advertisement
advertisement

This is page 2 of:

Wal-Mart: “It’s Time For Chip-And-PIN In The U.S.”

May 20th, 2010

Another concern that Wal-Mart—and others—have raised is the security weakest link belief. In essence, that belief argues that cyberthieves will start to shy away from countries using EMV and move more of that fraud to the more easily defrauded mag-stripe cards. That possibility coupled with the deep pockets of the U.S., and America could become even more of a fraud target—unless the U.S. adopts Chip-and-PIN.

Henry commented on that trend when answering a question about the U.S. Senate’s efforts this week to pass financial regulatory legislation that is supported by retail lobbyists and strongly opposed by lobbyists representing the card brands. Part of the bill would add government oversight—and presumably restrictions—on the interchange rates charged to retailers.

Henry said he believed the interchange reform bill, if made into law, would actually help EMV get adopted in the U.S. because it will give the card brands a strong financial incentive. “I think it will push toward the technology because it is more secure. [Card brands] won’t be able to push the fraud expense into the merchants.” It’s not clear that the bill, if made into law, would prevent those fraud expenses. But it’s likely the government oversight would make such charges more difficult.

For the moment, Wal-Mart doesn’t accept EMV (in the U.S.), contactless payment nor, for that matter, loyalty cards. Henry was asked why his chain does not currently accept contactless.

“A business case hasn’t been made yet to make [contactless] interesting to us,” he said. “When the business model is right, we are more than willing to move forward.”

Another participant on Henry’s panel was Richard Mader, the executive director of the National Retail Federation’s (NRF) Association for Retail Technology Standards (ARTS). Mader agreed with Wal-Mart that retailers need to go to an EMV approach, but he said how exactly to get there is less clear.

“Retailers need a clear roadmap. What is the right path?” Mader asked. “Is it going to be associated with mobile? Perhaps existing cards with PIN so you don’t have to change everything?”

It seems clear now that the U.S. will eventually make the move to EMV. When Wal-Mart and even a few of the other largest chains insist on the move, there’s little that can be done to stop it. But even then, it’s going to take years to make the transition. Like so many other elements of security technology, there’s a fine chance that EMV protections—such as they are—may be obsolete by the time the U.S. completes the move.

Still, it’s the better choice for security and convenience, and the sooner retailers start down that path, the better. And if one chain will lead that movement, no one is better than Wal-Mart. After all, when you have $405 billion in annual sales, you somehow tend to always get the last word.


advertisement

5 Comments | Read Wal-Mart: “It’s Time For Chip-And-PIN In The U.S.”

  1. Dan Stiel Says:

    Jamie is right that the U.S. has lagged in shoring up card security. For most merchants, it’s a chicken or egg question. The incentive for retailers not quite as big as WMT to invest in another round of hardware upgrades will be lower costs and lower charge-backs. But, why invest if no cards exist.

  2. Techwatch Says:

    It is amazing how often the US lags behind Europe in many tech issues

  3. bill bittner Says:

    Retailers are often the most rational technology buyers around. They recognize the marginal benefits of technology and are not willing to spend money on it just because “it’s cool”. Since computers have been around for quite a while now, it is not the technology that is going to take a retailer to the next level, rather it will be how well their organization adopts technology. If the people really learn how to get all they can from the tools they’re given, the marginal improvement that can come from new technology is often minor. It is the added staff training and the emphasis of management that gets the greater return. Of course, the technology vendor will be quick to take credit.

    The one exception to all this might be in the payments process. This is where technology can truly make a difference. Just as it takes staff some time to learn it, thieves need time to learn how to circumvent new payment systems. In this case it might just make sense to use new technology merely for the sake of using it. It could also merely mean the retailer attracts a smarter thief.

  4. Venus Says:

    The technology is already there. We have debit cards, they can use the same technology for credit cards. It’s all BS. I don’t understand why the credit card companies have delayed this security feature for so many years. And now with Identity theft on the rise, all the more reason to implement this globally.

  5. cestmoi Says:

    US is waaay behind in so many areas, not only in EMV but also other technological advances such as during tax times.

    In some countries, during tax time, all you have to do is (assuming you’ve already applied for your government ID card with chip), you then purchase a nominal IC reader which can only be obtained from a government agency which you can plug into any computer Internet ready with USB connector.

    Download current year’s electronic tax form, plug in your ID card with IC chip; confirm on screen info (it will auto download all your reported income by various companies that you worked for during the year and any other reported income by banks, investment firms, etc) a few clicks later, you’re done. Your tax has been filed.

Newsletters

StorefrontBacktalk delivers the latest retail technology news & analysis. Join more than 60,000 retail IT leaders who subscribe to our free weekly email. Sign up today!
advertisement

Most Recent Comments

Why Did Gonzales Hackers Like European Cards So Much Better?

I am still unclear about the core point here-- why higher value of European cards. Supply and demand, yes, makes sense. But the fact that the cards were chip and pin (EMV) should make them less valuable because that demonstrably reduces the ability to use them fraudulently. Did the author mean that the chip and pin cards could be used in a country where EMV is not implemented--the US--and this mis-match make it easier to us them since the issuing banks may not have as robust anti-fraud controls as non-EMV banks because they assumed EMV would do the fraud prevention for them Read more...
Two possible reasons that I can think of and have seen in the past - 1) Cards issued by European banks when used online cross border don't usually support AVS checks. So, when a European card is used with a billing address that's in the US, an ecom merchant wouldn't necessarily know that the shipping zip code doesn't match the billing code. 2) Also, in offline chip countries the card determines whether or not a transaction is approved, not the issuer. In my experience, European issuers haven't developed the same checks on authorization requests as US issuers. So, these cards might be more valuable because they are more likely to get approved. Read more...
A smart card slot in terminals doesn't mean there is a reader or that the reader is activated. Then, activated reader or not, the U.S. processors don't have apps certified or ready to load into those terminals to accept and process smart card transactions just yet. Don't get your card(t) before the terminal (horse). Read more...
The marketplace does speak. More fraud capacity translates to higher value for the stolen data. Because nearly 100% of all US transactions are authorized online in real time, we have less fraud regardless of whether the card is Magstripe only or chip and PIn. Hence, $10 prices for US cards vs $25 for the European counterparts. Read more...
@David True. The European cards have both an EMV chip AND a mag stripe. Europeans may generally use the chip for their transactions, but the insecure stripe remains vulnerable to skimming, whether it be from a false front on an ATM or a dishonest waiter with a handheld skimmer. If their stripe is skimmed, the track data can still be cloned and used fraudulently in the United States. If European banks only detect fraud from 9-5 GMT, that might explain why American criminals prefer them over American bank issued cards, who have fraud detection in place 24x7. Read more...

StorefrontBacktalk
Our apologies. Due to legal and security copyright issues, we can't facilitate the printing of Premium Content. If you absolutely need a hard copy, please contact customer service.