Contactless grief PSD2 pin verification

DigForVictory

Seems like we all need to get used to the new ways - says she more than willing to cast a dirty look at a pay terminal that isn't doing what I want, Now....

Ben8282

Vortigern wrote: »

Starling stated their contactless rules in an email dated 11 Sept

If you don't like it change banks

londoninvestor

Ben8282 wrote: »

If you don't like it change banks

Indeed, although the others will all have to implement this within 18 months anyway... see eskbanker's post above.

Terry_Towelling

On the subject of the 'regulatory' requirement for PIN entry after X number of contactless transactions, that will be something recommended in the card scheme regulations - not the law of the land - as hinted at by @born again. Whether issuers have been bothered by this aspect of contactless control is (up to now) largely down to their own attitude to loss, because they have to suck up contactless fraud losses (where they have been properly processed, that is).

Many people do perceive themselves to have made countless consecutive contactless transactions without being asked for a PIN but often forget that they have (as again stated by @born again) reset the counter - often by using an ATM.

Grumpygit

Any Starling account user should have received an email and also a notification when they logged into the app - I know I did warning me about this starting up.


Not a problem as far as I am concerned - I'm more annoyed at HSBC changing their process when setting up a new payee....I had awful problems but that's HSBC.

londoninvestor

Terry_Towelling wrote: »

On the subject of the 'regulatory' requirement for PIN entry after X number of contactless transactions, that will be something recommended in the card scheme regulations - not the law of the land - as hinted at by @born again.

The EU directive specifies rules around the maximum value and number of consecutive contactless transactions - specifically the bit that indicates what consitutes a "low value" transaction that can be single-factor authenticated.

The UK could choose to vary it after Brexit I suppose.

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32018R0389

European_Commission wrote:

Article 11

Contactless payments at point of sale

Payment service providers shall be allowed not to apply strong customer authentication, subject to compliance with the requirements laid down in Article 2, where the payer initiates a contactless electronic payment transaction provided that the following conditions are met:

(a) the individual amount of the contactless electronic payment transaction does not exceed EUR 50; and

(b) the cumulative amount of previous contactless electronic payment transactions initiated by means of a payment instrument with a contactless functionality from the date of the last application of strong customer authentication does not exceed EUR 150; or

(c) the number of consecutive contactless electronic payment transactions initiated via the payment instrument offering a contactless functionality since the last application of strong customer authentication does not exceed five.

Terry_Towelling

londoninvestor wrote: »

The EU directive specifies rules around the maximum value and number of consecutive contactless transactions - specifically the bit that indicates what consitutes a "low value" transaction that can be single-factor authenticated.

The UK could choose to vary it after Brexit I suppose.

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32018R0389

I understand the new requirements that will come in; I was referring to the historical position with regard to the roll out of 'contactless' as a payment method and tying to clarify that the word 'regulatory' (small 'r') doesn't necessarily mean 'law'.

There will have been working groups from across the banking industry set up to decide what card scheme regulations should be put in place to control the 'contactless' POS environment and how liabilities for fraud would be decided.

'Contactless' came after my time in the cards industry but I was unfortunate enough to sit on many cross-border, multi-bank working groups and experience the frustration in devising processes, rules, Chargeback rights and fraud liability protocols that were acceptable enough to the majority in order to get them approved and enshrined within the card scheme operating regulations. A bit like getting a Brexit deal through Parliament.:)

colsten

Vortigern wrote: »

Starling stated their contactless rules in an email dated 11 Sept

There is more about this in a Starling blog, for example:

there are a few exceptions to bear in mind. Some unattended payment terminals – such as parking meters and Transport for London machines – won’t ask you for your PIN after five transactions and you’ll be able to pay through contactless as many times in a row as you like. The same goes for Digital Wallets such as Apple Pay and Google Pay, so if you haven’t started using yours yet, now’s the time.

IvanDP

I had emails from both starling and Monzo regarding this.
At least with the instant notifications I always have an idea when it it going to happen.

As far as the dirty looks go, the last time I needed to enter my PIN, when the card was declined, the guy in Aldi just smiled and said "security time"
:D:D

londoninvestor

Terry_Towelling wrote: »

I understand the new requirements that will come in; I was referring to the historical position with regard to the roll out of 'contactless' as a payment method and tying to clarify that the word 'regulatory' (small 'r') doesn't necessarily mean 'law'.

Ah - got you. Agreed then!