An Introduction to the Next Generation of Face-to-Face Mobile Payment Acceptance

THE ARRIVAL OF PIN ON MOBILE

MYPINPAD Ltd 01

INTRODUCTION

For most organisations, growing bottom-line profit is a crucial component in remaining successful and competitive. For retailers and acquirers in particular, greater sales volumes mean greater profit. To maximise profit, retailers with expensive high street properties have had to enrich the in-store experience in order to entice consumers off the web and in to a physical store. Payment technology and innovation is playing its part in this by improving the checkout process, maximising staff productivity and reducing the cost of card acceptance.

Today, many consumers have abandoned cash in favour of card and mobile payments. However, not all retailers are able to accept card payments due to the capital outlay of payment terminals. Now, more than ever, retailers are at risk of losing sales due to a lack of cash being carried by consumers.

This eBook explores the current in-store payments landscape and discusses a new, major development in the evolution of payment technology and acceptance: PIN on Mobile.

PIN on Mobile (PoM) provides all retailers with an innovative and streamlined capability to secure card payments on consumer off the shelf (COTS) devices during face-to-face transactions. Designed to increase payment acceptance volumes, reduce costs and improve the customer experience, PoM is the payments industry’s latest innovation in card payment acceptance.

MYPINPAD Ltd 02

WHY IS PoM SO IMPORTANT FOR RETAILERS NOW?

“By removing barriers to entry, PoM presents the most effective way to grow card acceptance globally. However, it also offers significant advantages for large retailers that already accept card payment by enriching the customer experience and helping to increase staff productivity. This is why PoM is set for such rapid growth in the coming months and years ahead.

Enabling more retailers to accept card and mobile payments drives transaction acceptance volumes for Acquirers and Card Schemes whilst ensuring an appropriate level of security is in place. Accepting card payments has never been easier or cheaper for merchants.

Smart devices have a large role to play in both payments and consumer authentication. It is not just as a mode for transacting, but as a universal component of strong, multi-factor authentication. PIN on Mobile has the potential to become the most widespread form of face-to-face payment authentication, playing a significant role in meeting the expected global increase in merchant payment acceptance points. It can easily supplement other authentication credentials including biometrics.

The introduction of PCI’s new Software-Based PIN Entry (SPoC) Standard will make card payments accessible to merchants of all sizes. The standard includes a specification for isolating and protecting the card PIN when entered in to touchscreen smart-devices (phones and tablets). The international card payments industry has long benefited from the implementation of PCI standards, as have consumers, and PIN entry in to a mobile device is expected to become the preferred way to enable strong authentication. The standard aligns tightly with our goal of increasing merchant card acceptance globally whilst also mitigating risk for both retailer and consumer.”

PHILIP KINGCHAIRMAN & CEO

MYPINPAD Ltd 03

THE DECLINE OF CASH PAYMENTS

Card payments are steadily overtaking cash. The share of retail transactions made by cash has dropped more than 10% over the past two years and according to the British Retail Consortium’s (BRC) most recent report, more than half of all payments in the UK were card payments.1 This is the first-time cards have overtaken cash as UK consumers become more reliant on debit cards, which now account for almost 43% of all retail transactions. This is driven in part by an increase in consumers’ desire to use cards for low value transactions.

Despite the fast-paced adoption of card payments, it is estimated that around half of the UK’s 5.4 million small and medium sized enterprises are yet to accept card payments of any kind2. On a global basis the impact is even more profound. For example, digital payments in India are forecasted to grow 10x to €500bn by 20203. More than ever, retailers need a cost-effective solution that will allow them to better-serve their consumers.

TRANSACTION VOLUME

1. https://brc.org.uk/media/179489/payment-survey-2016_final.pdf 2. https://techcrunch.com/2017/03/28/square-finally-opens-for-business-in-the-uk-its-first-market-in-europe/

3. Digital payments 2020 – The Making of a $500bn ecosystem in India – BCG / Google – July 2016

CASH (42.3%) DOWN 4.9%

CREDIT & CHARGE CARDS (11.4%) UP 0.3%

DEBIT CARDS (42.6%)UP 4.5%

NON CARD PAYMENTS (3.7%)DOWN 0.1%

MYPINPAD Ltd 04

THE CURRENT PAYMENTS AND MPOS LANDSCAPE

With the mPOS market experiencing consistently strong growth, the rate of change is expected to increase as vendors, Payment Service Providers and regulators look to meet the requirements of an expanding user demographic.

mPOS solutions have already undergone significant evolution, progressing from low tech, low cost swipe devices to devices that closely resemble POS terminals with mandated support for EMV and PIN authentication to combat rising fraud levels. This transformation has introduced significant costs, almost to a point that mPOS card acceptance solutions are no longer affordable for many small and micro merchants in both developing and developed economies, where there are significant growth opportunities.

THE MPOS SOLUTION AND REGULATORY LANDSCAPE HAS CHANGED CONSIDERABLY OVER THE PAST 8 YEARS.

MYPINPAD Ltd 05

The need for PSPs to differentiate and remain competitive is more important than ever as the number of competing solutions, alternative payment technologies, vendors and services providers continues to grow. With industry-wide commoditisation, it is critical to offer the most current, future-focused products and services to remain relevant in this highly competitive market.

Despite the abundance of current mPOS solutions available, there is a need to enable greater acceptance without introducing higher risks and costs. Smartphone and tablet-based mPOS technology, which first emerged around 2010, enabled the acceptance of card payments via mobile devices through a separate, PCI PTS approved payment terminal, which reads the card data and acts as a PIN pad. Typically, this payment terminal is connected via Bluetooth or audio jack to the mobile device. The additional device represents additional cost.

Mobile and tablet based payment solutions present a variety of advantages for retailers that need a financially and operationally efficient way to accept card payments securely in-store. Research suggests that by 2021, 20% of all retail transactions will be done on smartphone and tablet-based mPOS and one third of all point of sale devices will be mobile.4

4. https://www.juniperresearch.com/press/press-releases/mpos-to-process-over-20-of-retail-point-of-sale

THE CURRENT PAYMENTS AND MPOS LANDSCAPE

MYPINPAD Ltd 06

PIN ON MOBILE: THE NEXT GENERATION OF FACE-TO-FACE PAYMENTS

PCI’s new Software-Based PIN Entry (SPoC) Standard will set a precedent for the enablement of secure PIN entry in to consumer-off-the-shelf (COTS) devices. Its adoption across the world will dramatically increase the number of merchant payment acceptance points, whilst reducing the capital expense of card acceptance hardware. The technology will enable easy software based payment updates and also help to enrich the customer in-store experience by providing rich features such as loyalty schemes and surveys on a familiar interface.

Unlike existing mPOS solutions, PoM is a software-based solution for the secure entry of consumer card PIN directly into COTS device to authenticate a transaction. The only additional hardware required is an inexpensive PCI approved and EMV compliant secure card reader (SCR). This is a particularly important development for merchants that do not want to invest in additional, unnecessary hardware for PIN entry.

Financial inclusion is also a driver of innovation, particularly when it comes to emerging markets and underserved consumers. Card payment security should be ubiquitous, regardless of location, financial status or physical ability. Consistency of interface, simplification of available technologies, and setting of individual preferences across all payment front-ends are pre-cursors to widespread adoption amongst a global consumer base with diverse needs. PoM technology opens the door to new ways to serve these needs.

MYPINPAD Ltd 07

MYPINPAD’S PIN ON MOBILE SOLUTION: MPES

MYPINPAD’s PIN Entry Solution (MPES5) secures the card PIN at the point of entry using patented technology and sends it to the PCI approved Secure Card Reader (SCR) to be included in the authorisation message. The MPES back-office consistently monitors MPEA and the SCR for any environmental anomalies or signs of compromise.

MPES is an alternative to purchasing traditional PCI PTS hardware-based solutions. Removing the need for a dedicated hardware PIN pad allows hardware manufacturers to produce smaller, lower-cost devices that will appeal to this large untapped market. By reducing the solution cost, a significant barrier to entry for merchants is also removed. The merchant’s market potential will increase and so too the opportunities to expand its customer base.

MPES supports online and offline PIN and can work with all payment card schemes. The solution works seamlessly with existing applications and infrastructure, making MPES a highly cost-effective mobile payment option. The solution is compatible with Android and iOS touchscreen devices and is easily integrated into many globally available PCI compliant SCR devices and paired with many different PSP applications.

5. Please visit www.mypinpad.com for further information on MPES

MYPINPAD Ltd 08

HOW THE SOLUTION WORKS

MPES is comprised of three elements: MPEA (MPP PIN Entry Application) • Environment Checking • App security • Secure PIN capture • SCR and TS Authentication TS (Trust Services)

• SCR and MPEA authentication • Device Authentication • Environment monitoring • Fraud Engine Plug-in • TMS plug-in

SPEL (SCR PIN ENTRY LIBRARY) Internal to the Card reader/dongle • MPEA and TS Authentication • PIN Block generation

MPEA

P2PE / SRED P2PE / SRED

Strong EncryptionStrong Encryption4539 1765 8161 9889

®

PCI PTS SRED SCRSPEL (SCR PIN Entry Library)

and EMV

Please enter your PIN:

SMARTPHONE / TABLETMPEA (MPP PIN Entry Application)

and POS Application

PROCESSOR GATEWAYTS (Trust Services)

MYPINPAD Ltd 09

PoM technology will boost the number of merchants that are able to accept card payments, helping to increase transaction volumes. Secure payment acceptance via smart devices also has great potential to enhance the consumer experience at the checkout. It will enable merchants to incorporate payments and other rich features such as loyalty schemes and surveys, on one intuitive, familiar device.

MYPINPAD Ltd 10

BENEFITS OF PoM

Benefits for merchants, PSPs, acquirers and issuers • Enables growth in payments acceptance points globally

• Enables growth in card payment transaction volume

• Robust security capability that is deployable for card payment acceptance in more diverse environments – promotes long term relationship with retail and merchant base

• PoM is the first step towards mobile to mobile card acceptance

Customer experience • PoM technology uses card PIN. PIN is a universally trusted and accepted form of authentication that offers an increased level of protection for sensitive data

• Consumer can pay anywhere they are - no need to walk to a static till location to complete the transaction.

• Feature rich and familiar, mobile and tablet devices enable a more consistent and personalised ‘checkout’ experience in a face-to-face environment

MYPINPAD Ltd 11

BENEFITS OF PoM

Efficiency & security • A software based solution that enables greater card acceptance transaction volumes

• Significantly reduces capital outlay for merchants by negating the need for expensive hardware for PIN entry

• Fully compliant with the industry’s latest applicable security standards

• PoM is flexible and future-proofed. Retailers will acquire an innovative solution capable of incorporating new payment methods as they appear

• PoM will automatically take advantage of improvements in mobile iOS/Android/Windows Operating System security

• PoM replaced specialised and expensive terminal hardware for authentication with COTS functional equivalent for the IoT era

• PoM reduces the cost of card acceptance without introducing new or higher risks

MYPINPAD Ltd 12

ABOUT MYPINPAD

MYPINPAD (MPP) is a simple and effective mobile authentication platform that identifies consumers across sectors, devices and channels while fully meeting best security practices and regulations.

MYPINPAD’s technology creates a trusted and hardened environment that enables retailers to protect sensitive consumer operations on devices such as tablets and smartphones for in-store transactions.

The solution allows for rapid and simple integration into an Acquirer’s, Issuers or PSP’s existing technology stack, enabling bank grade, multi-factor authentication through the use of card PIN.

NEXT STEPS

To request MPP solution details or for more information visit www.mypinpad.com, and follow us @mypinpad on Twitter and LinkedIn