Search
157 articles found
Online & Authorization
A contactless transaction is a fast, secure payment made without direct contact between the card and the POS terminal (without reading the chip or magnetic stripe). Can every card be used for contactless payments? For a transaction to be contactless…
HCE
There are three types of PIN strategy in HCE (Host Card Emulation): No PIN, Card PIN and Wallet PIN or customer biometric data. Each balances user experience and security differently.
HSM & Security
A Trusted Execution Environment (TEE) is an environment where executed code and accessed data are isolated and protected in terms of confidentiality (no one has access to the data) and integrity (no one can alter the code or its behavior). We may not realize it, but many…
Security
In the Man in the Browser fraud method, the goal is not to steal the user's password but to place malware in the browser itself. A malicious browser extension can alter the amount and recipient of the user's transfers at will.
HSM & Security
LMK stands for Local Master Key. The Local Master Key (LMK) is the HSM's master key, and all other keys used by the institution are secured under this key. As transaction volume increases, banks often use multiple HSMs to reduce the load on each device.
Merchant & POS
A PIN pad lets cardholders safely enter their PIN during POS transactions and lets contactless cards be tapped to transfer card data to the POS. Here is how it works.
Security
Forgery in card payments means transactions made with card details without the cardholder's knowledge, or purchases with counterfeit or stolen cards. Merchants cannot eliminate fraud and chargeback risk, but they should aim to reduce it to reasonable levels.
Credit Card
The Application Interchange Profile indicates the application functions supported by the card. The AIP values and their descriptions are given below. Where is the AIP found? The AIP is a 2-byte piece of data stored on the card, carried under EMV tag 82.
Payment Systems
An amendment was made to the communiqué on the information systems of payment and e-money institutions and data sharing services, setting 31/3/2025 as the deadline for other payment service providers' obligations.
HSM & Security
PEK is the abbreviation for Pin Encryption Key. The role of PEK is to encrypt PINs. There are two types of PEK: TPK (Terminal Pin Key) and ZWK (Zone Working Key).
EMV
The AID tells the terminal which applications are present on a chip during a POS or ATM transaction. What does the AID do? It lets the terminal determine whether it supports an application on the chip. In Tag 9F06, it is 5-16 digits long.
Payment Institutions & E-Money
Open banking means sharing customers' financial information with a third-party fintech company so that a range of banking and financial services can be offered to them. It works through API integrations. This post covers its status in Turkey and the new BRSA regulation.