US EMV Migration

Transcription

US EMV Migration

A Guide to
US EMV Migration
Table of Contents
What is EMV? ................................................................................................3
EMV: A Global Standard ................................................................................4
Fraud Prevention............................................................................................5
Mobile & Contactless ....................................................................................6
U.S. EMV Deadlines ......................................................................................7
Maestro Liability Shift ....................................................................................8
U.S. EMV Migration........................................................................................9
Preparing for EMV........................................................................................10
Upgrading ATMs ..........................................................................................11
EMV Upgrade Paths
Diebold ATMs............................................................................................12
Genmega ATMs ........................................................................................13
Greenlink ATMs ........................................................................................15
GRG ATMs................................................................................................16
Hantle ATMs..............................................................................................19
Nautilus Hyosung ATMs............................................................................21
NCR ATMs ................................................................................................26
Nextran ATMs ..........................................................................................27
Tranax ATMs ............................................................................................28
Tidel ATMs ................................................................................................30
Triton ATMs ..............................................................................................32
Weathermaster ATMs ..............................................................................37
Wincor Nixdorf ATMs ................................................................................38
Consumer Education....................................................................................39
Contact Information ..........................................................................................40
2 │ U.S. EMV Migration
What is EMV?
Developed jointly by Europay, MasterCard and Visa (EMVCo)
in the mid-1990s, EMV is a global standard for credit and debit
payment cards based on chip card technology.
EMV chip-based payment cards also known as smart cards,
contain an embedded microprocessor — a type of small computer
— that provides strong security features and other capabilities
such as contactless payments not possible with traditional
magnetic stripe cards.
An EMV card is the same size and thickness as a standard
magnetic-stripe card, however it includes a metalic square or
contact on the front of the card. The microprocessor is embedded
in a small cavity directly behind the contact plate. When inserted
into a card acceptance device, the contact allows the chip to
connect to a reader. This connection enables the chip to get power
from and exchange data with the terminal, according to EMVco.
Because EMV transactions require chip contact throughout the
process, consumers will no longer “swipe” their cards at ATMs
and POS terminals. Consumers will need to be taught to insert
their card and leave it in until the transaction is completed.
U.S. EMV Migration │3
EMV: A Global Standard
Most of the world — Europe, Canada, Africa, Mexico, Latin America,
the Caribbean, the Middle East and Asia-Pacific countries — has
fully migrated or is in the process of migrating to EMV technology.
According to EMVCo, approximately 1.5 billion EMV cards have
been issued globally and 21.9 million POS terminals accept EMV
cards as of the end of 2011. This represents 44.7 percent of the
total payment cards in circulation and 76.4 percent of the POS
terminals installed globally, excluding the United States.
+EMV Adoption in the United States
U.S. card issuers and merchants have been reluctant to spend
the money to adopt EMV due to the cost of upgrading payment
terminals and because fraud losses — while increasing — are
still a small percentage of overall revenue.
However, in August 2011 that changed with Visa’s announcement
to accelerate chip migration and adoption of mobile payments
in the U.S., through retailer incentives, processing infrastructure
acceptance requirements and counterfeit card liability shifts.
Industry experts estimate that replacing 600 million debit/credit
cards will cost $3 billion and replacing POS terminals will cost
merchants more than $6 billion. ATM Indusry Association (ATMIA)
research estimates the cost of upgrading the U.S. ATM fleet at
about $800 million.
Fraud Prevention
EMV migration is expected to improve the security of the payments
infrastructure and reduce debit card fraud in the U.S.
The cost of a skimming incident in the U.S. has risen to $50,000
on average, up from $30,000 a few years ago, according to a report
from the U.S. Secret Service. Fraud costs for the U.S. payments
industry are an estimated $8.6 billion yearly, according to a 2011
report from the Aite Group.
EMV technology has already impacted the rate of fraud in regions
that have adopted it. The UK Cards Association reports fraud on
lost or stolen cards is at its lowest level in two decades and
counterfeit card fraud losses are at their lowest point since 1999.
Interac, the Canadian debit card service, reported in March 2013 that
its fraud losses attributable to ATM skimming are at their lowest level
since 2003.
According to the Smart Card Alliance, EMV chip cards are more
difficult to copy because the card includes a microprocessor chip
that can store information securely and perform cryptographic
processing during a transaction. The credentials prevent card
skimming and cloning.
However, EMV does not address the entire fraud problem. EMV
reduces face-to-face fraud but it does not effectively prevent cardnot-present (CNP) fraud. For example, since the rollout of EMV in
Canada, CNP fraud increased from C$128 million to C$259.5 million
in 2011, according to The Federal Reserve Bank of Atlanta.
Mobile & Contactless
Many of the devices that accept EMV chip cards are dual contact /
contactless devices and capable of performing mobile or contactless
payments as well. Merchants and ATM deployers interested in offering
mobile payments will need to decide if they want to install dual-devices
when upgrading to EMV or choose to go with NFC (Near Field
Communication) — another form of contactless communication
technology — in order to offer these types of transactions.
+Mobile Payments
Mobile payments, also referred to as mobile money, mobile money
transfer and mobile wallet, are generally payment services performed
via a mobile device. Instead of paying with cash, check or credit card
a consumer can use a mobile phone to pay for a wide range of services
or goods.
Being adopted all over the world via EMV or NFC, mobile payments are
expected to reach more than $600 billion globally by the end of 2013.
+Contactless Payments
Contactless payment systems are credit and debit cards, key fobs,
smartcards or other devices that use radio-frequency identification for
making secure payments. The embedded chip and antenna enable
consumers to wave their card over a reader at the point of sale.
Some suppliers claim that contactless transactions can be almost twice
as fast as a conventional purchase. Because no signature or PIN entry
is typically required for purchases under $25 in the U.S. and under £20
in the UK, research indicates that consumers are likely to spend more
money due to the ease of transactions.
U.S. EMV Deadlines
Although the card brands have announced deadlines for the liability shift,
there is, technically, no mandate compelling ATM owners and operators
to upgrade their terminals to EMV. The deadlines are for the liability shift;
which means that any party in the chain that is not EMV compliant could
be held liable for fraud losses that occur after the deadlines.
To date, there are no universal deadlines for EMV migration in the U.S.
Visa and MasterCard have issued their own individual liability shift
deadlines for ATM owners with MasterCard’s dates being much more
aggressive — coming a full year prior to Visa's deadline. Discover
continues to consider their strategy for ATMs and has yet to make an
announcement.
The ATM Industry Association (ATMIA), the National ATM Council (NAC)
and other associations are working with the networks; requesting a
realistic, consistent approach to chip card migration.
+October 1, 2015 Liability shifts to merchants for POS card
fraud (excluding fuel selling automated terminals).
+October 1, 2016 Liability shifts to ATM owners for fraud
committed through any MasterCard debit card.
+October 1, 2017 Liability shifts to ATM owners for fraudulent
transactions completed on any Visa debit card.
+October 1, 2017 Liability shifts to merchants for fraud
committed through automated fuel-selling terminals.
Source: Smart Card Alliance Payments Council
Maestro Liability Shift
One EMV milestone has already passed. MasterCard implemented
a liability shift for all counterfeit ATM transactions performed on the
Maestro debit network on April 19, 2013.
The Maestro liability shift caused quite an uproar in the industry.
According to a survey of ATM owners and operators conducted by
ATMIA, an overwhelming majority (88 percent) of respondents said
they would not be able to deploy a single EMV-capable ATM by the
liability shift date. Only nine percent said they had access to solutions
that would be required for the processing of EMV transactions.
Just days prior to the liability shift, MasterCard announced a new set
of acquirer-based fraud detection tools. According to a press release,
Fraud Rule Manager will help protect the industry from fraud by blocking
Maestro transactions at U.S. ATMs that averaged no more than one
Maestro transaction per month in 2012.
According to MasterCard, this action covers 80 percent or more of
the nation's ATMs, removing for the time being, the risk of fraudulent
transactions to ATM deployers. In addition, the company said they
would monitor the remaining 20 percent of ATMs not upgraded to EMV
and will block individual terminals that may experience fraud.
Source: MasterCard press release & ATMIA Readiness Survey.
U.S. EMV Migration
Many steps in the EMV migration process must be completed before
EMV transactions can be accepted and processed in the U.S.
+Common EMV Debit Standard
First, a common EMV debit standard or Application Identifier (AID)
consistent with network routing requirements established under
the Durbin Amendment to the Dodd-Frank Wall Street Reform and
Consumer Protection Act that can still allow routing choice, must
be agreed upon for the United States.
Determination of a debit solution is essential for the EMV adoption
process to move forward. In March 2013, The Secure Remote
Payments Council, a group of non-card brand regional debit networks,
adopted a common debit AID application based on a solution from
Discover. However, other networks have not yet adopted it. Without
an agreement on a common AID, there could be at least three in the
U.S. — one for MasterCard, Visa and Discover.
+Software Testing & Certification
Once an debit solution is agreed upon, software must be developed,
tested and certified by the networks. Next, each processor will need
to test and certify the software. At that point, each ATM manufacturer
will need to have their terminals certified for the U.S. market.
+Software Installation & Card Readers
Finally, the software must be installed on ATMs along with an
EMV-capable card reader.
Source: The Long Road to EMV: An In-Depth Look at EMV
Preparing for EMV
With deadlines looming, what should you be doing to prepare for
EMV migration in the United States?
+Financial Institutions
The migration to EMV for banks and credit unions means issuing
new chip and pin technology capable credit and debit cards.
Financial institutions also need to make sure their processors are
ready to accept EMV transactions and begin upgrading their ATMs.
+Merchants
For merchants, the migration to EMV means investing in new POS
and automated fuel-selling terminals that are capable of accepting
EMV transactions, and working with processors to ensure they are
following the network mandates. If the merchant owns an ATM, it
also means upgrading machines that are not EMV capable.
+ATM Deployers
For owners of ATMs, the migration to EMV means working with
ATM suppliers to upgrade ATM card readers and load new
software, as well as working with processors to ensure they are
following the network mandates and becoming certified.
Upgrading ATMs
Since EMV has been implemented in Europe, Canada and is in the
process of being adopted in other parts of the world, most ATM
manufacturers have an upgrade path in place for older machines.
+EMV-Ready New ATMs
Many hardware manufacturers are already shipping ATMs with
EMV-capable card readers and pre-loaded with software.
However, because a common EMV debit standard has not been
agreed upon yet and software has not been tested and certified,
EMV-ready ATMs may still need to have new software loaded in
the field.
+Upgrading Existing ATMs
To upgrade terminals already in the field, ATMs will need to be
outfitted with a level 1 EMV-certified card reader as well as new
software once it has been tested and certified. In some cases,
implementation of EMV may require modifications to other parts
of the ATM or replacement of terminals that cannot be upgraded.
As with the ADA implementation, ATM deployers will have to weigh
the costs and revenues associated with upgrading. Decisions also
need to be made in a way that minimizes the number of site visits.
A list of upgradable ATMs is provided on the following pages.
Please Note: this information is being provided as a guide only.
Each ATM should be researched to find the best possible EMV
upgrade path.
Diebold ATMs
ATM Model
Hardware
Software
Notes
Factory Installed
EMV Level 1 Card Reader
Option Available
EMV Level 2 Software Option
Available with New ATMs
EMV Level 1 Option
Available since 2003
Upgrade Available
EMV Level 2 Software
Upgrade Available
Opteva Series
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
ix Series
Source: Diebold
For more information, visit the Diebold Operation 411 Resource Center
PLEASE NOTE: EMV software installed prior to certification may require a mandatory upgrade before it is capable of performing EMV transactions.
Diebold recommends, but does not require, terminals running Windows XP be upgraded to Windows 7 prior to installing EMV software.
Please check with your processor(s) regarding Windows 7 upgrade requirements.
THIS INFORMATION IS BEING PROVIDED AS A GUIDE ONLY
Each ATM should be researched to find the best possible EMV upgrade path ▪ Information subject to change without notice
©2014 OutsourceATM.com
Genmega ATMs
ATM Model
Hardware
Software
Notes
Factory Installed
Option Available
Release of EMV Level 2
Software TBD
Upgrade ATM
Software TBD
Upgrade ATM
Software TBD
Upgrade ATM
Upgrade Kits Available
G1900 Series
Factory Installed
Option Available
G1900 Series
Factory Installed
Option Available
G2500 Series
ATM Model
Hardware
Software
Notes
Factory Installed
Option Available
Software TBD
Upgrade ATM
Software TBD
Upgrade ATM
Software TBD
Upgrade Kiosk
Software TBD
Upgrade Kiosk
GT3000 Series
Factory Installed
Option Available
GT5000 Series
Factory Installed
Option Available
G6000 ATM / Kiosk
Factory Installed
Option Available
Universal Kiosk
Greenlink ATMs
ATM Model
Hardware
Software
Notes
Merlin & Wizard Series
Not EMV Capable
Upgrade Kits TBD
Merlin & Wizard Series
Software TBD
Call 1-800-494-6984 or
visit www.wellingtonatm.com
C1000, T1000 & U1000 Models
are Not ADA Compliant
Greenlink
Source: Wellington Technologies
Greenlink no longer manufactures ATMs. Wellington Technologies has purchased the manufacturing rights..
GRG ATMs
ATM Model
Hardware
Software
All Units Ship with Factory
Installed EMV Card Readers
Software TBD
Software TBD
Software TBD
Notes
E300L
H22N
H22ND
ATM Model
Hardware
Software
Software TBD
Software TBD
Software TBD
Software TBD
Notes
H22NL
H38N
H38ND
H38NL
ATM Model
Hardware
Software
Software TBD
Notes
H46N
Source: GRG International
PLEASE NOTE: EMV software installed prior to certification may require a mandatory upgrade before it is capable of performing EMV transactions .
Terminals running Windows XP may need to be upgraded to Windows 7 prior to installing EMV software.
Hantle ATMs
ATM Model
Hardware
Software
Notes
Upgrade Available
Software TBD
Upgrade ATM
Factory Installed
Option Available
Software TBD
Upgrade ATM
Software TBD
Upgrade ATM
1700
Upgrade Kit Available
1700W
Factory Installed
Option Available
C4000
ATM Model
C4000P
Hardware
Software
Notes
Factory Installed
Option Available
Software TBD
Upgrade ATM
Software TBD
Upgrade ATM
Factory Installed
Option Available
T4000
Source: Hantle
Hantle ATMs run Windows CE software, no operating system upgrade necessary.
Nautilus Hyosung ATMs
ATM Model
Hardware
Software
Notes
No Hardware Upgrade
Available
No Software Upgrade
Available
Sold by Tranax in the U.S.
TBD
Upgrade Available
Also sold by Tranax in the U.S.
No Software Upgrade
Available
Also sold by Tranax in the U.S.
Replace ATM
Mini-Bank 1000
Mini-Bank 1500
Upgrade or Replace ATM
To Upgrade Reader, Mainboard
& Operating Software will
need to be Replaced
No Hardware Upgrade
Available
Replace ATM
Mini-Bank 2100
ATM Model
Hardware
Software
Notes
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
Factory Installed
Option Available
New ATMs Ship with
EMV Level 2 Software*
Mini-Bank 2100T
Mini-Bank 2200
Upgrade ATM
Upgrade Available
1800 Series
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
2700 Series
ATM Model
Hardware
Software
Notes
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
2900 (Halo) Series
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
MX 4000 Series
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
MX 5000 Series
Factory Installed
Option Available
MX 5100T
for Newer Terminals
New ATMs Ship with
Upgrade ATM
Upgrade Available
ATM Model
Hardware
Software
Notes
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
MX 5300CE
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
MX 5300XP
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
MX 5600 Series
Factory Installed
Option Available
MX 7000 Series
for Newer Terminals
New ATMs Ship with
Upgrade Available
Some Older 7000 Models,
including 7040 and 7070
Configurations will
Need to be Replaced
ATM Model
Hardware
Software
Notes
Factory Installed
Option Available
New ATMs Ship with
Upgrade ATM
Upgrade Available
MX 7600 Series
Source: Nautilus Hyosung America
*PLEASE NOTE: EMV software installed prior to certification may require a mandatory upgrade before it is capable of performing EMV transactions.
**Nautilus Hyosung customers running Remote Auto AP, new update expected Q4 2013, as part of the MoniView application
will be able to remotely upload any software changes and turn on EMV without having to visit the site.
No operating system upgrade necessary for terminals running Windows CE.
NCR ATMs
ATM Model
Hardware
Upgrade May Be Required
Notes
Upgrade Required
Since 2007, all Dip Card
Readers were Delivered as
EMV Level 1 Compliant as
Standard Feature
Dip and Motorized Upgrade Kits
Available for Select Models
NCR has the Latest version
of EMV kernal certified
by EMVco that runs on both
Windows XP and Windows 7
EMV Motorized Card Readers
Included as an Option
Dip Card Readers
EMV Level 1 Compliant
Upgrade Required
ATMs Shipped After Jan. 2011
include EMV Card Readers
Motorized Card Readers
ATMs Shipped After Q1 2010
EMV Level 1 Compliant
NCR has the Latest version
of EMV kernal certified
by EMVco that runs on both
Windows XP and Windows 7
NCR has Certified their
Contactless Reader with EMVco
as SelfServ ATM Option
Personas Series
SelfServ Series
Software
ATMs Shipped Before Q1 2010
May Require EMV Card Reader
and/or Processing Core Upgrade
Source: NCR
For more information, download NCR’s White Paper: Protecting Your Future with NCR Secure - How to Prepare for the EMV & Windows 7 Migration
Nextran ATMs
ATM Model
Hardware
Software
Notes
No Info Available
No Info Available
For info on upgrade hardware
kits and software, visit
www.chunghocomnet.com
No Info Available
No Info Available
For info on upgrade hardware
kits and software, visit
www.chunghocomnet.com
ComNet Series
Xtremo Series
Source: Chungho ComNet Co.
NexTran, owned by South Korea's Chungho ComNet Co., no longer sells ATMs in the United States
Tranax ATMs
ATM Model
Hardware
Software
Notes
No Hardware
No Software Upgrade
Available
Manufacturered by Hyosung
TBD
Upgrade Available
Replace ATM
Mini-Bank 1000
Mini-Bank 1500
Sold in the U.S. by both Tranax
and Nautilus Hyosung
To Upgrade Reader, Mainboard
& Operating Software will
need to be Replaced
Factory Installed
Available
Software TBD
Upgrade ATM
Manufacturered by Hantle
Mini-Bank 1700
ATM Model
Hardware
Software
No Hardware
No Software Upgrade
Available
No Hardware
No Software Upgrade
Available
No Hardware
No Software Upgrade
Available
Notes
Replace ATM
Sold in the U.S. by both
Tranax and Nautilus Hyosung
Mini-Bank 2100
Replace ATM
Mini-Bank 2100T
Replace ATM
Mini-Bank 2200
Sources: Hanlte & Nautlus Hyosung America
PLEASE NOTE: EMV software installed prior to certification may require a mandatory upgrade before it is capable of performing EMV transactions
Tranax ATMs run Windows CE software, no operating system upgrade necessary
Tidel ATMs
ATM Model
Hardware
Software
Notes
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
3100
3300
3400
ATM Model
Hardware
Software
Notes
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
No Hardware Upgrade
Available
No Software Upgrade
Available
Replace ATM
3700
3800
Source: NCR
Tidel, now owned by NCR EasyPoint, no longer manufacturers ATMs
Triton ATMs
ATM Model
Hardware
Software
Notes
Factory Installed
Available
New ATMs Ship with
Upgrade ATM
Upgrade Available*
ARGO
Factory Installed
Available
New ATMs Ship with
Upgrade ATM
Upgrade Available*
Traverse
Factory Installed
Available
New ATMs Ship with
Upgrade ATM
Upgrade Available*
RL1600
ATM Model
Hardware
Software
Notes
Factory Installed
Available
New ATMs Ship with
Upgrade ATM
Upgrade Available*
RL2000
Factory Installed
Available
New ATMs Ship with
Upgrade ATM
Upgrade Available*
RL5000
Factory Installed
Available
New ATMs Ship with
Upgrade ATM
Upgrade Available*
FT5000
Upgrade ATM
Upgrade Available*
RT2000
ATM Model
Hardware
Software
Notes
Upgrade Available*
Upgrade ATM
Upgrade Available*
Upgrade ATM
Upgrade Available*
Upgrade ATM
Upgrade Available*
Upgrade ATM
8100
9100
9600
9700
ATM Model
Hardware
Software
Notes
No Hardware
No Software Upgrade
Available
Replace ATM
No Hardware
No Software Upgrade
Available
Replace ATM
No Hardware
No Software Upgrade
Available
Replace ATM
No Hardware
No Software Upgrade
Available
Replace ATM
Mako
9500
9800
RL5000xp
ATM Model
Hardware
Software
Notes
No Hardware
No Software Upgrade
Available
Replace ATM
No Hardware
No Software Upgrade
Available
Replace ATM
FT5000xp
FT7000
Source: Triton
**ATM deployers running Triton Connect will be able to remotely upload any software changes and turn on EMV without having to visit the site.
Triton ATMs run Windows CE software, no operating system upgrade necessary.
Weathermaster ATMs
ATM Model
Hardware
Software
Notes
No Hardware
No Software
Upgrade Available
Replace ATM
Weathermaster
Source: Sky Processing
Weathermaster ATMs are no longer in production.
Wincor Nixdorf ATMs
ATM Model
Hardware
Software
Factory Installed
Standard Equipment
New ATMs Ship with
Upgrade Available
Notes
Upgrade Available
CINEO Series
Factory Installed
Standard Equipment
Upgrade Available
New ATMs Ship with
ATMs Shipped Prior to 2006
will Need to be Evaluated
for Upgradability
Upgrade Available
ProCash Series
Source: Wincor Nixdorf USA
PLEASE NOTE: EMV software installed prior to certification may require a mandatory upgrade before it is capable of performing EMV transactions
Terminals running Windows XP may need to be upgraded to Windows 7 prior to running EMV software
Please check with your processor(s) regarding Windows 7 upgrade requirements
Consumer Education
While IADs, financial institutions and others in the payment industry
have been reading about and discussing EMV for some time, it is
new to most Americans. Consumers will need some education on
why their credit and debit cards are changing, and how to use them.
When Canada migrated to EMV, Interac conducted a nationwide
media campaign to help consumers understand the changes.
Lessons Learned in Canada
+PIN Numbers for Credit Cards — In Canada, cardholders who
were accustomed to signing credit card receipts simply forgot to
commit their PINs to memory. Financial institutions quickly learned
that one remedy to avoid the issue of forgotten PINs was to allow
customers to set their own PINs.
+Inserting Cards, Not Swiping — Rather than swiping cards at the
POS or ATM as they were accustomed to doing, Canadians had to
develop new habits; to insert the card into the terminal and remove it
only when the transaction was completed.
Canadian merchants trained their staff to remind customers to leave
their cards in the terminal during the entire transaction and machine
prompts were changed to remind cardholders to remove their cards.
Contact Us
Web:
OutsourceATM.com
Phone: 281.304.2204
E-Mail: [email protected]
Social:

US EMV Migration

Transcription

Similar documents

February 2016

May 2016 NEFCU News

Fall 2015 - AmeriCU Credit Union

USFCU Newsletter_2ND QUARTER.indd

Gilbarco Dispenser Path to EMV

Winter 2015 - Heartland Area Federal Credit Union

July 2016 Issue - Clinchfield Federal Credit Union

PP790SE - POSDATA

TPP-2013-09-A Chip on the Old Card

April 2015 - United Financial Credit Union