Abstract: A method including receiving, at a payment-messaging computing system from a biller financial institution, a request for information about a public consumer token of a consumer. The method also includes determining that the public consumer token of the consumer is registered and active in a directory of the payment-messaging computing system. The method additional includes determining a risk metric representing a risk of using the public consumer token for the bill payment. The method further includes sending the risk metric from the payment-messaging computing system to the biller financial institution to cause the biller financial institution to send the risk metric to the biller computer to allow the biller to determine whether to assume liability for the bill payment or instead request the consumer financial institution assume liability and whether to perform a step-up authentication, based on the risk metric.

Abstract: A method including receiving, at a payment-messaging system from a biller financial institution, a request comprising a public consumer token of a consumer. The consumer provided the public consumer token to a biller system of a biller for a bill payment by the consumer to the biller. The biller system provided the public consumer token to the biller financial institution. The biller financial institution maintains a biller account of the biller. The acts also can include determining a risk metric representing a risk of using the public consumer token for the bill payment. The acts additionally can include sending the risk metric from the payment-messaging system to the biller financial institution. The biller financial institution sends the risk metric to the biller system to allow the biller to determine whether to assume liability for the bill payment.

Abstract: A method including receiving, at a payment-messaging system from a biller financial institution, a request comprising a public consumer token of a consumer. The consumer provided the public consumer token to a biller system of a biller for a bill payment by the consumer to the biller. The biller system provided the public consumer token to the biller financial institution. The biller financial institution maintains a biller account of the biller. The acts also can include determining a risk metric representing a risk of using the public consumer token for the bill payment. The acts additionally can include sending the risk metric from the payment-messaging system to the biller financial institution. The biller financial institution sends the risk metric to the biller system to allow the biller to determine whether to assume liability for the bill payment.