Search
60 articles found
HSM & Security
In the world of payment systems, keys and their uses are important for transferring information from one place to another, storing information, and securing authorization and scripting steps. Key types are divided into six categories based on their purpose.
Payment Systems
In payment or cash withdrawal transactions, the TR QR Code is generated by the POS or ATM. The card issuing bank must build its systems to read and act on this code. Errors usually stem from mishandling the long and short QR code flows, which are explained here.
ISO 8583
DE 52 — Personal Identification Number (PIN) Data: the field that holds the PIN data. PIN verification is carried out based on this field.
Merchant & POS
This can occur at companies selling products from different sectors. For example, you enter a shopping mall and buy a refrigerator for 3000 TL, a dishwasher for 2000 TL, and an iron for 1000 TL, each under a different installment campaign.
HCE
There are three types of PIN strategy in HCE (Host Card Emulation): No PIN, Card PIN and Wallet PIN or customer biometric data. Each balances user experience and security differently.
Payment Systems
The domestic authorization flow for below-CVM-limit online contactless transactions has changed. Issuers can now ask the cardholder for a PIN or request card insertion instead of simply approving or declining. This post explains the CVM list and the new DE48 PDS22 and DE39 = 65 message flows.
Merchant & POS
Terminal Verification Results (TVR): a sequence of bits produced when a terminal reads an EMV card, based on logical checks such as an expired card. This data object is used to decide whether a payment transaction should be accepted online, declined, or allowed to proceed.
Merchant & POS
In EMV-based debit card transactions, PIN verification is decisive for both security and liability. What happens when a card that only supports online PIN is sent to the issuer without a PIN, and the issuer approves it? Who owns the risk?
Merchant & POS
Chip&Pin, introduced in Turkey on March 31, 2006, is a payment method that greatly reduces the risks of card copying and loss or theft fraud. The chip on the card reduces copying risk, while the 4-digit PIN prevents unauthorized use of a lost card.
Payment Systems
Online PIN is verified by the card-issuing institution through the message itself, while Offline PIN is verified on the chip. This article explains the difference and when PIN bypass is allowed.
Fraud
With the growth of credit and debit card usage and rising e-commerce transaction volumes, there has been a serious increase in exploiting user negligence to harm customers. Fraud means using someone else's card at a merchant or ATM to gain unjust profit.
Credit Card
The PIN Try Count is the maximum number of failed offline PIN verifications that can be made with the card. Banks usually keep both the consecutive wrong PIN count and the maximum wrong PIN count.