
Merchant & POS
Don't Dismiss the POS Receipt
In daily credit card purchases, the POS produces two receipts: the Customer Copy and the Merchant Copy. The cardholder gets the customer copy; the merchant keeps its own copy by law.
Search
241 articles found

Merchant & POS
In daily credit card purchases, the POS produces two receipts: the Customer Copy and the Merchant Copy. The cardholder gets the customer copy; the merchant keeps its own copy by law.

Merchant & POS
A step-by-step walkthrough of a 100 TL POS sale: end-of-day batch close, clearing through BKM, interchange and merchant commission, and why the merchant gets paid even if the cardholder never pays the card bank.

Merchant & POS
For a POS device to process a transaction with a card issued under a payment scheme such as MasterCard or Visa, the device must complete the required certifications for that scheme. First, the acquiring bank must clarify several points before entering certification.

Merchant & POS
The System Trace Audit Number (STAN) is a number assigned by the third-party system (ATM or POS) to help uniquely identify a transaction. It is generated in the range 000001 to 999999. Each new authorization message needs a new STAN; retries reuse the original STAN.

HCE
Generating a token from the card number is essential to the security of payments made with mobile devices. The level of tokenization used depends on the need and on how critical the token is. Static tokenization: the token is generated once and stored in a database.

Payment System Institutions
According to the CBRT's official website, the Central Bank of the Republic of Turkey has become the controlling shareholder of the Interbank Card Center (BKM), using the authority granted by Law No. 7192.

Security
Vishing is a method of deceiving the victim using voice. It replaces the "p" in phishing with the first letter of "voice," meaning "voice deception." It is reinforced by technology in social engineering cases to extract information more easily.

Laws & Regulations
Law No. 6493, published in Official Gazette No. 28690 on 27 June 2013, regulates the procedures and principles for payment and securities settlement systems, payment services, payment institutions and e-money institutions.

HSM & Security
PA-DSS (Payment Application Data Security Standard) is the Payment Application Data Security Standard set by the PCI SSC, a global security standard created by the Payment Card Industry Security Standards Council.

Security
Fraud cases where scammers pose as bank staff or other institution employees to obtain citizens' banking information have increased significantly recently. Interestingly, the new fraud trend closely mirrors the steps of a genuine banking procedure.

Merchant & POS
BKM has changed the domestic transaction flows for contactless transactions above and below the CVM limit. For above-limit transactions, the issuer can now ask the cardholder to re-enter the PIN instead of terminating the transaction after an incorrect PIN (DE39 = 55).

Chargeback
A chargeback is when a cardholder asks the issuing bank to refund a transaction made without their knowledge. It cannot be prevented entirely, but simple precautions can minimize the risk. Here is how the process works and what cardholders should do.