to accounts are available for viewing in the system the following day. To search for transactions: From the Financial menu, select Account Summary. Using the Search Reporting Structure screen, select the cardholder account that you would like to view. Click on the Company Quick Link to view all cardholders. In the Search Criteria section, specify the date range to search by: o The system will default to a period corresponding to the last 30 posting days. o You can search by Posting Date or Transaction Date using the date picker. If you wish to filter to identify specific transactions, click Advanced Search to display filters that you can use to refine your search. o For fast visibility to Cash transactions (ATM, over the counter cash etc.), use the Transaction Category CASH ADVANCES to narrow your search. Click Search to display a list of transactions. Transaction Summary Information Detail These icons identifies the transaction type. Click these icons to access more detailed information about the transaction. Merchant Transaction a transaction originating from a merchant. Adjustment a payment or fee applied directly to the account. EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 10
Posting Date the date on which the transaction was charged to the account by Bank of America Merrill Lynch. Transaction Date the date on which the transaction occurred. Description This is the merchant name and location. Click the name to see merchant details. Transaction Amount This is the amount in the billing currency of the Card. If the merchant/original currency was different, the foreign currency code and amount will appear in italics underneath the billed amount. Additional Information This icon identifies the presence of enhanced data (e.g. passenger and booking information for a flight where passed by the merchant). Click icon to see the additional information (addenda). The most common addenda types are as follows: Passenger Transport Traveller, ticket and/or routing information; Lodging Hotel folio data (limited and rare from properties outside of North America); Vehicle Rental Booking information (limited and rare from locations outside of North America). 10. User Management To change a user s information From the User menu, select User Summary. The User Summary screen appears. Search for the user that you need to modify. Under Search Results, click the User ID that you need to modify. The User Information screen opens. Modify the user information as needed. Click Save To reset a user s password From the User menu, select User Summary. The User Summary screen appears. Search for the user or users whose password you need to reset. In the Search Results section, place a check in the Select column by the user who needs a new password. You can select more than one user. Click Email New Password. For security reasons, you cannot enter a new password for a user. The system generates a temporary password and sends it directly to the user, using the email address in the user s profile. The temporary password is valid for 24 hours. To unlock a user profile From the User menu, select User Summary. The User Summary screen appears. Search for the user. In the Search Results, the Status column indicates why the profile is locked: o Active (Not locked) o Inactive o Locked Invalid Challenge Response o Locked Invalid Password In the Search Results section, click the User ID. The User Information screen opens. In the User Information section, in the Status Code field, select Active. Click Save. Resetting locked status after dual authentication failure Display the user in the User Information screen. Select the user. Click Clear Dual Authentication Lock. The system clears the lock, clears the user s challenges and responses, and sends an email to the user informing them that their User ID is unlocked. The next time they log in, they will be required to specify new authentication challenge questions and responses. EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 11
Resetting locked status after failed security question When a user clicks the Forgot Password option on the login page, a screen appears to the user informing them that their User ID is unlocked. The next time they log in, they will be required to specify new authentication challenge questions and responses. If they fail to answer the security question after six attempts, the User ID is locked; to reset the user, follow the instructions below: Set the Status Code back to Active, then click Save. Select the Clear Security Question checkbox, then click Email New Password. The user receives a temporary password via email, and during the login with the temporary password is prompted to reselect a security question/answer. General disclaimer for Bank of America Merrill Lynch. @2018 Bank of America Corporation AR6PTWVM EMEA CORPORATE CARD, PROGRAMMEADMINISTRATOR GUIDE 12