Fund Validation Service user guide

Background

This document provides guidance on use of the Fund Validation Service (FVS) that supports the Superannuation data and payment standard 2012.

Funds interact with Standard Business Reporting (SBR) and FVS in different ways depending on their internal business systems. Refer to your procedures or support area for information about the interaction between the FVS and your internal systems.

This user guide will be updated when:

• enhancements to FVS are made
• further clarification on service functions is required
• the data and payment standards are updated.

The Fund Validation Service (FVS) is a suite of services that support implementation of the SuperStream Standard (the Standard), part of the Australian Government’s superannuation reform package. SuperStream improves the client experience by reducing cost and effort while making it easier to track people’s money.

The Standard provides a consistent, reliable electronic method of transacting linked superannuation (super) data and payments.

The FVS allows funds to meet their regulatory obligation to provide rollover and contribution information on the Fund Details Register (FDR).

The FVS also provides lookup services for funds, employers and intermediaries to access this information when making rollovers or contributions in the Standard.

The FVS is accessed through the SBR framework. You may need to build or purchase FVS-enabled software from a developer or provider who has done this for you.

Mandatory use of the FVS

All APRA-regulated super funds must provide particular fund details to the Commissioner of Taxation under subsection 34Z (2) of the Supervision Industry (Supervision) Act (SISA).

The intent of the obligation is to facilitate the efficient electronic processing of rollovers and contributions by providing users with access to reliable message and payment delivery details. The Commissioner makes this information available in the FDR. The Commissioner is able to disclose the contents of the register to entities that comply with the Standard.

Service overview

The FVS is a suite of three services:

• Get (FVSG) allows super providers and employers to obtain details of a super product – including banking details, electronic service address and contact details. You can make a single request for one product, or a bulk request to get all super product details.
• List (FVSL) provides super providers and employers with a list of the provider’s products. A list of the provider’s product names and product unique superannuation identifiers (USIs) is returned.
• Lodge (FVSU) allows super providers and their nominated intermediaries to notify us of new or changed details for their super products, including banking details, electronic service address, effective dates, standards certification and contact details for assistance.

Access to the relevant services is provided by the ATO. The way you use the FVS will depend on the way it is integrated with your internal business procedures.

Use of the FVS must be in accordance with the Fund Validation Service terms and conditions. The FVS web services are the authoritative version of the Fund Details Register.

Updates to the FVS will only be accepted through the FVSU web service. Any super provider not able to access the FVSU web service must have alternate arrangements in place with a third-party provider.

For more information on building this software or to identify software developers who have certified software for the FVS, visit the digital service providers section of the SBR websiteExternal Link.

Access

Access to the FVS is managed by the ATO and is only available to super providers, employers and entities with a business purpose of supporting fund and employer compliance with the Standard.

All third parties (or intermediaries) that support employers (for example, payroll providers, funds and clearing houses) need to consider how to best access and use the information in the FVS.

The FVS does not support the operations of self-managed super funds (SMSFs). Refer to the relevant section of this user guide for detailed information on the services.

Authorised agents

Many users will have third-party agents (also known as intermediaries) – for example, administrators, gateway providers, clearing houses and payroll providers –who are authorised to perform specific functions on their behalf.

The appropriate method for authorising access to a third party is through the Business Appointment functions in Access Manager.

Agents are required to use the service in accordance with the terms and conditions and each user is accountable for ensuring this responsibility is understood by any agents transacting on their behalf.

If authorisation of an agent is withdrawn, you should remove the Business Appointment using Access Manager.

Table 1 lists the Access Manager permissions for each of the FVS services, with their descriptions, and whether business appointments are available for the service.

Table 1: Access Manager permissions

FVS product	Access Manager description	Business appointments
Lodge (FVSU)	Lodge super product details	Available
List (FVSL)	List super products	Available
Get (FVSG) – single	View super product details	Available
Get (FVSG) – bulk	Not displayed	Not available

The authorisation of intermediaries is also described in our technical specifications in Access Manager.

Publishing ATO details in the FDR

To facilitate government contributions and rollovers, we publish our details in the FVS.

Publishing annuity details in the FDR

As life insurance companies don't have to comply with the Standard, details about their products are not generally included in the FDR. To support the voluntary adoption of the Standard by a life insurance company, the Commissioner may publish details of annuity products in the FDR where those details are already available to the public.

To support this process, the Commissioner requires written confirmation from a life insurance company that:

• the details of the annuity products to be included in the FDR are listed in a publicly available source (such as on a provider’s website)
• those publicly available details will be kept up to date.

When publishing information, we recommend that you follow the specification and detail set out in the FVS technical documentation for the FVSU service to ensure the published content aligns with the information required.

Send your written confirmation to SPREnablingServices@ato.gov.au.

Service outages and maintenance

We will use the ATO Superannuation DashboardExternal Link as the key source of information about service performance, outages and planned maintenance activities.

The dashboard will provide a near-real-time indicator of whether the super services are functioning normally or experiencing problems. We will provide visibility of planned maintenance on our service platforms for up to 6 months in advance and confirm those outages in the preceding week.

It is important that funds and service providers keep up to date with performance and planned outages when updating their unique superannuation identifier (USI) information.

Lodge (FVSU)

The Lodge (FVSU) service is mandatory for super providers and allows funds to notify us of new or updated product details.

The FVS depends on information received from trustees or their agents. As such, we cannot guarantee the accuracy of the information where the super provider does not apply appropriate care and diligence when updating the FDR.

To reduce the risk of unauthorised changes to financial institution account (FIA) details, there is a secondary verification process. This applies to FIA details on new products or updates to existing products and will help to prevent unauthorised changes through the web service. For more information, see Additional controls for updating FIA details.

Providing and updating USI details

Changed details require a minimum of 10 business day's notice.

Fund trustees are required to provide new or updated product details at least 10 business days (2 weeks) before the new data takes effect, under sub-regulation 3B.03 (8) of the Superannuation Industry (Supervision) Regulations 1994.

If you are updating critical data, it is best practice to provide these details at least 28 days before they become effective. Updates to critical data include changes to:

• bank accounts
• end-point service address
• end-dating a USI (product or fund is merging or winding up).

You should only end-date a USI if you want it removed from the register.

This notification period was introduced after consultation with trustees and industry participants. Sufficient lead time allows gateways and clearing houses to ensure their systems are updated to reflect the changed details. It helps ensure that rollovers and contributions are sent to the correct destination.

Unless making a USI inactive, the ‘Effective to’ date in all updates should remain 31/12/9999. Where you provide an actual end date in the transaction, it effectively closes that USI from that date. To ‘reactivate’ an existing USI, you will need to lodge new details with the new ‘Effective from’ and ‘Effective to’ dates.

For full details on messaging interactions, refer to the FVS documentation in the Superannuation data and reporting standards sectionExternal Link of the SBR websiteExternal Link.

Response from lodge super product service

Once a message has been received by us, and passed validation, you will receive a CMN.ATO.GEN.OK response.

The message will then be processed within the FDR and you will receive one of the following response codes (see Table 4).

Table 4: FDR response codes

SBR message code	Short description
CMN.ATO.FVSU.OK	Lodgment successful
CMN.ATO.FVSU.RECV	Lodgment received. Financial institution account details will be validated
CMN.ATO.FVSU.FAIL	Lodgment failed

Once a successful message has been processed (CMN.ATO.FVSU.OK), the updated product details will be available via the single lookup services immediately and through the bulk service the following day.

Where FIA details are updated, a CMN.ATO.FVSU.RECV message advising the update requires confirmation will be returned. Updates to FIA details will not be available through the services until verified by a secondary contact. Once the change has been approved, the updated product details will be immediately available via the single lookup service. The bulk service will display updated details the following day.

An unsuccessful message will return the error message CMN.ATO.FVSU.FAIL. This error may occur if the USI exists for another Australian business number (ABN) or there has been an unexpected error during processing. You will need to check the details submitted in the message, update data if required, and re-submit the request.

Refer to Help if you've identified an error with the data or for assistance email SPREnablingServices@ato.gov.au.

Additional controls for updating FIA details

Each USI must have a nominated and authorised person to verify FIA data (the FIA verification contact). This contact must be an individual (not a call centre or help desk) and must not be the same contact listed as the FVS contact on the FDR. If there are any changes to the FIA verification contact details, an updated Financial institution account verification details template with the new information must be submitted through Online services for business.

Note: If you're submitting details for a new USI, it's important that you first lodge an FIA verification contact details template through Online services for business. The lodge super product (FVSU) transaction should then be submitted.

When an update is made to primary or secondary FIA details for an existing USI, or a request is received for a new USI, the FVS Update web service will return a CMN.ATO.FVSU.RECV message to the user advising the update has been received and is subject to confirmation of the FIA details.

Telephone contact will be made with the FIA verification contact, generally within 72 hours. They will be asked to verify the details to ensure they are correct and authorised by the fund. If authorised, the update will be processed.

If there is no FIA verification contact listed, or the contact person cannot be reached within 72 hours (or is unable to confirm the FIA details), the update will be rejected. An email will be sent to the contact on the FDR for that USI and the FIA verification contact if an update is unsuccessful.

Rollovers standard version 3

SuperStream rollovers has been extended to include SMSFs and to bring certain electronic release authorities in SuperStream in 2021. This allows:

• the process of rolling over between APRA funds and SMSFs consistent with the process that currently applies to rollovers between APRA funds
• all super funds to electronically initiate and process SMSF rollover transactions and requests between each other
• certain release authorities into the SuperStream standard allowing the ATO to send electronic requests to super funds for the release of superannuation, further reducing administrative costs.

Subject to fund, or their service providers requirements, Rollover version 2 messages can be treated as invalid messages once all USIs that supported version 2 messaging have transitioned to ROLL3.0-X and/or GROL3.0-X.

List (FVSL)

The List (FVSL) service allows super providers and employers to provide an ABN, which will return a full list of a provider’s current product identifiers (product names and USIs).

For full details on messaging interactions, refer to the technical documents on the SBR websiteExternal Link.

Response from list super product details message

A successful response message will contain the result CMN.ATO.GEN.OK.

The service will return the full list of a provider’s current product identifiers (product names and USIs). If an ABN is not listed in the FDR, the service will provide an error response.

The service may also return a CMN.ATO.FVSL.41152 error where there is no USI information to be returned. This may occur where the ABN provided does not belong to a fund, or the fund has wound up or end-dated their USI details on the FDR.

If there are queries on the data returned for the USI, contact the listed contact person in the extract for further information.

Refer to Help if you have identified an error with the data.

Get (FVSG)

The Get (FVSG) service allows a user to provide a USI, which will return the full product details, payment details, electronic service addresses and contact details. The single service provides data current at the time of the service call.

The bulk version of this service returns both current and future-dated product details, see Get super product details – bulk.

The certification values returned by the service are backward compatible, where the previous message version remains supported. For example, having a certification value of ROLL3.0-X meant the fund was also able to accept transactions for ROLL2.0-X during the version 3 implementation period.

Get super product details – single message

A successful response message will contain the result CMN.ATO.GEN.OK.

The service returns the current product details for the single USI in the message.

The service may return two error codes:

Table 5: Error codes

SBR Message code	Short description
CMN.ATO.FVSG.41152	No USI information to be returned
CMN.ATO.FVSG.41190	USI provided is inactive (end-dated)

CMN.ATO.FVSG.41152 error is returned where there is no USI information stored against the ABN provided in the request. This may occur where the ABN does not belong to a fund, or the fund may have wound up, and there are no active USI details stored on the FDR.

Refer to Help if you have identified an error with the data.

Get super product details – bulk

The bulk service (FVSG-All) allows super providers or entities authorised by us to obtain an extract of the full FDR.

The FVSG-All service returns current and future dated product details, including electronic service address, contact for assistance, and banking details for all payment types in XBRL format. The bulk file is updated overnight with new details available by 6:00 am Eastern Standard Time the following day.

Once you've retrieved the file, you need to determine how the information is integrated within your processes and systems environment. The file can be used as a stand-alone lookup file for finding or checking fund details. Alternatively, the data can be uploaded to a registry or other support system.

In response to industry feedback, we added an identifier into the ebMS header of the bulk file. This identifier contains the date–time stamp for when the file was created.

You must ensure you have a robust process in place for replacing previous bulk downloads and overwriting previous data. Failure to do so may result in electronic messages or payments transferred to the wrong location.

Access to use the bulk service is restricted to super providers and entities whose business purpose specifically relates to processing contributions in compliance with the Standard.

Access to the bulk service can be requested by emailing SPREnablingServices@ato.gov.au

There is updated technical information in the Service Registry on the SBR websiteExternal Link.

Best practice for Get super product details bulk

With the inclusion of date-time stamp information in the FVS bulk file header, you'll be able to accurately determine when that file was created.

It is recommended that you collect the FVS bulk file at 6:00 am each day, or earlier if required, and compare the date-time stamp in your most recently collected file to determine if a newer file has been generated since your last file was retrieved.

If the date-time stamp is the same or earlier than your previous file, there's been a problem at the ATO that has prevented the generation and loading of the new file. You should continue using your existing file for processing purposes.

We recommend you poll the FVSG-Bulk service each hour until the new file is retrieved.

In the event of any prolonged outage, or unavailability of a new file, we will provide updates on the ATO Superannuation DashboardExternal Link.

For further information or assistance, email SPREnablingServices@ato.gov.au.

Errors identified in the FDR

If you discover a significant error in the FDR that is likely to cause rollovers or contributions to fail or be misdirected, you should immediately re-lodge an update to the USI record through the web service. This will then lead to the FDR being corrected.

A trustee still retains legal responsibility under the regulations to correct errors.

If there is an error in critical information, such as effective dates, FIA details or electronic service addresses, you should also advise us by emailing SPREnablingServices@ato.gov.au.

Successor fund transfers (SFT)

The trustee of the transferring and successor fund will need to provide or update USI details, in line with the requirements outlined in the Lodge super product (FVSU).

The transferring fund will need to end-date its USI as a significant change using the FVS and is recommended 28 days prior to the effective date. It is possible for a successor fund to retain a transferring fund's SPIN format USI. However, an ABN format USI cannot be transferred between funds.

For more information, see Successor fund transfer reporting.

Super product identifier number

Super product identifier numbers (SPINs) are administered by APIRExternal Link Systems Limited (APIR), an independent, privately owned company, and are subject to APIR rules. Funds considering retaining a SPIN should first contact APIR.

To retain a transferring fund's SPIN format USI, after the transferring fund has end-dated the SPIN format USI, the successor fund will need to lodge a new entry through the FVS with that SPIN format USI against the successor fund's ABN, effective from the following day. Funds are required to submit the FVS template via our Online services for business. Funds can contact SPREnablingServices@ato.gov.au if there are any issues in updating the FVS.

If a successor fund has retained a SPIN format USI from a transferring fund and the SPIN format USI will be later decommissioned, member accounts transferred under the SFT will need to be closed and opened again by the successor fund with the successor fund's USI.

Payment information

The transferring fund should communicate with employers to ensure future contributions are correctly directed to the successor fund. During the transition period, the successor fund may also need to contact any employers who have not yet updated their employees' fund details.

Old bank accounts should be kept open during the transition after the SFT to catch any trailing contributions to avoid payments being rejected to the employer.

Help

Business process or data interpretation issues should be handled in the first instance by a fund’s internal group responsible for implementation and maintenance of the FDR. Routine checks should also be made of the destination or sending fund if USI, account or service address details appear to be wrong or the destination message handling service is not responding.

We will not be able to resolve issues associated with your internal processes or systems or those of the receiving party.

You should contact the fund for assistance where a data item in the FDR appears incorrect or is missing (but only after you have made adequate enquiries to determine the error is not in your process or systems).

Updates to your fund details should be made through the FVS update service as required and must be submitted a minimum of 10 business days before they take effect.

For technical issues with your web-service software, contact your provider in the first instance, and if there are still problems contact the SBR Service DeskExternal Link including details of any message IDs.

For assistance, email:

• SPREnablingServices@ato.gov.au
• SBRServiceDesk@ato.gov.au

Security guidelines

Inputs to the FDR are protected by myIDExternal Link, which is the Australian Government's Digital ID provider.

We recommend you review this information regularly. We will update it as we become aware of issues and relevant information, which will help you maintain the highest levels of security.

Security credentials

A security credential is an electronic file and/or software used for identification purposes when transacting over the internet.

A security credential is used to establish a secure environment for online transactions. This provides you with assurance that your online transactions with us are safe, by letting us know we are interacting with the right person for each transaction.

Modern security credentials make fraud very difficult. For someone to gain access to our online services as you, they would have to be using a computer on which the credential is installed, and they would have to know your password.

Every person associated with your super entity who wants to deal with us online on behalf of your ABN will need their own security credential.

Looking after your security credential

The security of the information you want to guard through the use of a credential is only as good as the care you take to keep this credential protected.

Never disclose your password to anyone including our staff or the provider of your credential.

When deciding on a password, make sure that it is sufficiently complex. Your password must:

• be at least 8 characters long
• contain numeric as well as alphabetic characters
• have a mix of upper and lower case alphabetic characters
• have at least one special character (for example,!, @, #).

Your role in securing your information

Technology and computers cannot safeguard information automatically. You need to protect your own and your members' information related to using this service.

We strongly recommend that you:

• never disclose your myID password to anyone, including us or the credential issuer
• do not download your credential to general use computers – access the portal only from computers to which you have exclusive use, or that you share under one of the following conditions  
  • the computer is configured for multiple users
  • each user has a unique account
  • other users are individuals you can trust
• keep your computer software up to date, especially with security upgrades and patches – these are usually available from the licenser of the software
• ensure your anti-virus software is current and running on your computer at all times – scan new programs or files for viruses before opening, running, installing or using them
• ensure you have anti-intrusion software (commonly referred to as a firewall) to provide added security around your information and protection from misuse of your identity
• avoid opening, running, installing or using programs or files you have obtained from a person or organisation unless you are positive that you can trust them
• conduct secure disposal practices such as cleansing of the hard disk on disposal of your computer.

What to do if someone obtains your password or your computer is stolen

This situation should be treated with the same degree of urgency that you would give to the loss of a credit card.

For morning information on maintaining your online security, see:

• Online security
• Security and privacy – Relationship Authorisation ManagerExternal Link
• Reporting inappropriate access – myIDExternal Link

Descriptions for FVS data labels

The Commissioner requires certain information in order to complete the FDR and make it functional (for example, fit for purpose) for all users. The descriptions and context for key terms are provided under the headings below.

Organisation ABN

This is the ABN of a registrable superannuation entity (RSE). You should verify that you have recorded the ABN of the fund, not the ABN of the trustee or administrator.

Organisation name

This is the name of the RSE. The name needs to match the fund or trading name as recorded on the Australian Business Register (ABR). From time to time, we may correct any deviations from the ABR (including correction of any obvious spelling errors or abbreviations that may exist).

Effective date (from)

This is the date on which the information takes effect; the start date from which a USI can receive rollovers and/or contributions using the details provided.

Effective date (to)

This is the date on which the information ceases to take effect; USIs where the effective date (to) has passed will not be available through the FVS services. If the USI does not have an end date, the default end date (31 December 9999) must be used.

Note: Providing an end date will have the effect of making the USI inactive from that date. If you wish to reactivate an existing USI, you will need to lodge new details and an updated Effective date (from).

Profile

Each fund must adopt a profile that indicates their capability to enable the secure exchange of business-to-business transactions using web services. The user profiles are defined in the Superannuation data and payment Standard 2012, Schedules 1 and 5.

Certification details

The version of each standard for which the fund is certified to receive messages for rollovers (ROLL) and contributions (CONT).

You will need to provide assurance that your fund is certified to receive SuperStream standard messages for rollovers (ROLL) and contributions (CONT), the version of each standard that they are certified for, and the type of certification obtained (including all error messaging).

Table 6 shows the meaning for each certification value.

Table 6: Certification values and their meanings

Certification value	Meaning
Nil	Has not achieved certification for rollovers or contributions
CONT1.0-X	Finished induction for Contributions V1.0
ROLL2.0-X	Finished induction for Rollover V2.0
ROLL3.0-X	Finished induction for Rollover V3.0
GROL2.0-X	Finished induction for Government Rollover V2.0
GROL3.0-X	Finished induction for Government Rollover V3.0
GCON2.0-X	Finished induction for Government Contributions V2.0

Funds should only list their highest level of each certification type. For example, a fund completes induction for ROLL3.0-X after previously completing induction for ROLL2.0-X. The fund will need to update the FVS and update their certification from ROLL2.0-X to ROLL3.0-X.

The certification values are backwardly compatible. Having a certification value of ROLL3.0-X means the fund has also completed induction for ROLL2.0-X (where the prior version remains supported).

Funds are required to support the current version of the message type by the legislated date and maintain support for the prior version until the industry has fully adopted the latest version, at which stage, by industry agreement support for the prior version can be dropped to ease support costs by parties.

Where a fund does not provide a value for contributions, they are unable to receive contributions in the Standard.

We introduced validation of accepted values for this label in August 2017. Where a fund makes an update to their USI and has included an unexpected certification value, that message will be rejected with a validation error and will not be processed. The fund will need to correct the certification value and re-submit the request.

For more information on induction testing, see SuperStream.

Unique superannuation identifier (USI)

The USI is used to identify a fund’s products and/or channel preference for receipt of data and monies. This may be the SPIN or ABN plus 3 numerals. A SPIN can be provided as a USI. However, the associated fund and product names must match the data maintained on the SPIN registerExternal Link.

Superannuation product name

This is the name of the product or product-channel nominated by an RSE for receiving a contribution or rollover. Each row of data in the FDR has a USI. Funds must ensure that every USI has a unique product name which is aligned to that USI and only that USI as it relates to the FDR.

Contribution restrictions

This is an indication that there is a restriction on which employers can make a contribution to the product.

Is there a restriction on which employers can make a contribution to the USI? You will need to indicate whether the USI can accept contributions from all employers from 1 July 2014. Employers will be asked to contact you directly before making a contribution if a USI displays a Y in this field.

Primary destination

A bank

A state branch (BSB) number is a unique 6-digit number that identifies banks and branches in Australia. The BSB for the account designated to receive contribution payments for a particular USI.

Financial institution account (FIA) number

A unique number assigned by a financial institution to identify the entity's account. The FIA number designated to receive contribution payments for a particular USI.

FIA name

The name of the FIA held by the entity. Account name designated for receiving contribution payments for a particular USI. The FIA has a maximum of 32 characters (in accordance with the Bulk Electronic Clearing System standard).

BPAY details

BPAY Biller code designated for receiving contributions for a particular USI. Each employer using BPAY also needs a customer reference number (CRN) unique to that employer (not captured).

Electronic service address

The primary destination – electronic service address – is the end point destination for the contribution message. This must be a unique resource locator (URL) or internet protocol (IP) address. URLs are preferred. An example of a typical URL would be https://en.example.org/. The correct address will be advised to you by your gateway provider.

Secondary destination

BSB

The BSB for the account designated to receive rollover payments for a particular USI.

FIA number

The FIA number designated to receive rollover payments for a particular USI.

FIA name

The account name designated for receiving rollover payments for a particular USI.

Electronic service address

The secondary destination – electronic service address is the end point destination for the rollover message. This must be a unique resource locator (URL) or internet protocol (IP) address. URLs are preferred. An example of a typical URL would be https://en.example.org/. The correct address will be advised to you by your gateway provider.

Contact person

Given name

The given name is the first name of person to contact if there are technical issues when processing contributions or rollovers.

If you provide generic contact details (such as 'Help Desk contact officer'), enter the first word of the title in the Given name field, and the remainder in the Family name field. For example:

• ‘Help’ in the Given name field, and
• ‘Desk contact officer’ in the Family name field.

Family name

Family name means the surname of the person to contact if there are technical issues when processing contributions or rollovers.

If you provide generic contact details (such as 'Help Desk contact officer'), enter the second word of the title in the Given name field, and the remainder in the Family name field. For example:

• ‘Help’ in the Given name field, and
• ‘Desk contact officer’ in the Family name field.

Email

The email address for correspondence relating to technical issues when processing contributions or rollovers.

Phone number – area code

This is the area code of a phone number to call if there are technical issues when processing contributions or rollovers. For toll-free (1800) numbers and mobile phone numbers, leave this field blank.

Phone number

This is the phone number if there are technical issues when processing contributions or rollovers. For toll-free (1800) numbers and mobile phone numbers, place the entire number in the contact phone number field.

Website address

This is the entity's website address. A valid website address must be provided where available. It should be the home page of your fund. When submitting your data, it should follow this format:

• http://www.example.com.au

Links to further information

For more information on SBR and Machine credentials, visit:

• Current SBR system status External Link
• Superannuation (SPR)External Link
• SBR-enabled reportsExternal Link
• Machine credentialsExternal Link