apsca: managing fraud, authentication transactions - mpos

13
Chang Chew Soon Founder, Soft Space Managing Fraud, Authentication Transactions MPOS

Upload: soft-space

Post on 29-Jun-2015

251 views

Category:

Mobile


5 download

DESCRIPTION

Chang Chew Soon, Founder & CEO of Soft Space was part of the speaker panel at the 5th Asian Payment Card Forum which was held in Bangkok this year. The event which ran through the 23rd to the 24th of September hosted a variety of speakers from the Payment and Card industry such as Ben Soppitt of Visa, Jinjia Zhou of EMVCo, Raymond Yap of MasterCard Worldwide and many others.

TRANSCRIPT

Page 1: APSCA: Managing Fraud, Authentication Transactions - mPOS

Chang Chew SoonFounder, Soft Space

Managing Fraud, Authentication TransactionsMPOS

Page 2: APSCA: Managing Fraud, Authentication Transactions - mPOS

Value PropositionOur technology transforms any mobile device into a mobile point of sales (MPOS).Enables anyone to accept payments, anywhere, anytime, securely

Then: EDC Terminal

Now:Mobile Point of

Sales

Page 3: APSCA: Managing Fraud, Authentication Transactions - mPOS

About Us

Soft Space is a mobile payments technology company, headquartered in Kuala Lumpur, Malaysia.

Established in March 2012, with a head count of 4, Soft Space focuses on the development of innovative solutions for the banking and payment industry.

As of today, Soft Space commands over 50% market share in South East Asia with deployments in 14 banks, and a staff strength of 60.

Certifications

Page 4: APSCA: Managing Fraud, Authentication Transactions - mPOS

Recognition

Soft Space’s business strategy and centralised EMV solution has won several awards both at national and regional level.

Soft Space is Asia’s first company to obtain full EMV certification on MPOSRemains one of the very few companies in the world with centralized EMV processing technology

Best of Financial Applications Winner 2013

Best of Start-up Companies Winner 2013

Asia Pacific ICT Alliance Awards ASEAN ICT Awards Best Start

Up Winner 2013

Red Herring Top 100

AsiaWinner

Page 5: APSCA: Managing Fraud, Authentication Transactions - mPOS

Recognition

Soft Space’s business strategy and centralised EMV solution has won several awards both at national and regional level.

Best Acquiring Institution in Southeast Asia, 2013

In recognition of international-standard

electronic banking safety and innovation of mobile

point of sale (mPOS)

Visa Risk Management Leader Award 2013Retail Banker International Asia Trailblazer

Excellence in Mobile Banking

In recognition of the implementation of the

Plug n Pay mobile point of sale (mPOS)

Kasikorn Bank

Thailand

CIMB BankMalaysia

Page 6: APSCA: Managing Fraud, Authentication Transactions - mPOS

12

34

1 2 3 4

5 6 7

5

6 7

14

14

14

89

8 9

11

10

12

13

10

11 12 13

CIMB BankMalaysia

Hong Leong BankMalaysia

CIMB NiagaIndonesia

Bank XMalaysia

Bank XSingapore

Bank XIndonesia

Bank XIndonesia

Kasikorn BankThailand

Thanachart BankThailand

VietinBankVietnam

SacombankVietnam

Bank of New ZealandAustralia & New Zealand

Bank XTaiwan

Bank XPhilippines

Geographical Point of View

Page 7: APSCA: Managing Fraud, Authentication Transactions - mPOS

12

34

1 2 3 4

5 6 7

5

6 7

14

14

14

89

8 9

11

10

12

13

10

11 12 13

CIMB BankMalaysia

Hong Leong BankMalaysia

CIMB NiagaIndonesia

Bank XMalaysia

Bank XSingapore

Bank XIndonesia

Bank XIndonesia

Kasikorn BankThailand

Thanachart BankThailand

VietinBankVietnam

SacombankVietnam

Bank of New ZealandAustralia & New Zealand

Bank XTaiwan

Bank XPhilippines

Chip & Signature vs Chip & Pin

EMV & Domestic Chip & Pin

EMV Chip & SignatureDomestic Chip & Pin

EMV Chip & Signature(Optional MSR fallback)

Page 8: APSCA: Managing Fraud, Authentication Transactions - mPOS

How to steal a pin?

Page 9: APSCA: Managing Fraud, Authentication Transactions - mPOS

Introducing FLIR One Thermal Imaging Casing

What is thermal imaging?

Everything around you either emits or reflects heat energy

Thermal imaging makes the invisible world of heat energy visible to your eyes

Detects infrared energy, processes thermal image, perform temperature calculation, and is very precise

USD 350

Page 10: APSCA: Managing Fraud, Authentication Transactions - mPOS

Pin code is12345

Page 11: APSCA: Managing Fraud, Authentication Transactions - mPOS
Page 12: APSCA: Managing Fraud, Authentication Transactions - mPOS

Security of the reader Hardware Encryption

Mobile Phone Security Software Encryption Data Storage on the device

Cross-border transactions Geo-fencing

Transaction Monitoring Fraud Prevention vs Detection

MPOS & Its Associated Risks

Authentication Physical vs Logical Online vs Offline Magnetic Strip vs Chip

Cardholder Verification Signature vs Pin

12

34

5 6 7

14

14

89

11

10

12

13

Page 13: APSCA: Managing Fraud, Authentication Transactions - mPOS

Offline Pin vs Online Pin Visa & MasterCard mandates online authentication for MPOS transactions Under what circumstances do we allow offline? Performance vs risks

Pin Change ATM machines Issuer

Case Study: Malaysia’s recent mandate to full chip & pin for both international & domestic schemes

Costs of card reissuing Costs of POS terminal upgrades Costs of infrastructure & backend system upgrades