Search
183 articles found
Credit Card
The BRSA raised the card limit threshold used to set the minimum payment rate from TRY 50,000 to TRY 100,000. This post explains what changed, why now, the short-term relief, the risk of carried-over balances, and which data to watch.
Online & Authorization
F53 - PIN Encryption Control Information. When online PIN data is present, sending the F53 value is mandatory, except when DUKPT information is carried in Field 63, Tag 01. F53 consists of the following components.
Payment Systems
Digitalization keeps changing the speed and shape of payments. AI-based payment agents pay on their own within user-defined limits and rules, completing transactions without the user initiating any action. This post explains how they work and what to watch for.
Security
In the Man in the Browser fraud method, the goal is not to steal the user's password but to place malware in the browser itself. A malicious browser extension can alter the amount and recipient of the user's transfers at will.
Laws & Regulations
The purpose of Law No. 5464 on Bank Cards and Credit Cards is to ensure the card payment system works effectively by regulating the issuance and use of bank and credit cards and the related clearing and netting processes.
Payment Institutions & E-Money
The Law defines e-money as monetary value issued in exchange for funds accepted by the issuer, stored electronically, used for payment transactions and accepted as a payment instrument by persons other than the issuer. This post explains e-money institutions and the services they may provide.
HCE
There are three types of PIN strategy in HCE (Host Card Emulation): No PIN, Card PIN and Wallet PIN or customer biometric data. Each balances user experience and security differently.
Credit Card
A look at the Union Bank RuPay combo card, an unusual design with two chips, two card numbers, two CVV2 values, two magnetic stripes, and two payment schemes combining credit and debit card functions.
Fraud
In payment systems, fraud means using someone else's credit or debit card to carry out a transaction at a merchant or ATM, gaining unfair profit and causing loss to the real cardholder, the merchant, or the bank. Fraudsters…
Merchant & POS
In EMV-based debit card transactions, PIN verification is decisive for both security and liability. What happens when a card that only supports online PIN is sent to the issuer without a PIN, and the issuer approves it? Who owns the risk?
HSM & Security
PEK is the abbreviation for Pin Encryption Key. The role of PEK is to encrypt PINs. There are two types of PEK: TPK (Terminal Pin Key) and ZWK (Zone Working Key).
Laws & Regulations
The Visa Core Rules and Visa Product and Service Rules documents define the fundamental rules that apply to all institutions in the Visa network. They are updated regularly, and all members are expected to follow the latest version.