Search
157 articles found
Merchant & POS
Introduction: When a card (credit card/debit card/prepaid card) is used at an ATM or POS, data must be carried securely between systems. For example, in a store sale, the POS initiates the transaction, which must reach the cardholder's bank intact.
Laws & Regulations
No. There is an exemption for technical service providers that offer IT support for the provision of payment services. However, they have responsibilities under the Communiqué on outsourcing and information security.
Merchant & POS
An imprinter is the name given to devices that transfer all the information embossed on a credit card onto a paper sales receipt. Before POS terminals, it was commonly used by merchants for authorization transactions.
Fraud
With the growth of credit and debit card usage and rising e-commerce transaction volumes, there has been a serious increase in exploiting user negligence to harm customers. Fraud means using someone else's card at a merchant or ATM to gain unjust profit.
Payment Institutions & E-Money
On 7 October 2023, the CBRT amended the Communiqué on Information Systems of Payment and E-Money Institutions and Data Sharing Services of Payment Service Providers, first published on 1 December 2021. Links to the new text, a comparison table and a detailed summary of changes follow.
E-commerce
Making payments over the internet using a card is called online payment. Learn what online payment systems are used for and what happens behind an online transaction, from the payment gateway to the issuing bank.
Payment Institutions & E-Money
A payment institution is a legal entity authorized under the Law to provide and execute payment services. It must be a joint stock company meeting the conditions in Article 14 of Law No. 6493. This post sets out the services listed in Article 12 and the exclusions.
Security
A Secure Card Reader for PIN (SCRP) is a multi-function card reader that turns any iOS, Android or Windows device into a payment terminal able to accept chip and contactless payments with PIN.
Security
“Software-based Mobile Payment Security Requirements” is a document published by EMVCo in April 2020 to guide payment application developers in building secure payment applications. This post summarizes its purpose and who it concerns.
Online & Authorization
The Application Transaction Counter is the number of transactions made with the card so far. It increases by 1 with each transaction and can also be used as a transaction number, making transactions easier to track.
Merchant & POS
In payment systems, every exchange between POS devices and bank or payment institution systems runs on a specific messaging standard, generally based on ISO 8583. However, each country, bank, or switch network defines its own version of this standard.
ISO 8583
F2 is the Card Number field in ISO 8583, identifying the cardholder and issuing bank. This post covers its structure, the 8-digit BIN update, field format, first-digit scheme identification, and PCI DSS security requirements.