{"id":325,"date":"2011-04-05T09:00:45","date_gmt":"2011-04-05T13:00:45","guid":{"rendered":"http:\/\/mobile-solutions.ingenico.com\/?p=325"},"modified":"2014-04-02T10:21:12","modified_gmt":"2014-04-02T15:21:12","slug":"roam-data-ceo-will-graylin-responds-to-verifones-open-letter-about-square-on-pymnts-com","status":"publish","type":"post","link":"https:\/\/mobile-solutions.ingenico.com\/roam-data-ceo-will-graylin-responds-to-verifones-open-letter-about-square-on-pymnts-com\/","title":{"rendered":"ROAM Data CEO Will Graylin Responds to VeriFone\u2019s Open Letter about Square on PYMNTS.com"},"content":{"rendered":"

After Verifone\u00a0CEO Doug Bergeron published a letter to consumers and the payment processing industry about the security risks of Square’s non-encrypted card reader, there has been a whirlwind of reactions from various angles. \u00a0ROAM Data CEO Will Graylin\u00a0has offered his input on the state of fraud and security in mobile commerce, highlighting the important pieces of the picture that were previously being left out. \u00a0His response to Verifone’s letter first appeared on\u00a0PYMTS.com<\/a>\u00a0on April 5, 2011.<\/p>\n

 <\/p>\n

Verifone’s letter about the security risks of Square’s non-encrypted card reader has sparked a lot of debate about card skimming in the mobile age. Regardless of how the topic was presented, the problem is very real and should be properly understood and addressed by industry regulators before it grows exponentially along with the exploding mobile commerce market.<\/em><\/p>\n

Many consumers do not see card fraud as their problem, unless they have been hit by the hassles personally. Most do not realize the cost of card fraud (in the $Billions each year) is first burdened by merchants, is then spread to consumers with higher prices at checkout. This is equivalent to us collectively writing a multi-million dollar check every single day to pay criminals for stealing our card data. The size of that check is directly proportional to the ease of access to card fraud tools.<\/em><\/p>\n

\u201cSkimming\u201d is the leading form of card fraud in the United States and refers specifically to electronically capturing of cardholder information stored on the magnetic stripe called \u201ctrack data\u201d. It is different than copying the numbers on a card with a pen, because track data can be used to reproduce fake credit cards to make large purchases at retail locations.<\/em><\/p>\n

Why is skimming in today\u2019s mobile arena more dangerous than traditional skimming at restaurants and gas pumps? Because it is harder to catch, and skimming tools are easier to proliferate if not encrypted. As an example, criminals can sell \u00bd price T-Shirts in front of sports or concert venues using a fake POS device to skim card data in bulk then immediately reproduce and use the fake cards at any store to rack up thousands of dollars in charges before the consumer even gets home that day. To pull off this kind of mobile skimming \u201cin the open\u201d use to require sophisticated criminals\u2019 to create a fake POS device that looks real. In the case of Square\u2019s reader, the actual skimming device is the real device, since it has no encryption, no alteration is required and the readers are given away for free to anyone who asks for it. Combine that with the ease of smartphone software access and there is no doubt this problem can explode and be more dangerous than many people think.<\/em><\/p>\n

Some suggest authenticating the track data as a fix, but that does not address the source of the problem, and won’t stop card number from being used online, not to mention it would take a very long time to implement at all the stores. The immediate and most important fix is to stop the spread of non-encrypted mobile readers that can be used as skimmers in the open. Making skimmers hard to access won\u2019t eliminate skimming all together, just like making illegal drugs hard to access won\u2019t completely eliminate its use, but it does dramatically curb the damage.<\/em><\/p>\n

Today mobile card acceptance can be secure and cost effective, choosing the right solution is key. Verifone’s reader is encrypted but it fits only certain iPhones and is much more expensive to produce than Square\u2019s or ROAM\u2019s readers. Square leverages a simple audio jack technology to keep cost down and to reach more devices, but it has no electronics for encryption. Audio jack methodology is not new, ROAM Data is using technology originally developed in 2007, and has licensed the patent filed in Feb of 2009, (before Square started its business.) ROAM\u2019s solution fully encrypts the track data before it leaves the reader and is decrypted only at a secure and PCI Compliant payment server. ROAM\u2019s audio reader contains more sophisticated electronics than Square\u2019s reader which enables not only security, but higher card read rates, and when combined with its software, supports more mobile devices than any other solution on the market. ROAM has developed its own patented mCommerce technology platform, and it has licensed multiple related patents exclusively and non-exclusively, to create the industry\u2019s leading mobile phone card acceptance solution that is easy to sell and cost effective enough for many of our resellers to give it away for free to their customers.<\/em><\/p>\n

Note that ROAM does not compete directly with Square for merchants (see “Is ROAM competing with Square<\/a>“). ROAM is a mobile commerce technology and service provider founded by payment industry veterans. It won the 2010 Technology Innovation Award at the ETA, and already has about 200 Merchant Service Providers (MSPs) reselling its solution, including some of\u00a0the largest payment providers in the world.<\/a>\u00a0ROAM provides a suite of mobile commerce applications for its MSP partners to better service their merchants. As a Level-1 PCI Certified third party processor, ROAM takes security very seriously. We chose to provide a slightly more expensive but more robust reader solution, to reduce skimming and provide a better experience for end-users.<\/em><\/p>\n

Before we blame Square for proliferating skimming tools, do keep in mind there are no rules yet to mandate encryption on mobile readers. If regulators from PCI-SSC do not act soon however, there will be pressure from MSPs to suppliers like us to follow Square\u2019s example, which would definitely worsen the problem. A simple ruling now to mandate encryption of card data before it arrives on the phone can save merchants and issuers a ton from fraud, and would help consumers feel safer about paying mobile merchants.<\/em><\/p>\n

We all want mobile commerce to grow, but security should not be an option! Through technology innovation, we can have low cost and convenient mobile card acceptance, without sacrificing security. We are relying now on industry regulators to issue new rules for new environments to keep fraud down and consumer trust high.<\/em><\/p>\n

Sincerely,<\/em><\/p>\n

Will Wang Graylin
\nCEO, ROAM Data, Inc.
\nwww.roamdata.com<\/a>\u00a0<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

After Verifone\u00a0CEO Doug Bergeron published a letter to consumers and the payment processing industry about the security risks of Square’s non-encrypted card reader, there has been a whirlwind of reactions from various angles. \u00a0ROAM Data CEO Will Graylin\u00a0has offered his input on the state of fraud and security in mobile commerce, highlighting the important pieces […]<\/p>\n","protected":false},"author":22,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/posts\/325"}],"collection":[{"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/users\/22"}],"replies":[{"embeddable":true,"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/comments?post=325"}],"version-history":[{"count":2,"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/posts\/325\/revisions"}],"predecessor-version":[{"id":2226,"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/posts\/325\/revisions\/2226"}],"wp:attachment":[{"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/media?parent=325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/categories?post=325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mobile-solutions.ingenico.com\/wp-json\/wp\/v2\/tags?post=325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}