Search
60 articles found
Credit Card
Yes. A certificate must be generated for every new BIN and loaded onto the card chip, establishing secure communication between the chip and the terminal. This is especially critical for verification in offline transactions.
Merchant & POS
The EMV Level 1 standard refers to an important global payment industry specification defining the electrical and physical interface between credit and debit cards and the payment terminal (ATM/POS). The EMV Contactless Level 1 certification guarantees that the device…
Merchant & POS
For a POS device to process a transaction with a card issued under a payment scheme such as MasterCard or Visa, the device must complete the required certifications for that scheme. First, the acquiring bank must clarify several points before entering certification.
Payment Systems
Open banking means sharing financial data with third parties securely, and Payment Services Data Sharing Services (OHVPS) are the two core payment services under it. This post explains both and where to find the participant list on the BKM website.
ATM
Suppose you are a newly established bank, wanting to offer customers all your products and services. Of course, this is not easy. First, the Bank's OnUs transaction processing step must run successfully before other banks' cards can be accepted at the ATMs.
Online & Authorization
In EMV, data is stored in Tag-Length-Value (TLV) format, and it is carried between the card, the POS terminal, and the authorization system in this same format. This post lists every EMV Tag, its type, and its description.
Laws & Regulations
A card scheme organization establishes a debit, credit or prepaid card system and authorizes entities to issue cards or sign merchant agreements. Troy, Visa, Mastercard, American Express, JCB and MIR are examples. This post explains how ATM and POS certification works.
Security
When you visit a website, the protocol it supports appears at the left of the web address. Secure data transfers likewise use protocols that support http or https. Let's first take a brief look at what HTTP and HTTPS are.
Credit Card
SDA (Static Data Authentication), DDA (Dynamic Data Authentication), and CDA (Combined Dynamic Data Authentication) are offline data authentication methods used in chip cards. Learn how each one validates the card and the transaction.
Payment Systems
Takasbank (Istanbul Settlement and Custody Bank) exists to increase the competitiveness of Turkey's markets by providing clearing and custody services, financial services, and other economic activities under the relevant legislation.
Fraud
A man-in-the-middle attack is a method in which an attacker inserts themselves between the server and client to intercept users' information, steal passwords, and gain access to accounts on a local network. This fraud mostly occurs over public internet connections.
ATM
RKL is the process of distributing a TMK (Terminal Master Key) to each terminal from a central point. It is used to remotely load keys onto POS and ATM devices, loading TMKs onto an ATM's keypad or activating them on a POS.