<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: Chip and pin Canada &#124; the basic flaw</title>
	<atom:link href="http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/feed/" rel="self" type="application/rss+xml" />
	<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/</link>
	<description>Tracking the evolution of financial institutions</description>
	<lastBuildDate>Tue, 14 Feb 2012 15:54:46 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
	<item>
		<title>By: Dan Dickinson</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26313</link>
		<dc:creator><![CDATA[Dan Dickinson]]></dc:creator>
		<pubDate>Fri, 07 Nov 2008 19:55:13 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26313</guid>
		<description><![CDATA[Colin,

Not sure how we got on the topic of replacement cards, but ok. :)

I&#039;m not sure what else a bank could do other than cancel the card. You said the customer may have been compromised, but as far as the issuing bank knows, it&#039;s only the CARD that&#039;s compromised. Short of investigating every aspect of the customer&#039;s life, they couldn&#039;t determine that and the best they can do is change the lock on the door: the card. Inefficient and expensive, to be certain, but I don&#039;t think it&#039;s a dirty little secret. More to the point, if a customer&#039;s card were defrauded and the bank DIDN&#039;T replace the card, the customer would be justifiably angry.

Maybe this all changes under PIN (regardless of whether the stripe lives on), I don&#039;t know. But I don&#039;t think the current process is quite as nefarious as you suggest!]]></description>
		<content:encoded><![CDATA[<p>Colin,</p>
<p>Not sure how we got on the topic of replacement cards, but ok. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>I&#8217;m not sure what else a bank could do other than cancel the card. You said the customer may have been compromised, but as far as the issuing bank knows, it&#8217;s only the CARD that&#8217;s compromised. Short of investigating every aspect of the customer&#8217;s life, they couldn&#8217;t determine that and the best they can do is change the lock on the door: the card. Inefficient and expensive, to be certain, but I don&#8217;t think it&#8217;s a dirty little secret. More to the point, if a customer&#8217;s card were defrauded and the bank DIDN&#8217;T replace the card, the customer would be justifiably angry.</p>
<p>Maybe this all changes under PIN (regardless of whether the stripe lives on), I don&#8217;t know. But I don&#8217;t think the current process is quite as nefarious as you suggest!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Colin</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26300</link>
		<dc:creator><![CDATA[Colin]]></dc:creator>
		<pubDate>Thu, 06 Nov 2008 17:48:57 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26300</guid>
		<description><![CDATA[@Dan ... but the dirty liitle secret of bank&#039;s is that every day they cancel 1,000&#039;s of cards adn bank accounts, and and re-issue new ones to customers who &#039;may&#039; have been compromised.  No-one talks about that, but the inconvenience and sheer inefficiency of that process is maddening.  

Further, the customer inconvenience for those traveling to Botswana and the US pales in the customer experience associated with the above dirty little secret.

@Mark - its not fear of chip/pin that I describe.  It is fear that is doesn&#039;t do what it promises so long as we compromise the card with the mag-stripe.

@Dave - eloquently stated.]]></description>
		<content:encoded><![CDATA[<p>@Dan &#8230; but the dirty liitle secret of bank&#8217;s is that every day they cancel 1,000&#8242;s of cards adn bank accounts, and and re-issue new ones to customers who &#8216;may&#8217; have been compromised.  No-one talks about that, but the inconvenience and sheer inefficiency of that process is maddening.  </p>
<p>Further, the customer inconvenience for those traveling to Botswana and the US pales in the customer experience associated with the above dirty little secret.</p>
<p>@Mark &#8211; its not fear of chip/pin that I describe.  It is fear that is doesn&#8217;t do what it promises so long as we compromise the card with the mag-stripe.</p>
<p>@Dave &#8211; eloquently stated.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan Dickinson</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26299</link>
		<dc:creator><![CDATA[Dan Dickinson]]></dc:creator>
		<pubDate>Thu, 06 Nov 2008 14:55:17 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26299</guid>
		<description><![CDATA[I keep thinking back to something I heard a representative from one of the big issuers say about 7 years ago, when the idea of chip was still just being introduced in Canada. He said that as daunting as credit card fraud was, if by introducing the chip they discouraged (through complexity or growing pains, presumably) even 1% of credit purchases per year, then the fraud savings wouldn&#039;t be worth it.

Whether that&#039;s true or not I don&#039;t profess to know, but this gentleman stated it as a common fact shared in the industry. I certainly don&#039;t doubt it. If it&#039;s true, or even if it&#039;s accepted dogma, I can understand why the issuers are reluctant to mess with the customer&#039;s experience or risk turning customers away at the counter.

Another note: Canadian merchants are still allowed to use the clunky old imprint devices. I&#039;ve taken three cabs in the last month that used the old &#039;kachunk-kachunk-sign&#039; method of security. Suddenly magstripe doesn&#039;t seem so bad...]]></description>
		<content:encoded><![CDATA[<p>I keep thinking back to something I heard a representative from one of the big issuers say about 7 years ago, when the idea of chip was still just being introduced in Canada. He said that as daunting as credit card fraud was, if by introducing the chip they discouraged (through complexity or growing pains, presumably) even 1% of credit purchases per year, then the fraud savings wouldn&#8217;t be worth it.</p>
<p>Whether that&#8217;s true or not I don&#8217;t profess to know, but this gentleman stated it as a common fact shared in the industry. I certainly don&#8217;t doubt it. If it&#8217;s true, or even if it&#8217;s accepted dogma, I can understand why the issuers are reluctant to mess with the customer&#8217;s experience or risk turning customers away at the counter.</p>
<p>Another note: Canadian merchants are still allowed to use the clunky old imprint devices. I&#8217;ve taken three cabs in the last month that used the old &#8216;kachunk-kachunk-sign&#8217; method of security. Suddenly magstripe doesn&#8217;t seem so bad&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dave Birch</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26295</link>
		<dc:creator><![CDATA[Dave Birch]]></dc:creator>
		<pubDate>Wed, 05 Nov 2008 20:11:02 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26295</guid>
		<description><![CDATA[&quot;Why can Canadian banks not issue cards with chip only.&quot;

I agree.  This seems to me to be one of the main lessons learned from the U.K deployment.  If people need a magnetic stripe card because they are going to Botswana or the U.S., it&#039;s trivial to provide instant issuance of short-validity stripe cards with different PANs at a branch (or from a vending machine, frankly).]]></description>
		<content:encoded><![CDATA[<p>&#8220;Why can Canadian banks not issue cards with chip only.&#8221;</p>
<p>I agree.  This seems to me to be one of the main lessons learned from the U.K deployment.  If people need a magnetic stripe card because they are going to Botswana or the U.S., it&#8217;s trivial to provide instant issuance of short-validity stripe cards with different PANs at a branch (or from a vending machine, frankly).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mark</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26288</link>
		<dc:creator><![CDATA[Mark]]></dc:creator>
		<pubDate>Mon, 03 Nov 2008 17:53:49 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26288</guid>
		<description><![CDATA[As a Brit living and working in Canada I can understand the frustration and fear of chip and pin. Back in the UK we rolled out chip and pin nationwide in 2004 we had the same fears as did the merchants.

However it is now the norm and in time it will be in Canada. Cloning will always happen, charge backs will always happen  but overall I do feel more secure with my chip and pin. 

It&#039;s funny though as I still use my chip&#039; mastercard and visa from the UK for purchases here I always get the same replies ooh what&#039;s this then is it real? *rolls eyes* from a selfish point of view I can&#039;t wait til the cards are rolled out here as less people will stop assuming my card is some fake or &quot;wont work&quot; without even trying as it can be run on the old or new system.]]></description>
		<content:encoded><![CDATA[<p>As a Brit living and working in Canada I can understand the frustration and fear of chip and pin. Back in the UK we rolled out chip and pin nationwide in 2004 we had the same fears as did the merchants.</p>
<p>However it is now the norm and in time it will be in Canada. Cloning will always happen, charge backs will always happen  but overall I do feel more secure with my chip and pin. </p>
<p>It&#8217;s funny though as I still use my chip&#8217; mastercard and visa from the UK for purchases here I always get the same replies ooh what&#8217;s this then is it real? *rolls eyes* from a selfish point of view I can&#8217;t wait til the cards are rolled out here as less people will stop assuming my card is some fake or &#8220;wont work&#8221; without even trying as it can be run on the old or new system.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Colin</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26280</link>
		<dc:creator><![CDATA[Colin]]></dc:creator>
		<pubDate>Fri, 31 Oct 2008 05:48:14 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26280</guid>
		<description><![CDATA[@Gene .... good grief - it just gets worse.  Thank you so much for sharing that obviously genuine background from an insider.]]></description>
		<content:encoded><![CDATA[<p>@Gene &#8230;. good grief &#8211; it just gets worse.  Thank you so much for sharing that obviously genuine background from an insider.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gene</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26275</link>
		<dc:creator><![CDATA[Gene]]></dc:creator>
		<pubDate>Thu, 30 Oct 2008 19:57:41 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26275</guid>
		<description><![CDATA[To share a couple of personal stories....

I tried to buy something at a major office supply store in downtown Toronto was just over $500 using my MasterCard.
The clerk politely stated &quot;Oh we don’t take MasterCard over $300. Do you have a Visa or AMEX card?&quot;

I was shocked, talked to the store manager and found out it was due to high MasterCard fraud. He gave me a head office number and the VP of security (or whatever the title was). A couple days later this person called me back and we had a nice hour long candid conversation on the issue once he knew I worked for a bank.
 
Basically he said their POS readers were not upgraded to read all ‘tracks’ on the MasterCard as it is cost prohibitive. He said that the banks are constantly pushing new technology on the merchants that come at their expense (software, hardware upgrades). In his opinion, it is the banks who gain the most with these advancements as it absolves them of liability yet they (the banks) bear none of the merchant costs in supporting these newer technologies. 

In any case, apparently MasterCard has way higher fraud than Visa with this particular company. And at this specific location (University and Dundas), as well as a few others in the city, they imposed a ‘not over $300’ policy for MasterCards as it was the cheaper solution (although not a permanent one I&#039;m sure).

Without mandatory adoption for MasterCard Chip terminal conversion, MasterCard issuing banks are setting themselves up to be targets of fraud from the Visa fallout. In turn, merchants who are exposed to bank chargebacks /losses may simply stop accepting MasterCard.

Relating directly to Chip, my recent weekend shopping excursion with my shiny new Chip debit card resulted in ONE merchant (out of about 20) that used the Chip method of purchase (upon swiping the card the terminal instructed them to insert it in the chip card reader). The rest of the store clerks only had comments such as &quot;what does this do?&quot; or &quot;that is the first time I have seen one of these&quot;. None of their terminals accepted the Chip insertion method even though I tried by inserting it in the chip reader slot on their POS terminals.

We have a ways to go yet.]]></description>
		<content:encoded><![CDATA[<p>To share a couple of personal stories&#8230;.</p>
<p>I tried to buy something at a major office supply store in downtown Toronto was just over $500 using my MasterCard.<br />
The clerk politely stated &#8220;Oh we don’t take MasterCard over $300. Do you have a Visa or AMEX card?&#8221;</p>
<p>I was shocked, talked to the store manager and found out it was due to high MasterCard fraud. He gave me a head office number and the VP of security (or whatever the title was). A couple days later this person called me back and we had a nice hour long candid conversation on the issue once he knew I worked for a bank.</p>
<p>Basically he said their POS readers were not upgraded to read all ‘tracks’ on the MasterCard as it is cost prohibitive. He said that the banks are constantly pushing new technology on the merchants that come at their expense (software, hardware upgrades). In his opinion, it is the banks who gain the most with these advancements as it absolves them of liability yet they (the banks) bear none of the merchant costs in supporting these newer technologies. </p>
<p>In any case, apparently MasterCard has way higher fraud than Visa with this particular company. And at this specific location (University and Dundas), as well as a few others in the city, they imposed a ‘not over $300’ policy for MasterCards as it was the cheaper solution (although not a permanent one I&#8217;m sure).</p>
<p>Without mandatory adoption for MasterCard Chip terminal conversion, MasterCard issuing banks are setting themselves up to be targets of fraud from the Visa fallout. In turn, merchants who are exposed to bank chargebacks /losses may simply stop accepting MasterCard.</p>
<p>Relating directly to Chip, my recent weekend shopping excursion with my shiny new Chip debit card resulted in ONE merchant (out of about 20) that used the Chip method of purchase (upon swiping the card the terminal instructed them to insert it in the chip card reader). The rest of the store clerks only had comments such as &#8220;what does this do?&#8221; or &#8220;that is the first time I have seen one of these&#8221;. None of their terminals accepted the Chip insertion method even though I tried by inserting it in the chip reader slot on their POS terminals.</p>
<p>We have a ways to go yet.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Colin</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26269</link>
		<dc:creator><![CDATA[Colin]]></dc:creator>
		<pubDate>Thu, 30 Oct 2008 02:57:04 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26269</guid>
		<description><![CDATA[@ Dan ... thats exactly what I was thinking.  I think with the passage of time, and the prevalence of fraud, most / many? customers would give up the convenience for the security.  Most people rarely go to the US, so why build for the minority.]]></description>
		<content:encoded><![CDATA[<p>@ Dan &#8230; thats exactly what I was thinking.  I think with the passage of time, and the prevalence of fraud, most / many? customers would give up the convenience for the security.  Most people rarely go to the US, so why build for the minority.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan Dickinson</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26266</link>
		<dc:creator><![CDATA[Dan Dickinson]]></dc:creator>
		<pubDate>Wed, 29 Oct 2008 17:00:39 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26266</guid>
		<description><![CDATA[@Terry,

My assumption -- and Colin&#039;s, I would guess -- is that customers will still be able to use their card, whether presenting chip or magstripe, in cross-border situations just as they do today. I&#039;ve not heard that the issuers will limit customers who, in Colin&#039;s scenario, take their chip card to the US and use it at a swipe terminal to pay for goods. I agree with you that if issuers &lt;i&gt;did&lt;/i&gt; impose such limits they could mitigate losses in a magstripe-only environnment...I&#039;d just be surprised if this was the approach right away because of the customer dissatisfaction it would cause.]]></description>
		<content:encoded><![CDATA[<p>@Terry,</p>
<p>My assumption &#8212; and Colin&#8217;s, I would guess &#8212; is that customers will still be able to use their card, whether presenting chip or magstripe, in cross-border situations just as they do today. I&#8217;ve not heard that the issuers will limit customers who, in Colin&#8217;s scenario, take their chip card to the US and use it at a swipe terminal to pay for goods. I agree with you that if issuers <i>did</i> impose such limits they could mitigate losses in a magstripe-only environnment&#8230;I&#8217;d just be surprised if this was the approach right away because of the customer dissatisfaction it would cause.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Terry</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26264</link>
		<dc:creator><![CDATA[Terry]]></dc:creator>
		<pubDate>Wed, 29 Oct 2008 12:32:42 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26264</guid>
		<description><![CDATA[Card issuers have a choice about how to handle fraud detection and funds authorization. They can apply different rules to a transaction based on presentment mechanism. They will certainly be able to tell the difference between a chip transaction and a stripe transaction.  I don&#039;t see the physical presence of the stripe to be much of an issue.]]></description>
		<content:encoded><![CDATA[<p>Card issuers have a choice about how to handle fraud detection and funds authorization. They can apply different rules to a transaction based on presentment mechanism. They will certainly be able to tell the difference between a chip transaction and a stripe transaction.  I don&#8217;t see the physical presence of the stripe to be much of an issue.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jana</title>
		<link>http://thebankwatch.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26262</link>
		<dc:creator><![CDATA[Jana]]></dc:creator>
		<pubDate>Wed, 29 Oct 2008 11:36:54 +0000</pubDate>
		<guid isPermaLink="false">http://bankwatch.wordpress.com/2008/10/28/chip-and-pin-canada-the-basic-flaw/#comment-26262</guid>
		<description><![CDATA[The major problem with the Canadian market post-CHIP is that our POS system will still need to support both CHIP and magstripe. The magstripe cards come from two sources. The first is domestic cards during the transition. I think that this transition will take longer here than it did elsewhere in the world because the majority of our back end card services providers are US based and therefore don&#039;t have experience with the transition. As well, to date only Visa has mandated the switch to CHIP meaning that MasterCard issuers&#039; only incentive to switch is to not get hit by fraud migrating away from Visas.

The second is cards from the States. Because the US is our largest trading partner and a major source of tourists, we want to be able to support their payment methods (otherwise we cut ourselves off from money flowing out the States). Its difficult to force Canadians to pay extra money for the use of magstripe cards when the POS system continues to be able to support them and Americans can use the technology here in Canada for free.]]></description>
		<content:encoded><![CDATA[<p>The major problem with the Canadian market post-CHIP is that our POS system will still need to support both CHIP and magstripe. The magstripe cards come from two sources. The first is domestic cards during the transition. I think that this transition will take longer here than it did elsewhere in the world because the majority of our back end card services providers are US based and therefore don&#8217;t have experience with the transition. As well, to date only Visa has mandated the switch to CHIP meaning that MasterCard issuers&#8217; only incentive to switch is to not get hit by fraud migrating away from Visas.</p>
<p>The second is cards from the States. Because the US is our largest trading partner and a major source of tourists, we want to be able to support their payment methods (otherwise we cut ourselves off from money flowing out the States). Its difficult to force Canadians to pay extra money for the use of magstripe cards when the POS system continues to be able to support them and Americans can use the technology here in Canada for free.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

