Search
19 articles found
Online & Authorization
Cardholder verification in EMV is specific to chip cards. One goal of EMV is to minimize card fraud. To do this, three parties must be verified: the bank, the cardholder, and the terminal. One of the data items taken from the card to prove identity is...
Payment Systems
The domestic authorization flow for below-CVM-limit online contactless transactions has changed. Issuers can now ask the cardholder for a PIN or request card insertion instead of simply approving or declining. This post explains the CVM list and the new DE48 PDS22 and DE39 = 65 message flows.
Payment Systems
One of the most notable recent developments in card payments is that contactless limits are no longer fixed and can be managed dynamically per customer. Mastercard and Visa are taking different but complementary approaches, and ISO 8583 may need to evolve with them.
Merchant & POS
BKM has changed the domestic transaction flows for contactless transactions above and below the CVM limit. For above-limit transactions, the issuer can now ask the cardholder to re-enter the PIN instead of terminating the transaction after an incorrect PIN (DE39 = 55).
Merchant & POS
In EMV-based debit card transactions, PIN verification is decisive for both security and liability. What happens when a card that only supports online PIN is sent to the issuer without a PIN, and the issuer approves it? Who owns the risk?
Merchant & POS
Current information: This article describes the limit as of its publication date. For the current contactless (no-PIN) transaction limit, see the linked article. The introduction of contactless transactions brought new concepts and structures.
Contactless
Updated info: this article describes the limit at the time it was published. For the current contactless (PIN-free) transaction limit, see the linked article. A 1,000 TL contactless transaction is technically possible, but banks won't take that risk.
HCE
The basic offline transaction rules applied in HCE transactions include the CVM limit for contactless payments, standby mode payments, and PIN entry requirements above the limit.
Merchant & POS
Yes. Whether a contactless transaction goes online depends on the limits on the card and the POS: the contactless floor limit, the CVM limit and the contactless transaction limit. A worked example shows how.
Payment Systems
Contactless payment has greatly improved the user experience, yet its fixed transaction limit is a common complaint. Can this limit be managed dynamically per customer? This post covers the current situation, technical and regulatory requirements and the outlook.
Payment Systems
In payment or cash withdrawal transactions, the TR QR Code is generated by the POS or ATM. The card issuing bank must build its systems to read and act on this code. Errors usually stem from mishandling the long and short QR code flows, which are explained here.
Merchant & POS
An offline transaction is one in which the card and POS terminal approve the transaction based on their own parameters, without contacting their banks. Whether contact or contactless, the device decides whether the transaction is processed offline.