Search
172 articles found
Merchant & POS
PIN Transaction Security (PTS) verifies that card data and PIN information are used for a payment transaction. It is a set of modular evaluation requirements managed by the PCI Security Standards Council for PIN-accepting terminals.
Payment Systems
PCI Point of Interaction (POI) was introduced to minimize risk in card transactions. PCI POI Security Requirements cover physical and logical security for both online and offline PIN entry devices (PED) and secure card readers.
ATM
One of the most important things to watch when using an ATM is PIN security. Since ATMs handle customers' cash transactions, it is no surprise they are prime targets for fraudsters.
ISO 8583
DE 52 — Personal Identification Number (PIN) Data: the field that holds the PIN data. PIN verification is carried out based on this field.
Merchant & POS
BKM has changed the domestic transaction flows for contactless transactions above and below the CVM limit. For above-limit transactions, the issuer can now ask the cardholder to re-enter the PIN instead of terminating the transaction after an incorrect PIN (DE39 = 55).
Online & Authorization
These are codes that communicate the issuer's conditions for approving a transaction online (IAC-Online), for declining it (IAC-Denial), or for declining it when the terminal cannot go online (IAC-Default).
Online & Authorization
A reference guide to authorization response codes seen on POS and ATM transactions, with plain-language explanations of what each code means and what to do about it.
Payment Systems
The domestic authorization flow for below-CVM-limit online contactless transactions has changed. Issuers can now ask the cardholder for a PIN or request card insertion instead of simply approving or declining. This post explains the CVM list and the new DE48 PDS22 and DE39 = 65 message flows.
Online & Authorization
F53 - PIN Encryption Control Information. When online PIN data is present, sending the F53 value is mandatory, except when DUKPT information is carried in Field 63, Tag 01. F53 consists of the following components.
Online & Authorization
Cardholder verification in EMV is specific to chip cards. One goal of EMV is to minimize card fraud. To do this, three parties must be verified: the bank, the cardholder, and the terminal. One of the data items taken from the card to prove identity is...
Credit Card
Current information: this post describes the limit that applied at the time of publication. According to a BRSA letter to banks, the PIN-free contactless transaction limit, raised to 750 TL in July 2022, will become 1500 TL from 1 July 2024.
Merchant & POS
It's important to first distinguish between magnetic-stripe and fallback transactions. A magnetic-stripe transaction skips the chip entirely, which lowers its security level compared to a fallback transaction.