July 15th, 2014 by Elma Jane
Businesses only stand to benefit by making themselves accessible via mobile devices. With a mobile website or mobile app, businesses can boost sales, retain loyal customers and expand their reach. The question is, which type of mobile presence is best for your business Or should you have both? Both mobile websites and mobile apps let customers find and access your business from devices they use the most, but a mobile website and mobile app are not the same thing. To help you decide, check out the differences between the two and how they can benefit your business.
Mobile App – is a smartphone or tablet application. Unlike a mobile website, a mobile app must be downloaded and installed, typically from an app marketplace, such as the Apple App Store or Android’s Google Play store.
Mobile Website – is designed specifically for the smaller screens and touch-screen capabilities of smartphones and tablets. It can be accessed using any mobile devices Web browser, like Safari on iOS and Chrome on Android. Users simply type in the URL or click on a link to your website, and the website automatically detects the mobile device and redirects the viewer to the mobile version of your website.
Mobile website’s benefits
The primary benefit of a mobile website is that it makes regular websites more accessible for mobile users. It can have all the same elements as the regular version of the website, such as its look and feel, pages, images and other content, but it features a mobile-friendly layout that offers improved readability and functionality when viewed on a smartphone or tablet. By having a mobile website, customers can access your website anytime, anywhere using any device, without compromising the user experience.
Mobile app’s benefits
Although a mobile app functions a lot like a mobile website, a mobile app gives businesses the advantage of having their own corner on a customer’s device, because users have to download and install the app, businesses have more control over their presence on a device than they would with a mobile website. For instance, a mobile app can be closed or inactive, but still work in the background to send geo-targeted push notifications and gather data about customer’s preferences and behaviors. Moreover, mobile apps make it easy to deploy loyalty programs and use mobile payments using a single platform. It’s also much easier to access a mobile app than a mobile website all it takes is one tap, versus having to open a Web browser then type in a URL.
Mobile website and Mobile app features
Although mobile websites and mobile apps aren’t the same thing, they generally offer the same features that can help grow your business by making it easier for customers to find and reach you.
Features include the following:
Click-to-map: Users can use their devices’ GPS to locate your business and instantly get directions, without having to manually input your address.
Mobile commerce: Take your online store mobile with e-commerce-capable mobile websites and apps, such as with Buy Now buttons and mobile carts.
One-click calling: Users can call your business simply by tapping on your phone number from your website or app.
Social sharing: This feature integrates social media apps and websites to enable users to easily share content with friends and followers.
Mobile marketing: This lets users sign up for marketing lists and loyalty programs while enabling businesses to easily launch location-based text-message marketing and email marketing campaigns.
How to build a mobile app
Just like the options available for building a mobile website, businesses can either hire an app developer to build a mobile app or take the budget-friendly DIY mobile app maker route.
How to build a mobile website
To build a mobile website, one option is to hire a mobile Web developer to create one from scratch or convert an existing website into a mobile-friendly one. A more affordable option is to build one yourself with a free DIY mobile website builder, which uses a drag-and-drop platform that doesn’t require programming or Web design skills.
Posted in Uncategorized Tagged with: Android's Google Play, Apple App, Chrome, customers, data, devices, e-commerce, email marketing, GPS, iOS, mobile, mobile app, mobile carts, Mobile Devices, mobile website, platform, programs, Safari, smartphone, tablet, URL, Web browser
June 12th, 2014 by Elma Jane
QR: The Bridge to the Modern World
Involvement devices have come a long way from the time of Clearinghouse mailings, where you would peel off a label and stick it onto another page before dropping it back in the mail.
Today, print’s best involvement device is the QR code. It works as a portal or bridge into the mobile online world where the cataloger’s brand lives and breathes in real time. Even better, it can lead the customer from the catalog page to the checkout button on their smartphone within minutes.
The printed catalog delivers rich colors and a personal, tactile experience still not attainable through any mobile device. In many ways, though, it is a vestige of a bygone era, and an expensive one at that. Catalogers know this. Even the U.S. Postal Service also knows this. That’s why the USPS is running a postage discount promotion for the second year in a row this summer to encourage the use of QR codes by direct mailers.
Let’s take a quick look at the way a few catalogers are using QR codes.
Anthropologie
Anthropologie’s marketing strategy is more about selling a lifestyle than selling products. That explains why making it easy for customers to move toward actually buying something doesn’t seem like such a big priority in their catalog. They did not include a QR code anywhere. The closest they came was one line next to the address: For store information, go to www.anthropologie.com. Their 800 number, they do take phone orders is printed only once in tiny type, so having no QR code seems to fit in with their attempts to play hard to get. Marketing critique aside, by not using a QR code on their catalog, they are missing the opportunity to draw customers into closer involvement with their brand, whether or not they intend to make an immediate sale.
Best Practices
With these few examples in mind, it’s time to look at best practices for using QR codes in catalogs, which can be a two-sided equation. There is the technical aspect and the branding/selling aspect. As far as the technical side goes, customers need to use their smartphone to scan the code successfully, and the destination on the other end must be optimized for mobile access. Sometimes the hardest part is organizing the resources required to execute the backend side of things, especially if the goal is to make an immediate sale.
The main thing to consider is that QR codes work as a bridge and that bridge is a smartphone, iPad, or some other tablet with all their usual constraints (screen size, internet connection, quality of camera, QR reader app, user proficiency, etc.). Also, don’t assume that everyone has a QR reader or even knows what a QR code is. Especially in catalogs, where customers have been seeing postal service barcodes for years, people may assume that the pixelated square thing is just something else for the USPS to lose money on. Instead, including a brief call to action to scan the QR code should do the trick.
Crossing the Bridge
Getting customers to scan the QR code is only half the battle. Now you need to make sure they feel it was worth their while to scan. It’s all about the next steps in your customer relationship. If you have an Apple or Android app, then that’s where to send people if you know that you can convert sales successfully on mobile devices. Sending them to your Facebook fan page is an option too, but not a big win if a majority of your customers are already fans.
Special promotions, optimized for mobile access, will certainly earn your QR its keep. If your goal is to inspire a trip to one of your stores, then do what Brookstone does and send customers to a Google map with all store locations within a hundred miles. It’s also possible to send scanners to a dedicated page, again, optimized for mobile where you give them a number of options: Facebook, shop, app, etc.
Delia’s
By appealing to fashion-hungry American teens via retail stores, web, and catalog, Delia’s sold over $220 million in 2011. In the single catalog we looked at, Delia’s had a QR code on its back cover. When scanned, the code points to Delia’s Facebook page. That’s certainly one way to build involvement with the Delia’s brand, but it may not be the best. Delia’s has an Apple app with full e-commerce capabilities, so Delia’s could be missing out on the opportunity to help the customer cut to the chase and get straight to their virtual shopping bag. Still, at least they’re using the code.
King Schools
Unless you’re a pilot in training or know one fairly well, you have probably never heard of King Schools. They offer more than 90 flight training courses, plus all sorts of accessories for pilots-in-training. They have no retail stores, but that’s all the more reason to mention them here, retailers can learn a lot from King Schools about how to use QR codes in their catalogs.
In the one catalog, King used a QR code on the front cover and the back cover. Now, the iPad shows enormous potential for use in general and commercial aviation, so King is smart to use their QR codes to point customers directly toward their mobile apps and offerings. In fact, King Schools uses QR codes on the Take Courses on Your iPad landing page itself.
In most cases it seems counterintuitive to display a QR code on a website for people to scan. After all, they’re already there. It’s a smart use of codes in this case, for two reasons. First, the codes lead the customer directly to the Apple app store, so it actually makes sense to scan the codes even though the customer is already on their website. The customer is now just a few clicks away from buying and installing the app. Second, there is one QR code for their app store in general, and then there are unique codes for individual apps.
Technicalities
The content in a QR code tops out at 4,296 alphanumeric characters, but catalogers only need a fraction of that to get the customer to where they want them. However, even when the character count is down to a few dozen, size does matter, because QR codes with more data embedded in them are more complex visually. This means that even smartphones with the latest and greatest optics will have trouble reading densely populated codes. Make sure the QR code is big enough. Even the simplest codes will frustrate the scanning process if they are too small or if there isn’t enough white space around them. Maybe a QR code isn’t the most photogenic thing in the world, so it’s a good challenge for catalog art directors to incorporate it into the design without shrinking it into oblivion.
More sophisticated catalogers will want to use personalized QR codes. Today, even local printers are likely to have the means to print unique QR codes for each recipient in a mailing. This creates the ability to track scans back to the individual, a marketer’s dream when it comes to one-to-one marketing relationships.
Innovation can get you traction within the social media realm and that’s money in the bank. Whether you’re a major catalog player or using QR for something completely different, always consider getting the marketing and PR people involved to leverage any novelty aspects of the application.
The benefits pile up quickly to those catalogers who take the time to get smart about QR codes. Thick catalog books can be thinned down a bit if QR codes succeed in pulling customers from the page and onto their site or apps, cutting postal costs for the millions of mailings every year. And, even if the cataloger doesn’t go to the extreme of printing unique QR codes, the branding value of offering that connection from the old-style printed piece to the dynamic world of interactive mobile technology makes it well worth the effort.
The ink needed to print a QR code on a major retailer’s catalog might weigh only a fraction of an ounce, but when used right, it’s worth its weight in gold. Too bad the majority of catalogs seem to be squandering the opportunity by underutilizing the code or worse, not including any at all. In a world where an integrated multi-channel approach is a must-have for any retailer to survive, the stakes of leveraging every opportunity for interaction are higher than ever.
Posted in Best Practices for Merchants, Smartphone Tagged with: Android app, Anthropologie, app, Apple, bank, barcodes, Best Practices, Brookstone, clearinghouse, code, commercial aviation, Crossing the Bridge, customer relationship, data, data embedded, Delia’s, e-commerce, Facebook, google, Google map, interactive mobile technology, ipad, King Schools, marketing, mobile, mobile access, mobile device, mobile online, mobile technology, multi-channel, phone, portal, Postal Service, QR code, QR reader, retail stores, scan, scanners, smartphone, social media, tablet, USPS, virtual shopping, web, website
June 10th, 2014 by Elma Jane
Local businesses with brick-and-mortar stores have not been early adopters of ecommerce. But, with the proliferation of mobile devices and with changes in how consumers research and buy products, most local businesses now have websites, many of them mobile optimized. Smart brick-and-mortar retailers invest in local search engine optimization to ensure that their stores are found when a local shopper searches on products that they sell. More aggressive retailers also invest in pay-per-click advertising on Google to ensure that their store names, phone numbers, and addresses are visible to a local shopper that is researching on a smartphone. Google is by far the primary search engine used by mobile shoppers. Google favors mobile friendly online stores and rewards mobile sites with high search rankings. The next logical step for local retailers is investing in on online store.
There are several reasons:
1. Having an online store will help local retailers optimize Google rankings for specific products and brands.
2. Being able to show that an item is in stock may eliminate competitive shopping.
3. Eventually local retailers could sell products to consumers outside the retailers’ immediate area, and thus expand their business.
Many local businesses are hesitant to open an online store. Here is why:
1. Local businesses are typically unfamiliar with running an ecommerce business.
2. Have little ability to ship or fulfill online orders.
3. Cannot accommodate sales tax collection outside their local area.
4. Avoid the investment required.
To be sure, adding an online store is not for every local business. But, if a local retailer offers a unique set of products, she may want to evaluate the concept.
Posted in Best Practices for Merchants, e-commerce & m-commerce Tagged with: brands, brick and mortar, brick-and-mortar stores, consumers, ecommerce, google, Mobile Devices, mobile optimized, mobile sites, online orders, online stores, pay-per-click, products, sales tax, search engine, search engine optimization, smartphone, websites
May 19th, 2014 by Elma Jane
T-Mobile customers who use their carrier’s Mobile Money app and prepaid card will now have surcharge-free access to more than 43,000 Allpoint-branded ATMs across the United States, through an agreement with the Allpoint Network. The Mobile Money program unites a money management app, a T-Mobile Visa prepaid card and the Allpoint surcharge-free ATM network on a single mobile device to provide customers many of the features of a checking account. With Mobile Money, registered T-Mobile wireless customers pay nothing when they use their T-Mobile Visa Prepaid Card to withdraw cash at an in-network Allpoint ATM.
When T-Mobile began developing the Mobile Money program, a key goal was to use the smartphone to help consumers both manage their money and keep more of it in their pocket. The Allpoint Network helps accomplish that mission with 43,000 surcharge-free ATMs found in many of America’s most popular retailers, made even more convenient by a free, easy-to-use Allpoint ATM locator within the Mobile Money app.
Easy access to cash, preferably without the surcharge imposed by the ATM owner, is at the heart of the most successful general-purpose prepaid card programs. Having access to Allpoint, the T-Mobile Visa Prepaid Card is a core component of Mobile Money by T-Mobile. Eligible cardholders looking for the nearest surcharge-free Allpoint ATM can use the Allpoint Network ATM locator, available online and as a free app for their smartphones.
Posted in Financial Services, Mobile Payments, Smartphone Tagged with: Allpoint ATM, Allpoint Network, Allpoint surcharge-free ATM network, Allpoint-branded ATMs, ATM locator, cardholders, checking account, free app, mobile device, mobile money, Mobile Money app, Mobile Money program, money management app, prepaid card, smartphone, surcharge-free, T-Mobile, T-Mobile Visa prepaid card, T-Mobile wireless
April 15th, 2014 by Elma Jane
Amsterdam, Netherlands-based Cardis has been piloting its technology in Europe with Raiffeisen Bank in Austria and Sberbank in Russia. They are now focused on the U.S., as this is the fastest growing mobile payments market in the world, where there’s a huge opportunity. Integration of technology with a large U.S. processor and with a major U.S. retail brand, which will be launching a mobile site and mobile app using Cardis solution.
Cardis International is planning an April launch in the U.S. for its technology, which enables merchants to accept low-value contactless or mobile payments without incurring high processing charges. Cardis is able to bring down the processing cost of low-value payments, the company said, by aggregating multiple transactions into a single payment.
The problem
Contactless card and NFC-based mobile payments are typically for low amounts, and yet still use a card processing infrastructure that was designed 40 years ago when the average credit card transaction was $100.
Traditional card processing systems require each transaction to be individually processed through the payment system, including authorization, clearing and settlement. The resulting variable costs of processing each transaction are independent of the transaction amount and too high for low-value payments, particularly in low-margin industries such as quick-service restaurants. QSR restaurants often have a 3 percent profit margin, yet, for low-value contactless payments, the processing cost could be as high as 6-7 percent of the transaction value.
Mobile and contactless cards offer consumers a convenient form factor. But they don’t solve the problem that low-value card payments are very expensive for merchants.
As an ever-increasing percentage of transactions have become cashless, card processing fees have become a significant cost. Costs that are based on the number of transactions, rather than their value. With average per person expenditures of $5 or under, feels each swipe fee much more than a business where customers spend $50 or more. But not accepting credit/debit cards for low-value transactions isn’t an option as many of customers don’t carry cash anymore.
Aggregation
Cardis’ solution is to act as an aggregator of low-value payments, sending a single batched transaction through to a processor instead of multiple low-value transactions. As there is no per transaction processing of individual low-value purchases, the cost-per-transaction is significantly reduced.
Cardis provides its technology as a software plug-in to payment service providers for contact-based and contactless card payments, mobile wallet transactions and NFC payments.
There are two models. For card payments, it will aggregate multiple purchases by an individual cardholder at a single merchant on a post-paid basis up to a specific amount, for example $20. To guarantee payment to the merchant, since the aggregated transaction is processed at a later date, it will pre-authorize an amount, for example $15, the first time the customer makes a purchase at that merchant.
Alternatively, merchants can opt for Cardis’ prepaid system. This involves the consumer setting up a prepaid account hosted by Cardis’ sponsoring bank that is topped up via ACH (automated clearing house) transfers. Using the Cardis prepaid account on a smartphone provides the digital equivalent to cash.
With its post-paid solution, merchants will save 30-50 percent per transaction compared to conventional card processing fees, while its prepaid solution saves merchants 80 percent per transaction. With the post-paid solution, it will only aggregate a customer’s purchases at a single specific merchant. But, as the prepaid solution aggregates the customer’s purchases across multiple merchants, this enables to offer a much lower processing fee to the merchant.
Cardis provides an audit trail enabling consumers to track individual transactions that are aggregated using its technology. Consumers don’t lose any of their card protection rights and guarantees by agreeing to let a merchant aggregate their payments through Cardis. They can always charge back any disputed transactions.
Cardis sees opportunities for digital content providers such as online music stores and games providers to use its aggregation technology. It can integrate solution with existing digital wallets.
Raiffeisen
In 2012, Austria’s Raiffeisen Bank launched a pilot of Cardis technology for NFC-based Visa V Pay debit card payments in partnership with Visa Europe. Raiffeisen’s MobileCard mobile payment product uses a secure element stored on an NFC-enabled MicroSD card inserted in a mobile phone. Although Cardis supports secure elements stored on SIM cards as well as on MicroSD cards and on the cloud, Raiffeisen opted for MicroSD cards, as this is an easier solution to implement.
Raiffeisen cardholders participating in the pilot use MobileCard on average three times a week, with an average transaction value of ($5.70). Merchants accepting MobileCard are seeing 40 percent to 70 percent lower merchant processing fees for an average transaction value of ($5.43) to ($13.60).
Spindle
In October 2013, Spindle, a U.S. mobile commerce company, signed an agreement with Multi-max, a manufacturer of vending machines for mid-size and small offices throughout North America, Europe and Asia. Spindle will integrate its MeNetwork mobile commerce technology into Multi-max’s line of K-Cup vending machines for rollout across the U.S.
The MeNetwork solution will incorporate all card-based payment acceptance services, as well as mobile marketing services. Spindle’s partner Cardis will provide low-value payment processing services for purchases at K-Cup vending machines.
Posted in Credit card Processing, Credit Card Security, Digital Wallet Privacy, e-commerce & m-commerce, Electronic Payments, Gift & Loyalty Card Processing, Internet Payment Gateway, Mobile Payments, Mobile Point of Sale, Near Field Communication, Payment Card Industry PCI Security, Smartphone, smartSD Cards, Visa MasterCard American Express Tagged with: accept, ach, aggregated, aggregation, aggregator, authorization, automated clearing house, average transaction, batched, card payments, card processing infrastructure, card processing systems, card-based payment acceptance, cardholders, clearing, contactless, contactless payments, cost-per-transaction, credit card transaction, debit card payments, Digital wallets, high processing charges, low-value payments, merchant aggregate, Merchant's, microSD, mobile app, mobile commerce, mobile payment, Mobile Payments, mobile site, mobile wallet transactions, nfc-based, payment service providers, pre-authorize, prepaid, processed, Processing, processing cost, processing fees, processor, settlement, smartphone, transactions, transfers
April 8th, 2014 by Elma Jane
Today’s consumers are defining themselves by their mobile devices, their social presences and how they interact with brands, both offline and online. The digital evolution of the average consumer is alive and kicking.
Today’s consumer is more connected than ever, with more access to and deeper engagement with content and brands. Thanks to the proliferation of digital devices and platforms. Content that was once only available to consumers via specific methods of delivery such as via print, radio and broadcast television can now be sourced and delivered to consumers through their multiple connected devices. This is driving the media revolution and blurring traditional media definitions.
What are the specific characteristics or dynamics shaping today’s consumer behavior? Digital consumers are social-savvy and more connected to their friends, family and favorite brands than ever before.
Focused On The Gadgetry
Consumers love gadgets.
One out of four Americans plan to buy a smartphone in the near future. Thirty percent intend to upgrade from a regular mobile phone to a smartphone once able. For those ages 18 to 24, 49 percent they want to upgrade to a smartphone.
How frequently consumers use their mobile devices in a given month? Consumers spent an average of 34 hours and 17 minutes per month using apps on their devices, an increase of 9 hours and 52 minutes from 2012.
Interestingly, the amount of time consumers spend surfing the Web fell 1 hour and 54 minutes to a total of 27 hours and 3 minutes. The amount of time used to watch videos online increased by 43 minutes, to 6 hours and 41 minutes.
Social Media & Everyday Life
Digital consumers, by and large love their social media.
Sixty-four percent said that they use social media at least once per day. For mobile however, the growth figures reported suggest a broad shift is happening, pushing more people to access social networks via mobile platforms.
Forty-seven percent of smartphone owners log onto a social network each day. Additionally, the number of people who use social-media apps on their smartphones rose by 37 percent from 2012.
Digital consumers are also diversifying their choice of social networks, opting to use LinkedIn and Pinterest in addition to so-called traditional social media platforms like Facebook and Twitter.
As digital consumers find their own mix of devices and platforms to access and engage with social media, they are building profiles and connections on multiple social networks as well.
Two Screens Is A King
Digital consumers also rely on their mobile devices as a second type of television screen.
In a survey, eighty-four percent said they use their smartphone or tablet to surf the Web or to use apps while watching television. Of those, 44 percent of tablet owners shopped while watching TV, and 24 percent used their smartphones to make purchases.
Fourteen percent of tablet owners used their device to buy a product or service as it was being advertised on TV. Just 7 percent of smartphone owners said they would do the same.
Posted in Best Practices for Merchants, Credit card Processing, Financial Services, Merchant Services Account, Mobile Payments, Small Business Improvement, Smartphone Tagged with: apps on their devices, average consumer, content, deeper engagement, digital consumers, digital devices, digital evolution, Facebook, gadgets, linkedin, media revolution, Mobile Devices, mobile platforms, offline and online, pinterest, regular mobile phone, smartphone, social media, social network, social presences, social-media apps, social-savvy, tablet, traditional media, twitter
March 17th, 2014 by Elma Jane
With so much to do each day, it’s easy for a small business owner to get bogged down in details. That’s where your smartphone comes in. With the right apps, your mobile device can automate the tasks that used to be daily chores. Whether you need help keeping track of all your business documents, or organizing your calendar and contacts list, it’s time to let your smartphone do some of the heavy lifting.
Back up your business files. Your work machine contains everything you need for a productive day, including every file and document you are working on. But you can’t always be at the office. With your smartphone and the right apps, however, you can back up and access your business files from anywhere. Dropbox, Box, Google Drive, SkyDrive and iCloud are all solid mobile apps that automate the process of syncing your business files to the cloud so you can access them from any Web-connected device, including your smartphone or tablet. Better yet, any edits you make will be synced across all your devices, so you can stay productive and organized.
Manage new contacts. Swapping business cards is a great networking strategy, but cards are easy to lose, and manually inputting all that contact information into your address book is a chore. So let your smartphone enter all that data into your address books. CamCard (available for iOS and Android) is an all-in-one business card management solution. Just point your iPhone camera at a card and snap a photo. The app’s text-recognition software will pull out the key details and update your address book automatically. It can even search for new contacts on LinkedIn to add a photo and additional personal details for each new contact.
Silence your smartphone. A buzzing or ringing smartphone can be distracting – not to mention embarrassing – during a business meeting. Silencing your phone is simple, but chances are you’ll occasionally forget. That’s why there are handy apps that monitor your smartphone calendar for meetings and appointments, then silence your phone for the duration of that event. You can even whitelist specific numbers so you won’t miss an emergency call. When the meeting is over, your smartphone’s ringer and vibration settings will be returned to their normal state. That way, you can stay focused and free from distraction when it matters most. Android users can try Silencify. For iPhone users, AutoSilent is a good option.
Sync your calendars. Both Android and iOS have built-in calendars to help you plan your week and schedule meetings. But juggling both a mobile calendar and a desktop office calendar is a pain, so why not use your smartphone to synchronize the two? If you use Microsoft Outlook as your business calendar, for example, Google Calendar offers an easy way to link them. And iPhone users can synchronize their mobile calendar with Outlook by plugging their smartphone into their computer and accessing the Calendars tab in the iTunes options menu. Automating the process of syncing your calendars means you’ll never mix up appointments. And if you share your business calendar with your employees, it ensures that everyone is always on the same page.
Sync your social media accounts. A strong presence on Facebook and Twitter can help you engage your customers and grow your business. Mobile apps can help you keep your business profiles fresh when you’re on the go, but reposting those updates on each platform individually can be a chore especially from a tiny smartphone screen. Fortunately, there’s an easy way to automate the process of synchronizing social media posts between your business profiles. Simply visit this page to link your Facebook and Twitter accounts. After that, go ahead and use the Facebook mobile app to post updates, news or promotions to your business’s Facebook page, each post will be automatically funneled to your Twitter followers as well.
Posted in Best Practices for Merchants, Mobile Payments, Small Business Improvement, Smartphone Tagged with: all-in-one, Android, apps, automate, automate the process, automating, box, business documents, business profiles, camcard, devices, dropbox, Facebook, google drive, icloud, iOS, Iphone, linkedin, Mobile Apps, mobile device, networking, organizing, productive, skydrive, small business, smartphone, synchronize, synchronizing social media, syncing, tablet, twitter, web-connected
March 17th, 2014 by Elma Jane
Lots of talk has gone on since the recent spate of merchant data breaches on ways to potentially prevent hackers from gaining access to stored payment card data. Use of biometric information, such as a fingerprint, to access stored credentials is among the solutions often bandied about.
The prospects of using individuals’ biometric information for credentialing is fairly scary. Security may be what biometrics is trying to achieve, but it’s also its biggest flaw. Imagine having your fingerprint information stored at Target this holiday season, that information would now be in the hands of lots of people not intended to have access to it. Unlike a password, someone can’t change his or her fingerprint. So once someone has the print, they have it forever. So even if something is biometric based, it also has to have a lot of other security measures, and that could include GPS-based location services tied to an individual’s smartphone.
Biometrics alone won’t work. It’s very scary that that information could be stored in a way that someone could figure out how to get it. Even if encrypted, that’s a huge security concern. You can’t change your fingerprint.
Posted in Credit card Processing, Credit Card Security, Electronic Payments, Payment Card Industry PCI Security, Smartphone Tagged with: biometric, card data, credentialing, encrypted, fingerprint, gaining access, gps-based, merchant data breaches, password, prevent hackers, Security, security measures, smartphone, stored credentials
February 20th, 2014 by Elma Jane
Android-iPhone-Credit-Card-Reader
Several options exist for mobile credit card processing.
Credit card processing on iPhone/ipad/Android/BlackBerry or Tablets – Using NTC’s portable credit card readers, merchants can now swipe credit cards on iPad or Android tablet devices. NTC’s Virtual Merchant solution allows users to download a secure application to interfere your smartphone with our merchant account services seamlessly. The application and credit card processing data on the carriers network or a WiFi connection to the internet.
NTC’s MagTek Bullet Swipe Credit Card Reader for Android Phones and Tablets.
Using any Android 2.2. or higher device you can process credit card transactions securely to the smartphone via Bluetooth and utilize wireless devices internet connection (WiFi or Carrier) to send the credit card processing data encrypted for processing approval.
Security anywhere. With the BulleT Secure Credit Card Reader Authenticator (SCRA), security comes with the flexibility and portability of a Bluetooth wireless interface. Small enough to fit into the palm of your hand, the BulleT enables secure wireless communications with a PC or mobile phone using the popular Bluetooth interface. Not only does the BulleT encrypt card data from the moment the card is swiped, but it also enables card authentication to immediately detect counterfeit or altered cards.
Ideal for merchant services accounts and financial institutions’’ mobile credit card processing, NTC’s BulleT offers MagnaSafe credit card processing security features with the convenience of a Bluetooth interface. This powerful combination assures credit card data protection, transaction security and convenience needed to secure mobile credit card processing with strong encryption and 2-factor authentication. The BulleT is specifically designed to leverage the existing magnetic stripe credit card reader as a secure token empowering cardholders with the freedom and confidence of knowing that their credit card transactions are secure and protected anytime, anywhere. Android Credit Card Swipe Reader for Android Phones and Tablets on your wireless mobile merchant account.
NTC’s MagTek iDynamo Credit Card processing swipe reader for iPhone and Ipad.
Credit card processing on an iPhone has never been easier. Simply attach NTC’s iDynamo card reader to your iPhone or iPad device, install our Virtual Merchant software from the App Store and you’re ready to go. Take advantage of lower credit card processing rates by processing swiped transactions instead of keying the credit card in later and get paid faster. From the company that leads with Security from the Inside MagTek has done it again with the iDynamo, a secure card reader authenticator (SCRA) designed to work with the iPhone and iPad. The iDynamo offers MagnasafeTM security and delivers open standards encryptions with simple, yet proven DUKPT key management, immediate tokenization of card data and MagnePrint card authentication to maximize data protection and prevent the use of counterfeit cards. Mobile merchants can now leverage the power of their iPhone/iPod Touch products without the worries of handling or storing sensitive card data at any time. Ideal for wireless mobile merchant accounts and mobile credit card processing, the iDynamo offers MagneSafe security features combined with the power of iPhone and iPod Touch products. This powerful combination assures convenience and cost savings, while maximizing credit card data protection and credit card transaction security from the moment the card is swiped all the way to authorization. No other credit card reader beats the protection offered by a MagnaSafe product.
Other credit card devices claim to encrypt data in the reader. NTC’s iDynamo encrypts the data inside the read head, closest to the magnetic stripe and offers additional credit card security layers with immediate tokenization of card data and MagnePrint card authentication. This layered approach to security far exceeds the protection of encryption by itself, decreases the scope of PCI compliance, and reduces fraud.
NTC’s iDynamo is rugged and affordable, so it not only withstands real world use, it performs to the high standards set by MagTek as the leader in magnetic credit card swipe reading products for nearly 40 years.
Posted in Credit card Processing, Credit Card Reader Terminal, Credit Card Security, Digital Wallet Privacy, e-commerce & m-commerce, Electronic Payments, Internet Payment Gateway, Merchant Services Account, Mobile Payments, Mobile Point of Sale, Payment Card Industry PCI Security, Smartphone Tagged with: Android, android phones and tablets, authenticator, blackberry, bluetooth, card authentication, credit card processing data, devices, encrypt card data, encrypted, internet, ipad, Iphone, magnetic stripe, magtek bullet, merchant account, merchant services accounts, Merchant's, mobile credit card processing, portable credit card readers, process credit card transactions, processing approval, secure, secure application, secure token, smartphone, swipe credit card reader, swipe credit cards, tablets, transaction security, virtual merchant, wifi, wireless devices internet connection
February 14th, 2014 by Elma Jane
News from Target, increasing the number of cards compromised to 70 million and the expansion of data loss to mailing and email addresses, phone numbers and names, affirms that we are in a security crisis.
Card data is from a brand and business perspective, the new radioactive material. Add personally identifiable information (PII) to the list of toxic isotopes.
The depressing vulnerabilities these breaches reveal are a result of skilled hackers, the Internet’s lack of inherent security, inadequate protections through misapplied tools or their outright absence. Security is very very hard when it comes to playing defense.
There is a set of new technologies that could, in a combination produce a defense in depth that we have not enjoyed for some time.
Looking at the Age of Context (ACTs)
Age of Context released, a book based on the hundreds of interviews conducted with tech start-up and established company leaders. A wide-ranging survey. They examine what happens when our location and to whom we are connected are combined with the histories of where and when we shop. Result is a very clear picture of our needs, wants and even what we may do next.
Combining the smartphone and the cloud, five Age of Context technologies ACTs, will change how we live, interact, market, sell and navigate through our daily and transactional lives. The five technologies are:
1. Big Data. Ocean of data generated from mobile streams and our online activity, can be examined to develop rich behavioral data sets. This data enables merchants to mold individually targeted marketing messages or to let financial institutions improve risk management at an individual level.
2. Geolocation. Nearly every cell phone is equipped with GPS. Mobile network operators and an array of service providers can now take that data to predict travel patterns, improve advertising efficiency and more.
3. Mobile Devices and Communications. These are aggregation points for cloud-based services, sending to the cloud torrents of very specific data.
4. Sensors. Smartphones, wearables (think Fitbits, smart watches and Google Glass) and other devices are armed with accelerometers, cameras, fingerprint readers and other sensors. Sensors enable highly granular contextual placement. A merchant could know not only which building we are at and the checkout line we are standing in but even which stack of jeans we are perusing.
5. Social. Social networks map the relationships between people and the groups they belong to, becoming powerful predictors of behavior, affiliations, likes, dislikes and even health. Their role in risk assessment is already growing.
The many combinations and intersections of these technologies are raising expectations and concerns over what is to come. Everyone has a stake in the outcome: consumers, retailers, major CPG brands, watchdog organizations, regulators, politicians and the likes of Google, Apple, Microsoft, Amazon, eBay / PayPal and the entire payments industry.
We are at the beginning of the process. We should have misgivings about this and as an industry, individuals and as a society, we need to do better with respect to privacy and certainly with respect to relevance.
Provided we can manage privacy permissions we grant and the occasionally creepy sense that someone knows way too much about us, the intersections of these tools should provide more relevant information and services to us than what we have today. Anyone who has sighed at the sight of yet another web ad for a product long since purchased or completely inappropriate to you understands that personalized commerce has a long way to go. That’s part of what the Age of Context technologies promise to provide.
ACTs in Security
ACTs role in commerce is one albeit essential application. They have the potential to power security services as well, specially authentication and identity-based approaches. We can combine data from two or more of these technologies to generate more accurate and timely risk assessments.
It doesn’t take the use of all five to make improvements. One firm have demonstrated that the correlation of just two data points is useful, it demonstrated that if you can show that a POS transaction took place in the same state as the cardholder’s location then you can improve risk assessment substantially. (based off of triangulated cell phone tower data).
Powerful questions of each technology that ACTs let us ask:
Data – What have I done in the past? Is there a pattern? How does that fit with what I’m doing now?
Geolocation – What building am I in? Is it where the transaction should be? Which direction am I going in or am I running away?
Mobile – Where does device typically operate? How’s the device configured? Is the current profile consistent with the past?
Sensors – Where am I standing? What am I looking at? Is this my typical walking gait? What is my heart rate and temperature?
Social – Am I a real person? Who am I connected to? What is their reputation?
Knowing just a fraction of the answers to these questions places the customer’s transaction origination, the profiles of the devices used to initiate that transaction and the merchant location into a precise context. The result should improve payment security.
More payments security firms are making use of data signals from non-payment sources, going beyond the traditional approach of assessing risk based primarily on payment data. One firm have added social data to improve fraud detection for ecommerce payment risk scoring. Another firm, calling its approach Social Biometrics, evaluates the authenticity of social profiles across multiple social networks including Facebook, Google+, LinkedIn, Twitter and email with the goal of identifying bogus profiles. These tools are of course attractive to ecommerce merchants and others employing social sign on to simplify site registration. That ability to ferret out bogus accounts supports payment fraud detection as well.
This triangulation of information is what creates notion of context. Apply it to security. If you can add the cardholder’s current location based on mobile GPS to the access device’s digital fingerprint to the payment card, to the time of the day when she typically shops, then the risk becomes negligible. Such precise contextual information could pave the way for the retirement of the distinction between card present and card-not-present transactions to generate a card-holder-present status to guide risk decision-making.
Sales First, Then Security
The use of ACT generated and derived signals will be based on the anticipated return for the investment. Merchants and financial institutions are more willing to pay to increase sales than pay for potential cost savings from security services. As a result, the ACTs will impact commerce decision making first-who to display an ad to, who to provide an incentive to.
New Combinations
Behind the scene, the impact of the ACTs on security will be fascinating and important to watch. From a privacy perspective, the use of the ACTs in security should prove less controversial because their application in security serves the individual, merchant and the community.
Determining the optimal mix of these tools will take time. How different are the risks for QR-code initiated transactions vs. a contactless NFC transaction? What’s the right set of tools to apply in that case? What sensor-generated data will prove useful? Is geolocation sufficient? Will we find social relationships to be strong predictor of payment risk or are these more relevant for lending? And what level of data sharing will the user allow-a question that grows in importance as data generation and consumption is shared more broadly and across organizational boundaries. It will be important for providers of security tools to identify the minimum data for the maximum result.
I expect the ACT’s to generate both a proliferation of tools to choose from and a period of intense competition. The ability to smoothly integrate these disparate tools sets will be a competitive differentiator because the difficulty of deployment for many merchants is as important as cost. Similar APIs would be a start.
Getting More from What We Already Have
The relying parties in a transaction – consumers, merchants, banks, suppliers – have acquired their own tools to manage those relationships. Multi-factor authentication is one tool kit. Banks, of course issue payment credentials that represent an account and proxy for the card holder herself at the point of sale or online. Financial institutions at account opening perform know your customer work to assure identity and lower risk.
Those siloed efforts are now entering an era where the federated exchange of this user and transactional data is becoming practical. Firms are building tools and the economic models to leverage these novel combinations of established attributes and ACT generated data.
The ACTs are already impacting the evolution of the payments security market. Payment security incumbents, choose just two from the social side, find themselves in an innovation rich period. Done well, society’s security posture could strengthen.
Posted in Best Practices for Merchants, Credit card Processing, Credit Card Security, e-commerce & m-commerce, Electronic Payments, Internet Payment Gateway, Payment Card Industry PCI Security, Point of Sale, Smartphone, Visa MasterCard American Express Tagged with: big data, breaches, card data, cardholders, checkout lines, commerce, data loss, data sets, digital, ecommerce, geolocation, GPS, inherent security, Merchant's, Mobile Devices, mobile network, online activity, personally identifiable information, pii, POS, Security, security crisis, sensors, smartphone, social networks, transaction, transactional, travel patterns, vulnerabilities
