Tag Archives: smart cards

Terminal Retirements

Leave a reply

Following up on our recent blog about terminal of the future, the VX 520, today we’re going to let the other shoe drop. With the payment processing industry thrusting its spotlight onto security in the wake of the Target Data Breach, the PCI DSS and its upgraded protocols are getting a lot of attention.

Host Merchant Services has been ahead of the curve on PCI compliance, having instituted a PCI Compliance Initiative years ago. But the Payment Card Industry Security Standards Council is in a continuous state of refining their security requirements and best practices so we here at HMS have to remain agile and adept at navigating these changes.

EMV smart cards, a topic we’ve discussed in depth here, are prompting PCI DSS to reorganize large swaths of its standards, and as a result, retire various terminals. As more and more POS hardware adapts to support EMV chip cards and end to end encryption, manufacturers and software developers will have to put their older equipment out to pasture. With the release of EMV/Contactless terminal applications, many of the legacy terminal devices/applications do not have the memory capacity required in order to support the association mandates. As a result, TSYS has provided a preliminary end of life schedule for credit card terminal applications that will be fully retired.

This is something the PCI DSS has been preparing for, and as such they have a schedule implemented for the retirement of older equipment. Coming up next is the VX 510 Terminal and its VDID300 Application, scheduled for retirement on June 3, 2014. Also the VX 510 and VX 570 and its VXGFT02 Application will be retired that day.

Prior to this date, Host Merchant Services has terminal upgrades available for our merchants. While we will continue to honor merchant boarding for these devices until the effective end of life date, once that occurs these devices/applications will no longer be an option available within our internal systems and downloads will no longer be available for terminal updates, swaps or technical support. So upgrading should be a priority, and Host Merchant Services will make the process seamless and trouble-free.

Industry Terms: EMV Cards

Leave a reply

This is the latest installment in The Official Merchant Services Blog’s Knowledge Base effort.  We want to make the payment processing industry’s terms and buzzwords clear.  We want to remove any and all confusion merchants might have about how the industry works.  The Host Merchant Services promise, we deliver personal service and clarity.  So we’re going to take some time to explain how everything works.  This ongoing series is where we define industry related terms and slowly build up a knowledge base and as we get more and more of these completed, we’ll collect them in the resource archive for quick and easy access.  Today’s term is EMV,  or chip-based cards.

Europay, MasterCard, Visa (EMV)

EMV cards, also known as smart cards, were developed and backed by four of the major card brands.  First implemented in Europe, the cards rely on an imbedded microchip to send and receive payment data with a merchant’s EMV-enabled terminal or POS system.

The chips, only about 3 by 5 mm in size, transmit unique numbers to the payment processors each time the cards are used.  This increases the security since the customers’ name and signature are not used or stored.  Making the chip-based cards unaffected by breaches.

These cards have been used in Europe for more than a decade and have appeared in Canada as recently as two years ago.  So what’s holding the United States up?  That’s right, you guessed it, the price tag.  Javelin Strategy & Research estimates the cost of deployment for EMV in the U.S. at about $8.6 billion.  The major card brands, however, have decided to make the push from the current magnetic strip standard, to the more secure form, EMV.

AmEx joins the club

In late June, American Express announced that it would be joining Visa and MasterCard, in requiring the chip-based cards.  Visa began an aggressive push last year for EMV cards; the company claimed more than a million of the cards were in circulation at the end of 2011.  AmEx, however, will require they be implemented in April 2013, instead of the 2015 mandate set by Visa and MasterCard.

Fraud Free

You may find yourself asking, at such a large implementation cost, are EMV cards really worth it? The answer is yes!  The savings comes in the form of decreased fraud.  The chip-embedded cards are much harder to duplicate than their magnetic strip enabled counterparts.  Criminals can modify or replace the information on mag-stripe cards easily.  Whereas the signals EMV cards give off, cannot be duplicated.

Fraud in the United States amounted to more than $3.56 billion in 2010.  Globally, the U.S. contributed to about 27% of payment-card purchases, yet accounted for 47% of global payment-card fraud.

In summary, EMV cards are coming to the U.S. whether merchants want to accept them or not.  The cost to implement them may cause a bit of a sticker shock, but the long-term benefits of virtually eliminating card fraud heavily outweigh it.  The decreased fraudulent charges will eventually translate into more savings for you, the merchant.

Visa Kicks Open the Door for Chip Cards

Leave a reply

Today The Official Merchant Services Blog discusses a fascinating new development by Visa in the realm of credit card processing, security, and hopefully Mobile Payment Technology.

Smart cards have been slow in gaining traction, especially in the United States. But now Visa is making moves to drag the U.S. into the chip card realm, kicking and screaming if it has to. A recent article on Credit.com reveals as of December 31, 2011, Visa — the largest processor of both debit and credit card payments — had issued more than 1 million credit cards that use “chip” technology to sore consumer payment information. The article notes that this data is being announced rather quickly in relation to Visa’s August 2011 announcement that it planned to start issuing more EMV — Europay, Mastercard, Visa — smart cards to push the industry toward better security and an easier transition to mobile payments.

What is Smart Card Technology?

A smart card, or chip card, is any pocket-sized card with embedded integrated circuits. These cards contain volatile memory and microprocessor components, are made of plastic,and provide strong security authentication capabilities. Because of these characteristics, the technology is being utilized for credit cards by major card companies like Europay, MasterCard and Visa — garnering the nickname EMV. Visa has begun a major push of this technology because of the benefits the technology provides.

What are Those Benefits?

These kinds of smart cards can provide identification, authentication, data storage and application processing. A single contact/contactless smart card can be programmed with multiple banking credentials, medical entitlement, driver’s license/public transport entitlement, loyalty programs and club memberships to name just a few. Multi-factor and proximity authentication can and has been embedded into smart cards to increase the security of all services on the card. In one fell swoop, this technology can bridge the gap between card-swipe style processing and the mobile payment processing that the industry is striving to move toward. The technology lets virtual wallets and contactless payment happen, increasing convenience for consumers. And then it also boosts security, which is the largest concern consumers have with mobile payments.

The Credit.com article quotes Stephanie Ericksen, head of authentication product integration at Visa Inc. as saying “Migrating the U.S. market to chip will help build an infrastructure for accepting NFC mobile payments, enhance international acceptance and reduce fraud.”

TransFirst Sets Guidelines

TransFirst, Host Merchant Services’ acquirer and one of the premier providers of transaction processing services and payment processing technologies in the U.S., has issued a mandate in response to the EMV push. TransFirst says that Visa will require U.S. acquirer processors and sub-processor service providers to be able to support merchant acceptance of chip transactions no later than April 1, 2013. Visa also intends to institute a U.S. liability shift for domestic and cross-border counterfeit card-present point-of-sale transactions effective October 1, 2015, and for fuel-selling merchants by October 1, 2017.

Many of these dates are long-term projections and would seem to be a little far out there in comparison to the fast-paced results Visa is achieving already with their shift to chip cards.

The Carrot on the Stick

TransFirst explains that Liability Shift is often used as the incentive to encourage acquirers or issuers to move to chip transactions. For magnetic stripe swipe transactions, POS counterfeit fraud is mostly absorbed by the card issuers. But in the EMV shift Visa is pushing, the party that is not chip-capable will be liable for frauds that would have been prevented if the transaction were processed with a chip-on-chip connection.

It would seem that Visa is happy with the fast embracing of their chip transition but are still giving the acquirers and the merchant service providers and the merchants years to implement this fully before holding them liable.

In preparation for Visa’s Accelerated Chip Migration plan, TransFirst will migrate new terminal deployments on the following POS Terminals to chip capable versions of the same devices. Once implemented, non-chip capable versions of these terminals will no longer be available for purchase through TransFirst:

  • Verifone’s Vx570
  • Hypercom’s T4205
  • Hypercom’s T4220
  • Hypercom’s M4230

How Chip Cards Work

These new cards work in a similar fashion to the cards they are replacing. Users present them when making a purchase and from there the transaction follows the steps detailed in the Host Merchant Services Infographic found here. But the cards are different from swipe cards in some very important ways. Consumers do not swipe these cards. Instead they wave them over a sensor. This is the exact same style of payment that mobile phone based “virtual wallets” look to employ. You wave your smart card across a sensor, or you wave your smart phone across a sensor. Payment made. Visa also plans to allow chip cards to work with PIN codes, bringing debit under the umbrella.

The Mobile Payment Connection

Visa is heavily invested in the future of Mobile Payments. Which is not surprising as you can see from Host Merchant Services‘ coverage of the topic in its article archive. Past blogs have noted that the biggest obstacle Mobile Payments face with U.S. consumers is concern about the safety of the transactions. Visa’s hoping that the added security that the chip technology provides will overcome that obstacle and finally tap them into the billions of dollars of revenue that Mobile Payments are predicted to have in the coming years. As Ericksen says in the Credit.com article, “Since announcing our roadmap last year, we have seen strong interest among U.S. issuers large and small to invest in chip technology, as today’s milestone shows.”