June 21, 2010 Banks Enlist Proxies To Fight Durbin Amendment’s Curb On Debit Card FeesRecognizing that “credit card companies” and “Wall Street banks” may not have the most sympathetic political image these days, the payment card industry has enlisted small financial institutions as proxies to undercut support for Senator Dick Durbin’s (D.-IL) amendment giving the Federal Reserve the power to scrutinize fees imposed on merchants accepting debit cards.Durbin’s amendment was incorporated into the Senate version of the pending financial reform package by a surprisingly large, bipartisan 64-33 vote last month – thus the vociferous opposition campaign as House and Senate conferees got to work to reconcile the Senate’s version with a House bill that has no provision addressing interchange fees. The conferees are expected to continue debating the potential curb on fees this week. Durbin’s amendment requires the Federal Reserve to establish rules requiring that debit card “interchange fees” are “reasonable and proportional” to the costs incurred by an issuer or payment network “with respect to” a transaction. The Federal Reserve’s rules are to set such levels taking into consideration the fact that the debit cards are an electronic replacement for checks, which clear at par, and the incremental costs of a card transaction. In contrast, debit card interchange fees currently can amount to 1 percent or more of a card transaction. Merchants would like these fees reduced to reflect no more than actual processing costs, to ensure, for example, that merchants are not forced to pay for the costs associated with airline frequent flyer points awarded when a customer swipes a “rewards” debit card. In response to concerns raised by community banks and credit unions during the drafting of the amendment, Durbin’s amendment expressly carved out from the sections coverage fees paid to card issuers that have assets of $10 billion or less. According to Senator Durbin, the result is that only 85 financial institutions are covered by the debit interchange fee provision, including just the three largest of America’s over seven thousand credit unions. |
Assessor Validates VeriFone’s VeriShield Protect End-to-End Encryption Solution
Independent QSA Determines VeriShield Protect Meets All Visa Data Field Encryption Guidelines and May Take Payment Applications out of PCI Scope
“The overall scope of platforms, technology and tools are well architected and effective.”
Coalfire, a Payment Card Industry (PCI) Qualified Security Assessor (QSA), recently completed the assessment, which included technical testing, architectural assessment, industry analysis, compliance validation and peer review of VeriShield Protect. The assessment concluded that, “the VeriShield Protect solution can reduce the cost of PCI compliance assessment and validation and allow [merchants] to invest more of those dollars into risk mitigating controls.” A copy of the report is available at http://www.verifone.com/lp/verishield-protect.aspx.
In addition to achieving Visa’s best practices for data field encryption, Coalfire determined that with VeriShield Protect, a payment application or point-of-sale (POS) system that is not Payment Application Best Practices (PABP) or Payment Application Data Security Standard (PA-DSS) validated can be taken out of PCI scope if all payment data is captured through the VeriShield Protect solution and the system is cleansed of all legacy card data.
“Coalfire’s report indicates we achieved our goal of creating a payment security solution that will reduce the cost of PCI compliance,” said Jeff Wakefield, VeriFone vice president and general manager, Global Security Solutions. “With VeriShield Protect, merchants can eliminate almost all risk of payment card data compromise.”
Other key findings include:
- VeriFone’s format-preserving VeriShield Hidden Encryption meets encryption best practices and standards for cryptographic algorithms and key strength.
- The VeriShield Protect solution integrates securely with PC based POS or cash registers.
- VeriShield Hidden Encryption provided successful integration with all payment application, POS and back-office servers tested.
“The VeriFone VeriShield Protect solution has impressed our technical assessment team and our QSA auditors,” said Rick Dakin, Coalfire CEO and co-founder. “The overall scope of platforms, technology and tools are well architected and effective.”
Coalfire and VeriFone will conduct a webinar on June 22 at 1:00 P.M. EDT to review the results of the assessment; registration information is available at http://www.verifone.com/lp/verishield-protect.aspx.
Additional Resources: http://www.verifone.com/lp/verishield-protect.aspx