Search
215 articles found
Online & Authorization
You press the pay button and the screen says the transaction failed. Behind that failure are checks on your balance and transaction security. This post explains how funds confirmation APIs work, where they apply, and the situation in Turkey's open banking.
Payment Institutions & E-Money
On 7 October 2023, the CBRT amended the Communiqué on Information Systems of Payment and E-Money Institutions and Data Sharing Services of Payment Service Providers, first published on 1 December 2021. Links to the new text, a comparison table and a detailed summary of changes follow.
Credit Card
The BRSA has restricted the number of installments on credit card transactions depending on the sector, aiming to keep household spending from exceeding income. This post covers the new installment limits for furniture, white goods, TVs, gold, vehicle loans and the higher risk weights.
Security
Access Security Control (ACS) is the security protocol that the card-issuing bank must maintain under the 3-D Secure protocol to support cardholder authentication. 3-D Secure is an XML-based protocol that adds an extra security layer to online card payments.
Merchant & POS
Onboarding refers to all the practices that help a customer learn to use a product or service for the first time. In payment institutions, it covers verifying a customer's information and documents during merchant application.
Security
These are passwords generated for one-time use and sent to the cardholder's phone to verify card transactions in payment systems. The password sent during a 3D Secure transaction is a common example.
Fraud
Data leakage is the intentional or accidental exposure of sensitive data through any channel where it is stored, processed or transmitted. This post covers its three main causes and the DLP solutions used to prevent it.
Online & Authorization
In EMV, data is stored in Tag-Length-Value (TLV) format, and it is carried between the card, the POS terminal, and the authorization system in this same format. This post lists every EMV Tag, its type, and its description.
Credit Card
The Credit Reference System (KRS) is an information sharing system that, using modern methods, enables detailed information about individual credit product customers to be shared among KKB member institutions, in order to determine the risk factor…
HCE
The HCE cloud-based security infrastructure consists of four main pillars: Tokenization, Risk Management, Session Keys, and User/Device Authentication. Tokenization indicates the type of token generation, and there are three different tokenization methods.
Credit Card
CNP refers to a transaction made through a website or a company's own app payment page, where the card is not read by any device and its details are entered manually. It is short for Card Not Present.
Merchant & POS
These are codes placed into the terminal software by the acquirer that govern the rules for whether transactions go online or are declined, covering offline approval, offline decline, and online submission due to issuer risk...