SlideShare a Scribd company logo
1 of 13
Managing Fraud, Authentication Transactions 
MPOS 
Chang Chew Soon 
Founder, Soft Space
Value Proposition 
Our technology transforms any mobile device into a mobile point of sales (MPOS). 
Enables anyone to accept payments, anywhere, anytime, securely 
Then: 
EDC Terminal 
Now: 
Mobile Point of 
Sales
About Us 
Soft Space is a mobile payments technology company, headquartered in Kuala 
Lumpur, Malaysia. 
Established in March 2012, with a head count of 4, Soft Space focuses on the 
development of innovative solutions for the banking and payment industry. 
As of today, Soft Space commands over 50% market share in South East Asia with 
deployments in 14 banks, and a staff strength of 60. 
Certifications
Recognition 
Soft Space’s business strategy and centralised EMV solution has won several awards 
both at national and regional level. 
Soft Space is Asia’s first company to obtain full EMV certification on MPOS 
Remains one of the very few companies in the world with centralized EMV processing 
technology 
Asia Pacific ICT Alliance Awards ASEAN ICT Awards 
Best of Financial 
Applications Winner 2013 
Best of Start-up Companies 
Winner 2013 
Best Start Up 
Winner 2013 
Red Herring 
Top 100 Asia 
Winner
Recognition 
Soft Space’s business strategy and centralised EMV solution has won several awards 
both at national and regional level. 
Visa Risk Management Leader Award 2013 Retail Banker International Asia Trailblazer 
Best Acquiring Institution in 
Southeast Asia, 2013 
In recognition of 
international-standard 
electronic banking safety 
and innovation of mobile 
point of sale (mPOS) 
Excellence in Mobile 
Banking 
In recognition of the 
implementation of the 
Plug n Pay mobile point 
of sale (mPOS) 
Kasikorn 
Bank 
Thailand 
CIMB Bank 
Malaysia
1 
2 
3 
10 
4 
1 2 3 4 
5 6 7 
5 
6 7 
14 
14 
Bank X 
Taiwan 
14 
8 
9 
8 9 
11 
12 
13 
10 
11 12 13 
CIMB Bank 
Malaysia 
Hong Leong Bank 
Malaysia 
CIMB Niaga 
Indonesia 
Bank X 
Malaysia 
Bank X 
Singapore 
Bank X 
Indonesia 
Bank X 
Indonesia 
Kasikorn Bank 
Thailand 
Thanachart Bank 
Thailand 
VietinBank 
Vietnam 
Sacombank 
Vietnam 
Bank X 
Philippines 
Bank of New Zealand 
Australia & New Zealand 
Geographical Point of View
1 
2 
3 
10 
4 
1 2 3 4 
5 6 7 
5 
6 7 
14 
14 
Bank X 
Taiwan 
14 
8 
9 
8 9 
11 
12 
13 
10 
11 12 13 
CIMB Bank 
Malaysia 
Hong Leong Bank 
Malaysia 
CIMB Niaga 
Indonesia 
Bank X 
Malaysia 
Bank X 
Singapore 
Bank X 
Indonesia 
Bank X 
Indonesia 
Kasikorn Bank 
Thailand 
Thanachart Bank 
Thailand 
VietinBank 
Vietnam 
Sacombank 
Vietnam 
Bank X 
Philippines 
Bank of New Zealand 
Australia & New Zealand 
Chip & Signature vs Chip & Pin 
EMV & Domestic Chip & Pin 
EMV Chip & Signature 
Domestic Chip & Pin 
EMV Chip & Signature 
(Optional MSR fallback)
How to steal a pin?
Introducing FLIR One Thermal Imaging Casing 
What is thermal 
imaging? 
Everything around you 
either emits or reflects 
heat energy 
Thermal imaging makes 
the invisible world of heat 
energy visible to your 
eyes 
Detects infrared energy, 
processes thermal image, 
perform temperature 
calculation, and is very 
precise 
USD 350
Pin code is 
12345
MPOS & Its Associated Risks 
 Security of the reader 
 Hardware Encryption 
 Mobile Phone Security 
 Software Encryption 
 Data Storage on the device 
 Cross-border transactions 
 Geo-fencing 
 Transaction Monitoring 
 Fraud Prevention vs Detection 
 Authentication 
 Physical vs Logical 
 Online vs Offline 
 Magnetic Strip vs Chip 
 Cardholder Verification 
 Signature vs Pin 
1 
2 
3 
10 
4 
5 6 7 
14 
14 
8 
9 
11 
12 
13
Offline Pin vs Online Pin 
 Visa & MasterCard mandates online authentication for MPOS transactions 
 Under what circumstances do we allow offline? 
 Performance vs risks 
Pin Change 
 ATM machines 
 Issuer 
Case Study: Malaysia’s recent mandate to full chip & pin for both 
international & domestic schemes 
 Costs of card reissuing 
 Costs of POS terminal upgrades 
 Costs of infrastructure & backend system upgrades

More Related Content

What's hot

SUICA and e-money for transport
SUICA and e-money for transportSUICA and e-money for transport
SUICA and e-money for transportGerhard Fasol
 
Mobile Money: Banks & Telcos, who’s the Boss?
Mobile Money: Banks & Telcos, who’s the Boss?Mobile Money: Banks & Telcos, who’s the Boss?
Mobile Money: Banks & Telcos, who’s the Boss?Isabelle Berner
 
Apply Online Payments Malaysia
Apply Online Payments MalaysiaApply Online Payments Malaysia
Apply Online Payments Malaysiaksyee1607
 
Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...
Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...
Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...Samsung Biz Mobile
 
Mobile Money Transfer (MMT)
Mobile Money Transfer (MMT)Mobile Money Transfer (MMT)
Mobile Money Transfer (MMT)Sadat Faruque
 
A study on payment wallet
A study on payment walletA study on payment wallet
A study on payment walletpurtikaunder
 
Gcit 1015 (section 2)
Gcit 1015 (section 2)Gcit 1015 (section 2)
Gcit 1015 (section 2)HiuLaamChan1
 
Payment Cards in Malaysia - Redefining the Way to Pay by Perry Ong
Payment Cards in Malaysia - Redefining the Way to Pay by Perry OngPayment Cards in Malaysia - Redefining the Way to Pay by Perry Ong
Payment Cards in Malaysia - Redefining the Way to Pay by Perry OngWinnie Khong
 
Mobile payments, e-money and mobile credit in Japan
Mobile payments, e-money and mobile credit in JapanMobile payments, e-money and mobile credit in Japan
Mobile payments, e-money and mobile credit in JapanGerhard Fasol
 
Mobile wallets Analysis - Evolution, Scope & Future in India
 Mobile wallets Analysis - Evolution, Scope & Future in India Mobile wallets Analysis - Evolution, Scope & Future in India
Mobile wallets Analysis - Evolution, Scope & Future in IndiaRohit Namboodiri
 
PCI P2PE - World's first PCI-P2PE certified mPOS app
PCI P2PE - World's first PCI-P2PE certified mPOS appPCI P2PE - World's first PCI-P2PE certified mPOS app
PCI P2PE - World's first PCI-P2PE certified mPOS appHandpoint mobile POS
 
[Case study] Apple Pay, the first French users go to the till
[Case study] Apple Pay, the first French users go to the till [Case study] Apple Pay, the first French users go to the till
[Case study] Apple Pay, the first French users go to the till Dynvibe
 
Group 2 assignment 4 e wallet
Group 2 assignment 4 e walletGroup 2 assignment 4 e wallet
Group 2 assignment 4 e walletClaire Owen
 
Myanmar Mobile Money Services INtroduction
Myanmar Mobile Money Services INtroductionMyanmar Mobile Money Services INtroduction
Myanmar Mobile Money Services INtroductionAung Cho
 

What's hot (20)

SUICA and e-money for transport
SUICA and e-money for transportSUICA and e-money for transport
SUICA and e-money for transport
 
Mobile banking
Mobile bankingMobile banking
Mobile banking
 
Peer to-peer mobile payments
Peer to-peer mobile paymentsPeer to-peer mobile payments
Peer to-peer mobile payments
 
Mobile Money: Banks & Telcos, who’s the Boss?
Mobile Money: Banks & Telcos, who’s the Boss?Mobile Money: Banks & Telcos, who’s the Boss?
Mobile Money: Banks & Telcos, who’s the Boss?
 
Samsung Pay
Samsung PaySamsung Pay
Samsung Pay
 
Apply Online Payments Malaysia
Apply Online Payments MalaysiaApply Online Payments Malaysia
Apply Online Payments Malaysia
 
Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...
Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...
Samsung Pay - Safe and secure mobile payments virtually anywhere you can swip...
 
Mobile Money Transfer (MMT)
Mobile Money Transfer (MMT)Mobile Money Transfer (MMT)
Mobile Money Transfer (MMT)
 
MOBILE MONEY SYSTEM OVERVIEW
MOBILE MONEY SYSTEM OVERVIEWMOBILE MONEY SYSTEM OVERVIEW
MOBILE MONEY SYSTEM OVERVIEW
 
A study on payment wallet
A study on payment walletA study on payment wallet
A study on payment wallet
 
Gcit 1015 (section 2)
Gcit 1015 (section 2)Gcit 1015 (section 2)
Gcit 1015 (section 2)
 
Mobile banking
Mobile bankingMobile banking
Mobile banking
 
Payment Cards in Malaysia - Redefining the Way to Pay by Perry Ong
Payment Cards in Malaysia - Redefining the Way to Pay by Perry OngPayment Cards in Malaysia - Redefining the Way to Pay by Perry Ong
Payment Cards in Malaysia - Redefining the Way to Pay by Perry Ong
 
Mobile payments, e-money and mobile credit in Japan
Mobile payments, e-money and mobile credit in JapanMobile payments, e-money and mobile credit in Japan
Mobile payments, e-money and mobile credit in Japan
 
E wallet
E walletE wallet
E wallet
 
Mobile wallets Analysis - Evolution, Scope & Future in India
 Mobile wallets Analysis - Evolution, Scope & Future in India Mobile wallets Analysis - Evolution, Scope & Future in India
Mobile wallets Analysis - Evolution, Scope & Future in India
 
PCI P2PE - World's first PCI-P2PE certified mPOS app
PCI P2PE - World's first PCI-P2PE certified mPOS appPCI P2PE - World's first PCI-P2PE certified mPOS app
PCI P2PE - World's first PCI-P2PE certified mPOS app
 
[Case study] Apple Pay, the first French users go to the till
[Case study] Apple Pay, the first French users go to the till [Case study] Apple Pay, the first French users go to the till
[Case study] Apple Pay, the first French users go to the till
 
Group 2 assignment 4 e wallet
Group 2 assignment 4 e walletGroup 2 assignment 4 e wallet
Group 2 assignment 4 e wallet
 
Myanmar Mobile Money Services INtroduction
Myanmar Mobile Money Services INtroductionMyanmar Mobile Money Services INtroduction
Myanmar Mobile Money Services INtroduction
 

Similar to APSCA: Managing Fraud, Authentication Transactions - mPOS

Empowering smes with mobile payment
Empowering smes with mobile paymentEmpowering smes with mobile payment
Empowering smes with mobile paymentChunJia Sio
 
Technology Changing The Face Of Microfinance
Technology Changing The Face Of MicrofinanceTechnology Changing The Face Of Microfinance
Technology Changing The Face Of MicrofinanceJohn Owens
 
etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”
etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”
etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”Werbeplanung.at Summit
 
7 Ways to Make EMV Easier / Webinar
7 Ways to Make EMV Easier / Webinar7 Ways to Make EMV Easier / Webinar
7 Ways to Make EMV Easier / WebinarIngenico Group
 
2014 Card and Payments Fraud Forecast
2014 Card and Payments Fraud Forecast2014 Card and Payments Fraud Forecast
2014 Card and Payments Fraud ForecastEMC
 
IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...
IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...
IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...IRJET Journal
 
Mint Payments Limited - A company and product overview
Mint Payments Limited - A company and product overviewMint Payments Limited - A company and product overview
Mint Payments Limited - A company and product overviewMint Wireless Limited
 
Hoard Pitch Deck
Hoard Pitch DeckHoard Pitch Deck
Hoard Pitch DeckHoard
 
Hoard Pitch Deck
Hoard Pitch DeckHoard Pitch Deck
Hoard Pitch DeckJason Davis
 
Managing & Securing the Online and Mobile banking - Chew Chee Seng
Managing & Securing the Online and Mobile banking - Chew Chee SengManaging & Securing the Online and Mobile banking - Chew Chee Seng
Managing & Securing the Online and Mobile banking - Chew Chee SengKnowledge Group
 
Smart card emv for dummies
Smart card emv for dummiesSmart card emv for dummies
Smart card emv for dummiesBACKSEATRIDER
 
NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...
NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...
NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...Alex Tan
 
Cash Is Still King: ATM market research '2023
Cash Is Still King: ATM market research '2023Cash Is Still King: ATM market research '2023
Cash Is Still King: ATM market research '2023Vladislav Solodkiy
 

Similar to APSCA: Managing Fraud, Authentication Transactions - mPOS (20)

Empowering smes with mobile payment
Empowering smes with mobile paymentEmpowering smes with mobile payment
Empowering smes with mobile payment
 
Technology Changing The Face Of Microfinance
Technology Changing The Face Of MicrofinanceTechnology Changing The Face Of Microfinance
Technology Changing The Face Of Microfinance
 
etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”
etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”
etailment WIEN 2015 – David Dechamps (MasterCard) “Die Welt des Bezahlens”
 
7 Ways to Make EMV Easier / Webinar
7 Ways to Make EMV Easier / Webinar7 Ways to Make EMV Easier / Webinar
7 Ways to Make EMV Easier / Webinar
 
2014 Card and Payments Fraud Forecast
2014 Card and Payments Fraud Forecast2014 Card and Payments Fraud Forecast
2014 Card and Payments Fraud Forecast
 
SBMS EMV Doc
SBMS EMV Doc SBMS EMV Doc
SBMS EMV Doc
 
IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...
IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...
IRJET- Using Fingerprint, Pycrypto, and Mobile Banking App, to Withdraw Cash ...
 
moneypad.pptx
moneypad.pptxmoneypad.pptx
moneypad.pptx
 
Mint Payments Limited - A company and product overview
Mint Payments Limited - A company and product overviewMint Payments Limited - A company and product overview
Mint Payments Limited - A company and product overview
 
Hoard Pitch Deck
Hoard Pitch DeckHoard Pitch Deck
Hoard Pitch Deck
 
Hoard Pitch Deck
Hoard Pitch DeckHoard Pitch Deck
Hoard Pitch Deck
 
Managing & Securing the Online and Mobile banking - Chew Chee Seng
Managing & Securing the Online and Mobile banking - Chew Chee SengManaging & Securing the Online and Mobile banking - Chew Chee Seng
Managing & Securing the Online and Mobile banking - Chew Chee Seng
 
Smart card emv for dummies
Smart card emv for dummiesSmart card emv for dummies
Smart card emv for dummies
 
NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...
NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...
NetMatrix TLE Terminal Line Encryption. SPVA certified, DUKPT, 3DES, DES, AES...
 
Hasin group profile 2019
Hasin group profile 2019Hasin group profile 2019
Hasin group profile 2019
 
Masspay int
Masspay intMasspay int
Masspay int
 
Pitch Deck-Tracopay
Pitch Deck-TracopayPitch Deck-Tracopay
Pitch Deck-Tracopay
 
Cash Is Still King: ATM market research '2023
Cash Is Still King: ATM market research '2023Cash Is Still King: ATM market research '2023
Cash Is Still King: ATM market research '2023
 
Jaiyadav
JaiyadavJaiyadav
Jaiyadav
 
Jaiyadav
JaiyadavJaiyadav
Jaiyadav
 

APSCA: Managing Fraud, Authentication Transactions - mPOS

  • 1. Managing Fraud, Authentication Transactions MPOS Chang Chew Soon Founder, Soft Space
  • 2. Value Proposition Our technology transforms any mobile device into a mobile point of sales (MPOS). Enables anyone to accept payments, anywhere, anytime, securely Then: EDC Terminal Now: Mobile Point of Sales
  • 3. About Us Soft Space is a mobile payments technology company, headquartered in Kuala Lumpur, Malaysia. Established in March 2012, with a head count of 4, Soft Space focuses on the development of innovative solutions for the banking and payment industry. As of today, Soft Space commands over 50% market share in South East Asia with deployments in 14 banks, and a staff strength of 60. Certifications
  • 4. Recognition Soft Space’s business strategy and centralised EMV solution has won several awards both at national and regional level. Soft Space is Asia’s first company to obtain full EMV certification on MPOS Remains one of the very few companies in the world with centralized EMV processing technology Asia Pacific ICT Alliance Awards ASEAN ICT Awards Best of Financial Applications Winner 2013 Best of Start-up Companies Winner 2013 Best Start Up Winner 2013 Red Herring Top 100 Asia Winner
  • 5. Recognition Soft Space’s business strategy and centralised EMV solution has won several awards both at national and regional level. Visa Risk Management Leader Award 2013 Retail Banker International Asia Trailblazer Best Acquiring Institution in Southeast Asia, 2013 In recognition of international-standard electronic banking safety and innovation of mobile point of sale (mPOS) Excellence in Mobile Banking In recognition of the implementation of the Plug n Pay mobile point of sale (mPOS) Kasikorn Bank Thailand CIMB Bank Malaysia
  • 6. 1 2 3 10 4 1 2 3 4 5 6 7 5 6 7 14 14 Bank X Taiwan 14 8 9 8 9 11 12 13 10 11 12 13 CIMB Bank Malaysia Hong Leong Bank Malaysia CIMB Niaga Indonesia Bank X Malaysia Bank X Singapore Bank X Indonesia Bank X Indonesia Kasikorn Bank Thailand Thanachart Bank Thailand VietinBank Vietnam Sacombank Vietnam Bank X Philippines Bank of New Zealand Australia & New Zealand Geographical Point of View
  • 7. 1 2 3 10 4 1 2 3 4 5 6 7 5 6 7 14 14 Bank X Taiwan 14 8 9 8 9 11 12 13 10 11 12 13 CIMB Bank Malaysia Hong Leong Bank Malaysia CIMB Niaga Indonesia Bank X Malaysia Bank X Singapore Bank X Indonesia Bank X Indonesia Kasikorn Bank Thailand Thanachart Bank Thailand VietinBank Vietnam Sacombank Vietnam Bank X Philippines Bank of New Zealand Australia & New Zealand Chip & Signature vs Chip & Pin EMV & Domestic Chip & Pin EMV Chip & Signature Domestic Chip & Pin EMV Chip & Signature (Optional MSR fallback)
  • 8. How to steal a pin?
  • 9. Introducing FLIR One Thermal Imaging Casing What is thermal imaging? Everything around you either emits or reflects heat energy Thermal imaging makes the invisible world of heat energy visible to your eyes Detects infrared energy, processes thermal image, perform temperature calculation, and is very precise USD 350
  • 10. Pin code is 12345
  • 11.
  • 12. MPOS & Its Associated Risks  Security of the reader  Hardware Encryption  Mobile Phone Security  Software Encryption  Data Storage on the device  Cross-border transactions  Geo-fencing  Transaction Monitoring  Fraud Prevention vs Detection  Authentication  Physical vs Logical  Online vs Offline  Magnetic Strip vs Chip  Cardholder Verification  Signature vs Pin 1 2 3 10 4 5 6 7 14 14 8 9 11 12 13
  • 13. Offline Pin vs Online Pin  Visa & MasterCard mandates online authentication for MPOS transactions  Under what circumstances do we allow offline?  Performance vs risks Pin Change  ATM machines  Issuer Case Study: Malaysia’s recent mandate to full chip & pin for both international & domestic schemes  Costs of card reissuing  Costs of POS terminal upgrades  Costs of infrastructure & backend system upgrades