Search
183 articles found
HSM & Security
LMK stands for Local Master Key. The Local Master Key (LMK) is the HSM's master key, and all other keys used by the institution are secured under this key. As transaction volume increases, banks often use multiple HSMs to reduce the load on each device.
Payment Institutions & E-Money
A payment institution is a legal entity authorized under the Law to provide and execute payment services. It must be a joint stock company meeting the conditions in Article 14 of Law No. 6493. This post sets out the services listed in Article 12 and the exclusions.
Credit Card
Credit card fraud is generally committed using the card itself, using card details without the card, via excess or duplicate withdrawals, or by seizing identity information. ATM card trapping is common, since ATMs hold the card during the transaction.
HSM & Security
Secure Element Issuer is the stakeholder that provides, maintains, and updates the secure element in cases where mobile payment application and card data are stored in the secure element inside a mobile phone.
Laws & Regulations
Law No. 7192 amends certain articles of Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions. Announced on 22 November 2019, it entered into force on 01.01.2020.
General
Who will win in Agentic Commerce? Owning the customer used to be a huge advantage. Once an agent starts deciding on the customer's behalf, where does the real power move to?
Credit Card
It is a CVV2/CVC2 code that changes every few minutes instead of the static code printed on the back of a credit card, aimed at reducing fraud risk in CNP (Card Not Present) transactions.
Merchant & POS
Transaction types that can be made with a card through a POS: Magnetic Sale, EMV (Chip) Sale, Fallback Sale, Offline EMV Sale, Mail Order, and Ecommerce Sale, each explained in detail below.
Merchant & POS
When a chip can't be read due to a chip fault or the card being inserted incorrectly, the transaction is completed by swiping the magnetic stripe on the right side of the POS. Can chipless cards do fallback?
Online & Authorization
In EMV, data is stored in Tag-Length-Value (TLV) format, and it is carried between the card, the POS terminal, and the authorization system in this same format. This post lists every EMV Tag, its type, and its description.
Payment Systems
All payment and electronic money institutions operating in Türkiye fall under the relevant regulation. A license from a foreign authority is not enough; a foreign institution must obtain a license from the Central Bank.
HSM & Security
ZPK, also known as the PIN Protection Key, is a data encryption key that is distributed automatically and used to encrypt PINs. It is also referred to as the 'Working Key'. This key allows PIN information to be carried securely across the network.