Search
231 articles found
HSM & Security
Non-face-to-face transactions in which the cardholder authorizes the merchant to store card data, and the merchant uses that stored data to carry out the transaction, are called Credential-on-File (CoF) transactions.
Credit Card
The Payment Card Industry Data Security Standard (PCI DSS) is a technical and operational standard created by the PCI Committee, formed by internationally recognized payment brands, to ensure data security in card payment systems.
Security
The first transaction made after a customer's card data is stored with a merchant is called the First Credential-On-File transaction. BKM expects it to be flagged with the value "C" in switch message field DE48.PDS86, and BRSA draft rules govern how card data may be stored.
Merchant & POS
It is not possible to initiate an EMV transaction directly with credit card Track Data (magnetic stripe data), because EMV transactions use a different technology and security mechanism. Why can't an EMV transaction be initiated with Track Data?
Payment Systems
BKM shares card payment data periodically. In 2020, the pandemic reshaped payment habits in Turkey: contactless and online payments surged and the total card payment amount grew 17 percent to TRY 1.15 trillion, with about 264 million cards in circulation.
Online & Authorization
An APDU is an application-level protocol defined in ISO 7816-4 and used between a smart card and a POS, ATM, etc. There are two types of APDU: Command APDU and Response APDU. The structure of the APDU is given below.
Credit Card
Data on card payments made online in Türkiye is shared by BKM, updated monthly by number and value of transactions. Here is the link and how to interpret the figures.
Merchant & POS
In EMV transactions, Application Selection is the process of choosing among the applications supported by both the card and the terminal. It is the first stage of authorization, so it is very important. This post covers the PSE and List of AIDs methods.
Contactless
As end users, we have come to love contactless payments, which are becoming a bigger part of daily life. So what features let contactless cards make payments without touching the POS terminal? There are two classes: MSD cards and Contactless EMV cards.
Online & Authorization
In EMV, data is stored in Tag-Length-Value (TLV) format, and it is carried between the card, the POS terminal, and the authorization system in this same format. This post lists every EMV Tag, its type, and its description.
Credit Card
Credit card fraud is generally committed using the card itself, using card details without the card, via excess or duplicate withdrawals, or by seizing identity information. ATM card trapping is common, since ATMs hold the card during the transaction.
Credit Card
SDA (Static Data Authentication), DDA (Dynamic Data Authentication), and CDA (Combined Dynamic Data Authentication) are offline data authentication methods used in chip cards. Learn how each one validates the card and the transaction.