How Can I Sign Idaho Banking Form

How can i industry sign banking idaho form secure

good morning morning hookah happy to be here and very thanks for coming just two quick and the clarification Rahul is scheduled to talk do the stock and he got sick after own overseas trip so I'm basically filling in for him so I'm going to be his wife I try my best okay just a quick intro like I'm Sadiq hameed who among take evangelist working for some spec armors by MasterCard I'm here to talk about payment security so here's a quick outline on who we are as a company so mastercard is has 2.3 billion cards worldwide for both credit cards and debit cards and we have no operations in more than 200 countries with hundred fifty currencies so like this can speak about who we are right so when it comes to payments you do need to know who you are trusting so trust is a you know integral aspect of payment security right so so that just speaks for itself so who we are and how I mean how we care about both the cardholder security as well as the merchant Security so card-not-present is a major concern right so it is it is estimated that it's a car not present frauds are seven times harder to detect than a card further because card present you know who you are dealing with so you are you I mean the merchants interact with with the customers you know in other infamous whereas car not present you don't know where that it comes from so you could be Moscow Russia it could be Moscow Idaho so I mean making sure that you are dealing the right person is an important thing and how you handle that it is key to your success and there are some stats there so you United States response for forty seven percent of words card fraudulent transaction that's that's being right and then it's been estimated that it goes like increase increase to over one hundred twenty percent for the past the case that's just you know mind-blowing so so this is as a merchant you do need to look at the stats again so fraudulent fraudulent transaction have increased thirty-two percent you know over a to NIH 20 2013 h 1 2014 and 254 person increase in inner product or the q3fy13 that CM 2015's are huge and forty-two percent of us merchants are reporting card not present frogs I mean that's almost half right forty-two percent so it means that are you small medium or large you are susceptible to fraudulent transactions so I mean this is I mean I hope this can convince you as a merchant and also service provider that card for fraudulent transaction is something that you do need to seriously you know look at and see how you can improve security for your you know for your much for you as a merchant or for your no customer all right so this is the typical for party payment system so what involves payments 101 so what it involves is you have a customer you have a merchant and you have a merchant acquirer bank and then you have a shoe or buying the card holders issue or bank so these are the individuals who are involved in the in a you know for party system whether using point-of-sale terminal are using in online transaction so how it works is so I mean there are some data breach elements that you need to look at so there are two major no data breach element you need to consider which is credentials like you know your username password and sensitive data such as you are you know email address SSN and so forth so so these are the two major there are elements that can be reached and these are the things you need as a merchant also in our dollar browser as a service provider you need to you know consider looking at how you can protect those as I just wanted to quickly go through these the flow so so here's a there's a lot of arrows okay so this is this is how the money flows in a fourth party system right so you you can have can have your customer coming in filling in a credit card form and then the card data is going to flows through the payment gateways from your from you Tuesday in a quieter Bank munch in the quarter bag and it goes all the way to the issue person that gets you know a prude and so forth so a lot of you know a lot of clothes and a I mean this is all the money flows you know in a card transaction so I mean there are a lot of ways you could you could improve security you can improve your security mechanisms it's in the flow and foremost most of the time you you if you're looking carefully you know how to prevent them you can you know how to protect those fraud transaction so let's just quickly touch few things so if you want to avoid data breach so we what we suggest is we have this weekend you can enforce the transaction security by its organization so tokenization is a standard card industry standard that you can employ where you instead of sending a sensitive card pan information you could send a garbled data so that you can you eat that it has very contextual meaning only on a certain cases so that there's one of the methods that you can employ and then there are other things like you could employ location checks right so you want to know who you are where your customers are making from making the purchase from and then whether it makes sense for this given transaction or are they just you know taking it right so and then there are things like glossary checks which is how I mean suddenly someone you know stole somebody's car and then want to just suck out all the money from there and they are probably making like 10 or 20 or maybe more transaction in eaten an hour so those are the standards you can so those are the primitive mechanisms you can impose to you know capture the fraudster and there are other things like address validation service and in our CVC card verification code chicks and so forth these are like high level you know security mechanisms that you can use to to protect your your customers and we can we are going to look at a few more and Apple in a brief moment we look at few more in a few of them in details so here ssl right we take this for granted rights ossl we think okay fire on my website on webster that if i run my website on ssl I'm covered I'm good nobody's going to do anything to me that's that's the general assumption but that's not entirely true so SSL is the TLS transport layer security it can protect you a certain certain ways like in terms of payload encryption so forth but it doesn't cover you entirely so there are K there are ways you could expose your sensitive key information but just like what we see here and then you can if you are vulnerable and that's in that case so it's all is good enough but it I mean at the payload encryption level but however as a in a commerce platform or commerce service provider you do want to have an application level security application layer security to project into it so again just don't assume that if so if you're running over epsilon ssl you're done not at all I mean it's just that Kahless level security you do need to have like a next level application layer layer security alright so again let's talk about pci so i mean if you are a merchant you you I'm if you're in a small medium cubed you probably heard what pci payment card industry standard right so what happens here is let's say your customers filling in this form and then you your credit card data flow through and throw your website and to a gate payment gateway like us so what happens here is you if you refuse if you you can flow going through this like a card information gets into your side and goes to the you know to the payment gateway then you are under pca scrutinize ation right you are you are under pcs scrutiny so meaning you if you want to do such thing then you you got that species a stringent in a scrutinize ation in such a way that you go through network scanning put scanning and you do need to run you're in our website probably in the middle of and I never nobody can touch you so that's that's that serious so I turn and then trust me you don't want to deal with the category at all it's one of the of the silliest craziest thing you can think of so so how do you handle such thing so I audie how do you make sure that you are free she protected how do you how do you make sure that your website is you know can be PCI you know acceptor and so forth so that's when so like I said this piece of ale you cannot pass through the path to your character I cannot flow through your website then once you close to then you are under preciate you know preciate Jack pcs colonization so what we provide is tokenization so absence of I commerce what we do is so you can use the organization preacher where you can pass in the curricula information to us and all you get back is the token to you to the client from the route to the browser and then you can use the token to submit to your website so I mean within the context of the transaction token as know me I mean token has meaning only for that level from from getting it from simplify ecommerce as to the website and that's it if someone if your website is you know compromised god forbid and nobody I mean there is the token in itself has no meaning has no relevance so that's that is the key aspect of you know the stock anization in a procedure so and again this is one of the feature that we provide so use if you use or the organization you are you are covered within the pci and I said you know officiers I was certified that's funny website so let's go few more slides here and again ABC CVC checks at address validation service and card no verification code checks and this is this as being proven has been you know tested to control frauds and you don't want to send your ship your items and then realize oh no i mean i did i sent the wrong person you don't want to do that so so for such things you could employ evs and cbc checks and you can really cut down your charge back you don't want to waste your time dealing with all those you know stuff child in a red capes and so forth it definitely can catch some of the flags right that we definitely encourage that and so this is what we saw earlier location chicks so what we are saying here is in location check we want to say okay so you want to assume urchin you want to make sure how your transactions are coming or variants coming from so you want you don't want it for a given scenario you don't you don't have a use case or situation in such a way your billing and shipping may not match I mean you don't want that to be you don't want that to be different right so so you do want to have that level of in a fine-grained control so that's what we we have you do need to have that kind of control to to to prevent the fraudster so there are all kinds of there are much more settings and controls you could you could use and these are some of the common one so which is you can control if you don't want to have your billing and shipping at is different don't approve this transaction right and then if you don't want to have your IP address coming from different billing address so you want to want to control it so there's a control mechanism for that and you don't want to have some folks using a proxy you know for Nigeria through a proxy router from US service we don't want that so you don't you do I mean these are the these are the checks you can use to control fraudsters and like I said no network so there's another big one which is let's say if you want if you don't want to take any transaction that's coming from in a public network shall I or prison networks and so forth so you could control some of those things too and you'd want to only approve transaction from major is three yes you do want to have some kind of control over there and IP location let's say I'm a US based business I do not want anybody making a transaction from in Africa or in a southeast asia our show forth then you you can you have an option to do that so these are the location checks and also the part where it's been registered that that makes a difference right so these are the location chicks that you could use to prevent your you know improve a fraudster from making a purchase on your website and buy the walkie-talkies one out for marcin that I just we just have it on the slide let's go to the next one which is the velocity check this is also a key thing so what it means is we you don't sometimes in a lot of times if you look at it when it's a easy flag that when someone steals your card they want to suck out of it immediately right so how I mean just that that's when the velocity checks would come in and useful so where you can say if I have if I if I receive more than five payments no I'm not I'm not the a.d.d I'm not clicking it right i mean if i'm a uddi might click like three times right i mean if i do fight and there's something wrong with me so you want to have a control that some the same card is used for more than five or ten times than something wrong somebody is trying to you know do something with my card right somebody stole it somebody have all day panning for so forth so those kind of checks you can control how many papers you want to see like you want to be mean in your scenario maybe more than Phi is not not a normal thing so that's that you need that kind of control right and also IP address you don't want to have like five different or maybe a hundred different payments from the same IP address then obviously something wrong somebody is making a payment from from the same machine or so fun device what kind of device you want to support you want I want to support desk top that's fine so let's do it so or maybe I want support only most I said yes so these are the fine grid controls we want to provide us a merchant he was a service provider that you can use to control fraudsters and emails let's say if use the same email in multiple different you know scenarios you don't want that so and these are the velocity chicks that you could use to control you know fraud in this in this scenario so we we have those options so here we are so I'm happy to announce simplify controls so this is a brand new production feature that we are releasing right now today by recently I should say so it is it is it is it is catered or it is designed for any size merchants small medium large and you can do all these from anywhere not just through a desktop and you can also do it from a mobile device and I there was a cart earlier which is talking about conversational Commerce so I started contextual commerce which is in the context makes a difference so you are in a unit in a in a business trip or no conference trip so forth you probably are much and so you want to control it from here from when you are avail from your business location how would you do that you may I don't have access to disturb I don't have I want to do it to my variable device I want to do it to my mobile phone I want to do to you know whatever the medium is going to be right so this is the total on the channel solution that you should be able to control all the fraud protection features for the u.s. Merchant so that you can be notified you can be you know you can be if you'll be able to control you'll be able to you know identify how many translation coming in or where it's coming from and so forth so so it's a total in to end solution that we provide where you can you know control and a fraud for your business and then and we are so simplify commerce like I said earlier so it's if we are all commerce if you have since we are already there so it's it's a it's a prepackaged module already within newcomers so all you need to do is just you know enable it as the payment gateway and you can just fill in the API key and you're good to go so you don't need to install anything extra for her for users so it's again we we are very omni-channel we are now we have a very developer focused web developer driven platform meaning we have SDKs like you could run your who commerce to bhp you know and you want to have some form of mechanism to to to general you know reports are back in admin so forth you could use some of our SDKs to build something on it also thats that's where we are right i mean so yeah so please check us out and then here I'm a social media channels and we have a cable boot right outside and we are happy to talk to you we are happy to help you if you are interested just you know if you want to take advantage of simplified controls you know immediately just ta k to us you know so we are here happy to help you out and then thanks for you know listening to me all right thank you [Applause]