Monday, December 21, 2009

Nordic Group Awards First Unattended Payment Approval to Dresser Wayne® iXTM Pay Secure Payment Platform

http://www.dresser.com Upgradeable Solution for Fuel Dispensers Helps Protect Motorists Against Card Fraud





MALMO, Sweden--(BUSINESS WIRE)--Dresser Wayne (www.DresserWayne.com), a global leader in vehicle energy dispensing technologies, has received PAN Nordic Card Association (www.pan-nordic.org) Unattended Payment Terminal (UPT) approval of the iX Pay Secure Payment solution on the Global StarTM and Global Ovation® iXTM fuel dispensers. The outdoor payment solution includes the Dresser Wayne secure key pad, which is the first Payment Card Industry (PCI) version 2.0 Encrypting PIN Pad (EPP) device to be certified by the Association. Nordic-region fuel retailers will now be able to comply with these standards, and to protect their businesses and their customers from credit and debit card fraud.



The PAN Nordic Card Association supports banks and card issuers with standards and best practices that address unique regional needs, building on the fundamentals of the globally recognized PIN Transaction Security (PTS) standards administered by the PCI Security Standards Council (SSC).



“These industry-first approvals will really benefit our customers the most, giving them a standards-based approach to enhanced security at the pump,” said Tim Weston, product manager for payment technologies at Dresser Wayne. “Our upgradeable iX Pay Secure Payment solution also gives customers the flexibility to meet future security standards.”



The iX Pay Secure Payment solution is available on new Dresser Wayne dispensers and via upgrade kit. It features an encrypting keypad, a secure card reader, user prompt controls, and application software authentication. The solution is compliant with EMV standards which address global interoperability of chip cards with payment systems. It was also the first to be certified to the Version 2.0 standard for PCI Encrypting PIN Pad (EPP) Security Requirements.



Learn about iX Pay Secure Payment solution at www.DresserWayne.com.



Reblog this post [with Zemanta]

Vesta Corporation Powers Online Reloads for NetSpend Prepaid Debit Cards







Value-Added Electronic Payments Provider Enables Real-Time Account-to-Account Payments for NetSpend Prepaid Debit Cards



In this press release, Vesta is proud of the fact that they can provide limited ($250) prepaid card loads in real time.  And they should be.  Most take days.  That said, HomeATM can "not only" load a prepaid card in real time from any bankcard, but do it without the $250 limitation.  Same with P2P. 





PORTLAND, Ore.--(BUSINESS WIRE)--  With prepaid debit cards surging in popularity, Vesta Corporation, a global pioneer and leader in electronic payments, today announced the launch of an innovative Web reload service for NetSpend Corporation, a leading provider of card-based prepaid financial products to underbanked consumers. Powered by Vesta’s payment technology, this industry-first service lets NetSpend customers immediately add funds to their prepaid debit cards from bank issued debit cards.



According to a newly released forecast by the Maynard, Mass.-based research firm Mercator Advisory Group, the market for prepaid cards looks extremely dynamic over the next few years. In its 2009-2012 forecast Mercator predicts general-purpose reloadable cards will reach $118.5 billion in loads by 2012 versus $8.7 billion in 2008.



“NetSpend works to give our cardholders the products and tools to make managing their financial lives easy, convenient and secure,” said Dan Henry, chief executive officer of NetSpend. “We turned to Vesta because of their reputation and track record. Vesta’s payments and transaction technology allowed NetSpend to quickly implement this new convenient and secure channel our cardholders can use to reload their cards.”



NetSpend cardholders can now add up to $250 to their prepaid debit cards from any bank debit card. Unlike other online reload services, new funds are added in real-time to the cardholder’s account, making funds immediately available. Other online reload services can take as long as five days for funds to be ready for use. With Vesta managing online reload transactions, NetSpend cardholders can now reload their prepaid debit cards without having to visit a point of sale location.





Editor's Note:  HomeATM can do real-time loads without the $250 limitation.  In fact, why even use an intermediary (the prepaid debit card) when we can "load" your original debit card with cash from any bankcard.  Why take the money from the original debit card and load another?   Seems like an unnecessary extra step.  However, with that said, HomeATM can load any loadable card in real-time using any bank card.  Simply swipe the "sending" card then enter PIN (an email will be sent to recipient)  Open the email, take the card you want to load with funds and swipe it, then enter the PIN.  Funds are transferred in real-time and cardholder can immediately use the card.  So, if your organization has a need for that, let us know.  



Vesta’s program includes an innovative gifting feature that allows a customer to invite friends and family to contribute to a prepaid account. Invitations are delivered by email and include a link to begin the reload process. If desired, contributors can set up an account to expedite future reloads, further simplifying these person-to-person payments.



Vesta’s technology includes proprietary account verification and risk management practices that enable the provider to fully fraud-indemnify NetSpend from any costs resulting from fraudulent transactions. In addition, Vesta brings full PCI Data Security Standard (PCI DSS)-compliant payment processing to Web reloads.



“As an innovator in value-added payments services, Vesta brings a unique perspective to evolving industry needs,” said Doug Fieldhouse, Vesta’s president and CEO. “Vesta plans to work with NetSpend to develop new products for the rapidly growing number of prepaid debit card customers.”



For more information, visit www.netspend.com and www.trustvesta.com.

Cyberhackers vs. Banks





Cyberhackers vs. banks



By Jim Kim

The Financial Times has weighed in with a wide-angle view of the current state of the hackers vs. banks war. It concludes that the thieves may be winning. One experts estimates criminals took about $40 million directly from bank accounts this year, "primarily targeting the small and mid-sized businesses that are themselves customers of small and mid-sized banks."



We've noted that small banks and their customers appear to be sadly fertile targets, given that their security efforts tend to lag the really big institutions. It's surprising how many small business fall prey to the same phishing techniques that bedevil consumers. The costs of entry into this illicit business may be declining unfortunately. Cisco says that one of the main programs that thieves use can be had for just $700. This is troubling. Small banks and businesses have enough to worry about. It looks now like 2-factor authentication is not faring well against the bad guys.  For more: - here's the article



Editor's Note:  It's time to define 2FA.  Generally speaking it is what you have, and what you know



Therefore, one could make a case that "having a username: and "knowing a password" is two factor authentication.  Since username and password is proven inadequate, 2FA must be useless. 



Then there's the One-Time-Passcodes" (OTP's) whereby something you have (hardware device) generates a one-time-PIN.   In a recent report from Gartner, they concluded that OTP's are no longer enough to protect online banking transactions.  So 2FA using OTP's is useless.  But that DOESN'T mean all two factor authentication is useless.  Just 2FA using a web browser.  Because, as Gartner also recently reported, nothing that uses a browser for authentication can be trusted. 









So, what DOES work?
  




Hint:  Go to an ATM and try and pull out $100.  What do you have to do in order to accomplish that task?   Well there are three variables involved. 

You have to use a hardware device (ATM) to "insert your card" (what you have) and Enter your PIN (what you know).  That process has been used and trusted by banks and bank customers for decades.  We replicate that process for online banking authentication.  

The HomeATM PCI 2.x Certified PIN Entry Device allows you to "insert your card" and "Enter your PIN."  The only difference is we eliminate the threats induced by skimming devices and hidden camera's designed to capture your PIN as you enter it.  



Add to the equation that we also eliminate phishing.  (nothing to phish phor) and it seems obvious that the stage is "SET" (Swipe Encrypt, Transmit) positioning our low cost SLIM PED as an online banking savior.   













For more on HomeATM's 2FA online banking authentication, check out the related article below:

 

Reblog this post [with Zemanta]

Heartland Payment Systems Agrees to Settle Cardholder Class Actions

“We are pleased to have reached a fair and reasonable settlement agreement that helps cardholders recover losses they may have incurred directly related to the criminal intrusion”

Under the terms of the settlement, Heartland will pay a minimum of $1,000,000 and up to a maximum of $2,400,000 to class members who submit valid claims for losses as a result of the intrusion. The settlement resolves all actions and proceedings that were asserted or could have been asserted against Heartland in relation to the intrusion by all persons in the United States who had payment cards used in the United States between December 6, 2007 and December 31, 2008 and who allege or may allege they suffered losses. Any person who validly requests exclusion from the settlement class will be excluded from the settlement.



Heartland will also pay all costs associated with the administration of the settlement, including up to $1.5 million for the cost of notice to the settling class. In addition, Heartland has agreed to pay up to $760,000 of the attorneys’ fees and costs of attorneys representing the class members. Lastly, Heartland has agreed to submit the report of an independent expert on Heartland's actions and plans to enhance the security of its computer system since the announcement of the intrusion on January 20, 2009.



A claims administration process informing affected cardholders of procedures to be followed for making claims or opting out of the settlement will be implemented, including a dedicated website.



The settlement is subject to court approval and other terms. Heartland may terminate the settlement agreement if the number of persons who submit valid requests for exclusion from the settlement class exceeds 2,500 or if the costs of notice to the settling class exceed $1,500,000.



“We are pleased to have reached a fair and reasonable settlement agreement that helps cardholders recover losses they may have incurred directly related to the criminal intrusion,” said Bob Carr, Heartland’s chairman and chief executive officer. “We are committed to providing our merchants and their customers with a secure processing solution that protects them from the growing threat of cyber crime.”



About Heartland Payment Systems



Heartland Payment Systems, Inc. (NYSE:HPY), the 5th largest payments processor in the United States, delivers credit/debit/prepaid card processing, payroll, check management and payments solutions to more than 250,000 business locations nationwide. Heartland is the founding supporter of The Merchant Bill of Rights, a public advocacy initiative that educates merchants about fair credit and debit card processing practices. For more information, please visit HeartlandPaymentSystems.com, MerchantBillOfRights.com, CostOfABurger.com and E3secure.com.





Reblog this post [with Zemanta]

TSYS and Marfin Laiki Bank Launch Credit Card Exclusively for Women

 TSYS and Marfin Laiki Bank

NICOSIA, Cyprus--(BUSINESS WIRE)--TSYS and Marfin Laiki Bank today announced the successful launch of the Woman’s Card, the first and only card in Cyprus designed exclusively for women.

“We are very excited about the launch of our new Woman’s Card. With TSYS’ support, we’ve achieved a new milestone in the Cyprus market by bringing a truly unique card to market”

Marfin Laiki Bank has been a client of TSYS since 2004 and the new Woman’s Card is supported by TSYS’ PRIME licensed card management solution. The Visa-branded credit card is linked with a loyalty programme that allows cardholders to redeem points as vouchers for free purchases from a range of stores for women. The card’s key differentiator is the distinctive benefits that focus on women’s welfare, such as free mammography or osteoporosis tests, travel insurance, purchase protection insurance and home care services.



"We are very excited about the launch of our new Woman’s Card. With TSYS’ support, we’ve achieved a new milestone in the Cyprus market by bringing a truly unique card to market,” said Rodoula Hadjikyriacou, director retail banking, Marfin Laiki Bank.



"By leveraging PRIME’s rich functionality and flexibility, Laiki Bank has been able to tailor its products and services specifically to meet the needs of its customer base,” said Kelley Knutson, executive vice president of TSYS International. “This demonstrates once again that PRIME is a platform for payments innovation.”

The launch of the Woman’s Card is just one in a series of milestones for TSYS in Cyprus. TSYS technologies enable EMV-compliance, interest-free instalment schemes and secure e-shopping service, deploying a virtual card to ensure safer transactions over the Internet — the first service of its kind in Cyprus.

Green Tuesday? Tuesday, December 15 Reaches Record $913 Million in Online Spending

That brings the total holiday spend, so far, to nearly $25 billion, a 4% increase over 2008 numbers. There have also now been nine individual shopping days which surpassed the $800 million mark.



"Going into this most recent week, we had anticipated that Monday or Tuesday would post the highest online spending total of the season and perhaps be the first day on record to surpass $900 million," said comScore chairman Gian Fulgoni. "Despite a disappointing start to the week, with sales on Monday of $854 million down 1 percent versus 2008, we were encouraged to see spending continue strongly throughout the balance of the work week, led by Tuesday's record $913 million. In fact, each day through Thursday December 17 - the last day that many online retailers would guarantee free shipping in time for Christmas - saw at least $800 million in spending, which suggests that savvy consumers may have been waiting for those last-minute deals."



Strong Spending Continues Through Most Recent Work Week to Maintain 4-Percent Growth Rate for Season, Despite Slightly Disappointing Sales on Green Monday



RESTON, VA, December 20, 2009
- comScore (NASDAQ : SCOR), a leader in measuring the digital world, today reported holiday season retail e-commerce spending for the first 48 days of the November - December 2009 holiday season. For the holiday season-to-date, $24.8 billion has been spent online, marking a 4-percent increase versus the corresponding days last year. The most recent week began on a slightly disappointing note, with sales of $854 million on Green Monday (Dec. 14, 2009) down 1 percent versus year ago, but was followed by three strong spending days that each surpassed $800 million. Most notably, Tuesday, December 15 set an individual day spending record with $913 million, the first such day to surpass the $900 million threshold.













2009 Holiday Season To Date vs. Corresponding Days* in 2008

Non-Travel (Retail) Spending

Excludes Auctions and Large Corporate Purchases

Total U.S. - Home/Work/University Locations

Source: comScore, Inc.

 

Millions ($)

2008

2009

Percent Change

November 1 - December 18

$23,873

$24,757

4%

Thanksgiving Day (Nov. 26)

$288

$318

10%

Black Friday (Nov. 27)

$534

$595

11%

Cyber Monday (Nov. 30)

$834

$887

5%

Green Monday (Dec. 14)

$859

$854

-1%

Tuesday, Dec. 15

$754

$913

21%

*Corresponding days based on corresponding shopping days (November 2 thru December 19, 2008)



"Going into this most recent week, we had anticipated that Monday or Tuesday would post the highest online spending total of the season and perhaps be the first day on record to surpass $900 million," said comScore chairman Gian Fulgoni. "Despite a disappointing start to the week, with sales on Monday of $854 million down 1 percent versus 2008, we were encouraged to see spending continue strongly throughout the balance of the work week, led by Tuesday's record $913 million. In fact, each day through Thursday December 17 - the last day that many online retailers would guarantee free shipping in time for Christmas - saw at least $800 million in spending, which suggests that savvy consumers may have been waiting for those last-minute deals."



Nine Individual Spending Days in 2009 Surpass $800 Million in Spending


With the heaviest online spending days of the season now likely behind us, Tuesday, Dec. 15 will rank as the heaviest online spending day of the year at $913 million, one of nine individual spending days to surpass $800 million. Cyber Monday (Monday, Nov. 30) currently stands in second place with $887 million, the highest it has ever ranked on this list.



"In a typical year, Cyber Monday tends to be the eighth to tenth heaviest spending day, but this year it moved higher up the list than ever before," added. Mr. Fulgoni. "In part, this is due to the fact that the day fell fairly late in the season, so that pent up consumer demand likely boosted its performance, but also because of the increasing marketing hoopla and promotional activity that surround the day."



The third heaviest spending day of the year was Tuesday, Dec. 1 with $886 million in spending, followed by Wednesday,

Dec. 16 with 874 million and Green Monday (Monday, Dec. 14) rounding out the top five with $854 million.


















Ten Heaviest U.S. Online Retail Spending Days of 2009

Non-Travel (Retail) Spending

Excludes Auctions and Large Corporate Purchases

Total U.S. - Home/Work/University Locations

Source: comScore, Inc.

 

Date

Spending in Millions ($)

1

Tuesday, Dec.15

$913

2

Monday, Nov. 30, 2009 (Cyber Monday)

$887

3

Tuesday, Dec. 1, 2009

$886

4

Wednesday, Dec. 16

$874

5

Monday, Dec. 14, 2009 (Green Monday)

$854

6

Thursday, Dec. 10, 2009

$852

7

Tuesday, Dec. 8

$828

8

Thursday, Dec. 17

$809

9

Thursday, Dec. 3

$809

10

Wednesday, Dec. 2

$797

*Green Monday occurs on the Monday with at least 10 days prior to Christmas and tends to be the heaviest online spending day of the season.



Free Shipping Remains Critical Driver of 2009 Holiday Shopping


comScore's analysis of online transactions reveals that free shipping remained an important driver of online shopping throughout the 2009 holiday season. During each week, at least 45 percent of all transactions included free shipping, outpacing the corresponding week in 2008. The peak occurred during the week ending Dec. 6, with 50 percent of all transactions including free shipping.

The average order value for online transactions peaked at $117 during the week ending Nov. 29, 2009 and week ending Dec. 6, 2009, also outpacing the corresponding weeks in 2008. For the week ending Nov. 29, the average order value for transactions including free shipping was $124 while the average order for those without free shipping was $111. For the week ending Dec. 6, the average order value for transactions including free shipping was $134 while the average order for those without free shipping was a much lower $103. This suggests that free shipping offers can be used creatively by retailers to incent consumers to spend more per order.












2009 E-Commerce Transaction Analysis vs. Corresponding Weeks in 2008

Non-Travel (Retail) Spending

Excludes Auctions and Large Corporate Purchases

Total U.S. - Home/Work/University Locations

Source: comScore, Inc.

Week Ending

Percent of Transactions Incl. Free Shipping

Average Order Value for All Online Transactions

2008

2009

2008

2009

Nov. 8, 2009

38%

45%

$102

$105

Nov. 15, 2009

34%

48%

$99

$94

Nov. 22, 2009

39%

47%

$101

$97

Nov. 29, 2009

46%

47%

$113

$117

Dec. 6, 2009

49%

50%

$110

$117

Dec. 13, 2009

39%

45%

$103

$102

Dec. 20, 2009*

38%

45%

$96

$96

*Week ending Dec. 20, 2009 data only includes five days ending Dec. 18 for 2009



About comScore


comScore, Inc. (NASDAQ: SCOR) is a global leader in measuring the digital world and preferred source of digital marketing intelligence. For more information, please visit www.comscore.com/companyinfo.

Contact:

Andrew Lipsman

Director, Marketing Communications

comScore, Inc.

+1 312 775 6510

press@comscore.com

Sunday, December 20, 2009

PIN Payments News Blog Undergoes Makeover





The PIN Payments News Blog has undergone a makeover.  Each day, each of the full day's posts will appear as a summary. 



You can browse the daily postings in summary form or click "full story" to read the entire post.  (Note: You can click the title of the post as well)



Hopefully this is an improvement over the previous layout and allows visitors to to see the entire day's posts in order to assist the reader in determining breaking news that is of particular interest.





JBF









Reblog this post [with Zemanta]

Internet Security News: December 20th

This summary is not available. Please click here to view the post.

The HomeATM Solution

HomeATM ePayment Solutions, is a leading provider of secure hardware and software financial transaction solutions. The Safe-T-PIN point of sale terminal, manufactured by HomeATM, is the first ever Internet PIN entry device (PED) PCI certification 2.x. The Safe-T-PIN™ provides secure multi-factor authentication for e-commerce transactions and secure log-in, including;



  • Cardholder Card Control

  • Device Level Encryption

  • 4-Factor Authentication

  • Fraud Reduction/Elimination

  • Quick and Cost Effective

  • Credit and Debit transaction agnostic

HomeATM's PCI PED certified device and patented solution; is portable, cost effective, secure with instantaneous implementation and completely ubiquitous (integration into any processing platform). Just like the grocery store, gas pump or bank, users simply swipe their card and enter their PIN to authenticate themselves. Merchants can confidently process orders knowing that this method of authentication to represents the lowest fraud risk of any transaction and therefore help provide the lowest fees saving them countless dollars each month. The process is adaptable to niche applications that extend its reach beyond simply online commerce, specifically.

  • Person to Person (P2P)

  • Business to Consumer (B2C)

  • Business to Business (B2B)

  • On line banking, authentication

  • Field Services (food delivery, MLM, home sales, taxi, etc)

  • Prepaid, gift card, stored value and payroll card fund loading

  • Cross-pollination of brick and mortar clients to the retailer’s dot-com site

  • The most cost efficient POS hardware available

The cardholder and their card are present in all scenarios driving increased security, fraud reduction, and favorable interchange rates.





Security



Using impregnable, unimpeachable security we eliminate fraud in the ePayment ecosystem. HomeATM’s secure architecture is bank and military grade insuring the highest integrity behind every transaction.



Defend Against Hackers who can easily



  • Screenscrape

  • Phish

  • Mouseclick log

  • Keystroke logg

  • Install malware



Security experts unanimously agree that the Safe-T-PIN is the only secure means of using a PIN on the internet – “swipe, encrypt and transmit”. 



HomeATM's Safe-T-PIN Certification at PCI Security Standards Council









HomeATM is not a payment processor and does not collect, store or transmit any personal or card information during the transaction. Only the purchase details necessary to complete the transaction are transmitted using encryption technology that exceed industry and government guidlines..



HomeATM is committed to continue to provide safe, secure and reliable payment products and services to protect your business, your customers (cardholders), and the integrity of the payment system. These efforts help every segment of the payment card industry - from business partners to financial services institutions - to law enforcement agencies globally.



HomeATM uniquely creates E2EE (end-to-end encryption) that exceeds PCI (Payment card Industry requisites) and FFIEC recommendations thus assuring your security from the moment you take your debit card out of your wallet to the time you put it back.



HomeATM's certified device is the only technology in the world that delivers a bank/military grade secure environment in this fashion.



Download our latest white paper:



PIN Debit Payment with PC Software? No, Thanks!
PDF





Press Release:




Chicago, IL.  Mar 19, 2009 – HomeATM ePayment Solutions, a leading provider of secure hardware and software solutions, today announced their newest product, Safe-T-PIN™, has been Payments Card Industry (PCI) PIN Entry Device (PED) 2.0 certified.



The Safe-T-PIN point of sale terminal, manufactured by HomeATM, is the first ever Internet PED to achieve such certification. Safe-T-PIN™ provides secure two factor authentication for e-commerce transactions and secure log-in.



The pocket-sized Safe-T-PIN™ is USB “plug and play”, eliminating the need for drivers or downloads. Additionally, it works with any operating system or browser. The device provides users with the added convenience of swiping their cards versus keying in their numbers and will work with any bank, card processor, and currency.



The significance of this feat is that bank/military grade encryption of financial data from beginning to end is now affordable to the masses.



HomeATM’s mission was to design, build and provide an affordable POS that brought End-to-End-Encrypted (E2EE) security and thus lower fees to merchants and consumers.



The Safe-T-PIN™ also allows authorized secure person-to-person (P2P) money transfers in real-time. “We are proud of our engineering team and extremely excited to provide a cost-effective solution to those who can least afford fraud and risk,” said Ken Mages, CEO.



"The Safe-T-PIN™ exponentially reduces the likelihood of a breach and provides the dual authentication solution that e-tailers and money remittance companies  have been seeking in order to fill the current fraud/security void in secure transactions on the web. HomeATM is already in advanced discussions with several  Fortune 100 companies and this certification will certainly result in expediting those talks.”
















HomeATM Corporate Site

Click Here to Go to HomeATM Corporate Website







Disqus for ePayment News