Maestro Europe Only Anti Fraud Measure by 23 Banks in Belgium Bart Guns Global Head of Payments KBC Group

Total Page:16

File Type:pdf, Size:1020Kb

Maestro Europe Only Anti Fraud Measure by 23 Banks in Belgium Bart Guns Global Head of Payments KBC Group Maestro Europe only anti fraud measure by 23 banks in Belgium Bart Guns Global Head of Payments KBC Group COGEPS | 2-3 April 2012 Titel hoofdstuk Agenda 1.Problem 2.Anti skimming not feasible nor opportune 3.European statements 4.Chip only pragmatic issues 5.Europe only approach 6.Impact & Follow-up COGEPS | 2-3 April 2012 2 Fraud problem for debit cards abroad • Domestic debit card scheme BC/MC = zero counterfeit fraud thanks to chip & PIN • Skimming incidents on ATM’s in Belgium > Maestro fraud outside of Europe and primarily in USA • Fraudulent transactions = Magnetic stripe + PIN/signature > no liability shift allowed for USA • PSD: counterfeit fraud = Issuer’s responsibility > reimburse cardholder COGEPS | 2-3 April 2012 3 Anti-skimming not feasible nor opportune • Cost is high per ATM / Terminal and reinvestment every 3 to 5 years as solutions are being overruled • Only waterproof if majority of ATM are equipped • Time to market • Skimming migration to unattended POS (petrol stations, parkings…) and lack of anti-skimming solutions on the market >> Which optimal card approach? COGEPS | 2-3 April 2012 4 European statements (I) ECB 7th SEPA Progress Report: Cards highlights (10.2010) •From 2012 new SEPA cards by default “chip-only”, no mag-stripe payment data •Mag-stripe on request for non SEPA, not EMV regions or bank legacy functions •Liability shift should apply as incentive for EMV migration EPC EMV Fraud prevention Resolutions (2011) # 1 (Issuing) : •Restrict the use of magnetic stripe fall back to exceptional cases •Schemes to ensure through cross-regional liability shifts •Card Schemes to grant issuers option to adopt a chip only and refuse mag- stripe trx COGEPS | 2-3 April 2012 5 European statements (II) ECB at COGEPS (10.2011): Way forward (II) “Card issuers are still called on to issue chip-only cards, but as long as cards are not chip-only, they should: •not allow a fallback to magstripe within SEPA •block (by default) magstripe transactions outside SEPA* •communicate clearly on where/when/how the card can be used -------------------- * Chip-transactions outside SEPA should be possible” SEPA Council Statement of 6 February 2012 meeting …. “The SEPA Council understands that, as long as global migration to EMV-chip technology remains incomplete, card issuers may issue cards with magnetic stripe. It urges, however, card issuers and card schemes, in co-operation with payment service providers and merchants, to develop solutions to minimise the fraud related to the use of magnetic stripe as well as adequate communication strategies.” COGEPS | 2-3 April 2012 6 Chip-only approach: pragmatic issues • Requires issuance of new debit cards without or with reduced magnetic stripe > huge costs • If cardholder travels outside of EU then he has to request a second card with magnetic stripe: •Costs; • Cumbersome and not consumer friendly • Delay for delivery… • Begin 2011 some ATM/POS terminals within EU were are not yet migrated to chip-EMV > transaction in EU not always possible for cardholder • Cardholder does not know which ATM/POS terminals are not yet migrated to chip-EMV > confrontation with unexpected refusal of transaction > bad customer experience > complaints… COGEPS | 2-3 April 2012 7 Europe only approach in Belgium • Maestro function for POS/ATM per default only available in Europe region (EMV + magstripe transactions) • Cardholder can request to unblock (temporarily) for use outside of Europe region • 23 banks decided to participate with individual arrangements • As from 17 January 2011 • Compliant with Maestro Global Rules of MasterCard • Communication: • Clear communication by participating banks to cardholders compliant with PSD (2 months before introduction) • Common press release to public • No deterrence of fraud if blocking does not apply for a critical mass of cards Note 1: Maestro is the debit scheme installed on Belgian debit cards, and developed by Mastercard, which is mainly used for transactions other than domestic Note 2: no blocking for internet transactions thanks to 3D-Secure position COGEPS | 2-3 April 2012 8 Europe region defined by Mastercard: 56 countries COGEPS | 2-3 April 2012 9 Europe only approach in Belgium: Impact and follow-up 2008 2009 2010 2011 skimming cases 244 442 1.720 75 Fraud amount ? +200% +300% -94% • Drastic reduction of fraud > Remaining fraud due to: • non participating banks • period 1-16 January 2011 • non-chip/EMV terminals in Europe region (liability shift > charge back) • On average +/- 40.000 cards unblocked (temporarily) by cardholders • Concept copied by other banks abroad • No opposition by BE national competition authority > recognised that joint action was indispensable to result in deterrence of faudulent activity COGEPS | 2-3 April 2012 10.
Recommended publications
  • How Can Private Sector Systems Achieve Public Policy Goals?
    Faster Payments in the United States: How Can Private Sector Systems Achieve Public Policy Goals? Fumiko Hayashi June 2015 RWP 15-03 Faster Payments in the United States: How Can Private Sector Systems Achieve Public Policy Goals?∗ Fumiko Hayashi† June 2015 Abstract Consumers and businesses are increasingly expecting faster payments. While many countries have already developed or are in process of developing faster payments, the availability of these payments is fragmented in the United States. The recently released paper by the Federal Reserve encourages private sector participants to provide faster payment services. However, private- sector faster payments systems will face significant challenges in achieving public policy goals of ubiquity, safety, and efficiency unless system governance represents broad public interests. One way to better align private-sector interests with those of the public is for the Federal Reserve to influence governance of the private-sector systems through its leadership role. JEL Classification: L5; L88; M14 Keywords: Faster payments, System governance, Public interest ∗ The author thanks Kelly Edmiston and Richard J. Sullivan for valuable comments, and Elizabeth Cook for editorial suggestions. The views expressed herein are those of the author and do not necessarily reflect the views of the Federal Reserve Bank of Kansas City or the Federal Reserve System. † Fumiko Hayashi is a senior economist at the Federal Reserve Bank of Kansas City. E-mail: [email protected]. 1 1. Introduction In the wake of technological innovations such as high-speed data networks and sophisticated mobile computing devices, consumers and businesses have raised their expectations for faster payments. Payment users increasingly expect electronic payment products to be accessible through mobile and online channels at any time.
    [Show full text]
  • Card Processing Guide Merchant Operating Instructions
    Card Processing Guide Merchant Operating Instructions © 2019 GPUK LLP. All Rights Reserved. CONTENTS SECTION PAGE Welcome 1 Global Payments 1 About This Document 1 An Introduction To Card Processing 3 The Anatomy Of A Card Payment 3 Transaction Types 4 Risk Awareness 4 Card Present (CP) Transactions 9 Cardholder Verified By PIN 9 Cardholder Verified By Signature 9 Cardholder Verified By PIN And Signature 9 Contactless Card Payments 10 Checking Cards 10 Examples Of Card Logos 13 Examples Of Cards And Card Features 14 Accepting Cards Using An Electronic Terminal 18 Authorisation 19 ‘Code 10’ Calls 24 Account Verification/Status Checks 25 Recovered Cards 25 Refunds 26 How To Submit Your Electronic Terminal Transactions 28 Using Fallback Paper Vouchers 29 Card Not Present (CNP) Transactions 32 Accepting Mail And Telephone Orders 32 Accepting Internet Orders 33 Authorisation Of CNP Transactions 35 Confirming CNP Orders 37 Delivering Goods 37 Collection Of Goods 38 Special Transaction Types 39 Bureau de Change 39 Dynamic Currency Conversion (DCC) 40 Foreign Currency Transactions 40 Gratuities 41 Hotel And Car Rental Transactions 41 Prepayments/Deposits/Instalments 43 Purchase With Cashback 43 Recurring Transactions 44 Card Processing Guide © 2019 GPUK LLP. All Rights Reserved. SECTION PAGE Global Iris 47 HomeCurrencyPay 49 An Introduction To HomeCurrencyPay 49 Card Present (CP) HomeCurrencyPay Transactions 50 Mail Order And Telephone Order (MOTO) HomeCurrencyPay Transactions 52 Ecommerce HomeCurrencyPay Transactions 55 Mastercard And Visa Regulations
    [Show full text]
  • Contactless Operating Mode Requirements Clarification Whitepaper
    Contactless Operating Mode Requirements Clarification Whitepaper Version 1.0 Publication Date: February 2020 U.S. Payments Forum ©2020 Page 1 About the U.S. Payments Forum The U.S. Payments Forum, formerly the EMV Migration Forum, is a cross-industry body focused on supporting the introduction and implementation of EMV chip and other new and emerging technologies that protect the security of, and enhance opportunities for payment transactions within the United States. The Forum is the only non-profit organization whose membership includes the entire payments ecosystem, ensuring that all stakeholders have the opportunity to coordinate, cooperate on, and have a voice in the future of the U.S. payments industry. Additional information can be found at http://www.uspaymentsforum.org. EMV ® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC. Copyright ©2020 U.S. Payments Forum and Smart Card Alliance. All rights reserved. The U.S. Payments Forum has used best efforts to ensure, but cannot guarantee, that the information described in this document is accurate as of the publication date. The U.S. Payments Forum disclaims all warranties as to the accuracy, completeness or adequacy of information in this document. Comments or recommendations for edits or additions to this document should be submitted to: [email protected]. U.S. Payments Forum ©2020 Page 2 Table of Contents 1. Introduction .......................................................................................................................................... 4 2. Contactless Operating Modes ............................................................................................................... 5 2.1 Impact of Contactless Operating Mode on Debit Routing Options .............................................. 6 3. Contactless Issuance Requirements ..................................................................................................... 7 4.
    [Show full text]
  • Chip Cards and EMV: Coming Soon
    What are the benefits? Chip cards and Chip cards offer a more secure way to process card transactions. The secure microchip contains security EMV: coming soon data and software – because it is more difficult to fraudulently copy the details of the card, security is increased. Accepting chip cards therefore helps you reduce the risk of processing a counterfeit, lost or stolen card. And better card security means fewer disputed transactions. ADB3492 110908 We’re here to help You can find more information about EMV at www.commbank.com.au/emv If you have any further queries about EMV, you can email [email protected] or call our Merchant Help Desk on 1800 022 966, 24 hours, Important information about 7 days a week. your EFTPOS terminal inside What is EMV? What do you need to do? EMV (Europay MasterCard Visa) is the global All you need to do is leave your terminal switched ON electronic transaction standard named after the three overnight from 08 October, and we’ll do the rest. organisations that established it. The EMV standard enables EFTPOS terminals worldwide to process chip-based debit and credit cards. How do you know when To meet EMV standards, the Commonwealth Bank the upgrade is complete? is planning upgrades to its EFTPOS terminals so they can process chip cards. Once you swipe a card that has a chip, your EFTPOS Please note that after the upgrade, you will still be able terminal will prompt you to ‘insert card’ rather than to process cards using the magnetic strip, including ‘swipe card’.
    [Show full text]
  • EMF Implementing EMV at The
    Implementing EMV®at the ATM: Requirements and Recommendations for the U.S. ATM Community Version 2.0 Date: June 2015 Implementing EMV at the ATM: Requirements and Recommendations for the U.S. ATM Community About the EMV Migration Forum The EMV Migration Forum is a cross-industry body focused on supporting the EMV implementation steps required for global and regional payment networks, issuers, processors, merchants, and consumers to help ensure a successful introduction of more secure EMV chip technology in the United States. The focus of the Forum is to address topics that require some level of industry cooperation and/or coordination to migrate successfully to EMV technology in the United States. For more information on the EMV Migration Forum, please visit http://www.emv- connection.com/emv-migration-forum/. EMV is a trademark owned by EMVCo LLC. Copyright ©2015 EMV Migration Forum and Smart Card Alliance. All rights reserved. The EMV Migration Forum has used best efforts to ensure, but cannot guarantee, that the information described in this document is accurate as of the publication date. The EMV Migration Forum disclaims all warranties as to the accuracy, completeness or adequacy of information in this document. Comments or recommendations for edits or additions to this document should be submitted to: ATM- [email protected]. __________________________________________________________________________________ Page 2 Implementing EMV at the ATM: Requirements and Recommendations for the U.S. ATM Community TABLE OF CONTENTS
    [Show full text]
  • Reform of Credit Card Schemes in Australia
    CHAPTER 5: PROMOTING EFFICIENCY AND COMPETITION 5.1 Introduction The main regulations in the Bankcard, MasterCard and Visa credit card schemes in Australia – dealing with the collective setting of interchange fees, restrictions on merchant pricing and restrictions on entry – have been assessed in previous Chapters on public interest grounds. Each of these regulations represents significant departures from the normal workings of the market. This final Chapter draws the previous analyses together by reviewing the regulations and their consequences against the benchmarks that underpin the public interest test, and summarising the public interest concerns. These concerns provide the background for the use of the Reserve Bank’s payments system powers to promote reform of the designated credit card schemes, in the interests of promoting efficiency and competition in the Australian payments system. The Chapter outlines the reform measures and their likely impact. It then analyses the main objections to reform that have been raised and concludes that they are not a persuasive defence of the status quo. The last section outlines the next steps in the Reserve Bank’s consultation process before its proposed standards and access regime are finalised. 5.2 Scheme regulations and competition benchmarks To meet the broad objectives of public policy, the payments system in Australia would be expected to be responsive to competitive pressures, including freedom of entry into the markets for different payment instruments, provided the safety of the system is not compromised. There is likely to be a role for private-sector regulations to ensure the safety, technical consistency and orderly operation of any payment system, but such regulations should not be so binding or widespread as to compromise the market process.
    [Show full text]
  • Debit Card Interchange
    Payments the way we see it Debit Card Interchange The impact of debit interchange regulation and what financial services institutions can do to support a positive outcome Contents 1 Highlights 3 2 Overview of the U.S. Debit Card Interchange Regulation 4 2.1 Durbin Amendment of the Dodd-Frank Act 4 2.2 Interchange Fee in a Debit Card Transaction 5 2.3 Debit Card Usage in the United States 6 2.4 Drivers for U.S. Debit Interchange Regulation 7 2.5 Viewpoints and Estimated Impact for Key Stakeholders 8 3 Debit and Credit Interchange Interventions around the World 9 3.1 Australia 9 3.2 Canada 9 3.3 European Union 10 3.4 New Zealand 10 4 Implications for Stakeholders 11 4.1 Implications for Issuers 12 4.2 Implications for Merchants 12 4.3 Implications for Customers 12 4.4 Implications for Networks 13 4.5 Implications for the Economy 13 5 Recommendations for Financial Services Institutions 14 5.1 Political 14 5.2 Economic 14 5.3 Social 16 5.4 Technological 16 6 Conclusion 18 References 19 2 the way we see it 1 Highlights In 2010, the U.S. Congress passed the Dodd-Frank Wall Street and Consumer Protection Act, a sweeping change to financial regulation in the United States. The Durbin amendment, part of the Dodd-Frank Act, allows the Federal Reserve board to implement a comprehensive system of debit card interchange. The amendment establishes standards for an interchange fee1, and prohibits issuers and networks from restricting the number of networks over which an electronic debit transaction may be processed.
    [Show full text]
  • Mastercard International
    CODE OF PRACTICE FOR PAYMENT CARD SCHEME OPERATORS Background The Code of Practice for Payment Card Scheme Operators (“the Code”) has been drawn up and observed by eight payment card scheme operators1 (“scheme operators”) in Hong Kong since 2007. The introduction of the Payment Systems and Stored Value Facilities Ordinance (“the Ordinance”) on 13 November 2015 has necessitated certain modifications of the Code, which are now incorporated in this version. The scheme operators remain committed to observe this updated version of the Code in providing services to the general public. Purpose This Code specifies general principles for the scheme operators to observe in order to promote the general safety and efficiency of payment cards in Hong Kong and to foster public confidence in them. Classification This is a non-statutory Code drawn up by the scheme operators in Hong Kong. New scheme operators entering the Hong Kong market should also adhere to the general principles in this Code. Application To the scheme operators in Hong Kong. This Code applies only to their operations in Hong Kong and is not intended to have extra-territorial effect. 1 “Payment card scheme operators” means, for the purposes of this Code, multi-purpose payment card schemes which provide credit and /or debit function through a payment network for making payment of goods or services. It excludes multi-purpose stored-value cards, which are dealt with separately by the regulatory regime for stored value facilities under the Ordinance. Structure INTRODUCTION 1. Status of the Code 2. Objectives 3. Enquiries SAFETY 4. Legal Basis of the System 5.
    [Show full text]
  • Rupay: the Emergence of an Indian Card Giant (A Marketing Perspective)
    International Journal of Scientific and Research Publications, Volume 9, Issue 2, February 2019 525 ISSN 2250-3153 RuPay: The Emergence of an Indian Card Giant (A Marketing Perspective) Siddharth, Vijayraj, Subham Dash, Varun Chadha, Varun D. Nankani Christ (Deemed to be University) - Bannerghatta Campus Bangalore, India 2019 DOI: 10.29322/IJSRP.9.02.2019.p8667 http://dx.doi.org/10.29322/IJSRP.9.02.2019.p8667 Abstract- There have been turbulent changes in the banking sector gain an international scheme. As of July 2018, these cards were of the world which lead to capitalisation of various untapped issued to savings and current bank account holders across 1100 opportunities. One such opportunity was interbank transfers using banks including cooperative banks and Regional Rural banks. It ATM cards. VISA and MasterCard were the ones that decided to has 65% of the Indian market share and is accepted at all the capitalise on this opportunity and became the biggest payment ATMs, e-commerce portals and Pos terminals. networks of the world. RuPay is India’s very own card scheme to promote debit and It has various advantages leading to its mass acceptability. credit card transactions, which was launched in 2012, by National • The occurrence and settlement of transactions happen Payment Corporation of India (NPCI). The cost of the transaction domestically, the cost is lower and thus is affordable. in India was high in spite of the fact that in India 90% of the credit • As it is domestic in nature, it is aiming at customized transactions and almost all debit transactions are domestic.
    [Show full text]
  • The Smarts Behind EMV Smart Cards Part 2 – Offline Transaction Processing Yash Kapadia CEO, Omnipayments, Inc
    The Smarts Behind EMV Smart Cards Part 2 – Offline Transaction Processing Yash Kapadia CEO, OmniPayments, Inc. For the November/December 2014 Issue of The Connection It seems that every month comes with an announcement of another hack in which the data of millions of payment cards has been stolen. This data is used to clone credit cards and debit cards, which are then sold in the underground Internet. Is there any protection available to us to thwart such attacks? The answer is yes – smart cards. A smart card, also called a chip card or an integrated-circuit card (ICC), includes an embedded computer chip that employs cryptographic and risk-management features. In conjunction with a smart-card POS or ATM terminal, these features are designed to thwart skimming, card-cloning, card-counterfeiting, and other fraudulent attacks. A decade or more ago, a consortium of card issuers comprising Europay, MasterCard, and Visa (EMV) began the specification of smart cards or as they are formally known today, EMV cards. EMV card technology has been adopted by most of the countries on all continents in the world except for the United States. The United States is the laggard. Representing almost half of all payment cards and terminals in the world, the U.S. still runs its payment- card services on outdated magnetic-stripe technology. However, this is about to change. The U.S. payment-card industry has mandated that all merchants be EMV-compatible by October, 2015 (except for gas stations, which have until 2017) or face a “liability shift.” If a merchant does not process at least 75% of its transactions through an EMV-enabled terminal (whether via chip-cards or magnetic-stripe cards) and accepts a disputed or fraudulent card payment, the merchant will be liable for the transaction rather than the issuer.
    [Show full text]
  • Guidelines for Contactless ATM Transactions – a Guide for ATM Owners and Operators
    Guidelines for Contactless ATM Transactions – A Guide for ATM Owners and Operators Version 2.0 Publication Date: July 2019 U.S. Payments Forum ©2019 Page 1 About the U.S. Payments Forum The U.S. Payments Forum, formerly the EMV Migration Forum, is a cross-industry body focused on supporting the introduction and implementation of EMV chip and other new and emerging technologies that protect the security of, and enhance opportunities for payment transactions within the United States. The Forum is the only non-profit organization whose membership includes the entire payments ecosystem, ensuring that all stakeholders have the opportunity to coordinate, cooperate on, and have a voice in the future of the U.S. payments industry. Additional information can be found at http://www.uspaymentsforum.org. About the ATM Working Committee The U.S. Payments Forum ATM Working Committee explores the challenges of EMV migration for the U.S. ATM industry, works to identify possible solutions to challenges, and facilitates the sharing of best practices with the various industry constituents, with the goal result being more positive EMV migration experience for consumers. EMV is a trademark owned by EMVCo LLC. Copyright ©2019 U.S. Payments Forum and Secure Technology Alliance. All rights reserved. The U.S. Payments Forum has used best efforts to ensure, but cannot guarantee, that the information described in this document is accurate as of the publication date. The U.S. Payments Forum disclaims all warranties as to the accuracy, completeness or adequacy of information in this document. Comments or recommendations for edits or additions to this document should be submitted to: [email protected].
    [Show full text]
  • Simplifying EMV Migration Strategic
    A WHITE PAPER TO SIMPLIFY EMV MIGRATION: STRATEGIC CHOICES FOR EMV CARD ISSUERS Barnes International Ltd Cedar Court, 5 College Street, Petersfield, Hampshire, GU31 4AE, UK Tel: +44 (0)1730 231313 Fax: +44 (0)1730 265353 Email: [email protected] Web: www.barnestest.com CARD FUNCTIONALITY & USAGE For the EMV cards themselves the following choices are needed. • Should the card support contactless as well as contact EMV transactions? Contactless capability adds complexity and cost, but it also adds convenience. It enables the card to be used more widely and makes it more attractive to cardholders. • Should the card only support online transactions? Again additional complexity and cost of offline transactions need to be balanced against wider acceptance for low-value, mass transit and international transactions. Most EMV products support both online and offline transactions, so the issuer’s choice relates to the customization of issuer software products for cards and host systems. • Which cardholder verification methods should be supported & with what priority? ATMs and many debit cards support only online PIN verification. Credit cards must support signature verification. For many low-value unattended terminals, no cardholder verification is needed. In terms of the range of verification method the question may boil down to the EMV-specific option of offline PAPER OVERVIEW PIN verification. EMV cards and terminal will support it, and for international transactions it is probably The decision has been made to migrate the payment needed. However for at least the initial period of EMV card base and supporting systems to EMV. The card migration in the US, it may not be a requirement.
    [Show full text]