TD Bank

Small business debit card issuance

As part of the product and delivery team behind TD’s debit card maintenance micro-app, I redesigned how colleagues issue debit cards to small businesses, migrating off legacy software and building fraud prevention directly into every issuance flow.

Role:

Lead UX Designer

Duration:

6 Months

Platforms:

iOS, Android and Webapp

Context

Our team defined, designed and built the micro-app where every debit card maintenance task lives. Issuance was where TD tightened controls most.

Challenge

Small businesses bring authorized users, a 5-card limit and screening for every cardholder. None of which can slow colleagues down.

Resolution

A four-step guided flow in Odyssey where the rules are built in.

Two initiatives

For five years, TD has been improving how colleagues issue debit cards. This project sat at the intersection of two initiatives: a migration from the legacy Encore app to Odyssey, and tighter anti–money laundering controls after a high-profile fraud event.

One micro-app for every card maintenance task.

One micro-app for every card maintenance task.

I was on the product and delivery team responsible for defining, designing and developing the debit card maintenance micro-app in Odyssey. Anything related to maintaining a debit card lives under one roof.

Micro-apps

Issue card

Re-issue card

Close card

PIN reset

Account linking

Change card lmits

Owners, and the people they trust.

Owners can set up a card for themselves, or for someone close to them who isn’t officially a TD customer. That second person, the authorized user, is where most of the risk and rules live.

Business owner

TD customer who owns the account

Requests a card for themselves

Requests cards for authorized users

Confirmed present in branch by the colleague

Authorized user

Close to the owner, not a TD customer

Receives a card on the business

Screened: name, DOB, SSN, address, citizenship

Requests a card without the owner

Make the rules part of the flow.

Colleagues shouldn’t have to remember policy while serving a customer. Every decision moved a rule out of their head and into the interface.

Colleagues shouldn’t have to remember policy while serving a customer. Every decision moved a rule out of their head and into the interface.

Sanction screening, built in

Name, DOB, SSN, address and citizenship are designed into the flow for every cardholder, so screening always runs — never as an afterthought.

Adaptive business rules

The flow enforces the 5-card limit and authorized-user permissions inline, so colleagues never need to memorize policy.

Owner-present due diligence

Before issuing to an authorized user, the colleague confirms the business owner is in the branch — the extra diligence becomes a step, not a memory test.

One app, all issuance

Personal and small business issuance now live in one Odyssey workflow, ending the switch between Encore and other tools.

Four steps to setup a debit card

Four steps to setup a debit card

Account, address, cardholders, delivery and then a summary that closes the loop.

Account, address, cardholders, delivery and then a summary that closes the loop.

Account selection

Colleagues handle primary and secondary accounts, existing cards and the 5-card limit...all in step one.

Existing linked cards and cardholders appear as soon as an account is selected.

Secondary accounts can be added, each with its own linked-card view.

Verify primary address

Business addresses change. Verifying before a card is printed prevents wasted cards, returned mail and fraud risk.

Select a cardholder

Every regulatory requirement converges here: each cardholder verified in one view, within the business’s limit.

Expanding a cardholder reveals exactly what’s captured for screening.

The cap recalculates against existing cards. No mental math.

Card delivery options

Four cards can mean four people. Instead of repeating the same decision, every delivery choice lives in one table.

Summary

The final screen tells the customer exactly what happens next, per card — and lets the colleague start the next request.