TPH production support
How to Diagnose a Failed TPH Payment
Diagnose the journey in order. Prove arrival, find the first failed stage, align timestamps, and control duplicate risk before anyone repairs, replays, or retries the payment.
Browse more TPH articles →
Find the stage, not only the status
A current TPH status describes where the platform represents the payment now. It does not always identify where the first failure occurred. Repair, parked, rejected, or complete states can follow an earlier parsing, routing, posting, transport, or acknowledgement problem.
Use a safe internal reference or synthetic test identifier to create one timeline. Record timezone offsets and clock skew before concluding that an event is missing.
End-to-end failure-stage map
| Stage | Question | Evidence |
|---|---|---|
| Arrival | Prove that the file, API, OFS, or message reached the expected TPH entry point. | Inbound timestamp, channel, safe correlation value, and receipt or listener evidence. |
| Parsing and validation | Find the first structural or business validation that rejected the payment. | Original non-sensitive fields, first error, source configuration, and validation result. |
| Product and routing | Confirm the product, route, warehouse, scheme, and processing path selected. | Matched conditions, amount, currency, geography, value date, and channel criteria. |
| Core posting | Determine whether accounting or the core transaction committed, rejected, or has an uncertain outcome. | Posting request and response, record state, balances, limits, locks, and commit evidence. |
| Scheme handoff | Prove whether the outbound instruction left TPH and was accepted by the next component. | Outbound identifier, queue or file evidence, transport result, and handoff timestamp. |
| Acknowledgement | Separate a missing acknowledgement from a failed payment. | Scheme response, status update, correlation mapping, timeout, and late-response evidence. |
| Repair or retry | Understand why work entered repair and whether another attempt is safe. | Original attempt, repair reason, retry count, ownership, duplicate controls, and approval. |
A safe diagnostic sequence
- Define impact: one payment, one channel, one product, or a broad service failure.
- Preserve original evidence: capture statuses, timestamps, errors, queue or file state, and recent changes before intervention.
- Prove arrival: identify the earliest TPH-owned evidence for the transaction.
- Walk forward: locate the first expected stage that has no evidence or an explicit rejection.
- Check dependencies: include core banking, database, messaging, files, certificates, and external schemes only when the journey reaches them.
- Determine outcome certainty: classify the original attempt as not started, rejected before commit, committed, handed off, acknowledged, or uncertain.
- Repair through ownership: use the approved queue, workflow, and operator role rather than changing records or messages directly.
Duplicate and replay risk
Never infer that a timeout means nothing happened. The caller may have timed out after TPH posted or after a scheme accepted the instruction. Replaying without proving the original outcome can create duplicate accounting, duplicate scheme submission, or a second customer payment.
Escalate uncertain outcomes with the original and current status, all correlation identifiers, posting evidence, outbound evidence, acknowledgement evidence, retry count, and the exact action being proposed.
Evidence before escalation
- Environment, business date, channel, product, amount/currency category, and impact.
- Normalised timeline from arrival to the first missing or failed stage.
- First error and surrounding context, with sensitive values redacted.
- Core posting, outbound handoff, acknowledgement, repair, and retry state.
- Recent configuration, deployment, certificate, route, or dependency changes.
- Whether any restart, retry, release, repair, or manual update already occurred.
Related reading
What TPH Actually Does and Why It Is Hard to Learn
The moment TPH becomes real is usually around 2am during a production incident. Payments are not going out. Thirty people are on a call. This is what you actually need to know before that call happens.
T24 fundamentalsWhat Is SWIFT in T24? A Plain-English Introduction
A plain-English introduction to SWIFT messaging in Temenos T24 — what SWIFT actually does, how messages get in and out, what MT and MX mean, and why your payment is stuck in a repair queue.
T24 fundamentalsWhat Is OFS in T24? Open Financial Services Explained
OFS is how the outside world talks to T24. A plain-English introduction to the message structure, request types, OFS.SOURCE configuration, security, and what breaks when integrations go wrong.
