Where do the Control Numbers come from?

The providers and, often, Payers originate the Control Numbers (the controlNumber attribute) for transactions. Control Numbers must be a nine-digit numeric value.