CardValet FAQs

CardValet works with the most recent mobile operating software as well as two past generations of Android and iPhone devices.

No. CardValet currently supports debit cards and credit transactions.

Yes. The user can unsubscribe through the CardValet application via Manage Portfolio. To unsubscribe, uncheck all cards and accounts and tap OK.

When a user unsubscribes, all previously set alerts and controls are no longer in effect.

The app automatically logs the user off after 10 minutes of inactivity.

Yes. The Card Details section displays the card status—Active, Inactive, or Restricted.

Spent on card this month displays the total amount that is calculated from the cumulative spending on all managed cards in the month to date. At the end of every month, the system automatically resets the monthly spending amount to zero (0). Deposits and refunds are deducted from the total.

Spent this month displays on the back of a specific card and is the total amount that is calculated from the cumulative spending for that card. At the end of the month, the total resets to zero (0). Deposits and refunds are deducted from the total.

Yes. The new card number must be registered. The replacement card is added to the enrolled user's profile via Menu > Manage Portfolio > Add Card.

The old card cannot be removed but rather the user can un-manage the card via Manage Portfolio.

Each time the user enters an incorrect username or password the message displays, On the third attempt the account is disabled; for security reasons the message continues to display even if the user enters the correct username/password. To reset, contact Embassy Bank.

Embassy Bank does not charge any fees to use CardValet. However, you should check with your wireless provider as carrier fees, data usage fees and web access fees may apply.

CardValet passwords must be at least 8 characters in length and must contain at least 1 upper case character, 1 lower case character, 1 number, and 1 special character.

The user must create a unique login account for each financial institution. Each login account is applicable for a single financial institution. In the login page, the logo of the last logged-in financial institution shows.

CardValet accepts an address of 50 characters. The address and ZIP code should match the address located on the cardholder record.

Yes. Cardholders can register multiple cards within a single CardValet app. Additional cards can be added within the Menu > Manage Portfolio > Add Card screen.

There is no limit.

The user needs to enter the same level of detail entered for the original card. This information generally includes the:

• Card Number
• Address
• ZIP Code
• Expiration Date
• CVV/CVC Code

Secondary authentication includes:

• Security token sent in an email
• Last 4 digits of the social security number

Multiple individuals can register the same card as long as they know the card details. Typical examples of multiple individuals registering one card include: parents and dependents; spouses; and employers/employees.

The primary device is used to track the GPS for My Location alerts and controls and all merchant and threshold alerts will be sent to the primary device. All devices that have registered a particular card can view or change the CardValet settings for that card.

Controls (including the On/Off setting) are set at the card level, so the last update to a control will be honored regardless of which phone was used to make the change. Alerts are set at the device level, so each primary device will receive alerts that were set up from that particular device. The primary device can be re-set by accessing Settings > Primary Device.

Each person who registers a card will have access to controls for the card. In many cases, the child will not know about CardValet unless the parent shares the information.

If the card number is new, then the user must add the new card number to the user's profile. In addition, the user may un-manage the old card by accessing Manage Portfolio.

Yes. To activate an unsubscribed user, the user registers as a new user. The user is required to select a new user name; if the user enters their previous user name an error displays. Upon successful registration, the user may once again use CardValet.

The security token that is mailed is numeric only. The one-time passcode expires 15 minutes after the email is sent. If the token expires the user can request another one.

If the security token is not received, then the user should check their spam or junk folder. The email is from Elastic Email on Behalf of Embassy Bank. The one-time registration password is forwarded to the email address that is on the cardholder record. The one-time Forgot Password security token is sent to the email address that the user entered when registering in CardValet.

The My Location controls and alerts will check to ensure the merchant location is within a 5-mile radius of the device set as primary within CardValet. These controls impact card present transactions only, therefore internet transactions are not impacted.

CardValet ignores location information that is more than 8 hours old. So, if the phone is off for more than 8 hours, My Location controls will not take effect, and the transaction will not be denied on the basis of the old location information.

CardValet performs a proximity check at the granularity of ZIP code or city, so if the merchant is close to home then the transactions will still go through.

My location is only effective for the enrolled user. To limit the dependent's card, the user can use the Region Location feature. The user can set up to 3 regions using the map to designate the area. The regions are effective for all users with the same card number.

The region shows the approximate area where the card can be used; the area must be greater than 5 square miles. CardValet can typically map the transaction down to a ZIP code or city. If the city or ZIP code of the merchant overlaps with the selected region in the map, then the transaction can still go through. There are instances where a merchant location cannot be mapped down to a ZIP code or city, in which case CardValet will default to a state-level match.

Yes. International transactions can be blocked using the Block International location control. Transactions will be limited to the United States.

No. The location controls are applicable to in-store transactions only.

Previously authorized recurrent payments will continue to process and will bypass the CardValet edit checks.

Control settings take effect as soon as the Updating information message in the app stops.

Specific merchant types have been created within CardValet, and these merchant types can be used for controls or alerts via the Alert Preferences or Control Preferences screen. Each of the merchant types contains various merchant category codes (MCC).

Note: It is possible for a retailer to forward a MCC that may differ from the CardValet merchant type classification. Merchant types currently supported are: Department Store, Entertainment, Gas Station, Grocery, Household, Personal Care, Restaurant, Travel, and Others.

ATM transactions are categorized within Others merchant type.

The user can set the Do Not Disturb time that will suppress notification during the set time. Some notifications will still be delivered, for example any transaction denial or any transaction that is a card-present authorization.

CardValet alerts are sent as push notifications to the phone. The alerts also display under Messages in the CardValet app.

Yes. An alert is generated regardless of whether or not a control preference is set.

No. The alerts are consolidated into one message. Example: if the message has violated Threshold and Location settings then you will see only one alert and not multiple alerts.

CardValet updates the balance under two conditions:

• When the user logs into CardValet
• When the user taps Refresh

*Even if the balance has fallen below the threshold that has been set, it is only updated when the user logs into the app or taps Refresh, which then triggers the alert.

Alerts are always sent for denied transactions, a deposit or refund, when a shared user changes a control setting, or if the card status changes.

When performing an edit check on My Location and My Regions, CardValet compares the geographic location of the mobile device as well as the Merchant's information that is sent within the transaction. It is possible for the merchant's address to be an address other than the physical location of the merchant i.e. Corporate or Regional address. In these instances, the transaction will bypass the CardValet edit checks since the address information is not within the set boundaries.

Yes. The app shows last 50 card-based transactions posted within last 30 days.

Some merchant types will preauthorize the card for an amount that may be larger than the actual transaction amount. In this instance the preauthorization amount must meet the threshold spend limit.

CardValet controls are only invoked during authorization of a transaction. In some cases, such as gas stations, a card may be tested for validity by doing a $1 preauthorization, and the actual transaction amount is charged to the card after the transaction.

Some gas stations will preauthorize for a maximum amount, example: $126, and some gas stations will check validating, example: $1. In the latter case, the actual transaction amount may exceed the limit, while in the former case, an authorization may be denied.

When a cardholder logs on to the CardValet application, a Balance Inquiry transaction is performed to retrieve and display the balance. A balance inquiry is performed on every account listed in the cardholder record. The application will not initiate more than one balance inquiry within 30 minutes even if the cardholder presses the Refresh button.

CardValet only shows the transactions that are performed with the card. It does not show the transactions that are done on the account but without using your card, such as teller transactions or bill pay on an account.

The balance will be updated to reflect the teller transactions if the account processor supplies the updated balance. The balance is updated the next time the user logs into CardValet.