The Payment & Clearing Association of China (PCAC) has published a set of guidelines that regulate how payments providers making use of face recognition to process payments at the point of sale (POS) should manage the protection of consumer data... More
Biometric cards equipped with built-in fingerprint sensors have the potential to make payments both safer and easier, but the technology is still new and there are critical elements that need to be put in place to ensure widespread adoption, NXP explains in a white paper now available to download from the NFCW Knowledge Centre... More
Customers of Deutsche Bank in Spain can now apply for a card that replaces the traditional, printed CVV number with a small screen integrated into the back of the card that displays a new CVV every four hours... More
QR code scams rise in China, putting e-payment security in spotlight — South China Morning Post — “By replacing legitimate merchants’ codes with malevolent copies, fraudsters can gain access to consumers’ data and even raid their bank accounts… According to one senior official and technology expert, almost a quarter of Trojans — malicious programs disguised as benign software – and other viruses are transmitted though QR codes.”
Mastercard brings digital identity to real world tests — Mastercard — “The pilot will test a new way for people to prove their identity without having to carry multiple documents. Instead, the model allows the data to sit with its rightful owner — the user. It will activate a distributed model that blends information stored on an individual’s mobile device and verified by additional reference points, such as an individual’s bank or participating government agencies.”
Passengers flying on international American Airlines flights can now use an NFC passport checking function integrated into the airline’s mobile apps “to head directly to the gate for international flights without having their passports rechecked by a customer service agent”... More
JPMorgan Chase, Envestnet l Yodlee sign agreement to increase customers’ control of their data — JPMorgan Chase & Co — “Envestnet I Yodlee is committing to send 100% of its requests for Chase customer data through the bank’s secure API (application programming interface). This will ensure the apps can receive Chase customer data they need while customers control what’s shared with whom…. Because the secure API uses a token-based approach, customers will no longer need to give out their username and password.”
PCI Security Standards Council publishes new standard for contactless payments — PCI Security Standards Council — “The primary elements of a CPoC solution include: a Cots [commercial off-the-shelf] device with an embedded NFC interface to read the payment card or payment device; a validated payment acceptance software application that runs on the merchant Cots device initiating a contactless transaction; and back-end systems that are independent from the Cots device and support monitoring, integrity checks and payment processing.”
Grab launches Asia’s first numberless card — Grab — “The physical version of the card is completely numberless, front and back, thus averting the prospect of theft of personal and financial information… The digital GrabPay Card is available in Singapore starting today… The digital GrabPay Card will be launched in the Philippines in Q1 2020, with other Southeast Asian countries to follow in the first half of next year.”
Biometrics to secure $2.5tn in mobile payments by 2024 — Juniper Research — “Biometric authentication will be used to secure US$2.5tn worth of mobile payment transactions by 2024, an increase of almost 1,000% on the US$228bn expected to be transacted through the method by the end of 2019.”
Expanding the Android Security Rewards Program — Google — “The Android Security Rewards (ASR) program was created in 2015 to reward researchers who find and report security issues to help keep the Android ecosystem safe… Today, we’re expanding the program and increasing reward amounts. We are introducing a top prize of $1 million for a full chain remote code execution exploit with persistence which compromises the Titan M secure element on Pixel devices.”
The Government of Madeira is to issue biometric cards containing an in-built fingerprint sensor to 3,400 of its citizens for the pilot test of Smart Island, a decentralized digital identity project encompassing 12 education, healthcare, port security, transport, payments, tourism and government services... More
“My goal is to guide the NFC Forum in a slight pivot to increase focus on doing whatever is necessary to enable NFC technology to deliver a consistently positive user experience, however it is used,” Mike McCamon, the new executive director of the NFC Forum, has told NFC World... More
PARTNER NEWS: Visa has announced that it has now completed its acquisition from Rambus of the company’s payments and ticketing businesses — formerly known as Bell ID and Ecebs... More
PARTNER NEWS: Raiffeisen Bank has launched an Android NFC mobile payments service in Romania and the Czech Republic that uses Antelop Solutions’ digital payments and tokenization platform... More
A new digital identity service to be introduced by the French government this year will use NFC passport reading to enable citizens to use their smartphone to securely enrol themselves onto the system... More
The German government is using the NFC contactless chip reading capabilities now available on Apple iPhones in a new iOS app that lets citizens securely identify themselves to a range of online service providers by reading their contactless national ID card with their smartphone... More
NFC tags that include support for digital signatures can provide protection against counterfeiting and grey market goods right through the supply chain — from the factory, through the distribution chain to the retailer and the consumer — chip maker STMicroelectronics explains in a white paper now available to download from the NFCW Knowledge Centre... More
PARTNER NEWS: NXP has launched a new chipset that combines a secure element, NFC and ultra wideband communications to make it possible for consumers to conduct secure transactions while “leaving their mobile devices in their back pockets”... More
UK-based neobank Revolut has implemented a Strong Customer Authentication (SCA) system that lets customers use their mobile banking app to authenticate their contactless card as they get close to reaching the new contactless transaction limit, avoiding the risk of having their card declined when they next attempt to make an in-store purchase... More