SEcurIty - Payments Business
Transcription
SEcurIty - Payments Business
MAY/JUN 2012 The Magazine of Transactions, Cards & EBPP in Canada Security Pays A look at some of the solutions keeping data and dollars secure also in this issue: The new mobile payments guidelines MSB licensing Show guides PM 4 0 0 5 0 8 0 3 <HDUVRI&UHDWLQJ&RQ¿GHQFHIRU&DQDGLDQV CONFIDENCE BUILT UPON 160 YEARS OF EXPERIENCE. Giesecke & Devrient was founded on June 1, 1852 in Leipzig, Germany, specializing in banknote printing and the supply of security paper and machines for banknote processing. Today, G&D is an internationally leading technology provider and from its headquarters in Munich, manages 58 subsidiaries, joint ventures and associated companies in 32 countries. In Canada, G&D proudly marks their 50th year of pioneering advancement and successful delivery in secure solutions for payment and identification. From the production of the first plastic Social Insurance Card in 1962, to currently leading the way in the quickly evolving mobile ecosystem, G&D remains committed to investing in the Canadian market and the integrity of secure solutions for a sustainable, smart future. www.gi-de.com/ca MAY/JUNE 2012 COLUMNS & DEPARTMENTS 8 12 4 Editor’s Desk 6 Just Payments 8 Industry Watch 10 New & Notable 46 Sector Scan FEATURES 14 Moving Target 18 NFC mobile payments poised for widespread adoption in Canada 18 Security Pays A look at some of today’s most common security solutions, along with some of the payment methods they’re being used with. Shows 27 Prepaid Awards Canada 36 ACT Canada, Cardware 2012 Payment Insights 42 ATMIA Canada 2012 14 May / June 2012 PAYMENTSBUSINESS 3 editor's desk More Than Just A Convenience and so much more. Don’t even get me started on the apps. Once just fun distractions, technology already in place. You’ll find coverage about the guidelines on page 8 and again on page 14 in an article by Blair Keefe and Peter Aziz from Torys LLP. These are exciting times in the payments industry with many of today’s apps add value changes and innovations and convenience to our lives. happening every day. As Take the Starbucks app for Canada’s only magazine example. Forgot your wallet devoted to payments we’re at home? No worries. You can here — both in print and online buy your morning cup of coffee — to help you stay informed. via a virtual barcode generated On that note, be sure by an app on your iPhone or to check out this issue’s iPod touch. Industry Watch. There are a It’s easy to imagine our number of news stories worth digital wallets becoming every following, including the recent I’m pretty sure I have bit as important as the tangible announcement between CIBC nomophobia. For me at least, ones we carry around every and Rogers Communications it’s a condition that seems to day. Of course, not everyone regarding a joint mobile be getting worse with age. feels that way. In my short time payment solution. Apparently, I’m not alone: as editor of Payments Business according to a recent study I’ve talked to a few people by Robin Arnfield, we explore from SecurEnvoy, it’s a fear who don’t believe mobile some of the most common shared by 66 percent of people transactions will go anywhere. security solutions being used in the UK. I’d venture to say I suspect some folks get stuck today. We also highlight some that number wouldn’t be too in an “either/or” frame of of the payment methods far off in Canada either. mind. But rather than replacing they’re being used with. In fact, you just might have existing types of transactions, I nomophobia too. So what see mobile payments as simply exactly is this condition that’s another choice. In this issue’s cover story, Turn to page 18 to read the article. June is a busy month in Of course, there are still the payments industry with days? It’s the fear of being so many details to work out several important shows and without your mobile phone. and Canada’s largest financial conferences taking place. To institutions have already begun make it easier we’ve created a I first heard the term, I really the process of doing just that. show guides section. In it you’ll do experience a moment As a group, they recently find information to help you of panic when I think I’ve released the Mobile Reference make the most of the show/s lost or forgotten my phone Model, a set of voluntary you’re planning on attending. somewhere. That’s because, guidelines which provide a like so many others, my cell framework for how mobile phone is an important part payment capabilities can work of my daily life, storing my with existing payment systems Leslee contacts, appointments, photos and contactless payment [email protected] afflicting so many folks these Although I laughed when Until next time, May/June 2012 Volume 3 Number 3 Editor Leslee Mason [email protected] Publisher Mark Henry [email protected] Contributors Robin Arnfield, Adam Atlas, Juanita Gonsalves, Blair Keefe, Peter Aziz, Prepaid Awards Canada, Act Canada, ATMIA Creative Direction Demigroup demigroup.com Photographer Gary Tannyan Advertising Sales Rep Donna Gallant [email protected] President Steve Lloyd [email protected] For subscription, circulation and change of address information, contact [email protected] Publications Mail Agreement No. 40050803 Return undeliverable Canadian addresses to: Circulation Department 302-137 Main Street North Markham ON L3P 1Y2 t: 905.201.6600 f: 905.201.6601 [email protected] www.paymentsbusiness.ca Subscriptions available for $40.00 year or $60.00 two years. 2012 Lloydmedia Inc. All rights reserved. The contents of this publication may not be reproduced by any means, in whole or in part, without the prior written consent of the publisher. Printed in Canada Reprint permission requests to use materials published in Payments Business should be directed to the publisher. N e x t i ssue… JUL/AUG— Vending & Technology 4 PAYMENTSBUSINESS May / June 2012 Made possible with the support of the Ontario Media Development Corporation DRIVING PAYMENTS IN CANADA #1 ISO in Canada $10 billion annual transaction volume 350+ employees at your service Ready to get on board? Take your ISO to the next level Pivotal Payments offers advanced front-end processing solutions and provides the back-end support and technology platforms needed to drive your ISO’s growth forward. Receive application and statement branding, 24/7 merchant support and premium RELATIONSHIPMANAGEMENT"ENElTFROMCOMPLETE)3/PROGRAMSTHATINCLUDEAGGRESSIVEBUYRATESHIGHREVENUESHAREANDNO liability. Focus on writing sales, while we take care of the rest. Pivotal Payments is the partner you keep. PAYMENT PROCESSING ACQUIRING SERVICES HARDWARE DEPLOYMENT CLIENT CARE & LEAD GEN VALUE ADDED SERVICES Call Murray MacGillivray at 1 877-669-5689 or visit DrivingPayments.ca just payments MSB Licensing account of security or simply anti-competitive is a question U.S. money services business law applies in Canada service U.S. residents; even U.S. including those outside of the residents that come to Canada NAFTA or other agreements United States. to carry out transactions between Canada and the U.S. from Canada. Service to such may entitle Canadian money has profound implications for U.S residents attracts the services businesses to service money transmitters, includ- application of American law to American customers without ing e-wallets in Canada. The their businesses. Canadians are complying with U.S. state lucrative U.S. financial services sometimes displeased by the licensing rules. This is not the market, once accessible to extraterritorial effect of U.S law, case. To be fair, even a U.S. foreign businesses, has now but such displeasure should money services business that One might have thought that come under the regulatory be put aside in order to avoid is licensed in one state cannot Canadian business supervision of the DFS, and by serious consequences of non- service clients in other states that operates a money extension, the U.S. federal anti- compliance. without becoming licensed in transmission business, money laundering agency, the In contrast to the United those other states. So, in this such as a money remitter or an Financial Crimes Enforcement States, Canada has only sense, Canadians compete e-wallet, and has U.S. residents Network of the U.S. Depart- one province in which MSB on a level playing field with as customers, is very likely ment of the Treasury (FinCEN). licensing is required. Under Americans in the money subject to U.S. law. The U.S. Penalties for operating a money new Quebec law, as of January services marketplace. law on this topic is exemplified services business within the 1, 2013, money services by that in the State of New United States without the re- businesses operating in the e-wallets that service various York. quired licenses and registration Province of Quebec will be U.S. markets that are not include jail-time. required to obtain a license yet licensed in the States. Money services businesses There are some Canadian from the Autorité des marches Obtaining those licenses or residents of New York State letter that “with the prevalence financiers. Other Canadian giving up their American are required to be licensed as of the Internet and the growth provinces have yet to enact business should be a top money transmitters with the of a global economy, financial similar laws. Canadian money priority for these Canadian State of New York regardless services businesses are no services businesses are also businesses. of where they are located. On longer necessarily locally based. required to register with the March 31, 2011, the New York Today, there is no doubt that federal Financial Transactions business that has developed State Department of Bank- businesses located out-of-state and Reports Analysis Centre the necessary anti-money ing (subsequently renamed are subject to the jurisdiction of Canada (FINTRAC). From laundering (AML) expertise to the New York Department of the state in which they do a regulatory perspective, operate in Canada will not be of Financial Services or DFS) business.” therefore, operating a money surprised by the requirements services business in Canada is of becoming compliant in the United States. (MSB) that transmit money to issued a guidance letter that The DFS ruled in its guidance Many states other than New A Canadian money services fundamentally changed its in- York, including California, have easier than in the United States. terpretation of Article XIII-B of adopted a similar rule, so that From a business perspective, the New York Banking Law to the prudent foreign money however, Canada has proven to Adam Atlas, Attorney at Law, is eliminate “physical presence” transmitter will be inclined to be a more difficult market than an advisor to payments companies. in New York as a condition to seek licenses in all states to or the U.S. due to the reluctance Based in Montreal, he is licensed in application of the law to money from which it wishes to carry of Canadian banks to open the Province of Quebec and the State transmitters. Money transmit- out transactions. commercial bank accounts for of New York. Nothing in this column money services businesses. should be interpreted as legal advice ter licensing in New York State 6 speculation. outside the State of New York, The new position of the DFS A that remains open to much By Adam Atlas Canadian money services is therefore required of both businesses should be very Whether this reluctance on the or a legal opinion. He can be reached money transmitters within and sensitive to whether they part of Canadian banks is on at [email protected] PAYMENTSBUSINESS May / June 2012 Take Note—New $20 Coming in November Are you ready? Ask your suppliers if new polymer notes work in your equipment. $$$ ABM Vending machine Self-serve checkout Counter For more information and free training: www.bankofcanada.ca/banknotes s [email protected] s 1 888 513-8212 industry watch Financial industry announces mobile payment technology guidelines First joint mobile payment solution announced (GSMA), the association of mobile operators and related companies dedicated to standardizing and supporting GSM technology. Key features of the new mobile payments solution include no extra cost for full access to Beginning later this year, Canadians existing CIBC Visa or MasterCard will have a new payment option at credit cards on a client’s smartphone. checkout counters. CIBC and Rogers Clients will also have the opportunity Communications have announced to earn loyalty points on purchases as they will launch Canada’s first joint they do today. Multiple layers of security including mobile payment solution, allowing Canadians to pay for merchandise secure encryption: Customers will re- with their CIBC credit card using their ceive the same fraud protection they The banking industry and Rogers near field communication do with their contactless credit card. credit union system have (NFC) enabled smartphone. Custom- Clients will also have the option to set announced an industry- ers will be able to use this payment additional password protection. wide initiative that will capability at merchants across pave the way for the Canada where contactless credit card payments card inside a mobile device for payments rather development of mobile are accepted. than feature “stickers” on the phone. payment options for Canadians. The voluntary guidelines, called the The solution will leverage the SIM The solution aligns to guidelines by the Cana- The CIBC mobile payments capability will dian Bankers Association for mobile payments in initially be available on select BlackBerry smart- Canada, as well as those developed by interna- phones on the Rogers wireless network, with ad- tional associations such as the GSM Association ditional device choices available following launch. Mobile Reference Model, provide a framework for how mobile payment capabilities can work with existing payment Payfirma, provider of mobile create invoices on their iPad systems, ensure fair point of sale products for or iPhone wherever they are. competition among businesses, has opened up its Invoices, typically sent over market participants, mobile payment platform to email to be paid at a later date, and outline how market developers. can now be paid on the spot participants can work with Any third party mobile using Payfirma. existing, secure contactless application for iPhones, iPads “The mobile development payment technology or Android devices can now community is key to Payfirma,” already in place today. accept mobile payments said Kalle Radage, Payfirma’s They were created as an in-person with the swipe chief product officer. “We are outcome of the federal of a credit card. Developers continually building out our government’s Task Force can leverage Payfirma’s platform to make it easy for for the Payments System payment platform to manage developers to add payment Review in 2011. transactions, PCI compliance, functionality. This will allow and credit card reader developers to create a new the email address of the receipt integration. wave of game-changing recipient. This makes it possible payment applications.” to conduct a transaction in The guidelines were developed cooperatively 8 Mobile payment app open for integration by major Canadian banks Some of the apps that and credit union groups to will integrate with Payfirma support innovation in the are invoicing, accounting, allows apps to pass transaction complete, Payfirma can pass marketplace. (Turn to page restaurant, and retail apps. information to Payfirma, such back information such as the 14 to read more about the Mobile invoicing apps, for as the transaction type (sale or transaction ID, time, date and guidelines.) example, allow businesses to refund), transaction total, and order details. PAYMENTSBUSINESS Integration with Payfirma May / June 2012 seconds. After a transaction is industry watch New category of consumer driving mobile payments demand plan strategically for mobile as part of their overall channel strategy, alongside ATMs, POS, branch and online banking. The most successful companies Have you changed your it is quite clear they are an not expected to be the only are leveraging their existing shopping, financial and emerging consumer force. method. Smartphonatics banking and payments systems payment behaviour as a result Smartphonatics are driving the are more willing than other to implement innovative mobile of owning a smartphone? If adoption of mobile banking consumers to experiment with services. That way, they can cut you answered yes, you just may and payments and will be an different approaches to mobile down costs and time to market be a “Smartphonatic”. That’s agent for change. Financial and payments and banking. for new mobile ventures.” the name that’s been given to retail institutions will need to a new category of consumers adapt or risk being left behind.” and transact anywhere, at in early 2012, and consisted who are driving the demand for Globally, nearly 25 percent anytime making mobile the of an online survey of 4,200 mobile payments and banking. of consumers can be classified hottest area of opportunity for consumers from 14 countries in A recent study of mobile as Smartphonatics. Where you financial institutions, processors three main geographic regions: banking and payment adoption live plays a role in how likely and retailers today,” said Ralph the Americas, (North & South rates in 14 countries by ACI you are to be one. India has the Dangelmaier, president, Global America), EMEA ( Europe, Worldwide and Aite Group highest percentage of identified Markets and Services, ACI Middle East & Africa) and APAC looks at this new group. Smartphonatics, at 60 percent, Worldwide, an international (Asia/Pacific). followed by South Africa (42 provider of payment systems to The report can be read there’s a stark difference percent). The U.S. ranks in the banks and retailers/merchants. at www.aciworldwide.com/ between mobile adoption middle at 20 percent, while the “These organizations need to mobile among Smartphonatics and fewest are found in Germany other consumers: while 80 (10 percent), France (8 percent) percent of Smartphonatics and Canada (7 percent). According to the report, have used their smartphones India also ranks highest for for mobile banking only one- mobile banking adoption at 76 third of non-Smartphonatics percent. Canada, at 18 percent, report doing so. Similarly, 70 currently has the lowest rate of percent of Smartphonatics have adoption. used their smartphones for The study was conducted Canada is also on the lower mobile payments, compared end of the scale when it comes to less than a quarter of non- to mobile payments services Smartphonatics. — using the smartphone to “Smartphonatics “Consumers expect to shop make a payment in a shop enthusiastically use their or to another person. Of the smartphones when they shop surveyed countries, Canadian for products and services as participants reported 15 well as when they interact with percent usage compared to their banks,” said Ron Shevlin, two-thirds of respondents in senior analyst, Aite Group, China and India. an independent research According to the study and advisory firm focused results, traditional banking on business, technology and payment systems aren’t and regulatory issues. “They going anywhere: while using a exist around the world and mobile device is the preferred while they may be more method of payment and concentrated in some countries banking in many groups, it is May / June 2012 PAYMENTSBUSINESS 9 New & Notable Credit card company unveils digital wallet offering to accept electronic payments PayPass API allows across multiple channels partners to connect their whether the purchase is made own digital wallets into the in a store at the point of sale PayPass Acceptance Network, with near field communication leveraging MasterCard’s (NFC) technology, or online checkout, fraud detection and Optimal Payments scores deal using a computer, tablet or authentication services and Hockey Canada has smartphone. PayPass Online enabling their customers to selected Optimal Payments’ simplifies the check-out process make purchases both online NETBANX service to provide MasterCard has launched by eliminating the need for and in store where PayPass is online payment processing PayPass Wallet Services, a consumers to enter detailed accepted. for its Hockey Canada online digital payments platform and shipping and card information suite of services for banks, with every purchase. U.S. airline company American Airlines and registry system (HCR). The organization oversees bookseller Barnes & Noble will the management of hockey banks, merchants and be among the first merchant programs in Canada be available in the third partners to white label their partners to incorporate the from entry-level to high quarter of 2012, is made own wallets. It also allows PayPass Online checkout button performance teams and up of three components: consumers to store payment on their websites. In addition, competitions, including PayPass Acceptance Network and shipping information in American Airlines will integrate world championships (PayPass Online and PayPass one place. The wallet is open, PayPass Wallet into its mobile and the Olympic Winter Contactless), PayPass Wallet which means that consumers application. Games. Its HCR system and PayPass API. can use American Express, merchants and partners. The service, which is to PayPass Wallet enables PayPass Wallet Services will manages registrations for Discover, Visa and other initially be available to partners more than 565,000 players (PayPass Online and PayPass branded credit, debit and in the U.S., Canada, U.K. and and 180,000 registered Contactless) enables merchants prepaid cards. Australia. participants in thousands PayPass Acceptance Network of associations governed by its 13 members branches, New service helps web merchants with PCI DSS compliance Columbia Amateur Hockey Association and the Ontario Tenzing Managed IT Services, a provider of host- token can’t be decrypted outside of PCI Assure so ing solutions for e-commerce clients, partners even if it ends up in the wrong hands, the number and Software-as-a-Service (SaaS) providers, has can’t be used to breach real credit card data. launched PCI Assure, a new service designed to “With highly publicized data breaches on the Hockey Federation. Integrated directly into the HCR system, the NETBANX solution allows association simplify Payment Card Industry Data Security rise, companies need to take a closer look at members to pay registration Standard (PCI DSS) compliance for e-commerce credit card security and PCI-DSS compliance,” fees using Visa, MasterCard, vendors. said Brian Shepard, founder and CEO of Tenz- Interac Online and direct ing. “Whether a retailer is new to e-commerce bank debits. Members can capture customer credit card information from or simply concerned about their current PCI-DSS make one-time payments any website page while shortening the PCI DSS compliance status, handling this in-house exposes or choose to pay in compliance process, a security standard for or- their organization to significant risk, and requires instalments. Once activated, ganizations designed to increase controls around extensive time and human resources to manage.” the service can also be The service enables online merchants to cardholder data to reduce credit card fraud. The customizable system uses iFrame technol- used by the associations to ogy which can be embedded into any web appli- process online payments When credit card information is put into Tenz- cation. The PCI Assure iFrame captures only credit for other services such ing’s “data vault” a token is created to represent card and card verification value or code (CVV) as tournaments, clinic the real credit card. The token is then used by fields, leaving the remainder of the fields on the registrations, merchandise the merchant and can be stored freely on any merchant’s website. Tenzing’s iFrame is Level 1 sales and fundraising computer system. According to the company, the PCI compliant. activities. The system works via a “tokenization” solution. 10 including the British PAYMENTSBUSINESS May / June 2012 EVERLINK STOPS FRAUD BEFORE IT HAPPENS. WE HAVE THE COMBINATION TO PROTECT YOUR CARDHOLDERS AND YOUR REPUTATION. The Everlink Fraud Management Solution analyzes cardholder history and tracks global fraudulent trends. This model creates cardholder profiles used in scoring debit transactions to determine if they are legitimate or fraudulent. The combination of cardholder information, global data and advanced rules provides reliable and accurate fraud assessments. With criminals becoming more sophisticated, and more fraud originating outside of Canada (where the security benefits of EMV do not exist), it is important that financial institutions protect themselves against fraud by deploying a fraud solution that can anticipate emerging fraudulent activities and act on them. The safety and security of your cardholders is important to you, which means it is important to us. > CALL 1.866.388.0076 OR VISIT US AT WWW.EVERLINK.CA Delivering Payment Innovations www.everlink.ca New & Notable The $20 note gets a makeover Cashing out Canada’s new $20 polymer product. In keeping with that, New partnership to develop branded mobile payment app note won’t begin circulating it’s launched a challenge to Payment processor Pivotal Pay- until November but its design software developers to come ments has joined forces with was unveiled in early May by up with innovative mobile Minister of Finance Jim Flaherty payment applications using the physical money, with the added a mobile payment application and Governor Mark Carney MintChip technology. benefits of being electronic.” for smartphones and tablets. The Royal Canadian Mint has unveiled its plans to launch MintChip, a digital currency NetSecure Payments to develop The MintChip Developer The application will allow mer- to hold electronic value and Challenge is open to North chants to swipe, authorize and a secure protocol to transfer American software developers settle credit card transactions are more economical and that value from one chip to who are invited to create without the use of hardwired have a smaller environmental another. The Mint, the Crown innovative mobile payment terminals. footprint. As with the corporation responsible for applications using the MintChip previously issued $50 and $100 the minting and distribution technology. Winners in three and e-commerce solutions polymer bank notes, the new of Canada’s circulation coins, categories — Best Person-to- tailored to merchants and $20 is also designed to stay has prototypes and five patents Person app, Best Business- consumers. Its payment ap- ahead of counterfeiting threats. pending for MintChip. to-Consumer app and Best plication, which will be branded “The Royal Canadian Micropayment app — will be to Pivotal Payments, allows to maintain Canadians’ Mint has been a trusted selected by a panel of judges, merchants to accept credit confidence in our money as and respected custodian of while members of the public cards from virtually any loca- a secure means of payment,” Canadian currency for more will vote for the Popular Choice tion using a cellular-connected said Governor Carney after the than 100 years,” said Ian E. Award. All of the winners will mobile device such as an unveiling ceremony. “This new Bennett, president and CEO be announced in the fall of iPhone, Blackberry, Android or $20 note fits the bill.” of the Mint. “As part of its 2012. iPad. With the addition of an at the Bank of Canada’s head office in Ottawa. The new polymer notes “The Bank’s goal is The front of the polymer MintChip uses a secure chip In an interesting twist, research and development encrypted card swiper which $20 features a new portrait of efforts, the Mint has developed winners will be awarded prizes connects into the audio port, HM Queen Elizabeth II, who MintChip, which could be in gold, the world’s oldest form the integrated solution is sup- is celebrating her Diamond characterized as an evolution of of currency. ported across a multitude of Jubilee this year. The back smartphones and tablets. Canadian men and women New prepaid payment program ment mobility appeals to a in all military conflicts, and Direct seller Amway Corp., has selected Citi Prepaid Services for the large base of our existing and features the Canadian National enhancement of its electronic payment process in North America. potential new customers and Vimy Memorial located in Citi will provide a branded electronic payment solution which by partnering with NetSecure, Vimy, France. The monument includes an Amway Prepaid Visa Card in the U.S. and an Amway we can continually adapt to commemorates the Battle of Prepaid MasterCard Card in Canada. meet the growing needs of our of the note pays tribute to Vimy Ridge which took place during the First World War. 12 NetSecure provides mobile The new electronic payment solution offers an alternative to “We believe that pay- marketplace,” said Philip Fayer, paper cheques for bonus payments to Amway Independent Business president and CEO, Pivotal The remaining bank notes Owners (IBOs) who will no longer have to wait for cheques to clear Payments. in the series — the $5 and $10 to redeem their funds. Instead, they will have immediate access to — will be issued by the end of their payment on the day the bonus is issued. The Amway cards able to merchants through the 2013. The specific designs and are supported by custom online account management resources company’s sales channels and detailed images of these notes and a dedicated toll-free, 24/7, multilingual customer service team. base of partners in Canada dur- will not be released until their They can be used wherever Visa and MasterCard debit cards are ing the second quarter of 2012. official unveiling dates. accepted. U.S. availability will follow. PAYMENTSBUSINESS May / June 2012 The service will be avail- PAYMENT INSIGHTS The must-attend forum for movers, shakers and future-shapers in mobile, NFC, loyalty, secure payments and leveraging EMV Marriott Gateway on the Falls Niagara Falls, Ontario, Canada June 19-20, 2012 Enabling industry’s key domestic and international stakeholders to explore opportunities to increase revenues, decrease costs and manage risks in a market moving towards mobile payment, NFC and levering EMV. HOW TO MAKE MOBILE COMMERCE & PAYMENT A REALITY: Lessons Learned from e-purse, e-commerce, EMV and Interac debit By the end of the session, delegates will know: • When and how to engage partners. • Timing and consumer relevance considerations. • How to address infrastructure and standards. • Business case drivers for all stakeholders. • The consumer value proposition. Cardware highlights according to delegates: “Good breadth of topics and attendees, providing good information on a large number of topics” “Quality of the program case studies & presentations are not infomercials” “The contacts we made has made the investigation and adoption of new technologies much easier” ATB Financial Canadians and Americans will leave the session armed with a new framework & practical insights to bring m-commerce to the mainstream. For more information on attending, sponsoring or becoming an Exchange Place expert visit: www.actcda.com/calendar.html or email: [email protected] The one-stop source for information, insights & networking for issuers, acquirers, merchants, networks, regulators, solution providers & other stakeholders for more than 22 years. is supported by: Presented by Join us at the conference that delivers market shaping value MoBILE PAYMENTS Moving Target NFC mobile payments poised for widespread adoption in Canada by Blair Keefe and Peter Aziz 14 PAYMENTSBUSINESS T he Canadian Bankers Association has published the Canadian NFC Mobile Payments Reference Model (the Reference Model), which is expected to facilitate the widespread roll-out of near field communications (NFC) mobile payment capabilities in Canada. CIBC and Rogers have already announced the upcoming launch of a mobile payments capability through which CIBC clients will be able access their CIBC Visa or MasterCard on select smartphones. Every major Canadian financial institution and mobile network operator can be expected to follow suit. The voluntary guidelines in the Reference Model were prepared in response to a request from the federal government’s Task Force for the Payments System Review that financial May / June 2012 MoBILE PAYMENTS institutions develop mobile payment standards. The Reference Model scope doesn’t include The guidelines were developed and have been payment models that store card credentials adopted by major Canadian banks and credit on a sticker placed on a smartphone, a secure unions. For the rest of the industry, adherence is micro-SD memory card of a smartphone, or in optional. the “cloud” — that is, on a server and accessed The Reference Model refers only to financial by the Internet. While stickers are considered transactions in which payment card credentials a transitional technology, the latter two are are stored on a SIM card or embedded in the emerging technologies and at this point it’s too secure element of a smartphone. The user can early to estimate their importance. make a purchase by selecting a payment method Standards in the following topics were via the “mobile wallet” stored on the smartphone developed with the goal of ensuring safety, and then tapping the smartphone on an NFC- security and ease of use for merchants and enabled point-of-sale device. consumers while allowing for innovation and The mobile payment system will use open competition among market participants: technology based on standards and guidelines in use elsewhere in the world, enabling participants NFC Mobile Payment Ecosystem Overview other than financial institution credit and debit NFC purchases are transacted over radio card issuers to build mobile wallet applications frequencies, which require specialized hardware for consumers. Eventually, a mobile wallet and software. While hardware is briefly discussed may contain, for example, the credentials of in the Reference Model, the focus is on the government-issued identification cards, library software required. The Reference Model envisions cards, transit passes and merchant loyalty cards. a mobile payment ecosystem based on the May / June 2012 PAYMENTSBUSINESS 15 MoBILE PAYMENTS interoperability of components. this openness, the Reference programs, coupon rebates and producers, app developers, NFC mobile devices will be Model does not allow mobile vouchers will operate, whether credential issuers, acquirers or able to operate with different wallets, mobile network by merchants, issuers or other merchants seeking to become point-of-sale systems; different operators, original equipment ecosystem participants. active in the NFC mobile credential issuers will be able to manufacturers, secure domain operate on various NFC mobile managers and credential issuers Data and Security from a detailed understanding devices; any NFC contactless to restrict access to payment The general principle is that of the Reference Model. reader compliant to ISO 14443 applications from debit and each ecosystem participant Type A or ISO 14443 Type B will credit payment networks, should have access only to the be able to communicate with prepaid products, transit minimum information required any NFC mobile device; and any and loyalty products, and to perform its primary role. The over-the-air platform will be products issued in a foreign Reference Model sets out data able to communicate with any currency. The Reference Model and security guidelines and credential issuer. emphasizes consumer choice standards in some detail and for which payment types may adopts PCI-DSS compliance Wallet Features and Functionality be embedded on a smartphone as the standard for data and which will be password protection. It is not clear who The Reference Model describes protected. would have access to consumer purchasing information three types of mobile wallets: wallet designed so that only Enablement and Life Cycle Management payment credentials from the The Reference Model wallet provider may be used to outlines the installation, use, What’s Next? make a payment; maintenance and termination The Department of Finance of payment and wallet Canada has indicated its by a group of credential applications in some detail. It intention to adapt the current issuers so that only payment emphasizes the importance voluntary Code of Conduct credentials from that group of sound contractual business for the Credit and Debit may be used to make a relationships among the various Card Industry in Canada (the payment; and participants in the mobile Code) for the quickly evolving payment ecosystem. The mobile payment ecosystem. that payment credentials from solution is designed to consider While many of the guidelines multiple credential issuers can high-value, low-value and high- in the Reference Model will be used to make payments; risk transactions. be relevant for this exercise, A proprietary or closed A collective wallet designed An open wallet designed so note that open wallets still that would be of interest to merchants. Loyalty and Rewards need to anticipate all forms business relationships between The Reference Model provides of emerging mobile payment credential issuers and wallet guidelines for the way that technology. providers. loyalty and rewards programs Although the Reference will run through the mobile Model binds only those acknowledges that the payment system. The essential banks and credit unions that industry will gravitate toward aspect is that loyalty program participated in its development proprietary and collective information may reside on (along with their partners), the wallets, but adoptees of the the SIM card or be embedded guidelines and standards that it Reference Model expect to in the secure section of a proposes will have a profound migrate toward open wallets smartphone, thus forming effect on the development within 18 months of the first part of the mobile wallet. The of NFC mobile payments in open wallet being launched in Reference Model also discusses Canada. Any mobile service Canada. In order to promote how loyalty and rewards providers, mobile device PAYMENTSBUSINESS Blair Keefe is a lawyer with Torys LLP. He is chair of the firm’s Financial Institutions Practice and co-head of the Payments and Cards Practice Group. His practice focuses on corporate and regulatory issues relating to financial institutions, including mergers and acquisitions and corporate finance. Blair is a member of the Regulatory Advisory Group to the Task Force for the Payments System Review in 2011, providing advice on regulatory and legal issues related to the payments industry in Canada. the Code amendments would require agreements and The Reference Model 16 payment ecosystem will benefit May / June 2012 Peter Aziz is a lawyer with Torys LLP and a member of the firm’s Financial Institutions Practice and the Payments and Cards Practice Group. His practice focuses on regulatory issues and transactions relating to financial institutions. He has extensive experience with credit and debit card arrangements and considerable expertise in anti-money laundering and consumer protection law. Secure, convenient solutions worldwide > 1.5 billion secure devices produced and personalized globally a year > 400 mobile operators - connecting over 2 billion mobile subscribers > 500 million people use our banking cards > 200 million citizens use our electronic passports Giving you the freedom to enjoy your digital lifestyle www.gemalto.com From the editor 18 PAYMENTSBUSINESS May / June 2012 security Security Pays From PCI DSS to EMV to tokens, we take a look at some of the most common security solutions. by Robin Arnfield T he payments industry is no stranger to security breaches, with yet another high-profile theft of card data making the headlines recently. In January-February 2012, the account numbers and expiry dates of 1.5 million cards were stolen from U.S. processor Global Payments. Other highprofile data breaches occurred at Citigroup in May 2011, U.S. processor Heartland Payment Systems in January 2009 and American retailer TJX in January 2007. Reports of these breaches surfacing in the U.S. are no coincidence: the majority of states have enacted mandatory breach reporting requirements. As there is currently no such regulation in Canada, breaches could potentially be going unreported here. This will change if Bill C-12, the Safeguarding Canadians’ Personal Information Act which is currently before Canada’s Parliament and would make breach notification mandatory, passes into law. Processor breaches make big news because of the amount of information stolen. “When a processor is hacked, millions of card accounts are impacted,” says Les Riedl, CEO at U.S. consultancy firm, Speer & Associates. Breaches continue to happen despite the enormous efforts made by the global payments industry to secure transactions, such as the Payment Card Data Security Standard (PCI DSS), EMV, and encryption. This is because fraud migrates to the weakest link in the payments process. Here, we take a look at some of the most common security solutions, along with some of the payment methods they’re being used with. PCI DSS The PCI Security Standards Council is a major driver of payments security. The non-profit Council was set up in 2006 by five card brands, American Express, Discover, JCB, MasterCard and Visa. It develops and maintains a set of standards designed to enhance payment card data security known as the PCI DSS standard. The card brands require all participants in their networks who process, store or transmit cardholder information, to comply with the standards. The Council also May / June 2012 PAYMENTSBUSINESS 19 security According to Interac Association, Interac debit chargebacks to Canadian merchants,” says Santo card fraud losses to Canadian financial institutions at Canadian processor Moneris Solutions. Ligotti, director of marketing and communications resulting from skimming fell to $70 million in 2011 According to Interac Association, Interac debit from $119 million in 2010 and $142 million in 2009, card fraud losses to Canadian financial institutions due to Canada’s migration to EMV. from $119 million in 2010 and $142 million in resulting from skimming fell to $70 million in 2011 2009, due to Canada’s migration to EMV. Interac Association has mandated that all certifies Qualified Security Assessors (QSAs), Canadian ATMs and Interac debit cards must be companies that test merchants, processors and converted to EMV by the end of 2012, and all issuers’ compliance with PCI DSS. Canadian POS terminals must be EMV-compliant The card brands impose fines on non-PCI- by the end of 2015. “After then, any Canadian compliant organizations, and can deny them non-EMV-compliant merchant won’t be able access to their networks until they have taken to take Interac cards,” says Catherine Johnston, steps to amend any security vulnerabilities. “Being payments industry group ACT Canada’s president removed from MasterCard and Visa’s approved and CEO. list not only damages a processor’s reputation, “The reason for the drop in fraud is that you but also opens it to lawsuits from clients, as can’t skim the data on an EMV chip and make it wouldn’t be able to prove it exercised due a counterfeit EMV card,” says Johnston, “But diligence,” says Matthew Dragiff, VP, product if EMV cards are used at non-EMV terminals, a management at U.S. software vendor SunGard’s fraudster can steal the card account numbers AvantGard Payment Services business. and expiry dates from the magnetic-stripe, and “If a QSA does a poor job of assessing a use these to create mag-stripe cards. These cards company’s security, it can lose its certification can then be used at retailers that don’t have from the Council,” adds Gary Glover, director EMV card readers. If the thieves also obtain the of security assessment at PCI specialists cardholders’ addresses, they can use the cards for SecurityMetrics. online purchases.” Dragiff calls PCI DSS ‘security 101.’ “Much of Mag-stripe fraud will continue to be a problem PCI DSS is best practice and common sense,” he until the whole world migrates to EMV, Johnston says. “For example, don’t store sensitive data on says. “The U.S. and China need to come on-board servers that are located in your demilitarized zone with EMV,” she says. (DMZ), and keep all your computers updated The good news is that Visa and MasterCard with security patches.” The DMZ, a concept have set a timeline for the U.S. to migrate to EMV. borrowed from the army, is the public-facing part By April 2013, all U.S. processors must be able to of a corporate network, typically servers that are support EMV transactions at the point-of-sale. exposed to the Internet. By October 2015, all U.S. POS terminals must be EMV-compliant, or merchants will become liable EMV for any fraud at non-EMV terminals involving an The introduction of EMV chip cards which are EMV card. authenticated by PIN entry in Europe, Asia 2011 when Visa and MasterCard made Canadian cardholder-present situations, but has driven merchants with non-EMV-compliant terminals card crime elsewhere. Online merchants, U.S. liable for fraud involving EMV-based credit cards. retailers and issuers, and Canadian issuers whose borders, for example in the U.S., Canadian increased fraud. cardholders aren’t liable for fraud, says Johnston. “After the introduction of EMV cards in PAYMENTSBUSINESS Even when shopping beyond Canadian cardholders shop south of the border, have seen Canada, we saw a considerable decrease in 20 That’s been the case in Canada since March 31, and Canada has increased payment security in “When an EMV card is used in a mag-stripe-only terminal, the transaction goes to the issuer for May / June 2012 security Online merchants, U.S. retailers and issuers, and authorization and can be declined,” she says. “If it isn’t declined, any resulting fraud is not the Canadian issuers whose cardholders shop south of consumer’s responsibility.” the border, have seen increased fraud. Merchant security Despite the high-profile breaches at processors, merchants are often the weakest link in the attached to the card reader, or the server could security chain, says Speer’s Riedl. be compromised and card information stolen,” “Large merchants spend millions of dollars to become PCI-compliant and avoid fines,” Riedl says. An effective way to protect cardholders is to Riedl says. “But the situation is different at a encrypt their card’s data as it is captured by the little coffee shop which runs its point-of-sale POS device. This is a feature many POS terminal payments on an in-store server that’s connected vendors now supply. U.S.-based VeriFone is one to a processor. I’ve been in coffee shops where of them, offering encryption at the point-of-sale the servers are put at risk because they are used for all its POS card readers, according to Erik by wait staff to access the Web during slow Vlugt, vice president of product marketing at periods, and provide wireless Internet access for VeriFone. “When a mag-stripe card is swiped through a customers.” So what sort of security risks could happen VeriFone reader, the cardholder data is encrypted, in these types of scenarios? “There could be so neither the merchant nor the merchant’s Wi-Fi skimming of credit card details through a device network see the decrypted cardholder data,” YOUR BUSINESS IS ON THE MOVE. APRIVA POS GETS IT MOVING EVEN FASTER. MOBILITY. SECURITY. WIRELESS PAYMENT SOLUTIONS. Apriva is North America’s leading wireless gateway, and has been providing wireless payment solutions to merchants for more than a decade. Apriva POS offers an end-to-end wireless point of sale solution that integrates hardware, software, network services, management tools, and support. Now merchants can accept a variety of payment types in virtually any location. S E C U R E D E V I C E S | R E L I A B L E S E R V I C E | E X C E P T I O N A L S U P P O RT To learn more call 877.277.0728 or visit www.apriva.com © 2011 Apriva LLC. All Rights Reserved. May / June 2012 PAYMENTSBUSINESS 21 security The key to preventing CNP fraud is better cardholder authentication, says the European Central Bank (ECB), which recently published recommendations on improving e-commerce security. Vlugt says. test a system without proper every merchant,” he notes. security. “Files can also be “The method increasingly being vulnerable when they are being used is for the processor to transferred for backup, or if decrypt the data and send it to they are stored on laptops,” he the issuer over a secure private says. link.” But Glover warns that Tokens encrypting data in transit To reduce risk, some merchants between merchants and are moving to a token system. is encrypted cannot be used,” processors doesn’t guarantee “Merchants can reduce the says Vlugt. “The principle is security. “It depends on how cost of the PCI compliance the merchant, it goes to a that card data isn’t decrypted well the data is secured in process by not storing processor, which sends it until as far down the line as the processor’s system,” he customers’ card data on their via the Visa or MasterCard possible.” says. “It’s not impossible to own systems,” says Glover. Once the card data leaves 22 to have the decryption key for network to the issuer. Data that Ideally, card data would compromise a processor. “But, if they need to store card has been encrypted at the point remain encrypted all the way There’s nothing you can do data locally, for example for of sale has to be decrypted by until it reaches the issuer, to make a processor 100% product returns or for sales and the processor before being sent but this is impractical, says secure.” marketing purposes, retailers to the issuer. SecurityMetrics’ Glover. Riedl says hackers can break “If the processor or the “Sending encrypted data to the into a processor’s servers network is hacked, data that issuer would require the issuer when live card files are used to PAYMENTSBUSINESS May / June 2012 can opt to exchange that data into tokens.” Tokenization, which involves security converting a card number into cardholder-not-present (CNP) growth in British CNP spending transaction is authorized,” says a randomly-assigned number, fraud has grown despite the over the past 10 years, Tan Sarihan, North American increases security and makes it advent of EMV. This type of especially online, says the UK CEO of Germany-based security easier for merchants to comply fraud involves using stolen card card industry association. specialists KOBIL Technologies. with PCI, says Vlugt. information to make purchases Cardholder Authentication e-commerce websites use The key to preventing CNP real-time fraud detection Moneris is one of the companies offering a online or by phone. “Retail cardholder-present The ECB recommends that tokenization service that fraud is way down in Europe fraud is better cardholder technologies, as well as ‘strong’ stores customers’ credit card due to EMV,” says Glover. “The authentication, says the cardholder authentication information in a data vault. The compromises that we see in European Central Bank (ECB), technologies. MasterCard processor’s e-Select plus Vault Europe are in e-commerce. which recently published and Visa both offer methods service stores the data on its This is because it’s easier to recommendations on improving for strong cardholder secure server. The merchant compromise Web applications e-commerce security. authentication in online is then supplied with a token than to attack merchants’ which can be used for all point-of-sale systems.” customer services transactions, In the UK, a pioneer in EMV “Current regulations such as PCI DSS specify how card information will be handled transactions, but neither method is mandatory. Cardholders who such as returns, as well as for implementation, CNP fraud and secured by financial register their cards for sales analysis, Moneris says. accounts for more than half institutions and merchants, MasterCard SecureCode and of all card fraud, according but they don’t specify any Verified by Visa, are required to Cardholder-not-present fraud to the UK Cards Association. security mechanisms to answer security questions when However, this must be seen make sure that the card Like mag-stripe card fraud, in the context of a massive user is legitimate or how the May / June 2012 ▶ Continued on page 44 PAYMENTSBUSINESS 23 µSD Secure Elements MNO’S Wallet Mobile S Enterprise & OEM Identify POS Terminals Financial Institutions Store Connected Devices For more information use your favorite QR code reader. Willis Morettin Senior Vice President, Sales & Marketing Tel. 905-946-2810 [email protected] www.gi-de.com Karl Theo Director of Sales, Banking Sector Tel. 905-946-2803 [email protected] Visit us at these upcoming shows: CUTA Annual Conference, May 26 - 30th, Victoria, BC Canadian Gaming Summit, June 11 - 13th, Niagara Falls, ON ACT Cardware, June 19 - 20th, Niagara Falls, ON TSM Discover the future of mobile security OTA Communicate Transit Platforms & Applications Security Retailers Pay Internet wifi Payment Schemes From the editor Lloydmedia, Inc, #302-137 Main St N, Markham, ON. L3P 1Y2 4 MAGAZINES DELIVER your AUDIENCE in PRINT and ONLINE More than 57,000 prospects authorizing and approving expenditures in the boardroom, on the front lines, in the IT corridors, in the centres of support and ful�illment, on the road with delivery, and creating customer loyalty. Our readers link you to all the right executives and managers in FOUR KEY ROLES at the largest and fastest growing companies in Canada. FUND Finance & Credit Prospects via CANADIAN TREASURER CT is published bi-monthly and reaches more than 10,000 readers, in about 6,000 organizations, who are responsible for capital, credit and risk in all forms of financial operations. Readers are in charge of corporate finances and how funding is approved, obtained, budgeted, loaned, processed, allocated, and distributed. www.canadiantreasurer.com SELL Marketing & Sales via DIRECT MARKETING Published monthly since October 1988, DM is Canada's magazine for interactive marketing and sales, reaching about 17,000 readers in marketing and sales at about 6,400 organizations. Readers who devise strategies, create campaigns, choose media, select tactics, implement programs, track response, analyze results, measure ROI, and generate sales for their companies. www.dmn.ca PAY Transactions and Billings via PAYMENTS BUSINESS PB is published bi-monthly and reaches more than 10,000 readers in about 5,000 call centres in Canada which manage all forms of customer interaction and engagement, including outsourcers who conduct those activities on behalf of their clients. www.paymentsbusiness.ca SERVICE Customer Service, IT & Fulfillment via CONTACT MANAGEMENT CM is published bi-monthly and reaches more than 20,000 readers in the transactions, cards and ebilling/epayments sector, including banks, credit unions, retailers, online sellers, and about 9,000 of Canada's largest corporations. www.contactmanagement.ca 26 TO ADVERTISE OR GET MORE INFORMATION AND MEDIA KITS 905-201-6600 | 1-800-668-1838 May / June 2012 Mark Henry x 223 | Donna Gallant x 222 | Brent White x 224 PAYMENTSBUSINESS The Prepaid Awards 2012 A Word from Prepaid Awards Canada A Word from our Event Sponsor On behalf of MasterCard Canada, I am delighted to be part of this inaugural celebration of excellence in the prepaid cards sector. As a network partner, MasterCard identifies prepaid as one of the fastest growing areas of our business because of the flexibility and customization these solutions offer. Helping to recognize outstanding performance in delivering prepaid solutions speaks to MasterCard’s deep commitment to a world beyond cash. Prepaid payment cards offer a wide variety of solutions from helping the underserved to safely receive assistance funds, to providing peace of mind to global travelers, to offering a ‘world of choice’ with gift cards, to helping Canadians manage their household budgets. Much work is underway in the sector and with the emergence of mobile payments; the opportunities for convergence between mobile and prepaid will grow exponentially. We firmly believe that by working with our partners we can continue to provide innovative solutions to help meet these current and future needs. Dear Friends, It is my sincere honour to have had the opportunity to work with so many extraordinary people and organizations, and to have welcomed you to our 1st Annual Prepaid Awards Canada Gala Event. We have been absolutely thrilled with the support and enthusiasm that has been expressed from the entire Gift & Prepaid Community, both here in Canada and globally. This event was created to celebrate all of the great initiatives, innovations, collaborative efforts and exceptional individual and team efforts that have been undertaken over the past year in Gift & Prepaid. From the entries, the talk on the street and the announcement of each of the Award recipients at the Gala, I am sure that you will agree that we indeed have a lot to celebrate. As you can imagine, there are many people to thank for their effort, support and dedication to this first of many annual award events. Many thanks to the organizing team for an outstanding event that celebrates the work of our peers and colleagues. A heartfelt thank you to the judging committee for their time and dedication spent reviewing all the submissions. And finally, congratulations to all the winners and nominees on developing unique and meaningful prepaid payment solutions. To our sponsors; MasterCard Worldwide, our event sponsor, InComm Canada, AIMIA, Store Financial, The Hunt Group, SVS Ceridian and paysafecard, we extend our most sincere thanks for your global and local leadership, generosity and support leading up to and throughout this inaugural event, without which this evening couldn’t have been possible. As consumers and businesses continue to seek ever faster, more secure and smarter methods of payment for an increasing array of transactions, MasterCard Worldwide is at the centre, providing a sophisticated set of transaction processing and consulting services that can help drive business growth for our customers. To our dozens of contractors, volunteers and event management teams — many thanks. Your support, commitment and dedication to the cause have been outstanding and your efforts have been beyond all expectations. You are the best of the very best! Congratulations again and looking forward to seeing more in 2012 and beyond! Sincerely, I hope that you have enjoyed yourself and that we can spend more time together building our Prepaid Community in Canada, through innovation, collaboration and education, so that we may come together to recognize all of you for your contributions that you make all year around. Sincerely, Betty K. DeVita President MasterCard Canada Dave Hunt President, Prepaid Awards Canada Ltd. The Judges Annich McIntosh Philippe Bertinchamps David Parker Dirk Voelkner Annich is the Managing Editor at C&M Publications and has a high profile in the card business. She is a frequent speaker and chair at major conferences. Prepaid is an important area of interest for all three C&M publications. These are: www.cardworldonline.com, www.fraudwatchonline.com and www. loyaltymagazine.com The founder and CEO of Polymath Consulting, David works on projects and advises organizations across the Cards and Payments industry. Well known for work on prepaid cards/ewallets/mobile payments, David has worked across the complete value chain, helping banks with their overall Prepaid strategy and market entry analysis. He has also worked with telcos, processors and program managers on segment analysis, certification and membership applications. Larry Richardson Larry provides executive leadership and direction in the day-to-day management of Consumer Engagement Solutions at Exchange Solutions. He actively directs the design and delivery of consumer interactions that drive desired spend behaviours with retailers, manufacturers and service companies. Larry has 15 years of executive leadership and experience in business development, data analytics and technology services delivery within retail, pharmaceutical and industrial chemical industries. Karen Budahazy Karen is the General Manager of InComm Canada. In addition to managing the sales teams, she is responsible for developing new product revenue opportunities in Canada, including the execution of strategies aimed at expanding InComm’s global distribution footprint along with the development of new products and services offered in the international Prepaid market. Pieter de Wet Pieter is a financial solutions and payments expert focusing on prepaid, mobile and new payments arena. He has 10 years of senior management experience, in both start-ups and corporations with considerable knowledge of management, marketing, business development, sales and training. Pieter’s experience extends to developing countries within Africa including South Africa, Mauritius and Botswana as well as internationally. Philippe is the Chairman of Prepaid Exchange France and the CEO of Berfi Management Company. He has a strong reputation in the Prepaid industry gained from some important role including: Chairman, Prepay Solutions Ltd; Deputy Managing Director, Edenred International (ex Accor Services HQ); Managing Director, Luncheon Vouchers Ltd. Dirk’s experience is based upon technical and business knowledge, derived from participating in different projects with various roles. He has extensive knowledge of electronic payment systems, Prepaid products, cards and private label cards. Dirk has spent more than 14 years working in different organizations leading to comprehensive knowledge of EFT-POS terminals, e-payment, m-payment and card-based reward schemes. Walter Kleinschmit Founder and president of R2E Consultants, Walter has over 28 years of retail and development experience in the Middle East. He was GM of Kingdom Centre, Riyadh: a mix use, high-rise development, conceived by Prince Alwaleed. In Canada, where he is currently based, Walter has worked in the retail industry both as an employee and entrepreneur. He is a founder of the Middle East Council of Shopping Centres and is an international faculty member of the ICSC School of Professional Development. Tony Chapman Tony is the CEO of Advertising Agency Capital C, a judge on Food Network’s Recipe to Riches, host of City TV’s Nissan’s Innovation Challenge, and frequent contributor to the mainstream press. He is a frequent contributor to the mainstream press and one of the youngest individuals to be inducted into the Marketing Hall of Legends, a testament to his cumulative contributions to the industry throughout the past three decades. Tony has founded two internationally renowned communications agencies that have garnered a steady stream of award winning campaigns, including in 2007, recognition as Marketing’s Agency of the Year. A true visionary and serial entrepreneur he is also the Founding Partner of Fresh Intelligence which is revolutionizing intelligence gathering for corporations around the world. Best Prepaid Consumer Program Best Prepaid Gift Program Best Buy Canada and CashStar: eGift Card Winner Best Buy Canada has implemented an innovative eGift Card solution that delivers the first opportunity ever for Canadian consumers to personalize eGift Cards. • Consumers can now purchase and send digital Gift Cards through email or Facebook on bestbuy.ca either instantly or delay the delivery to ensure it arrives on a special day. • Seasonal faceplates and custom messages adds a new layer of personalization to gift cards that was previously unavailable. • By launching in December, Best Buy was able to capitalize on last minute holiday shoppers and capture key sales. • The percentage of mobile eGift Card sales that Best Buy Canada has achieved increases overall results across the multichannel strategy. Canada Post: Consumer Prepaid Program Runner Up In March 2011, Canada Post launched the first nationally-available reloadable card in Canada. The Canada Post-branded Visa reloadable prepaid card offers card users all the benefits of a Visa card without having to qualify for credit. Funds can be loaded and reloaded up to a maximum balance of $10,000. The Visa reloadable prepaid card has its own built-in spending limit and is protected under an extended warranty that enables replacement if lost or stolen. The cards are available at approximately 6,000 post offices and accepted anywhere Visa is accepted — even online. Gift Program In partnership with Visa™, Canada Post offers Canada Postbranded Visa gift cards that let customers give any amount from $25 to $250. These cards are available at approximately 6,000 post offices and accepted anywhere Visa is accepted — even online. The current program was implemented via three phases: 1. Vancouver 2010 Olympic Winter Games-themed Visa prepaid card (fixed denominations) pilot commenced in November 2009 2. Variable load “Give Joy” card program launched in November 2010 3.Elimination of post-purchase fees and card replacement fees (‘funds never expire’) implemented in September 2010 The launch of the variable load “Give Joy” Visa gift card was perfectly timed for the 2010 holiday season, allowing it to benefit from advertising support in the corporation’s annual holiday campaign. The “Give Joy” design of the card draws on the strength of the trusted Canada Post brand and plays on the “Send Joy” theme of its annual campaign. Tim Hortons and First Data: Sponsored by: Winner Tim Hortons was founded in Hamilton, Ont. The first restaurants offered only two products — coffee and donuts – but as customer tastes grew, so did the chain and its offerings. The Tim Hortons chain has now grown to over 3,000 locations throughout Canada, 500 locations in the U.S. and has become a cultural icon in Canada. Tim Hortons’ commitment to serving fresh, quality products at reasonable prices continues to be the cornerstone to its success. This, along with the close relationship it maintains within the communities in which it operates, has helped generate immense customer loyalty and build Tim Hortons into one of the most widely recognized consumer brands in Canada. SelectCore: Iridium Prepaid MasterCard Card Runner Up Iridium is a feature rich card and a useful financial tool for underserved and unbanked Canadians. Most importantly, the Iridium Prepaid MasterCard Card helps individuals gain access to the cashless economy (both online and offline) and provides a tool for individuals to better control their spending while keeping them aware of their balances and transaction history through text and SMS messaging alerts as well as a secure online website, mobile apps and more. The program provides unparalleled benefits to cardholders by eliminating costly cheque cashing fees and providing a fee friendly structure that has an easy to access network of reloading locations. In addition, from the program management perspective, the expanding cardholder base rewards shareholders with organic revenue growth, improved margins and a unique ability to access cross marketing opportunities with products and services that complement the core prepaid user experience. By partnering with MasterCard, the cardholder can be confident that the card is backed by one of the most recognizable brands in the world. Best Prepaid Innovation Giftango: Premium Turnkey E-commerce Solution Sponsored by: Winner Giftango’s Premium Turnkey E-commerce Solution enables retail merchants to sell gift cards from their website and send via digital or physical distribution all from a single integrated shopping cart. To accomplish this, Giftango connects to the retailer’s gift card processing platform and integrates to multiple third party solutions, including Facebook, a mobile short code or multiple payment gateways. Giftango’s solution is unique in the range of options offered in one toolset. Our platform is the only solution on the market that provides consumers with a single integrated digital, physical and social media gift purchasing experience. The purpose of our solution is to allow everyone — from small to large retailers — to utilize digital gifting with the most advanced features available in the market, at a price point and development time frame that works for them. With our solution, we make digital gifting accessible to everyone and include all the features customers want in one e-commerce shopping cart, while maintaining a high level of security. Retailers who use the Giftango solution benefit from lastminute sales of gift cards which are made possible by instant delivery. When selling plastic gift cards from a website, online purchases drop precipitously in the five days prior to the gifting event because it is too late to deliver the gift card on time. We are able to eliminate this problem with digital delivery, avoiding missed revenue for the retailer. Giftango’s Premium Turnkey E-commerce Solution increases gift card sales and overall revenue for retailers. Best Prepaid B2B Service InteliSpend Prepaid Solutions: Runner Through the introduction and launch of the groundbreaking Interac Instant Online Reload Solution, the cardholders, Company and prepaid industry in general have realized tangible benefits. By making reloading free, easy, fast and secure, the cardholders can feel confident about reloading balances onto their cards in a quick and effective manner. In addition, the Company enjoys the benefit of convenient reloading of the cards by having cardholders reload with ease making spending more convenient and through increased cardholder activity resulting in new revenues to the Company and stakeholders. The prepaid industry can be considered a winner because the instant reloadable features of the SelectCore Interac Instant Online Reload Solution allows prepaid to take a front seat on innovation in support of helping consumers both functionally and financially, in traditionally underserved and under-banked market segments. By facilitating reload transactions, the cardholder, Company and industry help individuals gain access to useful financial tools and methods in which to transact in cashless transactions both online and offline. Winner For more than 13 years, the organization now known as InteliSpend Prepaid Solutions has provided businesses and reseller partners with intelligent prepaid solutions. Over the past 18 months, InteliSpend has evolved at hyper-speed: • New corporate identity and brand: InteliSpend Prepaid Solutions, ULC was born. • New payment processor: more than five million prepaid cards were transitioned to TxVia, and funds balanced to the penny. • New network relationships: unique prepaid solutions are now available on not one, but two payment networks in Canada (American Express and Visa); four payment networks in the United States (American Express, Discover®, MasterCard and Visa). • Maintained merchant relationships: throughout significant change maintained relationships with more than 100 Canadian merchants key to DirectSpend®, the organization’s patented RAN process. This powerful combination of past and future innovation enables InteliSpend to meet reseller and client needs with the most intelligent solutions. Their resellers and clients don’t have to “make do” with one-size-fits-all prepaid cards or “off-the-shelf” program management. InteliSpend has the unique ability and depth to create solutions that exactly match their reseller and client needs. CashStar: Up SelectCore: Interac Instant Online Reload Solution Sponsored by: Runner Up • CashStar’s mission is to change the way that consumers and business executives give gifts or offer incentives — from a physical product to a digital one. • CashStar builds, hosts, operates and maintains a robust, flexible digital gifting platform for our clients, the world’s leading retailers. • CashStar’s platform enables extensive personalization and customization options, mobile purchase and delivery capability, video upload and delivery, plus social media delivery. • The platform is supported by a market leading fraud mitigation solution, and specialized in-house customer care services. -- CashStar offers a business-to-business solution encompassing bulk ordering capabilities, API access and specialized use case functionality. -- CashStar has the widest product array and has delivered more eGift Cards than any other company. -- CashStar offers unique and value-added product solutions such as the ability to reward and incent frequent shoppers, satisfy customer complaints instantly with a gift card, run successful social commerce marketing programs, etc. -- We power digital gift card solutions for over 250 leading brands in the U.S. and Canada; significantly more than anyone else in the industry. -- CashStar has invested in the industry by building a team of over 75 employees and by sponsoring third-party market research. -- In 2011 CashStar issued millions of eGift Cards. Best Prepaid Marketing Campaign Ukash: Sponsored by: Samba Days: Winner • Ukash launched in Canada in 2010. To drive growth in the Canadian prepaid market, Ukash joined forces with PokerStars to implement a multichannel B2C campaign to increase Ukash users, voucher redemption values and volume in Canada. • The Ukash Ultimate Experience ran through December 2011 to January 2012, offering Canadian poker players the opportunity to win a seat at the PokerStars Caribbean Adventure (PCA) in the Bahamas. Canadian Poker players were urged to use Ukash vouchers at PokerStars. Each redeemed voucher code got entered into the prize draw. The randomly selected winner won a seat at the PCA (worth $10,300), with free flights and accommodation. • The multi-channel marketing campaign drove traffic to a unique Ukash landing page and the Ukash location finder via Now PrePay, the official Ukash issuer in Canada. High profile poker players advocated Ukash among the poker community and Ukash and PokerStars targeted consumers using the following channels: PoS; messages on Ukash vouchers/social media; email newsletter/ Ukash website; AdWords; press releases. The campaign took a Ukash customer to the final of the PCA where he won $260,000 — all from buying a $25 Ukash voucher. Ukash and PokerStars leveraged great PR opportunities across the poker press and all major online portals. Ukash gained a 147% increase in unique page views on the Canadian Ukash website and a 20% increase on the Ukash Canadian database. Samba Days launched a national holiday 2011 multi-media consumer campaign including: • A national TV media buy • Print ads in Metro newspapers across the country • A Flyerland.ca e-blast and website contest • A PR campaign that resulted in TV, radio, print and online editorial coverage • A mall kiosk • On-the-street consumer interceptions • Shelf talkers at Shoppers Drug Mart • Social media ambassadors, blogs, posts and tweets • Partnerships with high profile brands Samba Days raised the profile and perception of the prepaid industry by: • Promoting gift cards nationally, supporting new interest in the category, and aligning gift cards with top-tier brands like Virgin Mobile, AMEX and SCENE Samba Days increased sales over the previous year by 75%! OLD A leader by any other name is still a leader. Carlson Marketing is now Aimia, global leader in loyalty management services. NEW Discover Aimia, the new face of Carlson Marketing. aimia.com Runner Up Best Prepaid Card Design / Merchandising Leading Prepaid Organization CPI Card Group – Canada, Inc.: PowerCard Winner CPI Card Group’s commitment to R&D continually brings innovation to the card industry. The PowerCard solution was developed in 2011 in partnership with X-Card Holdings and was made commercially available in February 2012 to closed-loop retail, government and financial clients (both on the credit and debit side and on the open loop prepaid one). As a card with its own power on-board, PowerCore can span multiple uses for commercial and security applications, ranging from gift card production with light and sound to financial security cards with one-time passcode abilities (OTP, Dynamic CVV) or magnetic stripe emulation. SelectCore: Iridium Prepaid MasterCard Card Winner • Moneris leverages its position as Canada’s largest payment processor to provide industry leading stored value Gift Card solutions • Moneris manages Gift Card programs for over 6000 businesses of varying sizes across Canada and also provides prepaid gift card fulfillment services through its rewards and recognition program service – giftcertificates.ca • Moneris offers an innovative Gift Card program package – the Starter Pack – to promote and showcase the value of prepaid Gift Cards to small businesses. The Starter Pack provides an opportunity for small businesses to try the Gift Card program at no cost with no obligation Runner Up The combination of a sleek card design coupled with the unique positioning of the product at retailers in Canada has helped improve awareness for our product over the period we began merchandising. In addition, we offer take home pamphlets that showcase the product and the ease of use. This literature is helpful in educating individuals about the benefits of prepaid and the benefits of having a useful financial tool available for cashless transactions online and offline. The marketing merchandise also prominently displays the MasterCard brand, one of the most recognizable brands globally. In addition, the cardholder website and online presence has enabled Iridium cardholders to leverage their personal experience by enrolling into the suite of features and functionalities associated with the product. All of the merchandising across the various spectrums of media is designed to provide an efficient experience while maximizing the cardholder’s understanding of their own important financial tool. Winner Industry Contributor Moneris Solutions Frank Monaco InComm • Frank Monaco is Vice-President and General Manager of international at InComm, a leading prepaid product and transaction services provider • Responsible for sales, marketing and operations across more than 20 countries • His executive experience spans more than 16 years • Experience includes retail, telecommunications, marketing management, financial credit and debit processing, and production management • Frank has fostered relationships with partners in 21 countries • Under his leadership, InComm has secured several international patents and awards • Helped implement prepaid programs in 34 countries while at Stored Value Systems Vancity Credit Union: Runner Up Vancity Credit Union (www.vancity.com) is the largest credit union in Canada, serving nearly 480,000 members in British Columbia and is recognized for financial industry innovation. As a cooperative, and a member of the Global Association for Banking with Values (www.gabv.org), Vancity seeks to positively impact the communities in which they live with commitment to the triple bottom line of people, planet, and profit. In the mid 1990s, Vancity launched Citizens Bank of Canada, a wholly owned subsidiary Internet bank. In 2005, Citizens Bank launched the first national bilingual Visa prepaid gift card program in Canada with a major national retail distribution network and within our branches. We were the first financial institution to do so and followed the successful USA business models. As a member-centric credit union, and with cardholder value as a priority, we wanted to lead change in the network branded prepaid gift card business model which was similar to the entire industry. Our plan was to re-launch with a renewed consumer promise that gift card recipients should have access to the full value on their card forever. Similar to closed loop gift card products, but providing the best consumer value experience. Citizens Bank stands out as a leading prepaid organization because we were one of the first in the industry to have worked through a storm of negative media attention to create a product that is embraced by the consumer, despite the implementation challenges and infrastructure changes. The Hunt Group Show Guide: Cardware 2012 ACT Canada, Cardware 2012 Payment Insights Marriott Gateway on the Falls, Niagara Falls, Ont. June 19-20, 2012 On behalf of ACT Canada and our members, I am delighted to welcome you to Cardware 2012 Payment Insights, where stakeholders come together to drive payment evolution. Cardware has become known for its ability to deliver not only quality information, but also valuable insights. The program and the people you will meet will help you foster your business goals and spark conversations that will carry on well beyond the conference. The speakers program encompasses the leading experts in the payments realm… over 40 speakers from around the world who will provide their insights into mobile commerce, the future of money, making technology make sense, merchant considerations and engaging stakeholders. This year we are pleased to offer three tracks; Payment Insights, Technology and Merchant, open to all delegates. During the breaks, I encourage you to visit The Exchange Place to discuss these learnings with the partners who can help turn your business concepts into reality. We will hear from The Royal Canadian Mint on their MintChip e-cash challenge during our Giesecke & Devrient keynote luncheon on Tuesday. Join us on Tuesday evening at the Gemalto Gala reception to enjoy networking while taking in the breathtaking view of Niagara Falls. We will celebrate the successes of our industry at the Visa Awards luncheon on Wednesday. the Association. For more than 22 years, ACT Canada has been the internationally recognized authority in the market. As the eyes, ears and voice for stakeholders focused on secure payment, mobile, NFC, loyalty, secure identity, and leveraging EMV, we promote knowledge transfer, thought leadership and networking. We help members protect their interests, advance their causes, build their business and grow the market. We take a neutral and non-partisan approach to all issues, facilitating collaboration among issuers, brands, acquirers, merchants, regulators, solution providers, governments and other stakeholders. Over 50% of our members have been with us for more than five years, enjoying ongoing value from their affiliation with ACT Canada. Welcome to Cardware! If you are not already a member of ACT, I would invite you to speak to our staff, Strategic Leadership team members or our Board of Directors about the benefits of belonging to Catherine Johnston President & CEO, ACT Canada Chairman, International Smart Card Associations Network (ISCAN) Cardware 2012 Sponsors: 36 PAYMENTSBUSINESS May / June 2012 Fast & reliable the mobile NFC From editor testing services Show Guide: Cardware 2012 ACT Canada, Cardware 2012 Payment Insights Marriott Gateway on the Falls, Niagara Falls, Ont. June 19-20, 2012 Day 1 Tuesday June 19th PAYMENT INSIGHTS (Oakes Ballroom – 2nd floor) Sponsored by INTERAC ASSOCIATION TECHNOLOGY (Hennepin Ballroom – 1st floor) Sponsored by MASTERCARD 9:00-9:45 am Information as the New Currency of Payments Patricia Daley, Deloitte Inc., Partner Doug Macdonald, Deloitte Inc., Senior Manager 9:00-9:30 am The Future of Mobile Wallets Possibilities, Do’s, Don’ts and Best Practices Berend van Geffen, Collis, Chief Commercial Officer 9:45-10:05 am Prepaid Cards in Canada – The Products, Opportunities and Challenges ACT Canada Prepaid Strategic Leadership Team Felipe Papaleo and Michael Vaselenak, Co-Chairs 9:30-10:00 am Scaling NFC Services with a Standard Authentication Framework Technology Didier Serra, INSIDE Secure, Executive Vice President, General Manager, North America 10:05-10:25 am Breakfast, sponsored by TD MERCHANT SERVICES Findings of the Mobile Strategic Leadership Team ACT Canada Mobile Strategic Leadership Team Jonathan Magder and Michael Tompkins, Co-chairs 10:00-10:25 am De-scoping PCI-DSS certification with Point-to-Point Encryption based Card Processing Services Chandra Patni, YESpay International, Co-Founder, CEO 11:00 am-12:00 pm 10:25-11:00 am Coffee sponsored by MULTOS INTERNATIONAL served in the Exchange Place Consumer Value Proposition: What can mobile learn from previous payment innovations Moderator: Catherine Johnston, ACT Canada, President & CEO Panelists: Christian Ali, SecureKey Technologies, VP Payment Solutions Jacqueline Chilton, Glenbrook Partners, Partner Debbie Gamble, Gamble Consulting, President William Giles, MasterCard Canada, Vice President, Emerging Payments Bill Huzar, Consumers Council of Canada, Chair, Consumer Protection Committee Douglas Melville, OBSI, Ombudsman and CEO Security and Privacy in a “mobile world”: how does technology make it work? Panelists: Balraj Dhillon, Giesecke & Devrient, Manager, Secure Devices, Emerging Technology Des Fernando, Norgold Security Consultants, Managing Director Jay Graver, Giesecke & Devrient, Manager, Solutions Development, ET Nicholas Norman, Consult Hyperion, Head of Sales Chandra Patni, YESpay International, Co-Founder, CEO Pierre Roberge, SecureKey Technologies, CTO May / June 2012 FIME’s accredited labs provide interoperability & compliance testing services for Mobiles and Secure Elements: American Express GlobalPlatform Discover Network NFC Forum MasterCard Isis Visa Orange Achieve faster time-to-market with FIME’s comprehensive mobile testing services. Take the next step. Talk to FIME. www.fime.com - [email protected] PAYMENTSBUSINESS 37 Show Guide: Cardware 2012 MERCHANT (Hennepin Ballroom – 1st floor) Sponsored by DISCOVER FINANCIAL SERVICES PAYMENT INSIGHTS (Oakes Ballroom – 2nd floor) Sponsored by INTERAC ASSOCIATION 12:00-2:00 pm Lunch sponsored by 2:00-3:00 pm GIESECKE & DEVRIENT Keynote Presentation - The MintChip Challenge: exploring the evolution of currency, Dylan Cobb, Manager, Business Development, MintChip Project, Royal Canadian Mint 2:00-2:35 pm Business and Technology Issues of Mobile Wallets Jay Graver, Giesecke & Devrient, Manager, Solutions Development, ET Dissecting the Task Force Report on the Payments Industry Blair Keefe, Torys LLP, Partner Benjamin Geva, Torys LLP, Counsel 2:35-3:05 pm A Roadmap for Your Instant Issuance Program – the Business Case, Risks and Opportunities Michael Vaselenak, Datacard Group, Director, Instant Issuance, Canada 3:05-4:00 pm 3:45 4:15 pm Fraud in the Mobile Market George Peabody, Mercator Advisory Group Director, Emerging Technologies Advisory Service/Fraud, Risk & Analytics 4:00-4:30 PM Managing Confidential Information Communication: how do Mobile Devices change the landscape? Des Fernando, Norgold Security, Managing Director 4:155:00 pm Coffee sponsored by MASTERCARD served in the Exchange Place The Digital Evolution of Payments Derek Colfer, Visa Canada Corporation, Head of Mobile Payments 4:30-5:00 PM Driving Growth in Prepaid via Online Management Tools Felipe Papaleo, CPI Card Group, EVP Sales and Marketing TOP QUALITY, TOP SPEED... Provide financial cards instantly with photo-like image quality – at top speed!- with Zebra’s® ZXP Series 8™ Secure Issuance printer. With Zebra’s ZXP Series 8 Secure Issuance printer, your financial, educational or retail institution can issue financial cards quickly, securely and without sacrificing print quality. You’ll boost customer satisfaction by instantly printing and encoding personalized cards on-site. Meeting industry standards for the financial instant issuance market, and custom-coded for leading instant issuance applications, the ZXP Series 8 Secure Issuance printer ensures the highest levels of security and reliability. Contact Ahearn & Soper today to discover how you can reduce operational costs and increase revenue with Zebra’z ZXP Series 8 Secure Issuance printer today! Ahearn & Soper Inc. 100 Woodbine Downs Boulevard Toronto (Etobicoke), ON M9W 5S6 1-800-263-4258 [email protected] www.ahearn.com Sales and Service Across Canada 38 PAYMENTSBUSINESS May / June 2012 Show Guide: Cardware 2012 Day 2 Wednesday June 20th PAYMENT INSIGHTS (Oakes Ballroom – 2nd floor) Sponsored by INTERAC ASSOCIATION MERCHANT (Hennepin Ballroom – 1st floor) Sponsored by DISCOVER FINANCIAL SERVICES 8:459:30 am Payment Insights: an International Perspective Michel Chalifoux, Multos International, VP-Business Development 8:45-9:15 AM Retail 3.0 – Bricks, Clicks and Mobile Tricks Michael Bradley, NorthCard Inc., Managing Director 9:3010:00 am Breakfast, sponsored by TD MERCHANT SERVICES The State of EMV Shirley Matthew, Visa Canada Corporation Head of Product Platform 9:15-9:45 AM Loyalty’s New Realities and Opportunities Matthew Seagrim, Aimia, Vice President/Enhancement Services 10:45 am - 12:00 pm Coffee sponsored by the ROYAL CANADIAN MINT served in the Exchange Place Stakeholder Engagement & Alignment Panel Moderator: John Ambrose, Ambrose Connection Limited, Principal Panelists: Tracey Black, GFH Group, President Nigel Codrington, FICS Consulting Inc., Payments Consultant David Farnes, Canadian Wireless Telecommunications Association, Chief Operating Officer Mark Horwedel, Merchant Advisory Group, CEO Karrie MacDonald, Gemalto, Vice President, Sales George Peabody, Mercator Advisory Group, Director, Emerging Technologies Advisory Service/Fraud, Risk & Analytics 10:50-11:30 am What’s in the Wallet? Jacqueline Chilton, Glenbrook Partners, Partner 11:30 am -12:00 pm Engaging Merchants in Mobile Strategy ACT Canada Mobile Strategic Leadership Team Jonathan Magder and Michael Tompkins, –Co-chairs Innovation Awards Luncheon Sponsored by VISA CANADA May / June 2012 PAYMENTSBUSINESS 39 Show Guide: Cardware 2012 2:203:05 pm EMV: “The World of Un-ending Possibilities” Onur Alver, Verisoft International, CEO 2:00 2:40 pm 2:00 2:20 pm Practical Business Cases for Mobile Berend van Geffen, Collis, Chief Commercial Officer Clash of The Titans: Who Will Win the NFC Mobile Commerce Battle Lori Breitzke, VeriFone, Inc., Senior Director, North America 2:40 3:10 pm MERCHANT (Hennepin Ballroom – 1st floor) Sponsored by DISCOVER FINANCIAL SERVICES PAYMENT INSIGHTS (Oakes Ballroom – 2nd floor) Sponsored by INTERAC ASSOCIATION Maximizing Business Value in a Shared EMV/Mobile Solution Tim Conroy, Cardtek Canada, Regional Sales Manager, North America :Xjj\cj9ifZb`jXc\X[`e^gifm`[\i f]c\^Xcj\im`Z\jkfgXpd\ekj `e[ljkipZc`\ekjcfZXccp#eXk`feXccp Xe[`ek\ieXk`feXccp%N`k_fe\f]k_\ ]\n[\[`ZXk\[giXZk`Z\k\Xdjj\im`e^ k_\:XeX[`XegXpd\ekj`e[ljkip#fli cXnp\ijf]]\i`emXclXYc\`ej`^_kXe[ ]finXi[k_`eb`e^jfclk`fejkfXccf]pfli kiXejXZk`feXcXe[i\^lcXkfipe\\[j% C\kËjkXcb% :fekXZkXd\dY\if]fli`e[ljkipk\Xd1 ZXjj\cjYifZb%Zfd&giXZk`Z\Xi\Xj& gXpd\ekjV`e[ljkip 4:054:45 PM Loyalty’s New Realities and Opportunities Matthew Seagrim, Aimia, Vice President/ Enhancement Services PAYMENTSBUSINESS Mobile Partners, the case for including value-added services in your mobile payments offering Vipul Lalka, Deloitte Inc., Manager | Strategy and Operations, Corporate Strategy Rob Galaski, Deloitte Inc., Senior Manager, Financial Services Mobile Payments in the UK Nicholas Norman, Consult Hyperion Head of Sales Closing Remarks Cardware 2012 Exchange Place Experts Meet with the experts who can help turn your business concepts into reality. 3M ICC Solutions Aimia Inc Ingenico Apriva MSC Barnes International Ltd Nagra ID Security Carta Worldwide NBS Payment Solutions Collis NBS Technologies CPI Card Group Oberthur Discover Network Quintin Manus Marketing Group Inc Everlink R3D Consulting Inc. EWA-Canada Verisoft Canada FIME sa YESpay Int’l Giesecke & Devrient 40 3:55-4:25 pm PfliXZZ\jjkf k_\:XeX[`Xe GXpd\ekj @e[ljkip 3:35-4:05 pm 3:05-3:35 pm Coffee sponsored by NXP served in the Exchange Place May / June 2012 YEARS Show guide ATMIA Canada 2012 Conference Agenda Tuesday, June 26th 11:30 am Imaging at the ATM: Lessons Learned in the U.S. 8:00am-5:00 pm David Ober, Technical Relationship Registration Desk Open Manager, Phoenix Interactive Design, Inc. Hotel, Toronto 8:30-9:00 am 12:00 pm June 24-27, 2012 Continental Breakfast Marketing at the ATM Fairmont Royal York 9:00 am complement the marketing mix? Can we benchmark Welcome the performance of this channel and how do we Curt Binns, Executive Director, ATMIA Canada measure success? This session explores how poor 9:15 am Dear readers, How can an ATM network be used to exponentially economic conditions have driven some marketing teams to prioritize one-to-one marketing opportuni- Keynote: The Way We Pay ties over mass media approaches. Utilizing their The Task Force for the Payments System Review own existing ATMs to generate new opportunities submitted its Final Report to the Minister of Finance and enhance their service offering. Jack Vincent, in December 2011. This presentation will discuss Head of Product Development, i-design some of the implications for ATM suppliers. I’d like to cordially invite Patricia Meredith, Senior Advisor, Monitor 12:30 pm you to attend the ATM Group Lunch annual conference, June 10:00 am 1:45 pm 24 to 27, 2012. The The Rise of Mobile Money Customer Service Trends in the Canadian ATM venue is the legendary This presentation will provide an overview of the Industry Fairmont Royal York Hotel growth of mobile money applications and services This session will focus on key customer service in the heart of Toronto’s throughout the developed and developing world and metrics and strategies as well as industry trends. financial and fashion its impact to stakeholders within the ATM industry. Jeff Smith, President & CEO, DirectCash districts. Our presenters Brent David Ho-Young, Managing Director, Payments Inc. include industry experts Mobile Financial Services, DonRiver Inc. Industry Association’s from law enforcement, banking, manufacturing, 10:30 am as well as ATM ISOs. Coffee Break Attendees will span a multitude of industries, 10:30 am-5:00 pm providing outstanding Exhibit Hall Open networking opportunities. Transforming the Retail Banking Customer Experience. Financial institutions need to change in order to remain relevant in the 21st century to their client base. Competitive offers and client experience must be paramount as we evolve aging networks and Visit atmia.com for full 11:00 am details on registration and Canada’s New Polymer Bank Notes accommodations. A presentation of the Canada’s new polymer bank I look forward to seeing notes and their security features and an outline of 2:45 pm you there. potential machine issues. A useful presentation Coffee Break for ATM owners and owners of other cash handling 42 2:15 pm value our client interactions. Sean McCarthy, Self-Service Business Unit Executive, IBM Canada Curt Binns, equipment. 3:30 pm Executive Director Patrizia Moin, Senior Analyst Currency Leading Change & Growing Volume in ATMIA CANADA Development Team, Bank of Canada Innovative Times PAYMENTSBUSINESS May / June 2012 Show guide How does the ATM fit into these fast changing times, and what does its innovation path Wednesday, June 27th look like over the next three to five years? 8:00 am-12:00 pm It is more than just a machine to dispense Registration Desk Open cash. The session will explore the innovation 10:45 am-1:00 pm Exhibit Hall Open 11:15 am ABM Testing in a Changing World vision to expand the ATM’s utility by adding 8:30-9:30 am This session will include the challenges new transaction types and generating new Continental Breakfast of new technology platforms, the impact revenue as well as look at the expectations of of components such as EMV and voice the ATM to keep pace with the introduction 9:00 am of mobile payments so it can keep dispensing Welcome such as mobile alongside ABMs, an end to cash, and provide unique value-added Curt Binns, Executive Director, ATMIA end approach to test automation, and the features. Canada business case for doing this based on the Sue Whitney, Head of New Products, Visa Canada 9:05 am Research & Trends Regarding Mobile 4:00 pm Payments in Canada Emerging Payments Technologies: Yvon Audette, Partner, KPMG Impacts on the ATM Industry in Canada guidance, implementation of other channels increased test coverage, higher levels of quality assurance and decreased real costs Ian Kerr, General Manager, Clear2Pay 11:45 am The Dynamic World of Skimming & Anti How will emerging payment technologies 9:45 am Skimming impact the ATM industry in Canada? ATM Fraud Impact Nationally and Globally Robin Hamstra, Senior Sales Manager, Drawing on proprietary consumer and This presentation will discuss: TMD Security industry research, this presentation will - Current statistics for Canada examine the future of cash in Canada in - New and existing fraud programs 12:15 pm light of the recent developments in mobile - Global fraud programs and initiatives Voice of the Industry Panel Discussion and contactless payments and highlight the Mark Sullivan, Director of Fraud Programs, Moderator: Curt Binns, Executive Director, impact on the Canadian ATM industry. Key Interac Association ATMIA Canada strategies that independent ATM deployers can implement to protect their businesses will 10:15 am be identified. Money Laundering & Legislation Related Christie Christelis, President, Technology to ATMs Strategies International Insp. Jean Cormier & CM Stephane Sirard of RCMP Financial Crime Branch will 4:30 pm present on risks to the ATM industry, Panelists: - Jody Campbell, Director of Sales, TNS Smart Network - Joseph Arrage, President, Can-Do-Cash, Ltd - Todd Schneider, COO, DirectCash Management, Inc. Going Wireless? A Checklist for ATM legislation which helps to mitigate risks and - Ian Nichol, Toronto Police Department Operators opportunities for the industry to protect itself. - Steve Jordan, National Sales Manager, Stephane Sirard, I/C, Financial Crime - Doug Epp, Senior Director ATM Business Nautilus Hyosung America Jayne DeMerchant, General Manager, The DPL Group Intelligence, RCMP, Criminal Intelligence 5:00 pm Inspector Jean Cormier, Acting Closing Remarks 5:00-6:30 pm Development, Open Solutions Canada Director, RCMP, Proceeds of Crime 1:00 pm Branch Closing Remarks End of Conference Networking Reception 10:45 am Please note: while correct at the time of Sponsored by DirectCash Payments Inc. Coffee Break publishing, speakers, topics and events may be subject to change. End of Day One May / June 2012 PAYMENTSBUSINESS 43 security security code, says Vanderhoof. Ranganathan. “The advantage Ranganathan. “The security for So, if a fraudster captures a of PayPal Here is that the device PayPal point-of-sale payments making purchases at online contactless card’s account gives us a ‘fingerprint’ that is really at our back-end, retailers participating in these number and expiry date, they enables us to check if it has where we analyse PayPal users’ security schemes. According would be able to make a been compromised. Because behaviour to detect fraud.” to the UK Cards Association, contact-based card, but not a PayPal Here is on a mobile use of MasterCard SecureCode contactless card. platform, we can determine has been the release of ▶ Continued from page 23 its precise location. Also, as voluntary guidelines around retailers and cardholders has Vanderhoof thinks that the reader is associated with a mobile payments. Developed been effective in reducing electronic pick-pocketing specific merchant account, we by the financial industry, the online card fraud. of contactless cards isn’t a will know if it starts processing guidelines provide a framework major threat. “It takes a lot for another merchant.” for near field communications and Verified by Visa by online Despite consumer concerns, Contactless cards of effort to steal card data Issuers in Canada and the U.S. from consumers’ pockets and readers are a cog in the mobile capabilities. The blueprint have been adding contactless handbags,” Vanderhoof says. payments wheel, which outlines data and security chips to their credit and “There are a lot more efficient includes plenty of apps. guidelines, using PCI DSS debit cards for proximity ways that fraudsters can steal payments. However, reports card numbers.” have appeared on TV news Smartphone-based card PayPal has developed an app that allows consumers to (NFC ) mobile payment compliance as the standard. On the heels of the news, pay from their PayPal wallet for Rogers Communications and programs showing data being Mobile payments purchases at bricks-and-mortar CIBC made their own joint stolen from contactless cards In the last few years, mobile retailers or restaurants using announcement. Later this year, while they were in cardholders’ payments have become a hot a smartphone. Ranganathan Canadians will be able to pay pockets, an activity known as topic in the payments industry. says PayPal is trialling advanced for merchandise with their CIBC electronic pick-pocketing. A number of companies such security technologies for credit card using their Rogers as PayPal and Square have smartphone users of its mobile NFC-enabled smartphones. enough to your contactless launched card readers that fit payment apps such as requiring The payment capability will be card and they have the right onto smartphones, providing them to scan a palm-print onto available where contactless scanning equipment and a convenient and low-cost their phone’s camera. credit card payments are software, they could pick up alternative to traditional POS your account number and terminals. “If someone gets close expiration date,” says Randy These devices have the The company has also accepted and offers similar developed a service which security; customers will receive enables consumers to make the same fraud protection Vanderhoof, executive director potential to bring card point-of-sale purchases from they do with their contactless of the Smart Card Alliance acceptance within the reach their PayPal account simply credit card. Secure encryption (SCA), a U.S.-based industry of many small merchants who by entering their cellphone technology will add to the association. “But they wouldn’t previously couldn’t afford to number and a PIN at a POS layers of security already in be able to obtain the card’s accept cards. However, there terminal. They can also pay place on credit card purchases three-digit CCV security code, have been concerns about the using a PayPal-issued mag- and clients can also set because it is not stored on the security of some of the readers. stripe card linked to their PayPal additional password protection, Prashanth Ranganathan, wallet plus their PIN. Following CIBC and Rogers say. card’s contactless chip.” Whatever the platform, PayPal’s director of mobile a pilot with 2,000 Home Depot written on the back of a security and risk, argues that stores in the U.S., PayPal has security is a moving target that contactless card can only be PayPal’s mobile card reader, teamed up with VeriFone and remains an ongoing concern for used for CNP transactions, PayPal Here, is at least as secure POS terminal vendor Equinox those in the payments industry. as proof that the cardholder as a regular POS device. as well as with 15 U.S. retail This sentiment is echoed by chains to roll out the service many in the industry including across the States. PayPal’s Ranganathan. “We The CCV security code actually has the card in their possession. 44 In Canada, the big news “The PayPal Here reader doesn’t see the card data, “Our Home Depot pilot take transaction security very For each point-of-sale which goes in encrypted form transaction, the contactless to our server, the same as from is intended to help us fine- seriously,” he says. “Security is chip generates a one-time a regular POS terminal,” says tune our risk strategies,” says PayPal’s crown jewel.” PAYMENTSBUSINESS May / June 2012 service directory Card Manufactures Integrated Payments Solutions Secure Solutions for Payment & Identification Integrated Payment Solutions and Services One of the most advanced and reliable payment delivery solutions in financial services technology. Since 1852, G&D has been an integral partner that is solutions orientated and trusted by banks, governments and carriers. Our solutions are founded on trust, integrity and the creation of value through Confidence. • Contact, Contactless and Dual-Interface Smart Cards • Mobile Payment • On-line Secure Authentication • Enhanced Card Identification Toll Free: 1-800-387-9794 www.everlink.ca Toll Free: 1.866.388.0076 www.gi-de.com Global & Mobile Payments / Remittance & Settlement Credit Unions Secure Payment Solutions EMV & NFC Consulting Apriva is North America’s Leading Wireless Gateway. SECURE DEVICES | RELIABLE SERVICE | EXCEPTIONAL SUPPORT To learn more call Paul DeRosse, Senior Vice President, Sales at 905.530.2351 or visit www.apriva.com. Ensure a successful NFC project with FIME’s consulting team! (091)&FRQVXOWLQJ 7HVWWRROV 6HFXULW\HYDOXDWLRQ &HUWLÀFDWLRQ www.fime.com [email protected] WouLD you like to see youR company name here? please contact Mark Henry [email protected] May / June 2012 PAYMENTSBUSINESS 45 Sector Scan Juanita Gonsalves Full Speed Ahead Progress in the mobile payments arena continues. I Juanita Gonsalves seem to write about mobile payments quite club that excluded truly innovative newcomers. a bit. Frequently, I touch on applications However, the task force overlooked the fact that aimed at the little guy who can’t justify a significant steps are required by multiple groups traditional point of sale terminal, or the merchant before complicated change can take place. For who is mobile and doesn’t have a bricks and example, retailers need to be equipped with NFC/ mortar storefront. contactless readers, consumers need a variety of An endless stream of new apps and products mobile phones equipped with NFC technology to keep on coming. Seemingly every day, there’s a be available for purchase, and all participants need press release about a new dongle that plugs into to be on the same page with a sound business the phone’s headset jack to “securely capture” model. card information. Most are still magnetic stripe Over the years, I believe that our banking based (or use the phone’s camera to capture card industry has performed admirably. Canadian data) despite the fact that worldwide, the pay- financial institutions, payments networks, issuers, ments industry has spent hundreds of millions of acquirers and technology providers operate in dollars to migrate to chip and PIN technology. an unusual but effective environment of “co- The primary purpose of this migration is to opetition”; fierce competitors co-operate so that combat exorbitant and growing fraud losses as- the country, their shareholders, buyers and sellers sociated with mag stripe skimming schemes. As a can benefit from a strong and secure payment matter of fact, the RCMP just busted an elabo- system. That’s why they succeed so brilliantly rate operation responsible for fraud losses of no when they “finally” do something. That’s also less than $100 million Canadian. This particular why we Canadians have avoided costly failures, skimming operation used bogus point of sale unlike other regions of the globe which have terminals planted at retailer locations to capture had a dramatic economic impact on all of us. card info that was later replicated and used to Our banks are trying to reduce card fraud, and withdraw cash at ATMs. This is a familiar story not just blindly grow mobile transaction volumes that we have heard over and over again, despite which could be a card skimmer’s paradise. efforts from Canadian banks, acquirers and ter- The Canadian Bankers Association just released minal vendors who have spent millions of dollars NFC based mobile payments guidelines. It’s going the extra mile to be secure. timely since before 2012 only a handful of mobile While those in the Canadian payments industry phones in Canada were NFC enabled and, more may be doing their part to combat fraud, not importantly, could provide a platform that offers surprisingly, many consumers aren’t as savvy. security from a hardware and software perspec- How can the average consumer tell the difference tive. In parallel, mobile network operators and between a good and bad dongle on a phone, or banks had to develop business and operational determine that a transient merchant didn’t just models that would ensure a “convenient, open, take a random snap of their card number and safe and secure ecosystem” — something that expiry date? How much is one card number and Canadians demand. Good things are worth wait- expiry date worth on the street? It’s not just on ing for. the consumer front where work on mobile payments needs to continue. Our federal government recently published their task force’s findings on the state of payments in Canada. The task force found that Canada is falling way behind in supporting mobile payments. In fact, it blamed Juanita Gonsalves is the president of Emerging Payments Consulting Inc., a firm specializing in the strategic implementation of new technologies in retail, e-commerce and mobile environments, managing risk and association compliance. Contact: [email protected]; www.epci.ca the banks for dragging their heels and building a 46 PAYMENTSBUSINESS May / June 2012 VX 820 NOTHING HANDLES LIKE THE VX 820, THE FULLY-LOADED, SLEEK SOLUTION From the editor VX 820. Performance. Power Packed. Get traction at the counter and stay ahead of the fast-paced demands of today’s consumer with VeriFone’s VX 820. As a handheld device, it’s ergonomic. On the countertop, it’s almost aerodynamic. Ultra-fast processing, loads of memory and maximum security under the hood. May / June 2012 www.verifone.com/vx820 PAYMENTSBUSINESS 47