Search
76 articles found
HSM & Security
The CPoC standard, issued by the PCI Security Standards Council in 2019, is a data security standard that lets merchants accept contactless payments using a commercial off-the-shelf (COTS) mobile device with NFC.
HCE
When we talk about HCE methodology, many interacting architectural components come to mind. The core terms describing this architecture are listed below, starting with GCM/FCM (Google/Firebase Cloud Messaging), a service for sending push notifications.
Merchant & POS
Address Verification Service (AVS) is a fraud prevention system that helps limit fraud and chargebacks when used effectively. It verifies that the address a customer enters matches the cardholder's address on file with the issuer.
Chargeback
Compliance means adherence to card scheme rules. Outside chargebacks, it is how a bank that loses money because card payment organization rules were broken recovers that amount from the party that caused the loss.
Merchant & POS
A Credit Voucher (Refund Document) is a document issued by the merchant for the refund or cancellation of a good or service that a cardholder purchased using a credit card, or to correct an overcharge made by mistake.
Credit Card
Banks increase the variety of their products and services to serve customers better. When introducing new products, they usually issue them under a new BIN. So are there valid rules for obtaining a new BIN (Bank Identification Number)?
ISO 8583
DE 44 - ADDITIONAL RESPONSE DATA is used to provide other supplementary data that may be needed in authorization, as a response to the authorization message. The Card Authentication Results Code is sent in position 9, and the CAVV Result Code is sent in position 15.
Merchant & POS
PIN Transaction Security (PTS) verifies that card data and PIN information are used for a payment transaction. It is a set of modular evaluation requirements managed by the PCI Security Standards Council for PIN-accepting terminals.
Fraud
Sometimes committing fraud by exploiting system vulnerabilities is harder than exploiting human weaknesses. Fraud that exploits such human weaknesses is called social engineering.
Security
With Chip&Pin technology, card PINs and chip-based transactions became widespread. As online shopping grew, strengthening the security of these transactions became a necessity, and OTP began providing that transaction security.
Merchant & POS
In EMV-based debit card transactions, PIN verification is decisive for both security and liability. What happens when a card that only supports online PIN is sent to the issuer without a PIN, and the issuer approves it? Who owns the risk?
Payment Systems
PA DSS (Payment Application Data Security Standard) is a global security standard created by the PCI SSC. Even if you do not need to comply with it, PA DSS remains a valuable guide for auditing and building secure payment applications.