Thought leadership from Consult Hyperion
The horrible truth is that payments are boring, so they are going to go away.
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
While I was sitting through a presentation (a very good presentation, I might add) on social media strategy for one of our client’s financial services businesses, it struck me that they were slightly misjudging the more interactive and transactional nature of social media, doing great stuff but treating social media as another customer communication channel. I’m naturally more interested in social media for transactions: social commerce. I’ve given a couple of talks about this recently, pointing out the opportunities that social commerce opens up.
One prediction says social commerce will top $30 billion globally by 2015 with Facebook-generated sales one of the primary drivers.
There are many different ways that financial services organisations can exploit this. A good example, to my mind, is the way in which Amex works with Foursquare.
Just after announcing that it passed 10 million users, location-based check-in service Foursquare has said it is partnering with American Express to give members even better deals when they check in at merchants’ stores across the country.
[From Foursquare partners with American Express for deal check-ins | VentureBeat]
This is a terrific proposition and it’s well implemented (through statement credits, so no coupons or vouchers or anything are needed). And, to follow this example, Amex also has a Facebook pages where its large number of fans can come to learn about products and services, share with the community of card holders and so on. Great stuff. And it isn’t only financial services organisations that are integrating themselves into social media to create new kinds of social commerce.
That is because the well-known mobile service provider is now allowing its customers to log on to Facebook to purchase phone credit.
Wow, that’s pretty interesting.
Pre-paid subscribers will now be able to access a secure app on the social networking website, where they will put in credit card details in order to purchase top ups.
Credit card details? Not Facebook credits? But you get the picture. Something like Facebook can be used to create a more intimate transactional environment without having to develop software, making it easy for consumers to “friend” and “like” and so forth. Personally, I don’t find this sort of thing particularly appealing because to me it’s the wrong kind of social relationship: I want something more granular.
Here’s what I mean. I don’t want to be friends with my bank — after all, I’m a typical consumer so I hate banks — but I do want to be friends with my bank account. Why can’t Barclays let me friend my current account so I can see its status updates like “Premium card fee £10.00″, “Direct Debit British Gas £37.85″ and “Counter Credit £5.00″ and so forth? I quite like the text messages that Barclays sends me but would prefer something more immediate and more detailed (I often call this “streaming commerce”) so that I can make decisions and respond.
Similarly, I don’t especially want to be friends with MBNA, but I do want to be friends with my MBNA American Express card. I’m using “friend” generically, of course, I don’t mean to imply that Facebook is the one and only way to implement a social media strategy.
Facebook usage in the UK fell nearly 4pc in July to its lowest level since 2009, sparking concerns that the social network has hit its peak and may be declining in popularity.
I don’t use Facebook that much — it’s really for sharing with my brother and sister, other family members and a few old friends — and I’ve not got a crystal ball to see whether we’ll still be using it in a couple of years.
Many of the smartest people I know are leaving Facebook as well. I predict we’ll see many people leaving over the coming months and adopting Twitter.
My idea would work even better with Twitter though. Suppose Twitter made a small change to their system so that a user could opt to be in “secure” mode. A secure mode user can only be followed (or searched) by users in their “secure list” or whatever. Then, my MasterCard could be secure user “mc-53XX-XXXX-XXXX-XXXX” the only name in its secure list would be “@dgwbirch”. Now, when anyone else tries to follow or search mc-53XX-XXXX-XXXX-XXXX they see nothing.
I’d love to follow my John Lewis MasterCard on Twitter in the way instead of having to log in to find out what it’s been up to. Since I use Twitter all day and every day anyway, it would be a much better channel for payment products to develop a more intimate relationship with me. And think of the practical benefits: if I get a tweet from my debit card telling me it’s just been used to withdraw money from an ATM in Belarus, I can call Barclays right away to block it from further misbehaviour. This doesn’t seem terribly complex: all Barclays need to know is my twitter name and then it can use the Twitter API to post tweets and only allow me to follow them.
If I could follow my transactional instruments, I could also (in time) feed their tweets, status updates, notifications and so on into other software for mash-ups. I don’t know what kind of mash-ups – I’m not smart enough for that – but I’m sure there are people out there who could do great stuff with the data. So a plea to my account, card and service providers: I don’t want to be friends with you, because you are corporations and not mates, but I don’t want to be friends with my stuff: my money, my cards, my phone. How hard can it be?
These opinions are my own (I think) and presented solely in my capacity as an interested member of the general public [posted with ecto]
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
Our good friends at Glenbrook summarised the final outcome of the Durbin process:
Debit interchange cap – $0.21 plus 5 bps (for both signature debit and PIN debit)
Fraud prevention adjustment – $0.01 (interim rule)
Routing restrictions and network exclusivity – Option A (two unaffiliated debit network)
Card Present vs Card Not Present – No distinction[From Federal Reserve Issues Final Rule on Durbin Amendment]
Now there will be a lot of comment from people far better qualified than me on what all of this will mean for the payments industry, so I don’t want to get into those specifics here, but there’s something that bothers me about the whole thing. I went back to Steve Bartlett’s article on Durbin in the EFPLP [Bartlett, S. Announcing the death of the debit card in E-Finance & Payments Law & Policy (Mar. 2011)] and it prompted me to have another reflection on the Durbin process as it seems (to a foreigner!).
Plenty of lawmakers are anguished about their swipe fee position, but largely because they’re worried about falling out of favor with good friends in the corporate world.
[From Swiped: Banks, Merchants And Why Washington Doesn't Work For You]
I think what this means is that they knew that government price-fixing is wrong, but that big companies (particularly retailers) spend a lot of money on lobbying. This isn’t something to be cynical about, it’s just the real world. I’m happy to offer these lawmakers a solution though. Why not go down the European route and create a regulatory framework that allows competition from non-banks? There is no reason for payments to be a banking business, and competition rather than regulation is a better way to reduce costs to the rest of the economy.
There are other ways to reduce total costs too, but these mean some short-term spending (which no-one wants to do) in order to improve the situation for the longer term (which, naturally, congressmen don’t care about).
The Federal Reserve could, and should, use the Durbin Amendment as a vehicle to move the United States onto the EMV smart card standard
[From Why The Fed Should Use Durbin To Push EMV ( - Industry Verticals )]
Why would this save money in the long term? It’s because one of the key reasons why US debit card fees are so much higher than elsewhere is that they are predominantly signature debit transactions. Moving to PIN, and offline PIN at that, and offline completely for low-value contactless transactions, ought to kill a few birds with the same stone.
the Fed has the power to change this equation. By allowing card issuers to recover some of the costs of issuing smart cards in the form of higher interchange, it could make it profitable for banks to issue smart cards. At the same time, card networks such as Visa and MasterCard could then impose a liability shift policy, similar to that deployed in other regions
[From Why The Fed Should Use Durbin To Push EMV ( - Industry Verticals )]
In reality though, none of the lobbying seemed to be about pursuing the best long-term strategy for USA Inc. It just all came down to fighting between banks and retailers. I assumed that banks were going to lose.
Lobbying on behalf of banks is a bit of a lost cause at the moment, so you can’t blame the retailers for striking while the iron is hot, but if Congress wants to reduce the fees paid by retailers for payments, then it should create a regulatory environment that allows new entrants to come in and provide (non-bank, if necessary) solutions to the marketplace.
[From Digital Money: If you don't like cards, don't take them]
Well, despite their (entirely deserved) lack of popular support, it looks as if I was wrong about the banks’ capacity to lobby. They mounted a serious campaign.
Last year US banks generated $536.9 billion of interest income, according to FDIC data, and while that is down from heights of the boom years, it is still a hefty amount of revenue. Non-interest income, which includes fees, climbed to $236.8 billion last year from $207.7 billion in 2008.
[From Bankers, Hear My Plea: Stop the Fee Insanity - Bank Innovation]
It’s very difficult to obtain an accurate picture as to what proportion of the non-interest income relates to payments. The last figure that I have that I believe to be reasonably accurate was 45%, but many commentators seem to think that this is too low. So let’s say that all of the “other” category of non-interest income reported is payments, and call it 50%. There was a paper published last year called “Banks’ Non-Interest Income and Systemic Risk” by Brunnermeier, Dong and Paliac that showed that the higher the proportion of non-interest income, the greater a bank’s exposure to systemic risk. In other words, the more a bank depends on income that comes from outside of the core business of savings and loans, the more exposed it is to changes in market conditions (eg, Durbin amendment, non-bank competition, that sort of thing). I read this as meaning that it’s better for the economy as whole if banks make less money from running debit card systems.
The lesson here is that if we want serious regulation of banks, we can’t trust it to be done by bank regulators.
Therefore, it seems to me, that the ruling wasn’t that bad for banks. If you have to have a cap, from the banks’ perspective, it might as well be this one. Retailers wanted a cap, and they got it, but the cap is high enough that banks won’t suffer a catastrophic collapse in fee income, so the banks ended up with not such a bad deal provided that they shift signature debit to PIN debit. The banks will lose some fee income because of this, retailers will pay a bit less and customers won’t see much difference because the difference won’t be passed on them. I disagree with observers who think that Visa and MasterCard will see big trouble because of the loss of signature debit transactions. I think that Visa and MasterCard won’t be too affected because they will boost their PIN debit offerings to make them more attractive to banks and they will push PIN debit into mobile, online, retail and so on. This means that the income lost from signature debit transactions can be made up by replacing cash and other kinds of transactions with PIN debit (I think – but I’m keen to hear from others who know far more about the US market dynamics).
These opinions are my own (I think) and presented solely in my capacity as an interested member of the general public [posted with ecto]
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
Eric Schmidt’s very bullish comments about near-field communication (NFC) technology in the US retail market have got people talking about business models again.
Eric Schmidt, Google’s executive chairman, believes that a third of check-out terminals in retail stores and restaurants will be upgraded to allow wireless “tap and pay” from mobile phones within the next year.
These follow a series of statements by Google executives that, whether they are true or not, seem to have legitimised the technology in the eyes of a broad range of businesses.
She added that there is a ton of activity around NFC in international markets, giving the example of a successful trial of the technology that Starbucks ran in London.
[From Google Commerce Chief: We’re Making A Huge Bet On NFC As A Company]
I’ve never heard of this Starbucks NFC trial, so if anyone can point me in the right direction I’d really like to read up on it. But that’s beside the point. The point is that lots of people are now taking NFC seriously in the retail space and the mobile operators are developing NFC strategies. But what business model will there be for them? And what options do they have?
The question will then be how operators manage to regain relevance for their role in NFC transactions (which will come later, if at all), when the first trillion NFC interactions will have bypassed them.
[From Dean Bubley's Disruptive Wireless: What will be the business model for free NFC-based interactions?]
You can see the problem that he is alluding to, but it may not be immediately obvious why it is such a problem specifically for operators. Look at the issue from a slightly different perspective, one that stems from security. I would argue that there are two different classes of application for NFC in mobile phones. These are, broadly speaking, “open” applications and “closed” applications. They are, broadly speaking, about interaction in the case of open applications and transaction in the case of closed applications. Creating such applications is, broadly speaking, easy to create in the case of open applications and difficult in the case of closed applications.
Why? Well, it’s because the closed applications need security and the open applications don’t. Open applications are things like games and business cards and “friending”, where consumers touch phones to something (which may be another phone) in order to get or exchange some information. These are what Dean means by “interactions”. Closed applications are things like payments and tickets, where real money is involved (other than the service providers own) and the applications must be what security professionals refer to as “tamper resistant”. They must also work, all the time and every time. These are what Dean means by “transactions”.
Working out how to do implement secure electronic transactions is (I’m happy to say, since it’s a big part of Consult Hyperion‘s business) difficult, complicated and interesting. It’s easy to picture how life might be with your credit card inside your mobile phone, but think what has to happen to realise that picture! How will the security keys necessary for the card application be transported across potentially insecure networks into the tamper-resistant chips (the “secure elements”, SEs) in handsets? How does the bank know that your credit card is going in to your phone and not a fraudsters? When you get a new phone, how does your card make its way from your old phone to the new one? How does the wallet application in the phone communicate with the card application in the secure element?
In the architecture developed by the transaction incumbents (by which I mean banks and telcos), the management of the closed applications is undertaken by something called a “trusted services manager”, or “TSM”, an entity that stis between the providers of closed services, such as banks and transit operators, and the mobile operators who connect to the SEs that they, in effect, own and rent out space on. This model may be disrupted, because it was founded on the assumption that the SE would be under the control of the MNO and that the TSM would have to cut a deal with the MNO to rent the SE space (what you’ll often here telco people refer to as the “apartment model”).
In the Google play, the TSM is operated by First Data and the SE is operated by Google (it’s in the Nexus handset, not on the SIM). The operator has no control over the SE and can extract no “rent” for its use. I notice that in the Nilson report (#972, page 7) it says that the Nexus S is the only smartphone in the US market with an SE not controlled by the mobile operators: it might have said that it’s the only smartphone in the US with an SE, full stop. The operators (in the form of Isis) are not yet in the marketplace. Why are Google being so active then? Well, on the Catalyst Code I read a while back.
Google has obviously made a decision that NFC is an opening into something more interesting and lucrative than transforming a phone into a payment card– advertising and marketing opportunities at the point of sale – the physical point of sale. And, it has done a deal with VeriFone that takes the economic sting away from the merchants who need to buy into their vision to make it work – and who have by and large turned their noses up at NFC up to this point. Layer on top of that their Google Checkout asset and their newly launched One-Pass wallet application and you have the makings of an interesting new payments player.
[From Google Takes on NFC, Will They Crack the Code? at The Catalyst Code]
Karen is, as usual, spot on about this. But I’m not so sure about this…
What’s amazing is that Google was the first to connect all of these dots
[From Google Takes on NFC, Will They Crack the Code? at The Catalyst Code]
This doesn’t seem amazing to me, because I’ve been involved in numerous attempts to develop mobile proximity propositions involving banks and operators and from these experiences have developed (I think) a reasonably accurate map. A month before the Google announcement, I wrote on Quora that “I’m sure [loyalty and rewards] will be Google’s strategy too. Payments are not an interesting enough application to persuade people to go out an get an NFC phone.”
So how come banks and operators didn’t connect the dots, then? Banks and operators have smart people in them, and some of them have smart consultants too. But it is very difficult to make institutional strategies for non-core businesses and have them translated into a practical tactics with appropriate priorities. If you were in a European mobile operator back in 2009 and you had an idea for using NFC to create a new business, where did you go with the idea? I went in to an Orange retail outlet: they are the first operator in the UK to sell a commercial NFC handset with an onboard payment application: not only did the shop not accept NFC payments but they didn’t sell any NFC tchotchkes, such as blank NFC tags. If you’re a smart kid and you get one of these phones, and you have an idea for using tags as tickets for a gig you and your mates are running… well, hard luck. This is problematic, because we need lots of people to be experimenting, developing and playing with the new interface to create the new, open applications.
In April, Nokia’s vice president for industry collaborations, Mark Selby, speaking at the WIMA NFC conference in Monaco, contended that NFC applications not securely stored on SIM cards, embedded chips or other secure elements will account for two-thirds of the revenue that NFC technology will generate through 2013.
I hope Mark won’t mind me mentioning that we discussed this over dinner a couple of weeks ago and, while I agreed with him about the market, I bored him at length with my moaning about the slow development of the ecosystem. Where are the Nokia NFC tags for kids to buy? Where are the NFC USB sticks to connect laptops and phones?
But, looking forward, there’s another issue here. This classification of open/interactive vs. closed/transactional NFC uses is too simplistic, because as the technology spreads in the mainstream, interactions will need to be secure too. When I tap my phone against an advert at the bus stop, I want to find out more about “Kung-Fu Panda 2″ and not get directed to a porn site, a reverse-charge premium rate phone call to Honduras or send a text message to someone who wants to sell my mobile number to commercial organisations. I want my phone to check the digital signature on the tag and make sure that it is valid, and that it is signed by an organisation recognised by UK phone operators, or banks, or the government, or whoever. But signing the tags (which is part of the NFC standards, but no-one uses at the moment) means that someone has to distribute keys, and certificates and all that stuff. None of this exists right now, but in the future it will have to.
So… Not only is there no ecosystem for transactions, there’s no ecosystem for interactions either. Now you can see why the mobile operators are going to have to work so hard to stay in the NFC loop. A couple of years ago they could have started to roll out the handsets for open, interactive purposes and started many communities off on experimenting with the new technology while they developed the necessary infrastructure for both secure transactions and secure interactions, but they didn’t because they couldn’t see a business case. What’s the business case for selling public key certificates so that advertisers can digitally sign tags using their internally-generated private keys?
It’s hard to work out a conventional business case around a business that simply doesn’t exist yet, and I understand that. But I think that even three or four years ago, the consumer response to the early pilots and trials was so positive that it was clear that the technology would make the mainstream. Now that Google’s activities have served, in an odd way, to legitimise both NFC technology and the business models around it, maybe the operators should adopt a more Google-like approach to business model: start building way more cool stuff, monetise what works and then be ruthless in killing off what doesn’t.
My employer, Consult Hyperion, has provided paid professional services to some of the organisations named here in connection with products and services discussed here, but the opinions in this post are my own (I think) and presented solely in my capacity as an interested member of the general public
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
Someone interrupted one of my rants against cash the other day by pointing out that in the last resort, cash is the only payment mechanism that society can depend on. Their trump card was reference to the aftermath of the recent Japanese cataclysm, where following a magnitude 9 earthquake and a tsunami, the nuclear reactors didn’t melt down but the payment system did.
I think this is wrong lesson to draw from it. Yes, there were some temporary problems with the card networks because of the disruption, but it’s important to note that this did not impact all cards: Japan has quite a rich retail payment landscape, as shown in this diagram (which I drew a couple of years ago, so it’s a bit dated, but you get the point).
I saw Nobuhiko Sugiura, Associate Dean of Chuo University Business School, give a good overview of the current situation at last year’s E-Money, Cards and Payments conference in Moscow. He said that e-money usage in Japan is growing rapidly but still a small fraction of total consumer spending (¥1 trillion out of a total of ¥300 trillion, a 300% increase in the last three years). A third of the population use e-money and half of them (ie, one sixth of the population) use it in their phones. It’s a competitive market, centred on non-banks because the Japanese banks have no real interest in handling small payments because or their cost base. The non-banks, as I’ve often noted on this blog, have different business models, not based on transaction fees. The railways, for example, don’t expect to earn anything from their e-money system, it’s about reducing their costs. In comparison, convenience stores want to issue e-money to reduce their cash float. The bottom line is that the of cash at POS in Japan is “already falling” because of e-money.
After the earthquake and tsunami, the offline electronic money systems (such as Edy and nanoco) carried on working so long as there was power and the backup battery systems or generators were working, so you could still pop round to 7-Eleven and buy your staples. In fact, it was people who kept their money in cash who suffered greatly.
In Japan, lots of people — especially older people — keep their life savings in cash in their homes. (The country’s banks pay very low interest rates, so the incentive to deposit that money into bank accounts is lower than in other countries.) This is all well and good, until a tsunami destroys your home and washes your money out to sea.
[From Schneier on Security: Unanticipated Security Risk of Keeping Your Money in a Home Safe]
That’s not to say that people didn’t want cash after the event.
The tragedy playing out in Japan this past week highlighted that in times of crisis, there’s nothing like cash in hand as the universal method of payment. By all accounts the banking system in Japan survived and is functioning well after the earthquake and tsunami – such is the level of disaster preparedness. But Mizuho, Japan’s second largest bank, reported outages in its payments and ATM networks – coincidentally as demand for cash surged.
So they wanted cash, but did they need it? In this kind of catastrophe, where the online POS network goes down but the ATM network stays up and the ATMs remain stocked with notes, you could see people going and withdrawing cash. But suppose there are no ATMs?
Imagine that there was a magnitude 9 earthquake and a tsunami in Woking (unlikely – our last natural disaster was an ice age in 18,000 BCE) and when I go round to Waitrose to buy some bottled water and rice my John Lewis MasterCard proves useless because the acquiring network is down and the ATM proves useless because the ATM has no power. The store manager at Waitrose can leave the food to rot on the shelves or he can accept a signed IOU. He could accept no sale because of flaws in the electronic payments or he could develop a rational fall-back strategy. We discussed this a couple of years ago, with reference to the famous case study of the Irish bank strike.
The owners of shops and pubs knew their customers very well and so were perfectly capable of deciding whether to accept cheques (or just IOUs) from those customers. And since the customers also knew each other very well, they too could make sensible decisions about which paper to accept.
If I was the manager of Waitrose after the Woking earthquake, then I would simply accept payment by writing down card numbers, or photocopying driving licences, or taking pictures of customers, or whatever. The core of the issue is identification and trust, not the payment instrument. As many media commentators noted, society in Japan did not collapse. My conclusion: natural disasters are not a convincing argument for cash.
By the way, I case anyone was wondering about the origami cranes that I was giving out in Chicago this morning… My wife is a teaching assistant in a primary school in Surrey. The seven year old brother of one of the boys who was in her class (they boys have a Japanese mother) has been spending two hours every day for the last month making these (they are a symbol of peace in Japan) to raise money for the British Red Cross appeal for Japanese tsunami victims. Consult Hyperion have purchased a hundred of these beautiful and special cranes, so if you come to our office anytime over the next couple of weeks, please feel free to pick one up with our compliments.
These opinions are my own (I think) and presented solely in my capacity as an interested member of the general public [posted with ecto]
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
Around the world, when faced with new products in the payments space, banks naturally crank up their innovation departments and produce super new products and services to wow customers back. I’m joking, of course. What they actually do in many countries is to going whining to the regulator and force competitors to use the banks’ legacy infrastructure. This is what just happened in India, which really ought to be a huge and dynamic market for e-, m- and new payments of many kinds.
Consequently, from 1 March, the eBay unit says merchants in India cannot receive payments from abroad of over $500 per transaction. In addition, merchants will no longer be able to use any balance in their PayPal accounts to buy goods or services. Instead all payments must be transferred into Indian bank accounts first.
[From Finextra: RBI forces PayPal to restrict payments to Indian merchants]
Now, I’m not saying that banks are the only people who react to innovation in this way: that is, by trying to stop it. This goes on all the time.
For the last fifty years, hard disks have been increasingly super-charged gramophone records: at their heart, there is still a real disk rotating very fast on a real spindle. That’s not the only way to store data, as the memory stick revolution shows, but until now, solid state drives (which have no moving parts) have been too small and expensive to replace traditional hard disks as the main storage device for a computer. Now that’s changing, with real advantages for users as a result… Seagate’s response is to threaten to sue all the new entrants for patent infringement, while insisting that their existing market is not threatened.
At the dawn of the industrial revolution, the steam engine delivered the fundamental business school case study in this topic, something that I wrote about when I was invited to speak at the European Patent Forum back in 2009.
In his keynote address, the Czech Prime Minister Mirek Topolanek said that we had to find a balance in the intellectual property system, that it was right to let Stevenson patent his steam engine but not the screwdriver he used to build it (he didn’t explain why..).
[From Patent error | 15Mb: yet another blog from Dave Birch]
In fact, as I discussed in this post, history teaches the opposite lesson because the patent system held back the evolution of the steam engine for a generation! But back to our business. What kind of innovation is relevant to the payments industry? This is not clear to me. On the one hand, it seems reasonable to say that…
What would be refreshing is if the focus of innovation could be pegged to the value that it delivers to the entire ecosystem, not just the engineers who get a kick out of building cool new toys.
But is this true? When Apple put together the iPod, it didn’t benefit the “entire ecosystem”. The disruptive innovations in fact devastate parts of the ecosystem, like forest fires that allow new shoots to grow. I hate to harp on about the M-PESA example, but I think it illustrates this point well. The banks complained about M-PESA and tried to stop it but fortunately failed. Now that M-PESA has 13m customers and 20,000 agents, the banks are able to deliver new services to new customers using the platform. Were they devastated by the forest fire? No: it gave them space for new shoots as well.
Where do we look for the next new shoots then? Not in banks, generally speaking, but elsewhere in the ecosystem. The payment innovations to come will be technology-enabled, which is why it’s important for businesses throughout that ecosystem to understand the new technologies relevant to payments and, just as importantly, understand the business model ramifications of seemingly dreary technology architecture decisions being made by nerds right now. While they will be technology-enabled, though, it’s the sustainable new business model that is the key. A good example of this is Square.
..if Square can provide just enough added-value with their app to get traction in the small business sector (they are already processing a million dollars a day), then when new payment technologies come along (eg, NFC phones that can accept payments from contactless cards) the merchants will just expect Square to handle them for them. We have long been advising clients that the key disruptive role of mobile phones in the payments world is the ability to take payments, not to make them.
And we still do, in fact. I think Square is an interesting innovation case study. It does not compete with existing acquirers, but opens up the market so that more people can accept card payments.
So where is Square seeing the most traction? Without a doubt, small businesses, independent workers and merchants comprise most of Square’s rapidly growing user base. The technology only requires its tiny credit card scanner that fits into your audio jack and Square’s app. The device and the software are free, but Square takes a small percentage of each transaction (2.75% plus 15 cents for swiped transactions).
[From Square Now Processing Millions Of Dollars In Mobile Transactions Every Week | TechGoo]
In a way, this is a real-world PSP and an fascinating niche play in a large volume-driven acquiring market, one that can be seen to adumbrate mobile disruption and our projection that the mobile-phone-as-POS meme will be more revolutionary than the mobile-phone-as-card meme. But there’s something else to it as well. Conventional acquirers use conventional methods to assess applications.
Square’s qualification rules are more relaxed than those of standard credit card processors, There are no initiation fees, monthly minimums, and when merchants apply for a reader, Square doesn’t just focus on a credit check, but also takes into account the influence a company holds on Yelp, Twitter or Facebook.
[From Square Now Processing Millions Of Dollars In Mobile Transactions Every Week | TechGoo]
That, it seems to me, is more of a window into the coming economy based on the reputation interweb (or web 3.1, as I propose to call it, to avoid clashing with web 3.0). Can you imagine Barclays Business or Streamline giving you a merchant acquiring account according to the number of twitter followers you have rather than your trading history or bank references?
By the way, I can’t remember if I’ve blogged this before but one of my favourite stories about accepting merchants for acquiring accounts goes back more than a decade to the hazy days before the LastMinute flotation. I was doing some work over at what was then NatWest Capital Markets, who had invested millions in Lastminute, when they went beserk because NatWest Streamline wouldn’t give LastMinute a credit card acquiring account because it didn’t have two years’ trading history!
These opinions are my own (I think) and presented solely in my capacity as an interested member of the general public [posted with ecto]
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
France has been in the forefront of the NFC revolution, with an early commitment to cross-industry co-operation, considerable work on standards and models and an aggressive timetable for getting phones into the market. Remember this?
A dozen French cities plan to launch wide-scale contactless payment and information service on mobile phones with the backing of the ministry of industry, reports Les Echos. The city projects approved under the initiative will receive state assistance for consultancy and engineering, but no other subsidies are planned at this stage.
[From Aid from French Ministry of Industry for mobile contactless cities. « Contactless & NFC City League]
You will undoubtedly recall that a few months later, the French mobile operators decided to get together with a processor and form a mobile payments proposition to launch a serious assault on the banks’ retail payment franchise.
Orange, SFR, Bouygues Telecom et Atos Origin créent une société commune pour proposer une plate-forme unique de paiement en ligne, sécurisée par le mobile.
Well they’ve made their first assault on the enemy positions and have been granted a PI licence. Why would they bother, you might wonder, when polls show that the majority of consumers don’t want to use mobile payments?
The 59% of consumers who were against the idea, meanwhile, gave their reasons as: Security (79%)
[From Most French consumers not in favour of mobile payments • NFC World]
The answer is, of course, that consumers don’t know what they are talking about and it’s a waste of time asking them about anything new. Whatever they might say a priori, in all of the pilots and trials that we have been involved in, they really, really, liked mobile proximity.
But there are some real issues, and we need to address them.
Dead phone batteries. Wrong merchant terminals. Terminals turned off. Terminals unrepaired. No terminals at all.
These and other, less obvious glitches suggest contactless technology may not be the mobile payments panacea for tattered magnetic stripes and other problems with plastic cards.
[From Mobile Payments Inheriting the Problems of Contactless - American Banker Article]
Well, yes and no. (I am a consultant, after all). Let’s have a look at these
Dead phone batteries. NFC is interoperable with the existing contactless payments and ticketing systems. As you may have noticed, your Oyster card doesn’t have a battery in it: that’s because it is powered through the electromagnetic field of the terminal you touch it to, and the same is true for the NFC interfaces in phones: if the phone has no battery you may not be able to access your m-wallet to check your transactions, redeem coupons and so on, but you will be able to to use it pay in a shop and ride the subway.
Wrong merchant terminals. I don’t think this will an issue. Right now there are some problems with some cards not being accepted in some terminals, but this is the result of standards problems three or four years ago. The contactless EMV standard should interoperate seamlessly. Some of the terminals are certainly “wrong” from the point of view of consumer experience, but that’s a different thing.
Terminals turned off. Fair enough, I do see this from time-to-time. But it’s a teething problem. There is a problem with terminals being turned off after the merchant has rung up the purchase and then having press some more buttons to turn it on, but that’s an implementation issue.
Terminals unrepaired. I don’t think this is a long term problem. Contactless terminals (since they have no slot or contacts) are considerable more reliable in practice than contact or stripe terminals. Experience from other sectors suggests to me tha tthe cost of maintaining an estate of contactless terminals is less than half the cost of maintaining an estate of conventional terminals.
No terminals at all. This, I think, is the real problem. When I was last in the US, I saw contactless terminals in places where they didn’t really have much impact, like in CVS. But in the places where contactless would have really helped and speeded things up — BART machines, airport carts, Coke machines and so on — nothing.
The point is, that those are real issues that do need dealing with, whereas what the public says are their concerns, such as about the security are, in my opinion, not real issues and it should be handled through marketing communications. Oh, wait…
85% of users said they considered the protocols for operating with the NFC system to be sufficiently secure.
This must be a translation from Spanish, because I’m not sure that “protocols for operating with the NFC system” translates properly in English, but it’s good news all the same. I’m not saying that everything is perfect in the NFC world. Even in France, where progress has been slow despite the commitment of major banks and operators. It’s still a new technology.
The problems are one of the main reasons bank Crédit Mutuel-CIC has held back on launching its m-payment service, according to Patrice Hertzog, payment systems manager for Crédit Mutuel-CIC. He said it has been difficult for the bank’s trusted service manager, Gemalto, to set up and manage the bank’s PayPass application on SIM cards produced by other vendors, such as Oberthur Technologies.
The problems have occurred despite much standards work by the French Association Française du Sans Contact Mobile, or AFSCM, and prior trials involving multiple French banks, mobile operators and vendors.
To be honest, this suggests that vendors are not building TSMs from scratch based on the new standards but are putting wrappers around their existing card personalisation systems. That sort of thing is, to me, more of a real issue than incorrectly worrying about what the public think, but whatever. Things are moving. Even in the US, the new technology is getting a foothold and there will soon be TSMs there too.
The joint venture formed by U.S. mobile carriers to launch NFC-based mobile payment… has selected France-based Gemalto to download and manage payment and other secure applications on NFC phones to be used in pilots expected to be held in three to four cities during the second half of 2011
There’s plenty of activity in the US as elsewhere, and since I’ve been looking at the US for clients recently I was interested to read about the work done by the Federal Reserve Banks of Atlanta and Boston. This work suggests that the success factors for the US will rest on the evolution of an open eco system for NFC.
The mobile infrastructure would likely be based on Near Field Communications (NFC) contactless technology resident in a smart phone and merchant terminals.
Ubiquitous platforms for mobile should leverage existing rails, including the ACH network for non-card payments, and support new payment types that meet emerging needs.
Some form of dynamic data authentication would be at the heart of a layered mobile payments security and fraud mitigation program.Standards would be designed, adopted, and complied with through an industry certification program to ensure both domestic and global interoperability, including a standard to ensure that devices used to facilitate mobile payments do not create any electronic interference problems.
A better understanding of a regulatory oversight model should be developed in concert with bank and non-bank regulators early in the effort to clarify compliance responsibilities.
Trusted Service Managers should oversee the provision of interoperable and shared security elements used in the mobile phone.
[From Mobile Payments in the United States Mapping Out the Road Ahead - Boston Fed]
On that final point, things are already moving.
The joint venture formed by U.S. mobile carriers to launch NFC-based mobile payment… has selected France-based Gemalto to download and manage payment and other secure applications on NFC phones to be used in pilots expected to be held in three to four cities during the second half of 2011
So there’s plenty of activity in the US as elsewhere and plenty of organisations are looking at how the move to mobile proximity may impact their businesses.
A white paper that outlines the survey findings, including how the most forward-thinking financial institutions are building a business case for mobile payments, is available at www.fiserv.com/mobilestrategy.
I couldn’t help but think, as I read this, that the very act of building a business case for something like this is fundamentally backward-looking, trying to shoehorn something that is the basis of a new value network into the existing business models. The report says that the factors that the FIs evaluated across these business lines included customer retention and profitability, cost reduction, revenue generation and retention, increased customer engagement and competitive parity. When I looked at the revenue generation part of it, though, it only referred to revenue generation in terms of debit card transactions and keeping the connection to the DDA. This isn’t how forward-looking organisations are thinking about revenue generation from mobile payments, they are thinking about delivering entirely new products and services that are simply not possible in conventional (ie, card) environments, generating revenue from things that banks don’t do.
Google is to run tests of mobile payments at stores in New York and San Francisco in the summer, according to anonymous sources cited by Bloomberg. The search engine giant will pay for installation of thousands of NFC cash-register systems from VeriFone Systems at merchant locations, one source told the wire.
[From Finextra: Google to run commercial trials of NFC at the POS - Bloomberg]
Well, well. So while financial institutions are agonising over the business case, Google is giving out the terminals for free. It’s not hard to see why: they don’t care about the miniscule margins on the payment transaction and arguing about how to slide and dice the merchant fee, they care about building new business around knowing who is buying what and where. So leadership in the NFC space is may well shift away from the payment incumbents. Perhaps the answer to the age-old question about whether banks or operators would control the mobile payments space is… neither.
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
I’ve often mentioned that car parking represents, to me, the prosaic benchmark for e-money. Car parks are a straightforward and daily example of an environment where cash is a pain and e-money would be a better alternative. This is why I made a big deal of the fact that contactless payments never made it to my local car park, where cards have now been supplanted entirely by mobile payments. This is not true everywhere. I think I’ve mentioned before that on-street car parking is an obvious place to start contactless acquiring: no keyboard, no slot, low-maintenance, simple. Westminster started doing this last year.
From January and over a three-month period, 20 pay and display machines in the West End will be retrofitted with wave-and-pay card readers, so motorists will be able to pay car parking charges by waving a credit or debit card at a meter. According to the local authority, the project is intended to eliminate the need to carry cash around or enter chip and pin details to pay to park.
[From Westminster Council introduces contactless parking payments - 28 Oct 2009 - Computing]
I’m going to try find out what customers think about this approach. Franky, I’m sure they would rather use their Oyster cards, and here’s one reason why…
The machines also incorporate a security function that requires cardholders to confirm their identification with a chip and pin transaction on a regular basis.
[From Westminster Council introduces contactless parking payments - 28 Oct 2009 - Computing]
Hhmmm. This means having to having both a slot and a keypad, which raises costs significantly, and annoys customers when the contactless transaction fails and they are asked to insert the card and enter the PIN. I’ll put in a call to see how this went when I’m back in the office sometime. Meanwhile, the alternative apporach, of using mobiles, continues to gain ground, and it’s not only in Woking that the mobile has trumped the card.
North Devon Council has replaced its Smart card facility with a more modern, pay over the phone system called ‘RingGo’.
[From North Devon Gazette - Council winds up pre-pay parking Smart cards scheme]
It’s not favouritism, although I have mentioned RingGo here before, but I can’t help but notice that when I first went to see them (to interview them for a podcast) I thought that they were a company to watch. I’m actually one of their customers, because they operate the mobile parking at Woking station.
Councils, rail operators and other car park providers across the UK are ditching smartcard and scratchcard parking schemes in favour of streamlined, paperless RingGo.
I think I’ll try and get some of these guys along to the Digital Money Forum 2012, as it will be useful to learn some of the experiences from the front line. Meanwhile, I can’t help noticing that not everyone wants to remove cash from the car park. Take, for example, Wokingham council. It car park machines (according to The Daily Telegraph of 26th February 2011, p.4) took in £982,057 last year but only issued £945,417 of tickets. The discrepancy, as you might expect, comes from the machines that don’t give change, a form of institutionalised extortion. Simply arithmetic reveals that hapless motorists are thus facing a 4% service charge for using cash. It’s time to take action: councils should start making car parks cash-free as soon as possible and learn to cut their cloth. But if the car parks are cash free, and not everyone is using mobile payments, and the banks haven’t issued contactless cards to everyone yet, then how to close the gap? Well, why not have local prepaid cards that function as “town cards” as well.
PXT Payments (PXT, formerly Parcxmart) an electronic payment solutions provider, today announced the launch of its new chip-based, secure smart debit cards, designed to create a safe, local currency that boosts consumer spending in municipalities nationwide. The town of Brookline, MA, will be the first town to adopt both Parcxmart and the smart debit card program.
[From PXT Launches Chip-Based Smart Debit Card for Cities, Towns, BIDs | Earth Times News]
I’m really interested in this kind of thing. It illustrates two points that I have been making for some time: first of all, it emphasises the role of transport in the evolution of new payment systems and secondly, it touches on the role of local parallel and alternative payment systems as a potential growth area. Fortunately both transport payments and alternative payments have their own expert panel discussions set aside at the 2011 Digital Money Forum so we’ll be able to explore both topics in detail. (Coincidence? You be the judge!)
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
When I was in Beijing I decided to try and eat some “real” Chinese food as opposed to the stuff in the hotels and tourist joints. In one of the guide books I spotted a suggestion for a cheap food court downtown where you can try and bunch of different dishes from different cooking traditions. So off I went. It was great, despite the fact that the menus and adverts were all in Chinese with no English translation. So I walked around and pointed at things that looked good (eg, not the skinned bullfrogs). I had some great food, learned to eat fried egg with chopsticks and had some wonderful fresh juice too. So why am I posting this here?
Well, the court had an interesting payment system. At the entrance is a booth where you buy a prepaid contactless card, much like an Oyster card. Inside the food court – which was big, with lots of stalls – there is no cash. When you buy something, they tap your card and off you go. Fast and convenient. When you leave, you either keep the card for next time or you can return it to the booth for a refund.
This seemed very beneficial to the retailers: no cash handling, no wasted counter space, no “shrinkage”, no counting, no security, no bank runs. Why don’t they do this at Glastonbury? Or Westfield? Or in the food court in The Friary in Guildford? Put it in the lease that the retailers have to have contactless terminals and offer a prepaid mall-branded card (like they do at the Trafford Centre, but rechargeable) with special offers. Just a suggestion.
China as a whole is cash-centric, but in Beijing many of the shops and restaurants take cards. I’ve been using my Travelex prepaid Visa card US dollar card while here and I have to say it has worked perfectly so far. Some shops ask for the PIN, some ask for PIN and signature, some ask for signature, but it’s always worked. And it worked in the ATM when I quickly needed to cash for a taxi. I left my credit cards locked up in the room safe and only took cash and prepaid when out and about.
Talking about cards, I had an annoying experience yesterday. It was a lovely spring day and the wind had blown away the pollution, so we looked in the guide book and ended up deciding to go for a bike ride (Beijing is very flat). We choose Bike Beijing and booked a tour. When we got there, however, it turned out that they don’t take cards. And I didn’t have enough cash. I was thinking about borrowing one of their bikes to cycle to an ATM when they mentioned that although they don’t take cards, they do take PayPal on their web site. Hurrah! So using my iPhone I logged into their web site and paid with PayPal. Off we went.
When I got back to the hotel that night, however, there was an e-mail from PayPal saying that my account had been restricted and that I should log in and change my password, which I duly did. The next day I got an embarrassing e-mail from the nice guys at Bike Beijing saying that PayPal had cancelled the transaction. So I figured, OK, this is some annoying fraud detection system, so I’ll connect via VPN so I don’t look like I’m in China and then sort it out. I logged in and tried to send the guys their money but got “Your account is limited. Please check your Account Overview page for messages about resolving this problem.” In order to remove the limitation, I had to verify my location through my home telephone number (which, of course, I couldn’t do because I was in China and no-one was in at home), so I tried to add my mobile number to the account, but however I typed it in I was told “Mobile Telephone: The phone number is not properly formatted.”, presumably because it’s not in a US format. I gave up.
I ended up having to promise the guys at Bike Beijing that I will sort this out when I get back to the UK and then send them their money. I promise I won’t send them a cheque.
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
There’s no doubt that chip and PIN is one of the key planks in the industry strategy to reduce card fraud to manageable levels (which is not the same as eliminating card fraud, note). One of the reasons why it is so secure is that is uses offline PIN verification, where the chip on the card checks that the PIN input at POS is the correct one. And since the PIN is known only to the cardholder, and they never divulge it, this provides validation that… no, wait…
Despite the strict recommendations from card providers about keeping your PIN confidential, research by shopping website VoucherCodes.co.uk has revealed that over half (59pc) of Brits are flouting the rules by sharing their bank card PIN codes and are putting their personal finances in jeopardy.
[From More than half of card users share their PIN - Telegraph]
Uh oh. But come on – anyone out there in the real world will know that it’s impossible to get through life without giving your spouse your PIN. What happens when (to pick a hypothetical example) she can’t remember what the hell she’s done with her handbag and needs to get to Homebase to buy some paint? Or (to pick a hypothetical example) a husband may have stupidly left his wallet in his desk at work but needs to get cash out at an ATM on the way to a football game. Come on – we’ve all done it (except me, I should point out to the terms and conditions chaps at Barclaycard).
The poll of 3,000 people revealed that Brits are most likely to entrust their partners with this security information, but a surprising one in twenty (5pc) adults feel that it is safe to divulge this information to their children.
[From More than half of card users share their PIN - Telegraph]
What? Not in my house they don’t. We have a Visa prepaid card for “house” use, so if the kids need to get some shopping, stuff for school or other supplies, they use that one, and I top it up online when necessary. It’s a simple way to manage money, so I’m surprised more people don’t do this: and it has the added benefit that it doesn’t have a name on it, so if it gets lost or stolen it can’t be used to start identity fraud.
Incidentally: 3 per cent of the people surveyed said that they wrote their PIN on a piece of paper and kept it in their wallet, which may account for at least some of the incidence of the ATM and POS chip and PIN fraud more plausibly than complex attacks on the unencrypted messages between the card and terminal.
There are plenty of other initiatives aimed at improving the overall level of card security. 3D-Secure has taken a long time to get traction but is now widely used in e-commerce. PCI-DSS is costing a fortune, but may reduce the industrial-scale counterfeiting of the magnetic stripe cards still widely used for retail payments in less-developed parts of the world.
In raids conducted Feb. 1, agents seized $300,000 in cash, three firearms and ammunition as well as equipment to make fake credit cards from the gang… The credit card details and stolen identity information was purchased from “online data traffickers via Web-based portals, and the purchasers would store the stolen credit card information in shared e-mail accounts, allowing several defendants to begin creating counterfeit credit cards,” prosecutors said.
[From US indicts 27 in Apple product credit-card fraud ring | MP3 Players | Macworld]
Anything that stops card details like these from falling into criminal hands so easily must be worth the money, right? Actually, on the costs of PCI-DSS, there may be some relief in sight for European retailers.
Visa last week announced a new programme which means European merchants will no longer need to prove they adhere to PCI DSS regulations on an annual basis, as long as 75 percent or more of their transactions originate from EMV-enabled chip and pin terminals. The programme will be introduced on 31 March, 2011
[From Visa PCI DSS exemptions send out mixed messages to merchants | Business Computing World]
So come on, it’s not all bad. In fact the bottom line is that the fraud figures have been improving, and I expect them to improve further still over the next couple of years as we begin the integration of cards and mobiles. This is because even simple integration (eg, texting unusual transactions) delivers good returns and the impending integration of payments with handsets means that issuers will be able to go even further with 24/7 access to the “card”. I won’t rehearse the basic arguments, but I think there are many reasons for thinking that the mobile is a means to manage card fraud down, and line of thinking that we have presented frequently over the years.
So, are mobile payments safe or not? It’s not a “yes” or “no” question, as we hope this discussion has shown. Let’s ask another question instead: Can we make the risks of mobile transactions manageable? The answer to that is “yes”. In fact, in the particular case of mobile proximity payments, we happen to believe that there is more security overall in using a mobile than in using a card payment
[From TM Forum - Article: Mobile Payments - Safer than Cards?]
For one thing, as noted, we can use the mobile to provide information and as communication channel to report on and detect suspicious activity. Potentially more interesting, though, there are techniques that take advantage of the characteristics of the mobile channel, primarily location There are some practical problems to be overcome though.
ValidSoft [has] direct access to mobile networks, tables, and services around the globe and can provide mobile based location services without requiring that users opt in. Many financial institutions are interested in using these services for fraud detection but are concerned about the privacy implications and don’t want their customers thinking they are following them around.
[From Visa Europe sets trend with mobile location-based fraud detection]
Actually, I might well want my issuer to follow me around, but I might also want it to stop other people from following me around. Anyway, I’ll be talking about this kind of thing — including lessons from our practical experience advising leading payments organisations around the world and some of the things we are learning from the Ph.D in mobile handset security that Consult Hyperion is funding at the University of Surrey — at the excellent UK Card Fraud Conference on 29th/30th March 2011 in London.
The magnificent people at DT Conferences have given me a delegate pass for the event — worth an amazing ONE THOUSAND TWO HUNDRED POUNDS plus VAT — to give away on this blog as a competition prize! So if you are going to be in London on those dates and you’d like to come along to meet some of the leading thinkers in the UK’s fight against card fraud (and me) then all you have to do is be the first person to comment on this post with the name of the doomed precursor to 3D-Secure, the PKI-based online card payment security system developed in the 1990s: full name, please, not just the TLA!
In the traditional fashion, this competition is open to all except for employees of Consult Hyperion and members of my immediate family, is void where prohibited and has been gritted for your safety. The prize must be claimed within three months. Oh, and no-one can win more than one of the Digital Money Blog prizes per calendar year.
These are the personal opinions of Consult Hyperion and its guests and should not be misunderstood as representing the opinion of its clients or suppliers. To discuss how any of the technologies discussed in this post can benefit your business, please contact Consult Hyperion.
Recent Posts Recent Comments Recent Mobile Money Practice blog posts