Skip to content

Search

"information security"

221 articles found

Bank customer completing remote identity verification through a video call

Payment Systems

Remote Identity Verification Starts on May 1

The Banking Regulation and Supervision Agency (BRSA) had prepared a draft communiqué on the remote identity verification methods banks can use. According to the communiqué published in today's Official Gazette, the practice enters into force on May 1.

Illustration representing a Man in the Browser (MitB) cyberattack on online banking

Security

What is a Man in the Browser Attack (MitB)?

In the Man in the Browser fraud method, the goal is not to steal the user's password but to place malware in the browser itself. A malicious browser extension can alter the amount and recipient of the user's transfers at will.

Diagram illustrating the retrieval request process in card transactions

Chargeback

What is a Retrieval Request?

A chargeback is when cardholders dispute a transaction made without their knowledge through their card-issuing bank. So what does a Retrieval Request mean? It is essentially a document request related to transactions a cardholder does not recognize on their statement.

Person entering card details on an online payment page

E-commerce

What is Online Payment?

Making payments over the internet using a card is called online payment. Learn what online payment systems are used for and what happens behind an online transaction, from the payment gateway to the issuing bank.

Diagram illustrating the Easy Addressing System (KOLAS) within Turkey's FAST payment network

FAST

What is the Easy Addressing System (KOLAS)?

The Easy Addressing System (KOLAS) is one of the layered services of FAST, the Central Bank's instant funds transfer system, developed and operated by BKM. It lets users send money via phone number or email instead of an IBAN.

Illustration of ISO 8583 message format

ISO 8583

ISO 8583 Field Descriptions (F35)

F35 TRACK-2 DATA: The values printed to the card's Track 2 data in ISO 7813 format, including field separators and start/end sentinels, but excluding LRC (Longitudinal Redundancy Check) characters. It is 37 characters long.

Diagram of the Secure Mobile Payment and Electronic Document Management System under VUK 507

Payment Institutions & E-Money

What Is the VUK 507 Communique?

VUK 507 is the common name of Tax Procedure Law General Communique Serial No. 507, published in the Official Gazette on 1/6/2019 on the Secure Mobile Payment and Electronic Document Management System. It sets the rules for sales, collection and electronic document applications.

Diagram comparing the 3D, 3D Pay, and 3D Pay Hosting payment models

Payment Systems

What are the 3D Secure Payment Models?

In card payment transactions made via a physical POS device, entering the card's PIN keeps the transaction secure, while in virtual POS transactions, security is provided through the 3D Secure flow. Are 3D Secure payment methods standardized? There are 3 different 3D Secure models.

Illustration representing communication protocols used in POS payment systems

Merchant & POS

What Are POS Sub-Protocols and Their Use Cases in Turkey?

In payment systems, every exchange between POS devices and bank or payment institution systems runs on a specific messaging standard, generally based on ISO 8583. However, each country, bank, or switch network defines its own version of this standard.

Mobile phone used to accept payments through the Secure Mobile Payment System

Merchant & POS

What Is Secure Mobile Payment?

The Secure Mobile Payment System is a system permitted by the Ministry, operated under the Revenue Administration (GIB) Communiqué, for sales, payment and collection transactions and the electronic creation, transmission and retention of the related financial documents.

Open banking illustration representing payment services data sharing APIs between financial institutions and third-party providers

Payment Systems

Guide on Data Sharing Services in Payment Services Published

Open banking opens financial data, under the regulations and with the customer's explicit consent, to third-party service providers through standard APIs. The CBRT has published a guide on payment initiation and account information services, covering licensing and technical certification.

Diagram of ISO 8583 Field 2 (F2) card number structure

ISO 8583

ISO 8583 Field Descriptions (F2)

F2 is the Card Number field in ISO 8583, identifying the cardholder and issuing bank. This post covers its structure, the 8-digit BIN update, field format, first-digit scheme identification, and PCI DSS security requirements.