Chip and PIN machines are losing their grip in the payments industry, thanks to mobile payments gaining momentum and promising to make daily transactions much quicker and more convenient.
But even the smoothest payment method will be shunned if people have little confidence in its security. So when it comes to your card details, what level of safety can you expect in the near future?
Eight UK financial institutions (who collectively provide 90% of UK current accounts) have recently committed to offer mobile payment solutions, starting next year. As these institutions are driving the future of the payments industry and are thus shaping how consumers pay for goods and services, they will also bear significant responsibility for the industrys security. Clearly then, the protection of consumers engaging in mobile payments will be one of their highest priorities.
While this is a large-scale vision for the longer term, it carries the obvious implication that programs backed by major financial institutions possess in-built security guarantees, which ensure that neither businesses nor their customers will be left out of pocket should they fall victim to financial fraud.
But before this type of damage is done, someone has to break into the system to access your details. Ever heard of a fraudster outsmarting a chip and PIN machine? Neither have I. Thats because your card details are encrypted by the machine and then decoded by your bank, which authorizes the transaction if youve entered your PIN correctly.
Similarly, with mobile payments, your phone encrypts your card details and your bank decrypts them upon receipt. And this is even safer than using a card reader, for three reasons.
First, your card can remain snugly in your wallet or purse. You dont hand it to anyone, you dont risk it being snatched from a card reader and you dont risk it being photographed by a waiter running his own little fraud scheme, and then returned to you with a duplicitous smile (no doubt expecting a tip as well).
Second, you dont have to enter your PIN. Anywhere. That means you wont attract the attention of even the nosiest criminals.
Third, although not necessarily prompted for your PIN you will still be asked for some details in order to authorize payments. For example, judo (www.judopay.com) requires your CV2 code each time you make a payment. So a service such as judo can only be "broken" if someone steals your bank card and your phone. Even then, they can only buy from judo "merchants" – they cant withdraw from an ATM because they wont have seen you enter your PIN, and mobile payments dont offer that service. And by the time the thief has figured all this out, you will have found a way to contact your bank and cancel your card.
But what if the whole system is hacked? Given the level of discussion on the possibility, this is not just idle paranoia – see Pat Carrolls article on Mobile Payments Outlook 2013 (www.cbronline.com). However, in light of that article it also seems that the risk of deep hacking will be heavily minimized, if not eradicated.
But even in the highly unlikely event of such a serious breach of security, the fact that mobile payment schemes are linked with financial institutions (such as VISA and MasterCard, in judos case) means that, firstly, a hacker has to get through the security systems of both the mobile payment provider and of the larger financial institutions; and secondly if such a breach occurs then the institutions are responsible for rectifying the situation.
So whats the main security threat for you, as a cardholder? Well, to put it bluntly, its YOU! If youre careless with your card then encryption is redundant: its like encoding secret messages intended for your agents in a war zone, then using the enemys own postal service to send them!
Mobile payments have a bright future: they will almost certainly usurp the traditional chip and PIN payment system in the coming years, just as chip and PIN have done to cheques. And while there will always be some degree of risk involved with card payments, the industry is highly aware of this and technological innovations will simply not make it to market without state of the art security systems.
Quite simply, dont let yourself become fodder for fraudsters. There is protection, but you are the ultimate guardian of your own security.
Judo Payments offers a secure and convenient card acceptance solution without the hassle of contracts or monthly fees.
Check out www.judopay.com today quoting the promotion code A11.
As we cannot be experts in every relevant subject, we would love to receive 'guest' articles that may be of interest to anyone running their own business or thinking of doing so. ADD YOUR ARTICLE