Visa to Help Accelerate EMV Chip Migration and Support Merchants

Streamlined certification, financial and technical support to further accelerate EMV chip terminal deployment

Modified chargeback policies will provide near term relief to merchants who are not yet chip-ready

SAN FRANCISCO–(BUSINESS WIRE)–Jun. 16, 2016– Visa Inc. (NYSE:V) today announced a series of initiatives to help accelerate EMV chip migration for merchants. Visa has streamlined its testing requirements, amended and simplified the terminal certification process, and committed to investing further resources and technical expertise in a manner that can reduce timeframes by as much as 50 percent. Visa is also making policy changes to help limit exposure to counterfeit fraud liability for merchants who are not yet chip-ready.

visa

Chip card technology helps prevent fraud the results from data compromises. (Photo: Business Wire)

While the U.S. migration to chip technology is a significant undertaking, tremendous progress has been made to-date with over 300 million chip cards in market and 1.2 million merchant locations now accepting chip cards. An average of 23,000 new merchant locations become chip-ready each week. Despite the success to date, a migration of this size takes time and hence many merchants still require help to cross the finish line.

Streamlined Implementation

Before a merchant can turn on a new chip terminal, it needs to be tested to ensure it works properly for the merchant and cardholder. Chip technology can be implemented in different ways based on the unique needs of a merchant, and therefore, different merchants need to be tested in different ways. The more complex a merchant’s point of sale environment, the greater the number of tests. However, Visa has streamlined its testing requirements to significantly reduce the complexity, time, and cost of implementation.

By way of example, a national grocery chain recently followed Visa’s streamlined approach and completed development, testing, and certification months ahead of schedule.

Acquirers Can “Self-Certify” Their Solutions

Going a step further, Visa will provide acquirers greater discretion to determine the appropriate level of testing required to ensure a merchant’s solution is ready. Acquirers know their merchants better than anyone, so providing acquirers with the commercial flexibility to self-certify their clients will further reduce certification wait times for solutions that acquirers are confident are ready.

Visa is also exploring a system for acquirers to share certification test results with each other to avoid testing duplication. That is, if a certain merchant configuration (e.g., restaurants with specific hardware and software) is known to consistently work with one acquirer, then other acquirers should be aware of this and take it into consideration as they make their decisions.

Incremental Funding and Resources to Support Migration

Visa will increase its investment to support both acquirers and the value-added resellers (VARs) that develop the software to power chip terminals. Visa funding will be available to help acquirers with any specific resource constraints they may be facing, as well as to help VARs pre-certify their software solutions in a manner that will significantly reduce the subsequent testing at acquirers by up to 80 percent.

In addition, Visa will provide hands-on support to VARs who may need technical information, education, consulting, and training. A dedicated team of Visa experts will be available to provide direct support in the form of webinars and direct one-on-one conversations, as needed.

“Visa recognizes the importance of having the industry help merchants get their chip terminal solutions up and running quickly so that everyone, especially consumers, can benefit from the powerful security protection of chip technology,” said Oliver Jenkyn, Group Executive North America, Visa Inc. “We’ve taken steps to simplify the process as much as possible and help reduce any challenges so merchants can move forward with chip adoption quickly.”

“Vantiv has been relentlessly working to help merchants upgrade their point-of-sale systems to new levels of security with EMV,” said Royal Cole, Group President, Merchant and Financial Institution Services at Vantiv. “To help accelerate this process, we’ve been working with Visa to find comprehensive ways to further streamline the conversion process for the entire ecosystem – from software developer partners to the smallest-sized businesses. We are very encouraged by the new measures and programs that Visa is announcing today, and we hope others will join in instituting similar programs.”

Counterfeit Chargeback Policy Changes

Historically, issuers have been responsible for the full cost of counterfeit fraud that takes place at a merchant. In 2011, to support the migration to EMV chip technology, Visa announced a liability shift that became effective in October 2015. With this change, the cost of counterfeit fraud is the responsibility of the party – either the merchant or the issuer – that has not implemented chip technology. Given that some merchants are still working to get their chip terminals enabled and certified, they may now be bearing the cost of counterfeit fraud originated in their stores. Visa’s actions today seek to alleviate the impact on merchants while they work through the transition.

Visa is modifying its policies to limit the number of fraudulent transactions that issuers can charge back to merchants (and their acquirers). Effective July 22, 2016, Visa will block all U.S. counterfeit fraud chargebacks under $25. These smaller chargebacks generate a great deal of work and expense for merchants and acquirers, with limited financial impact for issuing banks. In addition, effective October 2016, issuers will also be limited to charging back 10 fraudulent counterfeit transactions per account, and will assume liability for all fraudulent transactions on the account thereafter. This reinforces the responsibility issuers already have to detect and act on counterfeit fraud quickly. These blocks will stay in effect until April 2018.

These two changes together will significantly reduce the number chargebacks that merchants are seeing. Following these changes, merchants can expect to see 40 percent fewer counterfeit chargebacks, and a 15 percent reduction in U.S. counterfeit fraud dollars being charged back.

For more information, acquirers and processors should contact their Visa account executive.

About Visa Inc.: Visa Inc. (NYSE:V) is a global payments technology company that connects consumers, businesses, financial institutions and governments in more than 200 countries and territories to fast, secure and reliable electronic payments. We operate one of the world’s most advanced processing networks — VisaNet — that is capable of handling more than 65,000 transaction messages a second, with fraud protection for consumers and assured payment for merchants. Visa is not a bank and does not issue cards, extend credit or set rates and fees for consumers. Visa’s innovations, however, enable its financial institution customers to offer consumers more choices: pay now with debit, pay ahead of time with prepaid or pay later with credit products. For more information, visit usa.visa.com/about-visa, visacorporate.tumblr.com and @VisaNews.

View source version on businesswire.com: http://www.businesswire.com/news/home/20160616005425/en/

Source: Visa Inc.

Visa Inc.
Sandra Chu, +1 415-805-4124
sanchu@visa.com
Lea Cademenos, +1 415-805-4271
lcademen@visa.com

Distributor EMV Credit Card Terminals – Profit busters, profit boosters

Distributors have special needs for retail credit card processing to maximize profits and mitigate risk. Here we identify credit card terminals that are certain fall short on delivering in an EMV environment. The two most critical retail needs are requiring customers to comply with the highest security supported, and supporting level III processing. Additionally, P2PE, encrypting at the terminal head, is important for a security and compliance.

Only cloud payment solutions have the potential to meet the primary distributor retail processing needs.  This precludes all First Data terminals, one of the most popular brands distributed, and similar devices. DISCLAIMER: comments are specifically regarding business to business needs, not all retail industry needs, and are not in any way intended to imply anything negative about the terminals.

The terminals below DO NOT meet the two most critical distributor needs to maximize profits.

verifone vx520 emv terminal

Verifone vx520

Clover Mini by First Data

Clover Mini by First Data

First Data FD35 EMV pin pad terminal

First Data FD35 EMV PinPad, attaches to a variety of FD terminals.

Ingenico iCT250 emv capable countertop terminal.

Ingenico iCT250 emv capable countertop terminal.

magtek mini card swiper

Magtek mini card swiper.

The terminals below have the POTENTIAL meet the two most critical distributor needs to maximize profits. Special certifications and payment gateway logic is required.

ingenico isc250 signature capture terminal

Ingenico isc250 EMV

 

verifone MX915 EMV terminal

Verifone MX915 EMV chip terminal

Fraud liability review for MasterCard, American Express, and Discover (credit and debit)

  • If the card is chip & sign, and the terminal is EMV only, the card issuer is liable
  • If the card is chip & pin, and the terminal is EMV without pin, or pin debit without EMV, the merchant is liable
  • If the card is chip & pin, and the terminal is EMV with pin, the issuer is liable
  • If the terminal supports EMV & pin, but the customer uses chip & sign, the merchant is liable. Acquirers generally support chip and pin bypass to chip and signature. Merchants should only use solutions that require the highest security on every transaction, including prohibiting customer bypass.
  • If the terminal supports EMV & pin, but the customer does chip & sign, the merchant is liable.

Merchants should only use solutions that require the highest security on every transaction, including prohibiting customer bypass.

If you want to enhance your customer experience, make a change that also maximizes profits too.

Christine Speedy, CenPOS global sales and integrated solutions reseller, 954-942-0483. CenPOS is a merchant-centric, end-to-end payments engine that drives enterprise-class solutions for businesses, saving them time and money, while improving their customer engagement. CenPOS? secure, cloud-based solution optimizes acceptance for all payment types across multiple channels without disrupting merchant banking relationships. Keep your processor, upgrade your technology! Quick and easy to implement with no long term contract.

Dynamics AX Retail EMV certified terminals

What EMV chip card terminals can be used with Microsoft Dynamics AX Retail POS? We support Verifone MX 915, Ingenico ISC250 multilane terminals and the Ingenico ICMP mobile terminal and have a variety of certifications so that you can process EMV chip transactions today with all the major US processors, including First Data, Chase Paymentech, Tsys, Vantiv, Moneris and others.

verifone MX915 EMV terminal

Verifone MX915 EMV chip card accepted terminal.

Microsoft Dynamics AX EMV for Retail key purchasing questions related to EMV certifications:

Does POS solution support EMV chip with pin debit?
Does POS solution support EMV chip with pin credit?
Can customers bypass chip and just use mag swipe?
Can customers bypass entering pin?
Does EMV certification include partial authorization? If not, what happens when account doesn’t have enough for transaction?
Are terminals injected with P2P encryption?
Do you have mobile EMV with chip and pin?
If business to business, does the EMV certification include level 3 processing?

Are all of the above working right now in a live environment, or are there still bugs to be worked out? If any answers are no, merchants need to understand the impact before choosing a solution.

How will the gateway help with my other sales channels?
How will the solution reduce PCI Compliance burden?

“My clients have been processing EMV chip transactions with multilane terminals successfully since January 2015. It’s dizzying even for me to keep up with what which terminals are certified for which solutions. Since that information changes constantly, it’s best to call for a consultation to assess short and long term needs to achieve the best outcome while minimizing business disruption,” Christine Speedy.

Is it integrated to Retail Hero? No, that’s a separate integration that Retail Realm would need to do since the product is exclusive to them.

How much do terminals cost? It depends on the terminal. They’re reasonably priced. Please be aware, merchants must acquire terminals only through us or our approved distributor to ensure security and reliability of EMV and payment ecosystem. You cannot bring your own device.

How much does it cost? The Dynamics AX ERP and POS payment module is included free with purchase of our payment gateway services, which are very reasonably priced.

Where can I buy the Dynamics Ax POS EMV payments module? Contact us.

Can I use with my merchant account? Yes.

 

Microsoft Dynamics AX EMV terminals certified today

EMV chip certified solutions are now available for Microsoft Dynamics AX. As they’re still fairly new, it’s important to ask questions about functionality. EMV chip card acceptance certification is complicated, which is why many companies did not complete their certifications by the October 2015 liability shift.

Dynamics AX EMV for Retail tips to compare solutions:

  • How is pin-debit managed? Is EMV chip and pin supported? Can customers bypass entering pin? This is important because whoever supports the highest level of security determines liability for fraud.
  • Is level III data supported? This is important if the customer base includes business to business. For example, building materials distributors have retail and wholesale customers, and qualifying transactions for level 3 interchange rates can significantly improve profits.
  • What are the acquirer options? Can you choose your own, or are you required to use a specific processor?
  • Is P2P supported? Point to point encryption is an extra layer of security to prevent data breaches from malware and other criminal activities.
  • What is the audit trail? Identifying who did what and when is a part of PCI Compliance.
  • Can user functions be limited by job role, required for PCI Compliance?
  • If omnichannel, how will the solution help with all sales channel needs?
verifone MX915 EMV terminal

Verifone MX915 multilane signature capture terminal

ingenico mobile emv icmp

Christine Speedy, 3D Merchant Services owner,  can help guide you through the complexity of choosing the best solution for your business. Which terminal is certified with which processor? From mobile to multilane, Christine’s knowledge and experience will help you implement faster, and take the pain out of consulting with multiple vendors that come up short on solutions.

EMVCo Updates Payment Tokenisation Specification to Introduce ‘Payment Account Reference’ or PAR

Newly defined data element reduces reliance on primary account numbers when managing security requirements and delivering value-added services.

29 March 2016 – Global technical body EMVCo has released a bulletin updating the EMV® Payment Tokenisation Specification – Technical Framework to provide the payment community with a global, consistent framework to implement ‘Payment Account Reference’ (PAR). To be used by merchants, acquirers and payment processors, PAR can enhance security by limiting references to a cardholder’s primary account number (PAN) in the payment ecosystem.

Payment tokenisation is the process of replacing a PAN with a unique payment token that may be restricted in its usage, for example, with a specific device, merchant, transaction type or channel. Traditional PAN-based payments will continue to be used alongside EMV Payment Tokens. The introduction of PAR, which does not contain financially sensitive data, enables the payment acceptance community to link a cardholder’s payment token with their PAN transactions without needing to use their underlying card account number. This allows for a consolidated view of transactions on a payment account. This is also needed for security and regulatory reasons, such as risk analysis and anti-money laundering. It is also important for value-added services, as these often leverage historical transactional data to derive analytics and measurements to support customer programmes such as loyalty.

Mike Matan, current Chair of the EMVCo Executive Committee, comments: “Payment tokenisation enhances the underlying security of digital payments by limiting the risks associated with the compromise or unauthorised use of PANs. As well as increasing security, we want to ensure the payment acceptance community can continue to deliver associated payment processing and value-added services which are currently enabled by PAN. PAR addresses this by enabling all payment transactions – regardless of how they are initiated – to be processed in a consistent manner.”

The presence of PAR fulfils a fundamental need to link PAN-based and token-based transactions together. PAR enables the industry to move away from dependence on the PAN as the primary linkage. PAR data cannot be reverse-engineered to reveal the PAN or EMV Payment Token and cannot be used on its own to initiate a transaction such as authorisation, capture, clearing or chargeback. Users of PAR data are required to protect PAR data in accordance with national, regional or local laws and regulations.

“EMVCo recognises the need to continually adapt and advance the EMV payment infrastructure to support and promote user convenience without compromising security,” adds Jack Pan, EMVCo Board of Managers Chair. “Our work to establish a secure and scalable payment tokenisation ecosystem is no different. Since EMVCo launched its activity to focus on the development of a tokenisation specification, we have been working with industry stakeholders and EMVCo Associates to solicit feedback and determine appropriate updates to the framework, which will optimise the benefits of this technology. In addition to PAR, EMVCo has launched a Token Service Provider (TSP)

Registration Process, to promote transparency and interoperability of TSP entities. We look forward to continuing our work with the industry to manage and evolve this payment technology further.”

EMVCo – which is collectively owned by American Express, Discover, JCB, MasterCard, UnionPay and Visa – launched the EMV Payment Tokenisation Specification – Technical Framework v1.0 in March 2014. The PAR framework is designed to ensure global interoperability and support broad industry adoption. These latest updates are documented in the EMV Specification Bulletin No. 167, available to download without charge from the EMVCo website.

The specification bulletin accomplishes the following:

• Introduces PAR as an industry aligned data structure.

• Describes the presence of PAR in payment token and underlying PAN transactions.

• Defines PAR to be used as a consistent value for all payment tokens affiliated with an underlying PAN.

• Outlines how PAR can be used by acquirers, payment processors and merchants to link payment token transactions to those of the underlying PAN.

To join other industry stakeholders in contributing to EMVCo’s development of the tokenisation framework, become an EMVCo Associate.

– ENDS –

For further EMVCo media information please contact Sarah Jones / David Amos – Tel: +44 1943 468007 or email: sarah@iseepr.co.uk / david@iseepr.co.uk

Notes to Editors:

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo.

About EMVCo:

EMVCo is the global technical body that facilitates the worldwide interoperability and acceptance of secure payment transactions by managing and evolving the EMV Specifications and related testing processes. Adoption of EMV Specifications and associated approval and certification processes promotes a unified international payments framework, which supports an advancing range of payment methods, technologies and acceptance environments. The specifications are designed to be flexible and can be adapted regionally to meet national payment requirements and accommodate local regulations.

EMVCo is collectively owned by American Express, Discover, JCB, MasterCard, UnionPay and Visa, and focuses on the technical advancement of the EMV Specifications. To provide all payment stakeholders with a platform to engage in its strategic and technical direction, EMVCo operates an Associates Programme and encourages all interested parties to get involved.

Visit www.emvco.com for further information and join EMVCo on LinkedIn.