<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/Artboard-1-copy-8-12.webp" alt="M2P Fintech" title="" width="100%" height="253">Three years into the pandemic, amidst the Omicron wave, the Indian Union Budget 2022 promises resiliency, growth momentum, and long-term sustainability measures. At a 9.2% GDP, India projected the highest growth rate among world economies. Great stat to start the budget highlights with right?<h2 class="heading-node" id="b7ef" style="text-align: left">Digital Focus</h2>The key focus areas of the budget were&nbsp;digital and technology for the next 25 years.&nbsp;The Finance Minister’s budget speech promoted digital and technological innovation across industries. It offered a sharp increase in public investment and capital expenditure provision that is expected to aid future growth and help businesses recover from the pandemic-induced slump.Initiatives focused on ‘accelerated growth’ for technology-led development, energy transition, and climate action while balancing the needs of an inclusive welfare society.<h2 class="heading-node" id="857d" style="text-align: left"><a class="link" href="https://m2pfintech.com/blog/fintech-101-discover-the-3ws-of-fintech/">Fintech</a> Impetus</h2>For the financial services industry, this budget promises greater investments, is fintech-friendly and <a class="link" href="https://m2pfintech.com/blog/fintech-a-catalyst-for-financial-inclusion/">pro-financial inclusion.</a>Honoring India’s 75th year of independence, the Finance Minister announced the establishment of 75 Digital Banking Units (DBUs) across 75 districts in India. This move is expected to extend <a class="link" href="https://m2pfintech.com/blog/fintech-a-catalyst-for-financial-inclusion/">financial inclusion</a> and fintech services to remote areas.Initiatives are also underway to make the <a class="link" href="https://m2pfintech.com/blog/ready-to-sneak-peek-into-global-cashless-societies/">cashless payments ecosystem</a> safe and seamless for consumers and businesses by enlarging digital infrastructure, boosting internet access, expanding touchpoints, and enhancing cybersecurity. The Finance Minister also stated that financial support for the digital payment ecosystem announced in the 2021–22 budget would continue in 2022–23.<h2 class="heading-node" id="3689" style="text-align: left">Other Highlights</h2>Budgetary Allocation<ul class="list-node" id="dss3o91dh"><li>6.4% fiscal deficit is projected for India in FY23</li><li>Revised fiscal deficit estimated at 6.9% of GDP</li><li>Rs 1 lakh crore as 50-year interest-free loans allocated to states to help fund PM Gati Shakti-related investments</li><li>Rs 10.68 lakh crore effective capital expenditure is expected in 2022–23, which is about 4.1% of GDP</li><li>35.4% rise in outlay for capital expenditure is estimated — from Rs 4.54 lakh crore earlier to Rs 7.50 lakh crore in 2022–23</li></ul>Venture Capital Investment<ul class="list-node" id="8tce85bkj"><li>Regulatory framework for Venture Capital to be reviewed by an expert committee</li></ul><a class="link" href="https://m2pfintech.com/blog/central-bank-digital-currency-cbdc-101-a-primer/">Digital Currency on Blockchain</a><ul class="list-node" id="zmbivw63m"><li>Reserve Bank of India (RBI) to introduce the digital rupee using blockchain in 2022–23</li></ul>Digital Banking<ul class="list-node" id="gygmtbnsd"><li>Launch of online bill system to reduce delays in payment for all central ministries</li><li>Credit growth increased by Rs 5.4 lakh crore this year, the highest in several years</li></ul>Crypto Tax<ul class="list-node" id="602bt55yq"><li>Cryptocurrencies and NFT will be taxed at 30%</li></ul>So, what do you think of the budget? Let us know in the comments below.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Key Highlights: What does Budget 2022 mean for Fintechs?

Secured Credit Cards 101 - Where Credit meets Saving

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/Artboard-1-copy-8-9.webp" alt="M2P Fintech" title="" width="100%" height="284">Using <a class="link" href="https://m2pfintech.com/blog/prepaid-cards-101-a-definitive-guide-for-growth-and-profitability/">prepaid cards</a> is a great way to control business expenses, improve efficiencies and generate revenue streams. However, the time and effort involved in card issuance in-house are super crazy.If you want to hit the market with prepaid cards quickly within weeks, you need APIs.Yes, <a class="link" href="https://m2pfintech.com/blog/api-the-power-that-drives-new-age-banking-ecosystems/">Application Programming Interfaces (APIs).</a><h2 class="heading-node" id="2e39">Accelerates access and speed</h2>APIs speed up and democratize the card issuance and management process for businesses. Teams need not divert CAPEX or resources into building in-house prepaid card applications, compliance, partnerships, and support systems. Instead, an API call is all that it takes to create prepaid cards within weeks and onboard customers in a seamless manner.<a class="link" href="https://m2pfintech.com/blog/the-world-of-apis-how-they-power-fintech/">APIs</a> help customize onboarding and shopping experiences without diluting brand expectations and manage card usage and security. Though card networks like VISA, Mastercard, American Express, and Discover issue cards, <a class="link" href="https://m2pfintech.com/">API-providing fintech firms</a> are the ones that facilitate card access, operations, and management.<h2 class="heading-node" id="534d">Empowers diverse ecosystems</h2>It doesn’t matter whichever part of the globe you are operating from or whatever industry you belong to. APIs can be tailored to specific geographics, industry use cases, and needs.Fintech firms factor in diverse demographics, currencies, regulatory and compliance challenges, digital payment standards, and infrastructures before getting started with card issuance. They nullify entry barriers and provide opportunities for every business to gain from the benefits of prepaid cards. Customized APIs cater to multiple industries and serve multiple purposes such as payroll, gifting, <a class="link" href="https://m2pfintech.com/blog/cross-border-payments-a-swift-money-flow-across-borders/">cross-border payments</a>, intercity-transit, international travel, government benefit disbursal, insurance, health savings, and incentivizing employees.<h2 class="heading-node" id="dcfe">Delivers top-notch user experience</h2>The card issuing APIs take a human-first approach while aligning data, processes, and consumer platforms. They prioritize experience design and enable hyper-personalized card issuance in an instant.Both physical and <a class="link" href="https://m2pfintech.com/blog/all-you-need-to-know-about-virtual-cards/">virtual cards</a> can be customized and built for ultimate customer experience and personalized seamless transactions. As APIs prioritize security, businesses and end-consumers can be confident about not having to deal with data theft or loss of money. This drives greater customer experience, retention, and conversion.<h2 class="heading-node" id="2ff0">Stringent security management</h2>Strongly encrypted with stringent security controls in place, it is next to impossible to hack into the physical or virtual card ecosystems that APIs create. Right from enabling <a class="link" href="https://m2pfintech.com/blog/know-your-customer-kyc-the-need-for-authentication/">e-KYC</a> to countering processor breach, identity theft, to ‘friendly fraud’ (intentionally shared password) and false disputes, <a class="link" href="https://m2pfintech.com/blog/the-world-of-apis-how-they-power-fintech/">fintech APIs</a> can manage all without hassles.Program managers nip risks in the bud with strict red flag compliance, identity validation, and <a class="link" href="https://m2pfintech.com/blog/pci-dss-a-quick-guide-to-its-levels/">PCI DSS</a> compliance programs. Artificial intelligence modules identify fraud trends and track transactions to block vulnerabilities early in the lifecycle.So, in a nutshell, APIs can make it quick, easy, and secure for you to issue cards to your customers and employees. They also help businesses track and control expenses while improving customer experience and accessibility.But, hey wait. Don’t go yet.If you are at this part of the article. We understand you are looking to issue cards.And we have a pro tip for you!<h2 class="heading-node" id="506c">Pro Tip: Align business objectives, focus on core competencies</h2>Issuing <a class="link" href="https://m2pfintech.com/blog/prepaid-cards-101-a-definitive-guide-for-growth-and-profitability/">prepaid cards</a> can be done in-house or by partnering with a licensed fintech. Whichever direction you choose to move, remember to align business objectives with the card program. You also need to sort out legacy infrastructure issues, regulatory risks, fraud monitoring, compliance, and points of authorization. And if you are launching prepaid cards on a global scale, you’ll have to manage country-specific licenses, contracts, and integrations to keep the card program alive. So, before proceeding, remember to brainstorm about the time, effort, and resource allocation.Or you can just focus on your core competencies and leave card issuance, compliance, and program management to PPI licensed card issuance experts.Need help in issuing prepaid cards?Get in touch with us at&nbsp;<a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a><a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Why should APIs be your holy grail for prepaid card issuance?

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/05/Artboard-1-copy-8-10.webp" alt="M2P Fintech" title="" width="100%" height="284">Entering card details every time you shop online can be such a tiresome experience. It often plays damp squib, dulling out the thrill of impulsive shopping. In fact, consumers cite this tedious process as one of the primary reasons for cart abandonment.<h2 class="heading-node" id="5e9f">COFT, the savior</h2>This is where ‘Card on File Transaction’ (COFT) emerges as a savior for both consumers and businesses. This functionality pops up on the customer screen, requesting explicit permission to save card details for subsequent payments.As the need to re-enter card detail is eliminated, COFT enables a seamless and convenient checkout process with lesser cart abandonments. It also boosts the chances of recurring impulse purchases.So, the next time you shop for your favorite shoe or that gourmet chocolate bar, you need not enter your card information. Instead, you only need to enter the CVV (the three digits in the magnetic strip) to pay for your purchase.Sounds amazing, isn’t it?We’re sure you can’t wait to understand the techno-functionality behind this incredible system.Here you go!First things first. We’ll cover what COFT actually is. And then, let’s delve into the latest RBI guideline and the mandate’s impact on the ecosystem players.<h2 class="heading-node" id="a695">What are Card On File Transactions?</h2>Card on File transactions are the stored card credentials available with a merchant, payment gateway or aggregator, or digital wallet. Used for future transactions, the card on file will store relevant details in encrypted format except for the CVV number. However, explicit consent from customers is necessary to store card details.The Card on File functionality is a two-stage process.<h3 class="heading-node" id="03af">First Stage</h3>Here the card details are entered for the first time on the website. After authorizing the transactions with two-factor authentication, the cardholder will be presented with an option to save card details for future purchases. If the cardholder opts in, the card details (except CVV) will be saved in an encrypted format.<h3 class="heading-node" id="18f1">Second Stage</h3>In this stage, the cardholder will just enter their card CVV number every time they initiate a transaction. There is no need to re-enter card details.<h2 class="heading-node" id="010c">How RBI’s latest mandate applies to Card on File Transactions?</h2>Reserve Bank of India’s latest mandate has extended the scope of <a class="link" href="https://m2pfintech.com/blog/how-does-payment-tokenization-work/">tokenization</a> to COF transactions. The circular released in January 2019 and August 2021 carried a device-based tokenization framework, and the same has been now extended to COF transactions as well.Meaning card issuers can also offer card tokenization services as Token Service Providers (TSPs), but they will require explicit consent from customers, including Additional Factor of Authentication (AFA). They will also have the control of tokenization and de-tokenization of the card data.Furthermore, the scope of tokenization has been extended to consumer devices such as laptops, desktops, wearables, Internet of Things (IoT) devices. The circular was issued to reinforce the safety and security of card transactions whilst not disrupting convenience.<h2 class="heading-node" id="a412">What is the impact of these latest guidelines on the ecosystem players?</h2>Subscription payments will be impacted as the new guideline requires explicit customer consent even five days before the recurring transaction. There is also a high chance that the customer may end up missing payment notifications and might miss or default on the payment. This guideline implementation must have been completed before 30th September 2021 by Banks.All merchants, banks, payment aggregators, <a class="link" href="https://m2pfintech.com/blog/what-is-a-payment-gateway-and-payment-switch-understanding-the-basics-of-payments-architecture/">payment gateways,</a> and NBFCs must make technical and protocol changes to their current recurring payment functionalities and Card on File data. This structural change will include a significant cost to the players as they must effect a strategic and operational change.With these new guidelines, the merchants will have to rely on the acquiring banks to address the concerns of customer complaints, chargebacks, and so on. Customers may choose to opt for different payment methods if they fail to experience a seamless shopping experience while initiating card transactions.<h2 class="heading-node" id="1529">Tokenization, the security booster</h2>With the introduction of these guidelines, the only remedy available to enhance security is tokenization. It can be used for one-time and recurring payments, thereby freeing merchants from the hassle of storing sensitive data.<h3 class="heading-node" id="e491">So, how does tokenization work?</h3>Tokenization replaces debit or credit card details with a unique set of characters or tokens that will process transactions without exposing the cardholder’s sensitive account details.Here is how tokenization happens.<ul class="list-node" id="decqr9ga3"><li>A credit/debit card is swiped at POS or on an e-commerce website</li><li>The card number will then be transferred to the tokenization protocol</li><li>The system will generate a random alphanumeric string, also known as “Token ”, to mask the original card number</li><li>The token will be routed to the merchant for further processing</li></ul>For example, card-carrying numbers 4781 2345 1235 3391 will be replaced as A2C0 9JUI 8S2F 7GKY when initiating a transaction.The safe and secured digital transaction is now possible with Tokenization!&nbsp;<a class="link au nl" href="https://m2pfintech.com/blog/how-does-payment-tokenization-work/" rel="noopener">Explore more.</a><h2 class="heading-node" id="cbcb">Conclusion</h2>Tokenization will protect card data from hackers as it is extremely hard to reverse the token to access the original card data.Now, there is a paramount need to develop and deploy solutions that satisfy both the cardholder and still be in check with RBI guidelines.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

RBI Guidelines on Card on File Transactions

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/04/banner-5.webp" alt="M2P Fintech" title="" width="100%" height="284">BNPL, the acronym for Buy Now Pay Later, though a relatively new concept, is slowly becoming the talk of the town. The new-age shopper is now drawn to BNPL products and is ditching the traditional payment options like Credit Cards. The article below explores the “why” of this paradigm shift.Starting from the ease of checkout to personalized offers, BNPL has masked the word and feeling of a “Loan.” It is simply viewed as Buy Now and Pay Later minus the paperwork and as a different IOU avatar. Along with the single-click checkout, BNPL also gets your merchant to bear the cost of No Cost EMIs. The<a class="link" href="https://m2pfintech.com/blog/factors-and-psychology-behind-the-great-bnpl-allure/"> factors and psychology behind the allure of BNPL</a> will sure make this the next big thing in consumer finance.<h2 class="heading-node" id="92eu7wjat">Are credit cards getting left behind?</h2>Traditional <a class="link" href="https://m2pfintech.com/blog/credit-card-processing-a-definitive-guide/">credit cards</a> were once a great choice for credit lines, but they are also perceived as a debt trap. Often, the lack of transparency and complex interest calculations attract heavy penalties and bad credit scores for the customer, leading to difficulties when securing a loan in the future.This is where BNPL holds a massive advantage over traditional credit cards. They offer a clear and transparent checkout option where the consumer is presented with all the factors of applicable charges and due dates upfront.Some BNPL players have even gone a step further and adopted time-tested <a class="link" href="https://m2pfintech.com/blog/six-profitable-bnpl-business-models-to-unlock-infinite-value/">business models</a> and have appended penalties for specific time frames. So, in the end, the new-age shopper not only gets flexible repayment options, but they are also empowered to understand financial nuances in case of late or missed repayment.<h2 class="heading-node" id="hlrx7eya9">BNPL in India</h2>After creating ripples in the US, Canada, Australia, and Europe, BNPL has now started its journey in the Indian <a class="link" href="https://m2pfintech.com/blog/fintech-a-catalyst-for-financial-inclusion/">fintech</a> ecosystem. And in a country where loans are generally frowned upon, BNPL has captivated customers with ease of payment, right at the checkout page.<h2 class="heading-node" id="njbjh0x7b">What is its premise ?</h2>Even though BNPL applications have adopted different means to facilitate checkout, they center around the issuance of “credit.” It also increases the shopper’s purchase power while completing the transaction with minimum hassle.Moreover, like Credit cards — BNPL applications are powering users for:<ol class="list-node" id="i38mltydk"><li>&nbsp;Consolidating many small expenses in one bill</li><li>Splitting a major expense in multiple repayments</li></ol><h2 class="heading-node" id="8i4r6mnzz">Let’s assess the BNPL options here in India!</h2>For example, Anuj has a list of standard expenses made at different e-commerce and hyperlocal players. He pays them all via a debit/credit card, which means entering card details, OTP, and finally paying the credit bill. With a single BNPL application where there is no need of OTP or card details, Anuj gets to shop without the hassle and gets to settle the bill through his preferred settlement option.So this option of BNPL has and offers the following features:<ul class="list-node" id="sd226xl5k"><li>Suited for small ticket sized purchases</li><li>Monthly or fortnightly settlement cycle</li><li>Single-click checkout</li><li>Late payment charges and penalties applicable on delayed repayments</li></ul>So, next comes the question of big ticket purchases:Let’s assume Anuj wants a new TV that is top of the line in the market and quite expensive. While using a credit card to make a purchase is a traditional method, BNPL offers a much easier way. The TV’s cost will be split into 4 EMIs, while the TV seller/merchant bears the EMI’s interest charge. So, in the end, the merchant gains a loyal customer, and Anuj gets a better way to manage his finance with manageable repayments.In this method, BNPL works this way:<ul class="list-node" id="ojf0e1333"><li>Suited for higher ticket sized purchases</li><li>Bill split into multiple EMIs as provided by the seller</li><li>Seller funded no-cost EMIs up to a time frame</li><li>Late payments penalties accrue if a due date is missed</li></ul><img src="https://miro.medium.com/max/1400/1*0IJebDapK8llqNbqHPZRig.png" alt="Features of Buy now pay later (BNPL)" title="" width="100%" height="227"><h2 class="heading-node" id="e9a4">Who are the users of BNPL?</h2><blockquote class="block-node" id="0m4ltzb7o">Millennials, Bridge Millenials and Generation Z, are the early adopters of BNPL.Source: Pymnts- Buy Now Pay Later Report-2020</blockquote>It is worthwhile noting that the youngest millennial is turning 25 this year, and he can be assumed not to be the ‘reckless spender.’Alternatively, cash transactions are in the lead, followed closely by debit and credit cards. However, with BNPL and digital wallets, this dynamic is slowly shifting, and it is an exciting wait to see who tops the chart. Many users who have never used or have limited exposure to credit cards rely on BNPL applications for credit needs.<img src="https://miro.medium.com/max/1400/1*PP1cOWo5J44sdLX1XpGnAQ.png" alt="Top reasons for using BNPL services" title="" width="100%" height="227"><h2 class="heading-node" id="7886">Well, now the fundamental question arises about the user without a good credit history.</h2><a class="link" href="https://m2pfintech.com/blog/how-can-lenders-overcome-challenges-in-deploying-bnpl-solutions/">BNPL lenders</a> give credit lines to shoppers based on secondary data. For example:· They analyze the data points like shopper’s history with the merchant<ul class="list-node" id="nmesbiiog"><li>· Average order size, time of association</li><li>· Order behavior like the number of prepaid, canceled, or COD orders.</li><li>· Order history and other available digital footprints of the shopper.</li></ul>Based on this data, <a class="link" href="https://m2pfintech.com/blog/winning-business-models-for-bnpl-lenders/">BNPL lending business models</a> enable credit to a user, and it gets enhanced as he/she makes timely repayments of the offered credit.<h2 class="heading-node" id="tpb0fu2ew">Connection between COVID and BNPL</h2>The ongoing pandemic has certainly accelerated BNPL adoption across the globe. With employees being laid off, being furloughed, and the uncertainty about their income, consumers are inclined towards budget-friendly payment options in which BNPL certainly takes the lead. Merchants are also more receptive to BNPL applications than they have ever been as it increases their consumers’ purchase power.<h2 class="heading-node" id="a0c0">How does the future look for BNPL?</h2>BNPL, in a decade, has taken the lead even though banks have been lending for hundreds of years. Today, banks are trying to keep up and switch to a digital-centric approach, such as providing their BNPL offerings and partnering with a Fintech to co-create solutions for consumers. BNPL, for banks, is an excellent medium for portfolio diversification.In India, BNPL has been scratching the surface, and it has a long way to go. Internet penetration has created the market where BNPL could fly in the coming years with FinTech’s, Banks, and Merchants’ necessary push.We can expect regulators also to fence BNPL offerings in the coming years. One thing is for sure, BNPL is here to stay, and it’ll keep on luring consumers. We are yet to watch its full potential and need to wait to see how BNPL shapes commerce in the future.To know more about BNPL, write to business@m2pfintech.com.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

BNPL - The Rising Fintech Star

Ready to Sneak Peek into Global Cashless Societies

50 Popular Fintech Terms You Must Know

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/04/pci-dss.webp" alt="M2P Fintech" title="" width="100%" height="253">The payment industry is constantly growing where every upgrade plays an important role in developing trust among users by protecting their sensitive data. So, every business that is an active participator needs to meet few security standards that act as Armour.One such globally recognized standard is PCI DSS.The PCI Security Standards Council came up with a Payment Card Industry Data Security Standard (PCI DSS) framework to protect credit and debit card transactions and card holders’ data from breaches. It is a mandate for every merchant and service provider to abide by this protocol for a smooth customer experience.<h2 class="heading-node" id="e2ee" style="text-align: justify">How was PCI DSS created?</h2>It all began during the internet boom in the late 1990s, when the initial stage of e-commerce brought in many fraudsters and excitement. When the retailers, merchants, card networks, consumers widely accepted the emerging web-driven transactions, they witnessed a steady increase in credit card fraud and scams. That is when the card networks like American Express, MasterCard, and Visa started to dig deep into the issue to create standards for payment processing systems.With Visa taking the lead in 2001 “Cardholder Information Security Program” standard was introduced, followed by the other companies implementing their security standards. But it did not meet the expectations of the merchants and POS terminals as they need to comply individually with the company-specific standards. This resulted in great difficulty for merchants as they have to comply with different standards when they are approaching multiple card networks. So, the collaboration of the major card networks such as American Express, Discover, JCB, Mastercard, and Visa birthed PCI DSS version 1.0 in December 2004.Later in 2006, the Payment Card Industry Security Standards Council (PCI SSC) was formed by a joint venture of MasterCard, American Express, Visa, JCB International, and Discover Financial Services to manage PCI development and alignment of policies to PCI DSS. PCI SSC ensures that the entities are committed to secure credit card data.PCI DSS is now a globally recognized directive where every merchant who accepts card payments must comply with the latest version, PCI DSS 3.2.1, which was released in May 2018.<h2 class="heading-node" id="edca" style="text-align: justify">Why do merchants need to comply with PCI DSS?</h2>Since there are over multiple card transactions taking place in the market, a safe business environment becomes the prime concern for the merchants to lead a long haul. A business compliant with PCI DSS always earns customers’ trust for their sensitive card information and helps boost the sale and customer confidence. As every business relies on partners, acquirers, or fellow industry mates, being a PCI DSS Compliant helps improve one’s reputation and strategies.Data breaches, payment card data theft, can be avoided as it is stored securely and monitored on a regular basis. In addition, PCI DSS even helps in improving IT infrastructure efficiency with its compliance levels and requirements.<h2 class="heading-node" id="de60" style="text-align: justify">PCI DSS Compliance levels</h2>There are four levels of PCI DSS Compliance based on the number of annual payment card transactions a business handle.Level 1:&nbsp;over 6 million TXNLevel 2:&nbsp;1 to 6 million TXNLevel 3:&nbsp;20,000 to 1 million TXNLevel 4:&nbsp;fewer than 20,000 TXNCheck out our guide to the&nbsp;<a class="link au mj" href="https://m2pfintech.com/blog/pci-dss-a-quick-guide-to-its-levels/" rel="noopener">PCI DSS Levels</a>&nbsp;and their impact on compliance.<h2 class="heading-node" id="a8f1" style="text-align: justify">Requirements for PCI DSS Compliance</h2>Every system entity and component associated with Cardholder Data Environment (CDE) must comply with the PCI DSS mandate. It includes requirements for security management, policies, procedures, network architecture, software design, and other critical protective measures.PCI DSS sets forth 12 requirements for every PCI DSS complaint established by the PCI Security Standards Council:<h3 class="heading-node" id="757b" style="text-align: justify">1. Firewall Configuration</h3>Firewalls are installed and configured to protect card holders’ data from any malware. It helps the prevention systems effectively to defend the hackers from unauthorized access to private data.<h3 class="heading-node" id="625d" style="text-align: justify">2. Password Security</h3>Businesses should not use vendor-supplied defaults for system passwords and other security parameters in their routers, modems, point of sale (POS) systems, and other third-party products. Instead, basic precautions and configurations like changing the password should be followed as the public can easily access the generic passwords and security measures.<h3 class="heading-node" id="ad5f" style="text-align: justify">3. Protection of Cardholder Data</h3>The stored cardholders’ data must be encrypted with two-fold protection and certain algorithms. Also, the primary account numbers (PAN) must be regularly scanned and monitored to avoid any unencrypted data.<h3 class="heading-node" id="1dad" style="text-align: justify">4. Encryption of Transmitted Data</h3>The cardholders’ data should be encrypted when transmitted across open, public networks like payment processors, home offices from local stores, etc. Sharing the account numbers to unknown locations must be avoided.<h3 class="heading-node" id="9653" style="text-align: justify">5. Antivirus Software</h3>All the systems used for interacting, sharing, storing PAN must be protected against malware by regularly using and updating antivirus software or programs. Also, POS providers must employ anti-virus measures and maintain up-to-date antivirus programs to prevent systems from malware.<h3 class="heading-node" id="f58e" style="text-align: justify">6. Secure Systems and Applications</h3>To add another layer of protection to the data, the providers must develop and maintain secure systems and applications. These systems and applications that are used as the storage of data for interaction must be updated regularly.<h3 class="heading-node" id="f835" style="text-align: justify">7. Restriction of Access</h3>The cardholders’ data are restricted to access by business need-to-know, and the sensitive data must be accurately documented and updated regularly.<h3 class="heading-node" id="bffa" style="text-align: justify">8. Unique Access ID</h3>Individual credentials and ID are assigned to each person with computer access to card holders’ data. Single access ID and password should not be used as it results in more vulnerability and slow response time.<h3 class="heading-node" id="57e9" style="text-align: justify">9. Restriction of Physical Access</h3>Card holders’ data must be physically stored in a secured location where any physical access is restricted. Physically written, typed, or digitally stored data must be secured in the room, and in case of any access, it should be added to the access logs.<h3 class="heading-node" id="7c0d" style="text-align: justify">10. Maintain Access Logs</h3>As mentioned in the previous requirement, all access to network resources and cardholder data must be tracked and monitored in the access logs. This proper record keeping and documentation must be maintained with utmost accuracy as it is related to sensitive data.<h3 class="heading-node" id="aecf" style="text-align: justify">11. Testing Security Systems and Processes</h3>Regularly testing/scanning security systems and processes result in less vulnerability as it involves many digital data, software programs/products, physical locations, etc.<h3 class="heading-node" id="625c" style="text-align: justify">12. Document Policies</h3>Document policies that address information security for all personnel must be maintained right from storing to transmitting/using data after POS.So, with these twelve requirements, PCI DSS comprises six objectives to ensure optimal security for merchants who accept, process, transmit, or store payment card information.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/image-1.webp" alt="M2P Fintech" title="" id="jxi8l3syj" width="100%" height="253">With PCI DSS’s strong objectives and compliance requirements, the security of the payment industry is strengthened. These measures help and encourage data security and facilitate the adoption globally. So, hereby businesses that handle card payments need to be a part of this global payment card data security solution and focus on increasing the intensity to move forward by becoming ‘PCI DSS Complaint.’Look forward to our upcoming blogs as we uncover PCI SSC’s other standards such as PCI 3 DS, PA DSS, PCI PIN Security, and PCI SSF.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

PCI DSS: The Payments’ Armour

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/04/banner-1.webp" alt="M2P Fintech" title="" width="100%" height="383">Sara usually travels around the globe for her official trips quite frequently, and she enjoys shopping at local shops to bring back memorabilia for colleagues and family. Nairobi was on her frequent travel list, and she loves to shop the local markets for their rich handicrafts. The popular currency formats in Nairobi were either M-Pesa or Nairobi Shillings.However, carrying local currency is not a good idea, and M-Pesa requires a local account and sim card for starters. At the same time, using international debit or credit cards will attract too many charges.That’s when Forex Cards came to the rescue.With single or multiple currencies in one card that has safety and comfort as it is a core feature, forex cards were the best solution Sara could ask for, making her travel much easier.<h2 class="heading-node" id="60d6">So, what is a Forex card?</h2>A forex card can hold single or multiple currencies in a single card, prepaid by nature. It is a globally accepted prepaid card with features of ATM withdrawal, just like a debit/credit card. Therefore, it is a safer and fool-proof way of managing finances abroad, be it for professional or personal travel.<h2 class="heading-node" id="fd11">Types of Forex cards</h2>Forex cards come in various types, and they can be chosen as per the traveler’s requirement. The forex cards are typically differentiated as:<h3 class="heading-node" id="537f">Single-Currency Forex card</h3>This card holds a single international currency and is usually available when travelers only intend to visit one country. Furthermore, if the traveler tries to transact in any other currency other than the preloaded currency, they will end up paying high conversion charges along with markup fees and additional applicable charges.<h3 class="heading-node" id="06ae">Multi-Currency Forex card</h3>Best suited for globetrotters, this type of prepaid forex card allows the user to carry multiple international currencies in one card.<h3 class="heading-node" id="b841">Student Forex card</h3>This type of forex card is specifically designed for the new adults embarking on their maiden financial journey on account of their studies. It also doubles up as an identity card known as International Student Identity Cards (ISIC cards). Student forex cards also offer student discounts and can help primarily help in managing living expenses abroad.<h2 class="heading-node" id="7423">How does a Forex card work?</h2>Like a debit/credit card application, the traveler needs to apply for a forex card with the bank or forex service provider. Once the application goes through, the applicant can load their desired currency of GBP, USD, SGD, EUR, and others in the card.Also, certain documents need to be submitted when applying for forex cards:<ul class="list-node" id="1689ax4q6"><li>Forex card application</li><li>Self-attested copies of Visa and Passport</li><li>Copy of confirmed air tickets of the visiting countries</li><li>The usual attachments of Identity and Address proof</li></ul>If the traveler is a student, they need to submit some additional documents like:<ul class="list-node" id="7zz3nxzh8"><li>Admission letter</li><li>University Identity card or</li><li>Letter of appointment</li></ul>Post these documents verification, the forex card gets approved, and it will be either shipped to the applicant’s address, or they can pick the card up from their choice of branch.The traveler can load the card as per their choice of currency by issuing a standing instruction to the service provider. They can specify the international currencies they want along with the amount in each of the currencies. If the currency conversion happens via a bank, their bank account will be automatically debited, and their multi-currency card will be loaded.If it is a forex service provider, the traveler can load the card using the issuer’s <a class="link" href="https://m2pfintech.com/blog/what-is-a-payment-gateway-and-payment-switch-understanding-the-basics-of-payments-architecture/">payment gateway.</a> Then, they can make the payment by using the standard options of debit card, credit card, net banking, etc.At the same time, forex cards also carry a certain number of charges that may differ depending upon the issuer. Some of the common charges are cash withdrawal, balance inquiry, SMS alerts, cross-currency mark-up charges, etc.Even though forex cards come with their share of charges, they still reign supreme over other payment methods like debit cards, credit cards, or travelers cheques. And the popular opinion claims that forex cards are a much better option when compared against these instruments.<h2 class="heading-node" id="bcc0">Advantages of Forex cards over Debit/Credit cards</h2><h3 class="heading-node" id="97c7">ATM withdrawal fee</h3>Forex cards have set ATM withdrawal fee that is usually lower than credit/debit cards, and they are now accompanied by conversion fee as well.Debit/Credit cards come with a withdrawal fee plus a markup fee of 1% to 3% and currency conversion charges. While it may differ between card issuers, the charges remain significantly higher than using a forex card.<h3 class="heading-node" id="9eda">Transaction charges</h3>Swiping prepaid forex cards doesn’t levy extra transaction charges as the local currency is used for the transaction.Swiping a debit/credit card will attract extra charges as the foreign currency will be converted to the local currency and then will be charged to the traveler’s account. Furthermore, it will attract a markup fee along with other applicable tax charges.<h3 class="heading-node" id="745d">Exchange Rates</h3>In forex cards, exchange rates are well locked in advance, which protects the traveler from fluctuations in the exchange rate.There is no exchange rate lock, and the value of the rupee often fluctuates against most of the international currencies in debit or credit cards.<h3 class="heading-node" id="4562">Temptation</h3>Forex cards curbs the temptation to overspend while overseas as it is a prepaid card and comes with an already set limit.Credit cards come with an overdraft facility that will tempt the traveler to overspend and end up with a huge bill.<h2 class="heading-node" id="1f24">Advantages of Forex card over Cash</h2><h3 class="heading-node" id="400f">Better exchange rates</h3>Forex cards come with better exchange rates when compared to cash conversion. Also, the traveler gets to enjoy locked-in exchange rates that do not fluctuate on a daily basis.<h3 class="heading-node" id="6a8f">Safety</h3>Cash is only safe when it is stored in a vault, and it creates an inconvenience when carried in huge amounts, whereas a forex card is a CHIP and PIN enabled card that offers top-of-the-line security to the traveler.<h3 class="heading-node" id="5b55">Theft</h3>In case of cash theft, there is no possible way to get the money back nor reclaim damages. But in case of forex card theft, the traveler can immediately block the card and request a replacement card, no matter their geographical location.<h3 class="heading-node" id="568d">Multi-currency</h3>It is practically impossible to carry around wads of cash in different currencies as it is neither safe nor smart to walk around with cash. It is a hassle to keep and use the right currency without the confusion around the country’s native currency. Whereas when using a forex card, the card will automatically detect the country and carry out transactions using the preloaded local currency.<h2 class="heading-node" id="cfd4">Advantages of Forex cards over traveler’s cheques</h2><h3 class="heading-node" id="6c46">Modernized version</h3>Forex cards are the software upgrade of traveler’s cheques. They are widely used and come with convenience and comfort at their core. Traveler’s cheques are antique, primarily out of use, and are not accepted worldwide anymore.<h3 class="heading-node" id="6875">Associated Fees</h3>Both forex cards and travelers cheques come with their share of fees and charges. But travelers cheques are a bit on the higher side as they involve traveler cheque creation and encashment plus the usual charges.<h3 class="heading-node" id="714c">Handling</h3>Forex cards are easy and convenient to handle; all it takes is a swipe for a transaction and a few clicks to customize the card. Whereas traveler’s cheques are outdated and hold no meaning in the world of <a class="link" href="https://m2pfintech.com/blog/the-rise-of-digital-payments/" target="">digital payments</a>.<h2 class="heading-node" id="b53b">Why a Forex card?</h2>While Forex cards do allow for frictionless travel, they also come with a host of other benefits such as:It is the safest form of carrying cash, and they are PIN-protected prepaid cards. For example, M2P’s Forex cards enable a traveler to load up to 24 currencies in one card, and it also comes with an app that offers a virtual wallet.They also come with an app feature. For example, <a class="link" href="https://m2pfintech.com/">M2P’s</a> digital travel money app offers the feature of configuring spending limits, channels and block/unblock the card. The traveler can lock in the exchange rates, and buying a forex card is cheaper than cash currency conversion. Also, it saves them fluctuating rates when using debit/credit cards.The traveler can save on transaction fees typically charged by debit and credit cards. They range from 2% to 5% and are coupled with markup fees, applicable taxes, and so on.It can be reloaded from any part of the globe and access a 24/7 customer support team. Travel cards are predominantly accepted everywhere without additional charges.Also, many issuers allow the auto-sweep feature when one currency in a multi-currency wallet goes low. For example, M2P will transfer funds from the GBP wallet to the USD wallet if the wallet balance becomes low when initiating a purchase. It doesn’t require any additional confirmations from the user, and they can easily transact at their preferred platform.It also comes with an ATM feature and can be used in any Visa or MasterCard terminal. Upon return, the balance currency can be converted back into INR without any hassle. Most often, the issuers also offer travel insurance cover along with the forex card.Gone are the days when foreign travel mandated carrying around cash hidden inside the layers of dress and goodies as a safety precaution. With the travel ban slowly being eased in many countries across the world and with M2P’s multi-currency forex cards as a travel companion, today’s globetrotters can enjoy secure and hassle-free travel.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

Tag: "Digital Payments (68)"

Product

About

Compliance

Resources