advertisement
advertisement

This is page 2 of:

PayPal: Chains Get PINs, Small Fry Get The Good Stuff

May 31st, 2012

Many have been awaiting Apple’s decision on whether it will support NFC in its next iPhones and iPads. Some, though, have been pushing iPhones to use the high-end functionality without NFC. Jason Richelson, CEO of POS vendor ShopKeep (another PayPal partner), said that he has given up waiting for Apple. “I just don’t see Apple getting into payments,” Richelson said, adding that the check-in functionality of PayPal can be accomplished on iPhones by leveraging geolocation. He has also found ways to use the iPhone’s camera to communicate with the iPads his retailers use as a POS system.

The biggest weapon that PayPal has, of course, is its huge installed base of 110 million active accounts. Warren Kornblum, the chief strategic officer at Rooms To Go (another of the chains PayPal announced), said that he wasn’t expecting any customer who wasn’t already a PayPal user to try the system in his stores.

ShopKeep’s Richelson echoed that comment. “I thought it would be hard to get our (retailers’) customers to set up PayPal accounts, but it turns out that they already had them,” he said. “PayPal has been awakened by Square and others out there who have been trying to get into payments. This multi-tier approach is the right approach for them.”

This is all well and good for PayPal, but what are the benefits for retailers? There have been a lot of subsidies going around, with PayPal covering the costs of Home Depot and its partners and PayPal seeing to it that the major chains have little to no out-of-pocket costs associated with these trials. That makes the trial hard to say “no” to.

But that’s temporary. For this to work, retailers need to either see increased basket size from the mobile programs or see that it’s luring customers from rival chains that don’t offer the mobile functionality. It’s hard to see how the entry-level phone-number-and-PIN trials will do that. Only the full mobile wallet packages—with integrated CRM programs, customized discounts, accelerated shopping, ability to switch payments from card to card, check-in points, etc.—would seem to be able to do anything lasting. Hence, the major chains must either upgrade or this simply won’t work.

That said, once in place, there’s little incentive for a chain to remove it. If it’s not upgraded, though, the result may be similar.

With the small merchants, the functionality enables a customer to alert a store before she arrives and to receive customized promotions. Rather than a customer acquisition program, some have described it as a retention tool, because customers who use it and like it tend to want to keep using it. Bingo: an IT reason to keep shopping at that same store.

There is also a security concern. Some in the PayPal community have argued that the smaller amount of data requested by the PayPal low-end mobile trials makes it safer, because a data breach would capture less useful information.

The bigger security issue, though, is that the system only requires two pieces of information to complete a purchase: phone number and 4-digit PIN. Mobile phone numbers are often widely shared today, so that piece is rarely a secret.

The key, then, is the 4-digit PIN, which could easily be seen by someone watching over a customer’s shoulder. If it’s learned, there’s no physical item needed. Thefts could happen, and the thief would be long gone before a customer would even learn of the theft. And if that PayPal account is tied into a bank account—like any debit card, it doesn’t enjoy the protection of zero-liability programs—customers could have to engage in a huge amount of unpleasantness.


advertisement

Comments are closed.

Newsletters

StorefrontBacktalk delivers the latest retail technology news & analysis. Join more than 60,000 retail IT leaders who subscribe to our free weekly email. Sign up today!
advertisement

Most Recent Comments

Why Did Gonzales Hackers Like European Cards So Much Better?

I am still unclear about the core point here-- why higher value of European cards. Supply and demand, yes, makes sense. But the fact that the cards were chip and pin (EMV) should make them less valuable because that demonstrably reduces the ability to use them fraudulently. Did the author mean that the chip and pin cards could be used in a country where EMV is not implemented--the US--and this mis-match make it easier to us them since the issuing banks may not have as robust anti-fraud controls as non-EMV banks because they assumed EMV would do the fraud prevention for them Read more...
Two possible reasons that I can think of and have seen in the past - 1) Cards issued by European banks when used online cross border don't usually support AVS checks. So, when a European card is used with a billing address that's in the US, an ecom merchant wouldn't necessarily know that the shipping zip code doesn't match the billing code. 2) Also, in offline chip countries the card determines whether or not a transaction is approved, not the issuer. In my experience, European issuers haven't developed the same checks on authorization requests as US issuers. So, these cards might be more valuable because they are more likely to get approved. Read more...
A smart card slot in terminals doesn't mean there is a reader or that the reader is activated. Then, activated reader or not, the U.S. processors don't have apps certified or ready to load into those terminals to accept and process smart card transactions just yet. Don't get your card(t) before the terminal (horse). Read more...
The marketplace does speak. More fraud capacity translates to higher value for the stolen data. Because nearly 100% of all US transactions are authorized online in real time, we have less fraud regardless of whether the card is Magstripe only or chip and PIn. Hence, $10 prices for US cards vs $25 for the European counterparts. Read more...
@David True. The European cards have both an EMV chip AND a mag stripe. Europeans may generally use the chip for their transactions, but the insecure stripe remains vulnerable to skimming, whether it be from a false front on an ATM or a dishonest waiter with a handheld skimmer. If their stripe is skimmed, the track data can still be cloned and used fraudulently in the United States. If European banks only detect fraud from 9-5 GMT, that might explain why American criminals prefer them over American bank issued cards, who have fraud detection in place 24x7. Read more...

StorefrontBacktalk
Our apologies. Due to legal and security copyright issues, we can't facilitate the printing of Premium Content. If you absolutely need a hard copy, please contact customer service.