Skip to main content

Contactless Payment

 

A contactless payment is a wireless financial transaction in which the customer authorizes monetary compensation for a purchase by moving a security token in close proximity to the vendor's point of sale (PoS) reader. Popular security tokens for contactless payment include chip-enabled bank cards and smartphone digital wallet apps. Contactless payments may also be referred to as touch-free, tap-and-go or proximity payments. When goods or services are purchased through a contactless payment, the process may then be referred to as a frictionless checkout.  

Contactless payments are known for being secure because the customer does not share billing or payment information directly with the vendor. Instead, all communication is encrypted and each purchase is tokenized with a one-time transaction number. Should a wireless transmission be intercepted, the only information the attacker will get is the one-time code that was used to identify a particular transaction.

The adoption of contactless payment has been accelerated by COVID-19 and a desire for consumers to avoid person-to-person contact when making in-store purchases. The U.S. Payments Forum and EMV (Europay, Mastercard and Visa) are responsible for setting the technical standards for smart payment cards, as well as for the PoS readers that accept them.

Standards that support contactless payments

Frictionless checkouts are supported by the Near Field Communication (NFC), Radio Frequency Identification (RFID), Magnetic secure transmission (MST) and quick response code (QR code) standards. According to the National Retail Federation, two-thirds of retailers in the United States now accept some form of contactless payment. Visa, Mastercard and American Express offer contactless-enabled bank cards, while Apple Pay, Google Pay, Samsung Pay and Venmo are among the most popular digital and mobile wallet apps for smartphones.

How do contactless payments work?

Contactless payment cards and authorized mobile devices have an embedded RFID microchip, transponder and an antenna. To make a purchase, the customer must be in close proximity to the vendor's reader. Neither Apple Pay nor Google Pay process or authorize transactions. Instead, they tokenize the shopper's payment card and simply pass that information on to the appropriate credit card network.

The microchips used in contactless payments generate new verification values each time a card or authorized device is used in a transaction. This approach is very different from how magnetic stripe cards transmit data. When a traditional magnetic card is swiped, the customer's billing information is transmitted to the card reader each time the card is swiped. That information can be intercepted and used by another person, or perhaps sold on the dark web. When a transaction is conducted wirelessly, however, the only information that can be intercepted is the unique authentication code that identifies that specific transaction has occurred.

Because a new code is generated each time a chip card is used, it is very difficult for thieves to clone the card and try to make purchases. The dynamic authentication technology is simply not capable of being duplicated in a manner that will return the same dynamic codes as those that would be returned by a valid chip card. In addition, smartphones will have added security methods for before initiating contactless payments -- for example, requiring the user to authenticate their identity via a method such as FaceID.

Besides security, what other benefits do contactless payments offer?

Contactless payments take somewhere between 30-50% less time than standard credit card payments and are over 60% faster than cash transactions. This makes them a good fit for micropayments and other low-dollar-value purchases. Contactless payment methods are popularly used to increase throughput for public transportation turnstiles, parking garage checkout terminals and road tolls. Although the actual amount of time saved per transaction may be less than a minute, the minutes saved can add up and significantly reduce the time customers spend waiting in lines.

As the technology gains acceptance, non-traditional banking institutions and third-party payment providers such as PayPal have begun to experiment with ways to improve frictionless checkout. For example, some payment providers are exploring ways that GPS technology can be added to help mobile customers locate financial services, such as ATMs, or opt in to loyalty promotions conducted through targeted geofenced campaigns.

 

Comments

Post a Comment

Popular posts from this blog

A Graphics Processing Unit (GPU)

A graphics processing unit (GPU) is a computer chip that performs rapid mathematical calculations, primarily for the purpose of rendering images. A GPU may be found integrated with a central processing unit (CPU) on the same circuit, on a graphics card or in the motherboard of a personal computer or server. In the early days of computing, the CPU performed these calculations. As more graphics-intensive applications such as AutoCAD were developed; however, their demands put strain on the CPU and degraded performance. GPUs came about as a way to offload those tasks from CPUs, freeing up their processing power. NVIDIA, AMD, Intel and ARM are some of the major players in the GPU market. GPU vs. CPU A graphics processing unit is able to render images more quickly than a central processing unit because of its parallel processing architecture, which allows it to perform multiple calculations at the same time. A single CPU does not have this capability, although multi...
Post a Comment
Read more

What's the difference between two-step verification and 2FA?

  The two terms, two-step verification, and two-factor authentication are synonymous, though the former is now being used more widely by the likes of Google, Microsoft, and Apple as it better conveys how the actual authentication process works. In the past, two-step verification was used to describe processes that used the same authentication factors, while two-factor authentication described processes that involved different factors, such as entering a password on a website and receiving a numerical code on a mobile device. Today, the two terms are both used to describe authentication that involves a secondary factor that is different from the first. Authentication is a vital element of access control and data security because users can be assigned access rights and be authorized to perform certain actions only after successful authentication is performed. The ways in which someone can be authenticated fall into three categories based on what is known ...
Post a Comment
Read more

Ghosting

Ghosting is to cease communications without notification. The use of the word "ghost" as a verb originated in social media in reference to dating, but the term is now used by employers to describe employees and potential employees who suddenly disappear. Typically, ghosting is used to describe: Job candidates who suddenly stop responding to messages. New hires who fail to show up for their first day of work. Employees who do not show up for a shift. Employees who leave work in the middle of the day and never come back. Some analysts blame ghosting on millennial entitlement. The reasoning is that members of the millennial generation have been brought up to feel they are special -- so special, in fact, that they do not need to follow conventional rules of behavior. Other analysts, however, maintain that ghosting behavior stems from changes in the job market and the phenomenon is simply a reflection of the laws of supply and demand in a healthy jo...
Post a Comment
Read more