PayPal Picks Up Phone Payments Player. Is In-Store The Idea?

Written by Frank Hayes
July 13th, 2011

At a time when almost everyone else seems to think mobile payments are rolling steadily toward smartphones, Visa and near-field communication (NFC), PayPal keeps making unsignaled left turns. On July 7, the eBay subsidiary announced that it’s buying Zong, a company that lets customers make payments through their mobile phone bills, using almost any phone and with payment-card companies completely out of the loop.

PayPal says it is acquiring Zong for online purchases of digital goods, which is what Zong is used for now. But Zong’s approach is simple enough that it could be used for in-store payments, too—without NFC or smartphones, using existing POS hardware and without payment-card interchange or PCI requirements. Is that what PayPal has in mind?

Zong’s process is wonderfully dumb: You give the retailer (online or off) your mobile-phone number. The retailer sends the phone number and sale amount to Zong. Zong sends a text message containing a confirmation code to your mobile phone. You give that to the retailer, your phone bill is charged and the transaction is complete. The confirmation code is effectively a one-time password, so whether it’s overheard or stolen is irrelevant. The phone number is hardly a secret, and there’s no card number to be picked off by a thief with an RFID scanner.

No NFC, no PCI, no Google or Apple. No special hardware or software for the customer. It should work equally well for E-Commerce or in-store. There’s still the problem of a stolen phone that has become the equivalent of a stolen payment card, but that’s something every mobile-payments scheme has to deal with.

And although it’s not as tap-and-go simple to use as NFC-based approaches, it probably could be—using, say, a contactless sticker with the customer’s phone number on it. But under the covers, it’s conceptually so simple that it might actually break through to consumer acceptance, the way contactless cards haven’t.

So is this PayPal’s secret plan to make a big play for in-store mobile payments by making NFC irrelevant? You might think so—except that on Wednesday (July 13) PayPal announced an Android app using NFC for person-to-person payments, with technology that could be as easily adapted for in-store use as Zong’s.

It’s another unsignaled left turn—and although we don’t mind PayPal driving in circles, it is getting hard to believe even the company knows where it’s going.


Comments are closed.


StorefrontBacktalk delivers the latest retail technology news & analysis. Join more than 60,000 retail IT leaders who subscribe to our free weekly email. Sign up today!

Most Recent Comments

Why Did Gonzales Hackers Like European Cards So Much Better?

I am still unclear about the core point here-- why higher value of European cards. Supply and demand, yes, makes sense. But the fact that the cards were chip and pin (EMV) should make them less valuable because that demonstrably reduces the ability to use them fraudulently. Did the author mean that the chip and pin cards could be used in a country where EMV is not implemented--the US--and this mis-match make it easier to us them since the issuing banks may not have as robust anti-fraud controls as non-EMV banks because they assumed EMV would do the fraud prevention for them Read more...
Two possible reasons that I can think of and have seen in the past - 1) Cards issued by European banks when used online cross border don't usually support AVS checks. So, when a European card is used with a billing address that's in the US, an ecom merchant wouldn't necessarily know that the shipping zip code doesn't match the billing code. 2) Also, in offline chip countries the card determines whether or not a transaction is approved, not the issuer. In my experience, European issuers haven't developed the same checks on authorization requests as US issuers. So, these cards might be more valuable because they are more likely to get approved. Read more...
A smart card slot in terminals doesn't mean there is a reader or that the reader is activated. Then, activated reader or not, the U.S. processors don't have apps certified or ready to load into those terminals to accept and process smart card transactions just yet. Don't get your card(t) before the terminal (horse). Read more...
The marketplace does speak. More fraud capacity translates to higher value for the stolen data. Because nearly 100% of all US transactions are authorized online in real time, we have less fraud regardless of whether the card is Magstripe only or chip and PIn. Hence, $10 prices for US cards vs $25 for the European counterparts. Read more...
@David True. The European cards have both an EMV chip AND a mag stripe. Europeans may generally use the chip for their transactions, but the insecure stripe remains vulnerable to skimming, whether it be from a false front on an ATM or a dishonest waiter with a handheld skimmer. If their stripe is skimmed, the track data can still be cloned and used fraudulently in the United States. If European banks only detect fraud from 9-5 GMT, that might explain why American criminals prefer them over American bank issued cards, who have fraud detection in place 24x7. Read more...

Our apologies. Due to legal and security copyright issues, we can't facilitate the printing of Premium Content. If you absolutely need a hard copy, please contact customer service.