Search
60 articles found
HSM & Security
TPK stands for Terminal PIN Key. It is a data encryption key used to encrypt PINs for transmission between a terminal and the terminal's bank (acquirer) within a local network. Learn how TPK is used in POS and ATM devices.
ATM
RKL is the process of distributing a TMK (Terminal Master Key) to each terminal from a central point. It is used to remotely load keys onto POS and ATM devices, loading TMKs onto an ATM's keypad or activating them on a POS.
Credit Card
A fraudster who has obtained someone's identity card, or produced a copy of it, applies for a card in the customer's name through various channels using that and the other requested documents.
Merchant & POS
BKM has changed the domestic transaction flows for contactless transactions above and below the CVM limit. For above-limit transactions, the issuer can now ask the cardholder to re-enter the PIN instead of terminating the transaction after an incorrect PIN (DE39 = 55).
Credit Card
Credit card fraud is generally committed using the card itself, using card details without the card, via excess or duplicate withdrawals, or by seizing identity information. ATM card trapping is common, since ATMs hold the card during the transaction.
Online & Authorization
In EMV, data is stored in Tag-Length-Value (TLV) format, and it is carried between the card, the POS terminal, and the authorization system in this same format. This post lists every EMV Tag, its type, and its description.
Payment Systems
One of the most notable recent developments in card payments is that contactless limits are no longer fixed and can be managed dynamically per customer. Mastercard and Visa are taking different but complementary approaches, and ISO 8583 may need to evolve with them.
3D Secure
Especially with the growth of the internet, credit card transactions have started shifting from physical POS terminals to virtual POS terminals. In virtual transactions, the 3D Secure structure is used instead of the card PIN entered in physical transactions. So how is a transaction's…
Credit Card
In the early years of credit cards, using the card physically was mandatory. With the internet and new technologies, we can now pay with only the card details, 3D Secure and contactless NFC payments, even without the card in hand.
Merchant & POS
Current information: This article describes the limit as of its publication date. For the current contactless (no-PIN) transaction limit, see the linked article. The introduction of contactless transactions brought new concepts and structures.
Payment Systems
After switching to response code 70 for contactless limit-exceeded cases, we found that some overseas POS devices and acquirers did not handle it as expected. This post covers why the problem lies in the ecosystem and how to address it.
ISO 8583
F55 - INTEGRATED CIRCUIT CARD (ICC) SYSTEM RELATED DATA: the field where EMV data is written on chip cards. It consists of components such as Position, Private Data Subelements, PDS Tag, PDS Length, and PDS Value...