eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.
One thing became clear during the Feb. 3 Senate hearings on credit card security, it is that the duty to protect card payment systems falls to everyone in the payment chain.
This means that banks and credit card issuers need to provide for up to date security, merchant processors need to be able to handle card payments securely, customers need to have the ability to get secure credit cards, and finally merchants need to have a secure method of accepting payments.
If you listen to the posturing on Capitol Hill, another thing that becomes clear is that is that each of the major players claim the slow adoption of secure payment systems might be someone else’s fault. But that’s not the case. In fact, it’s everyone’s fault that the more secure method of processing card payments, the EMV chip and PIN system, isn’t as widely available in the U.S. as it is everywhere else in the world.
As a business the best you can do is to take responsibility for the part of the credit card process over which you have some control. That means if you want to reduce fraud, you need to be able to accept the more secure EMV-equipped chip and PIN cards. These credit cards work by inserting the credit card into a reader, at which point the customer will be asked to enter a PIN on the number pad. At that point the sale will be approved.
One of the great misunderstandings about EMV card acceptance is that it’s somehow hard to accomplish and difficult to implement. Turns out, it’s neither. In fact, it turns out that if your business wants to accept EMV equipped cards, all you have to do is ask the right person.
I talked with spokespeople from Bank of America and Chase to find out exactly what’s required for a business to accept the secure chip and PIN cards. According to Joe Rauch, a spokesman for Bank of America Merchant Services the first thing you need is a merchant account with BofA or some other bank that handles the secure card readers. Rauch said that once the merchant is set up to accept credit cards, they will need to purchase the card reader.
The card reader does require an investment of between several hundred to as much as two thousand dollars, Rauch said, depending on the type of machine that the business needs, the details of their point of sale system and how many readers they need.
Implementing EMV Chip and PIN Cards Can Be Costly, but Not Difficult
He said that for most businesses the reader only needs access to a phone line and it will work.
Steve O’Halloran, a spokesman from Chase, said that his organization will configure the point of sale terminal for each customer, and then ship it directly. “Our goal is to make merchants transition to new EMV-enabled terminals as seamless as possible,” O’Halloran told eWEEK in an e-mail.
The process works like this: A business that wants to accept EMV-equipped credit cards calls Chase and requests a new POS Terminal. The merchant services staff at Chase then works with the business to determine which payment networks they want to use. There are several available in the U.S. Once that’s done, the folks at Chase register the terminal with the networks and teach the merchant how to use the terminal if they don’t already know.
Once Chase sets it up, the terminal is able to accept EMV-enabled payments as soon as it’s connected to a working phone line. The terminals come from Chase Paymentech, which is the payment processing company that handles Chase credit card processing. The terminals are capable of automatically updating themselves remotely. Chase sells a terminal that the company says is future proof, and comes able to accept any sort of payment card currently in use.
So what’s the hold-up in accepting EMV chip and PIN cards? Partly it’s because many businesses don’t know how to go about getting the new machines. Partly it’s because the credit card processing companies don’t all provide EMV-enabled point of sale terminals. And partly it’s because a fairly significant number of companies use proprietary software in their POS terminals and that software needs to be modified so that EMV-capable readers will work.
For larger companies, it’s the sheer size and cost of the project. Target officials said during their Senate hearing testimony that the cost of converting all of its POS machines to accept EMV cards will be about $50 million dollars. That’s a lot of money, because Target has a lot of terminals. You can expect that a company of similar size will find the costs are about the same.
But companies are going to have no choice but to accept EMV-capable cards by October 2015 because at that point credit card issuers are changing the rules so that merchants without the ability to handle EMV-equipped cards will be liable for credit card fraud. That could be a lot more expensive than buying the right machines and getting the right software.