Search
33 articles found
Cryptocurrency
Cryptocurrencies are becoming part of everyday life and are expected to compete seriously with card payments. This glossary explains the key crypto terms, from address, altcoin and arbitrage to halving, mining, proof of stake and stop-loss.
Security
The first transaction made after a customer's card data is stored with a merchant is called the First Credential-On-File transaction. BKM expects it to be flagged with the value "C" in switch message field DE48.PDS86, and BRSA draft rules govern how card data may be stored.
HSM & Security
Non-face-to-face transactions in which the cardholder authorizes the merchant to store card data, and the merchant uses that stored data to carry out the transaction, are called Credential-on-File (CoF) transactions.
Laws & Regulations
Law No. 7192 amends certain articles of Law No. 6493 on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions. Announced on 22 November 2019, it entered into force on 01.01.2020.
Merchant & POS
The Personal Data Protection Law was adopted by the Grand National Assembly of Turkey on 24/03/2016 and published in Official Gazette No. 29677 on 07/04/2016. It protects individuals' rights in the processing of personal data and sets the rules that data controllers must follow.
Payment Institutions & E-Money
On 7 October 2023, the CBRT amended the Communiqué on Information Systems of Payment and E-Money Institutions and Data Sharing Services of Payment Service Providers, first published on 1 December 2021. Links to the new text, a comparison table and a detailed summary of changes follow.
Laws & Regulations
The purpose of the Regulation on Bank Cards and Credit Cards is to set the procedures and principles for issuing and using bank and credit cards and for the activities of institutions in the card payment system.
Payment Institutions & E-Money
The term 'Third Party Provider' refers to an authorized online service provider introduced under Open Banking. These are systems outside a customer's relationship with their bank that mediate the transaction. So how many types of third party provider are there? Two.
HCE
Tokenization generates secure data from a credit card number, using specific algorithms, for use during authorization. In CNP transactions, it removes the risk of storing or compromising the original card number.
Merchant & POS
PSD stands for Payment Services Directive, known as the Payment Services Law. It took effect in EU countries in 2009, and in 2015 new revisions were announced as PSD1, aiming to build an efficient, fast, secure, and competitive payment market.
Security
A Qualified Security Assessor (QSA) is approved by the PCI Security Standards Council to audit merchants for PCI DSS compliance. The lists of QSA and ASV companies are published on the Council's website.
Security
Forgery in card payments means transactions made with card details without the cardholder's knowledge, or purchases with counterfeit or stolen cards. Merchants cannot eliminate fraud and chargeback risk, but they should aim to reduce it to reasonable levels.