Skip to content

Search

"card PIN"

164 articles found

Old mechanical credit card imprinter machine used to transfer embossed card details onto a sales slip

Merchant & POS

What Is an Imprinter?

An imprinter is the name given to devices that transfer all the information embossed on a credit card onto a paper sales receipt. Before POS terminals, it was commonly used by merchants for authorization transactions.

Diagram of PIN Encryption Key (PEK) structure

HSM & Security

What is PEK (Pin Encryption Key)?

PEK is the abbreviation for Pin Encryption Key. The role of PEK is to encrypt PINs. There are two types of PEK: TPK (Terminal Pin Key) and ZWK (Zone Working Key).

Contactless floor limit, CVM limit and transaction limit example

Merchant & POS

Can a Contactless Transaction Be Online?

Yes. Whether a contactless transaction goes online depends on the limits on the card and the POS: the contactless floor limit, the CVM limit and the contactless transaction limit. A worked example shows how.

Illustration representing Strong Customer Authentication (SCA) under PSD2

Payment Systems

What is Strong Customer Authentication (SCA)?

Strong Customer Authentication (SCA) is a security requirement introduced under the EU's Payment Services Directive 2 (PSD2) to increase security and reduce fraud in online payment transactions. SCA requires two of three independent authentication factors.

Zone Working Key PIN encryption between banks

HSM & Security

What Is ZWK (Zone Working Key)?

ZWK stands for Zone Working Key. It encrypts the PIN so that it can travel securely between different financial institutions, such as the acquiring bank and the issuing bank.

Illustration of Host Card Emulation (HCE) enabling contactless mobile payments

Online & Authorization

What Is HCE?

HCE lets a mobile device's operating system emulate the cards we use daily (credit, debit, gift cards, etc.) to make contactless payments via NFC. In other words, our phones behave like the cards we use for payments.

Illustration representing the PA-DSS payment application security standard

HSM & Security

What is PA-DSS (Payment Application Data Security Standard)?

PA-DSS (Payment Application Data Security Standard) is the Payment Application Data Security Standard set by the PCI SSC, a global security standard created by the Payment Card Industry Security Standards Council.

Photo illustrating a point-of-sale multiple installment sale transaction

Merchant & POS

What is a Multiple Installment Sale?

This can occur at companies selling products from different sectors. For example, you enter a shopping mall and buy a refrigerator for 3000 TL, a dishwasher for 2000 TL, and an iron for 1000 TL, each under a different installment campaign.

Diagram of HSM use case areas in security and payment systems

HSM & Security

What Is an HSM? What Is It Used For?

HSM, short for Hardware Security Module, is specialized security hardware built to store sensitive cryptographic keys in a physical environment and to perform cryptographic operations in the most secure way.

Customer making a contactless payment by tapping a card on a POS terminal

Contactless

What Is a Contactless Transaction?

A contactless transaction is a fast and secure payment made between a credit card and a POS terminal without direct contact, without reading the card's chip or magnetic stripe. Both the card and POS terminal must support contactless transactions.

Illustration of a Card Not Present (CNP) online payment transaction

Credit Card

What Is a CNP (Card Not Present) Transaction?

CNP refers to a transaction made through a website or a company's own app payment page, where the card is not read by any device and its details are entered manually. It is short for Card Not Present.

POS terminal used for EMV card payment processing

Merchant & POS

TVR (Terminal Verification Results)

Terminal Verification Results (TVR): a sequence of bits produced when a terminal reads an EMV card, based on logical checks such as an expired card. This data object is used to decide whether a payment transaction should be accepted online, declined, or allowed to proceed.