Need an EMV terminal? The problem with desktop terminals for mixed retail & card not present

For mixed retail and card not present merchants, especially with a business to business customer component, a traditional desktop terminal can cause problems including failed PCI compliance, higher merchant fees, and increased losses from customer disputes  – the dreaded chargeback. To comply with EMV, now is the time to address multiple business needs to maximize profits.

Why is a traditional desktop terminal bad for mixed customer base?

Verifone VX520 VX805 EMV terminal

Verifone VX520 with VX805 EMV terminal

  1. Merchants have retail merchant accounts with their swiped terminal. When a transaction is key entered, it’s automatically qualifies for the worst non-qualified rate for the card type, because expected magnetic stripe data is not received.
  2. Key entered or card not present (CNP or MOTO/ mail order telephone order) transactions require additional data to protect against fraud losses. Users can bypass prompts if asked, but more importantly, the transaction is still presented as RETAIL, so retail rules apply for responding to disputes.
  3. Internal paperwork such as credit card authorization forms are PCI compliance nightmares and often don’t meet requirements to win disputes.
  4. For any business with a commercial account aspect, there is NO desktop terminal capable of qualifying merchants for the lowest fees, available only by supplying level III data.

What’s the alternative to a desktop terminal?

verifone MX915 EMV terminal

Verifone MX915 multilane signature capture terminal

Desktop software like PCCharge and ICVerify have all announced end of life because they cannot support new payment technologies like EMV. The swiper wedge that many small businesses have used do not support EMV and that won’t be changing, so they too will disappear. The alternative is a payment gateway with virtual terminal; a cloud based solution. Buyer beware. There are significant differences between gateways; many of them are not much better than a desktop terminal.

Virtual Terminal with EMV Buyer Tips:

  • Choose an agnostic gateway. That way if you want to change processors in the future, it’s not disruptive to operations.
  • Verify the gateway has an EMV certified terminal for your processor today. For example, First Data publishes their list of certified solutions here: First Data Integrated Partner Solutions Certified Listing.
  • Beware language such as, ‘EMV ready’ for both gateway and desktop solutions. EMV certified terminal is not the same as a certified solution that can be EMV enabled today with your processor.
  • Ask if the gateway supports level 3 processing for retail.
  • If the gateway cannot dynamically change transaction representment from retail to MOTO – and virtually none do- key entered transactions have the same risk as a desktop terminal.

What about mobile? Mobile EMV will largely be rolled out next year, as hardware needs to first be certified, and then all the other certification components will follow.

The only payment solution today that is supports level 3 processing for retail is CenPOS, which also has the most EMV terminal certifications of any gateways to date.

CenPOS is a merchant-centric, end-to-end payments engine that drives enterprise-class solutions for businesses, saving them time and money, while improving their customer engagement. CenPOS’ secure, cloud-based solution optimizes acceptance for all payment types across multiple channels without disrupting the merchant’s banking relationships. CenPOS is available globally. For additional information, contact Christine Speedy, 954-942-0483.

EMV chip terminal for Microsoft Dynamics RMS

What are RMS user options for EMV terminals? Here’s four options for merchants to choose from while waiting for RMS integrated EMV terminal; as of August 24, 2015, there are no gateways driving US EMV certified terminals yet.

Which is best EMV terminal for RMS users to accept chip cards today?

emv smart card

EMV chip smart card.

Which option would you choose?

  1. Choose working virtual terminal and US EMV Verifone MX915 certified terminal with signature capture, hoping the gateway gets integrated into RMS later?  Or use it short term, and switch later if another option is integrated first?
  2. Choose a payment gateway that’s working on EMV certification and RMS integration with unknown ready date? hopefully will add 3-D Secure?
  3. Wait and see? The challenge is time. The closer it gets to Ocober 1, the harder it may be to procure terminals (shortages have been common all year), implement & train etc. Additionally, merchants may have stability challenges with gateways that are integrating terminals for the first time.
  4. Buy a countertop terminal with EMV certified pinpad, and use non-integrated? The units certified will vary by payment processor. This is probably the last choice, because it can never be integrated later.

Today, card issuers bear the fraud loss if they give merchants authorization to accept the payment for a counterfeit card at the point of sale. Merchants never know about this fraud because the processor/acquirer automatically manages the response. Starting October 1, this process no longer applies. If merchant doesn’t support EMV, but the card issuer does, the acquirer is liable and can immediately chargeback the merchant’s bank account via ACH. What’s the financial risk? Nobody knows, but an estimated 63% of card present fraud losses were covered by issuers in 2012.

UPDATE 2016: Contact us for Microsoft Dynamics RMS EMV certified solutions today!

PCCharge Replacement With EMV Certified Terminals

What can merchants replace PCCharge with? How would it impact your business if PCCharge suddenly stopped working? October 1, 2015 is end of life and end of support, so planning replacement is critical. Because it’s also the same date as EMV liability shift, merchants will want to update to EMV and NFC compatible solutions to optimally serve customers.

Verifone PCCharge is Windows based software program which uses an internet connection to process transactions. It’s compatible with all acquirers (credit card processors), and the ‘wedge’ card reader is the most common retail set up. magtek mini card swiperThere are no similar EMV certified card readers certified to any processor currently.  Because EMV transactions require customers to hold onto their card for the transaction, no change is anticipated.

Option one is a cloud based solution called a virtual terminal. Unlike PC software, the gateway is always up to date; merchants login to a secure web page or to integrated POS software. All virtual terminals use an internet or cloud based payment gateway.

Payment Gateways quick facts:

  • Certified to each processor
  • Certified for functionality, including card brand, transaction type, level III processing, contactless (Applepay for example) and even industry (retail, restaurant)
  • EMV requires a special certification: each credit card terminal is certified to each processor
  • Functions vary widely. Some are very much like desktop terminals but with data now web accessible, and others are intelligent platforms with a variety of merchant efficiency, security, and profit optimization benefits.

Payment gateway overview:

Each processor has their own gateway. For example, First Data Global GatewaySM  e4 or Paymentech Orbital® Payment Gateway. There’s also independent or third party gateways. For example, CenPOS or Authorize.net. Third party gateways provide flexibility to change processors at will without disrupting operations, among other benefits. For all non-integrated solutions, the payment gateway manages the consumer facing terminal.

EMV Certified Terminal Confusion:

Semantics is a big problem surrounding EMV today. The hardware is first EMV level 1 and level 2 approved. Then the hardware has to be EMV certified to work with each processor. If there’s a gateway, the gateway has to certify each terminal to each processor. Marketing messages like ‘get you EMV ready’ and ‘EMV capable’ make it very unclear which solutions merchants can actually turn on and process an EMV transaction today vs get you capable to process in the future when certifications are complete. For this reason, merchants must be very specific in asking whether they can accept EMV transactions immediately for any solution purchased.

Payment gateways with certified US EMV terminals:

verifone MX915 EMV terminal

Verifone MX915 multilane signature capture terminal

  • CenPOS: Verifone MX 915, certified First Data, certified TSYS*, Chase Paymentech. Ingenico iSC 250. This article will get outdated fast. Contact us for the latest certifications.

As of 10/29/15 there are virtually no gateways with US EMV certified terminals other than CenPOS.

* TSYS provides flexible connectivity options for all the big acquirers. By certifying to TSYS, merchants can use the certified solution with First Data, Vantiv, NPC, Paymentech, Moneris, Global, Heartland, Elavon and others.

Option two is a countertop or desktop terminal:

Verifone VX520 VX805 EMV terminal

Verifone VX520 with VX805 EMV terminal

Because the EMV transaction requires more memory than in the past, older countertop terminals cannot support EMV, even with an added pinpad. First Data has their own proprietary equipment; Verifone is one of the most popular brands for use with all acquirers, including First Data. The Ingenico iCT220 and iCT250 are also add on peripherals. Countertop terminals, and most gateways, do not support level III processing, critical for business to business merchants to lower merchant fees.

In summary, merchants can replace PCCharge with a universal payment gateway with certified EMV terminal, with a proprietary payment gateway that has certified EMV terminal, or with a countertop terminal, often with a separate EMV peripheral. It’s very important to ask any equipment supplier if they unit is certified for use today vs in the future.

WHICH IS THE BEST EMV SOLUTION TO REPLACE PCCHARGE?

  1. For business to business, there is only one solution that meets all B2B business needs: CenPOS.
  2. For multi-location retail, and big ticket  or high risk sales (electronics, auto parts), CenPOS.
  3. For mom and pop retail, the VX520
  4. For restaurant, quickstop and grocery, I don’t know, I don’t have experience in those industries.

If your business processes more than $1M annually and you need help with EMV, contact us.

Need An EMV Terminal? 8 Questions Distributors Must Ask

emv smart card

EMV chip smart card.

Thinking about updating to an EMV compliant terminal to accept chip cards? Do you accept payments online today or plan to in the future? Choose a cloud based solution that will address all omnichannel sales needs current and future. Once you’ve narrowed your list of prospective vendors, use these questions to quickly identify differences.

Questions to ask before the demo:

  1. Is the terminal EMV certified today for my processor? This is critical because many companies are behind schedule.
  2. Can I use with any merchant processor? The average company will change processors. Flexibility is key to business continuity.
  3. Does the gateway support level III processing for retail?
  4. Does the gateway support 3D-Secure?

An no answer to any of the above is a deal breaker. Accepting a yes will inevitably lead to pain sooner or later.

Questions to ask to identify virtual terminal differentiators during the demo:

  1. Can you demo a swiped transaction with a commercial card requiring level III data?
  2. Can you demo how a token is created and use in a transaction? Do you perform a zero dollar or a one dollar authorization when a token is created?
  3. Can you show how to manage users and their permissions (roles)?
  4. Can you show how to research transactions?

Knowledgebase:
EMV stands for Europay, Visa, Mastercard, the three companies that developed the standard for the security chip.
3D-Secure, including Verified by Visa or Vbyv, are optional security standards for online payments.
EMV certified – terminal approved for use and can be activated immediately.
EMV capable or ready – hardware is certified; equipment and or application is not yet certified
Virtual Terminal – web browser based solution to securely accept payments