Using a mobile to make a payment on Latpay's all-in-one terminal

Case Study: Academy Football of Australia

/in , , , /by

“Latpay’s payments solutions streamlined our event operations, more than we what expected. Their responsiveness, expertise and willingness to deliver a solution that met our needs was second to none. With an easy-to-use interface and pre-event training our staff we’re equipped to transact with customers without any interruption.” Taryn Event Coordinator

 

Problem

With less than two weeks until our on-site event at Kokoda, we needed a fast, local and convenient solution to facilitate onsite payments and ease of reconciliation. No previous payment infrastructure was in place, our staff were inexperienced, and this was the first year we were participating in Kokoda, it was all new to us.

We had over 45 volunteers lined up for the two-day event, who would all be working remotely at various stations and would be regularly switching in and out as their shifts start and end. 

We needed this event to be successful so that our fundraising efforts for the 80+ boys and girls who train at our club could go on an exclusive training field trip to New Zealand.

 

Solution

Through a discovery consultation with Latpay, they were able to pinpoint our exact transactional and reconciliation requirements. They also identified requirements of ours, we didn’t even know we needed. 

 

Their responsiveness and expertise equipped our workforce with hire solutions of:

  • 5 Terminal Devices
  • 5 Power Banks
  • 5 Mobile Devices (set up and all ready to go)

 

They had our account set up, verified and ready for payments in just a matter of days. Pre-event training was provided to our team and event onsite support.

For ease of reconciling Latpay separated our reconciliation into two separate accounts:

01 – Account > For regular membership

02 – Account > Kokoda Parking / Fundraising 

 

This meant that we had full transparency without any manual reporting or intervention to know how much funds have been generated at this event, but also for any future events with our secondary account (02) able to be swapped out p/event.

 

Outcome

On Friday 17th July, we launched our inaugural Fundraising Event at Kokoda. With our 48 volunteers across the two days, we seamlessly transacted with customers at our sausage sizzle, paid car park and at our stall. With pre-event training, all devices configured, and equipment solutions made available for hire, Latpay equipped us with everything that we needed for the event to be successful.

We were one of the only vendors at Kokoda able to accept card payments. This was a huge benefit for our customers who didn’t always have cash available.

Transitioning between volunteers shifts, was easy and seamless with minimal time spent setting up new volunteers. 

We have also found that with the flexibility to add an accurate transaction description, from the addition of a secondary account, we have had significantly fewer chargebacks and disputed transactions than our everyday operations.

Latpay is working on a solution to accept smartpayments (digital wallets) which will only benefit their terminal devices as well as being able to accept eftpos transactions.

Find out how Latpay’s customisable payment solutions can support your club, association and organisation. Make an enquiry today!

Man and women looking through banking statements

How to prevent chargebacks

/in , , , , /by

Knowing what a chargeback is and understanding how it works can be confusing, but it doesn’t have to be. We’re here to break down chargebacks and provide you with solutions to avoid them.

 

What is a chargeback?

A chargeback, or a payment dispute, is a transaction reversal that occurs when a cardholder disputes authorising a payment or deems a transaction fraudulent. An investigation will then be actioned, and if you, as the merchant, cannot prove the cardholder authorised the transaction, the bank will withdraw the funds from your account and deposit them back into the cardholder’s account.

 

What causes a chargeback?

Unfortunately, there can be a variety of reasons that may cause a chargeback. Here are just some of the possible causes for issuing a chargeback:

 

  • No authorisation
  • Duplicate payment
  • Incorrect transaction amount
  • Incorrect currency code
  • Merchant fraud
  • Late presentment
  • Processing or authorisation errors

 

What are the impacts of chargebacks on merchants?

When a chargeback is initiated and the transaction is withdrawn from your account, there can be several impacts on you and your business. These are just some examples: 

 

  • Loss of income, even if you’ve already provided the goods or services
  • You may be liable for chargeback fees, which in some cases can equal up to two and a half times the original transaction amount
  • Chargeback to transaction ratios exceeded, which can result in lengthy mitigation programs
  • In extreme cases, loss of your accounts due to too many chargebacks

 

How can you avoid chargebacks?

To avoid paying excessive fees on top of the loss of the transaction income, you should look for ways to prevent chargebacks in the first place. 

In many cases, the best and easiest way to avoid chargebacks is to ensure that you follow the proper transaction procedures. Latpay provides merchant payment solutions tailored to specific business needs with dedicated ongoing support, chargeback management and analysis, fraud retina and a shared approach to help manage risk.

With industry knowledge and an excellent merchant payment system on your side, you can avoid the issue of chargebacks before they become a problem for your business.

If you’re a merchant looking for a reliable and safe payment system, get in touch today. Our team of experts would love to help you find the best solution for your needs.

Close up of person typing on keyboard

Credit Card Fraud in Australia

/in , , , , /by

As technology continues to improve, fraudsters have become more creative in the way they target individuals and businesses. In 2019, Australians lost over $634 million to scammers (ACCC, 2019). This number is up 30% on 2018 figures.

Rather than the traditional methods of asking someone to provide their sensitive information, fraudsters now have improved technology and carefully curated techniques that help them commit fraud with minimal risk of detection.

 

Fraud Techniques

As we move closer towards a cashless society, credit card fraud is becoming more prevalent and there are a number of methods fraudsters can use to steal another person’s funds.

Fraudsters used advanced techniques and one of the most effective and efficient means of credit card fraud is card testing. Card testing involves physically stealing a number of credit cards, purchasing credit cards from the dark web, randomly generating credit card numbers or using phishing or spyware techniques to obtain a card’s numbers. The core purpose of testing is not the purchase of an item but to verify the card details are valid and if the transaction was approved.

Fraudsters have now also created a means to commit illegal activity on a much greater scale, in the form of botnets. Botnets are a network of internet-connected devices that can validate a huge number of credit cards at an alarming rate. Botnets submit a large number of transactions to test the viability of stolen credit card details. Many popular shopping carts are being targeted by botnet attacks and one of the most effective means of prevention is velocity checking.

When a valid credit card is detected, it is common for fraudsters to use the credit card details to make small purchases on a merchant’s site. If a small purchase is successful, fraudsters can then proceed to make much larger purchases, a series of micro-purchases or sell the valid card on the dark web.

 

Challenges for Merchants

Fraudulent purchases are often made on small to medium businesses that don’t have the technology in place to detect or prevent it. Unfortunately for targeted merchants, this means they will likely suffer some challenges when fraudulent purchases prevail.

Chargebacks occur when the original cardholder has recognised fraudulent activity on their account with an unrecognised transaction made to you as the targeted merchant. When a dispute is made by the original cardholder or their bank, and you do not have proper proof that a legitimate sale was made using a PIN or signature, you may be liable to pay back the accepted funds and lose the value of the sale and incur a chargeback fee.

Each successful transaction, no matter how small, will count against the merchant’s chargeback ratio once it’s disputed – and crossing over the excessive chargeback threshold can be extremely costly for merchants. 

This is particularly important for eCommerce and online services, where a physical card is not present. In fact, ‘Card not present’ fraud represents more than 80% of all fraud on Australian cards. When a dispute arises, it is very difficult for an online merchant to prove a legitimate purchase was made. Therefore, it is critical that online merchants have technology in place to detect and prevent fraudulent transactions.

 

Opportunities for Merchants

To avoid liability for fraudulent transactions, merchants must be vigilant in their online payment processes. Some best practices to implement include Firewalls, CAPTCHA, Time out of user session and data validation of guest checkouts. Additionally, one of the best ways to avoid being out of pocket for fraudulent transactions is to partner with a verified payment processor.

Latpay’s fraud management service assists merchants to prevent chargebacks and stop fraud in its tracks. With advanced technology, Latpay can actively set a threshold for individual merchants to detect when unusual activity occurs on their site.

In applying the velocity and value threshold, Latpay reviews the past performance of the merchant to work out transactional averages. Latpays innovative technology has helped assist merchants who have been the victims of botnet attacks to significantly minimise losses.

If you’re a merchant, whether offline or online, it pays to be protected. Learn more about Latpay’s fraud management and get in touch with our team of experts to find out more.

Blockchain-biometrics

Payment and identity verification with blockchain & biometrics

/in , , , , /by

How does your business manage customer data and identification? 

As one of the most secure methods of data protection available, blockchain technology has quickly become the industry standard for securely accessing customer information and ensuring it never falls into the wrong hands. 

Harnessing this best-of-breed encryption technology, our partners at Nuggets have developed an innovative platform that combines blockchain with biometric authentication to deliver the first-ever identity and payment app to the Australian market. 

 

Nuggets: Leading the way in data security

Nuggets is a secure payment security and ID verification platform designed to streamline business processes and deliver exceptional data security to customers. Using industry-leading blockchain and biometric technology, Nuggets helps businesses to protect customer data while offering simplified validation and payment processes for businesses. 

Latpay + Nuggets

Latpay has teamed up with Nuggets to offer a complete solution to payment security. Utilising our PCI DSS compliant merchant facility and payment gateway, we can now offer businesses a simple and highly-secure option for ID verification and payment processing, both online and in person. 

How it works:

Nuggets stores customer data securely using blockchain technology. This essentially means that the data is encrypted and dispersed in chunks to be stored across a range of sources, and is only accessible by the customer themselves. Not even Nuggets can access it.

When a business requests ID verification, customers only share enough of the data stored to complete the verification or transaction. This means that businesses never need to store personal or sensitive data about their customers. 

Benefits of using Nuggets:

Developed with both businesses and consumers in mind, Nuggets delivers a wide range of benefits that ensure the security of all users while streamlining processes and improving customer experiences. 

 

Business Benefits:

Fraud mitigation 

Combining blockchain and biometric technology, Nuggets helps to mitigate the risks of identity fraud with a highly secure platform that puts data security back in the hands of the customer.

Compliance assurance

Minimise the hassles of regulatory compliance with a payment and identity verification system that boast compliance to the major governing bodies, including Payment Card Industry Data Security Standard (PCI DSS), General Data Protection Regulation (GDPR) and Second Payment Services Directive (PSD2).

Streamlined processes

Spend less time processing your customers with the ability to validate identification and verify payment methods in just seconds. Just send a request to your customer’s mobile and have complete confidence in the data provided – no second-guessing.  

No data, no breaches

Recent statistics show that around $527.8 million was lost over the previous financial year to card fraud in Australia, while the annual economic impact of identity fraud sits at around $2 billion. Mitigate the risks of a data breach and protect your business reputation by never storing customer data. If there’s no data, there’s no data to be breached. 

Secure payment processing 

Deploying Latpay’s secure payment technology, Nuggets delivers complete payment security using whichever payment method your customers prefer.

 

Consumer Benefits:

Protect your personal data

With none of their personal data collected or stored by your business, customers can feel confident in the protection of their personal data and therefore more comfortable doing business with you. 

Streamline identity verification

Customers can spend less time proving they are who they say they are with a pre-validated method of identification. A

Make payments simple

Using pre-loaded and pre-verified payment methods, customers can make payments in a few simple steps from their Nuggets app with the knowledge that their payment data will remain secure. 

No more passwords

With the capability to sign in via fingerprint scan or facial recognition, using Nuggets removes the need for pesky passwords. As well as sidestepping yet another password to remember, this also means reduced risk of phishing, malware or hijacking of phone accounts. 

 

Using Nuggets

Using the Nuggets platform for payment and identity verification is incredibly simple for both businesses and consumers, and can be completed in just 3 quick steps:

Step 1: Biometric single sign-on

Using either a desktop or mobile device, businesses and consumers can log in in seconds using biometric data saved to their account. This means no usernames or passwords required.

Step 2: Swift ID verification

The business then ‘pings’ a request to the customers’ device, requesting access to specific information. Once the customer receives the request, they can either approve or deny access for the business. Once approved, the verification process takes just seconds. 

Step 3: Secure payments

If taking payments, the business can then offer the most popular payment methods for their customers to pay directly through the Nuggets app. This includes credit or debit cards and even cryptocurrency. 

It’s that simple.

 

Ready to step into the future of business? Learn more about how Nuggets and Latpay can help you to reduce risk, increase revenue and streamline customer verification here. 

Benefits of using tokenisation for payment security

/in , , , /by

Tokenisation is the process of generating a random string of values (known as a unique ID number or token) to substitute sensitive data like payment details. 

Using tokenisation, businesses can offer a smooth and secure method of taking payments that allows increased protection against payment fraud. 

So how does it work? In essence, cardholder data is stored in a secure token vault that can only be accessed by the payment provider; consumer data is tokenised immediately upon making payment so their actual card data never passes through payment systems. 

What’s the difference between tokenisation and encryption?

When talking about tokenisation, many people think of encryption. However, tokenisation offers significantly greater security than encryption, quickly becoming the industry-leading method of securing data for payment processing. Here are some of the key differences: 

Encryption:

  • Mathematically generates cipher text using an algorithm and key
  • Format preservation means lower security strength
  • Encrypted data leaves the organisation

Tokenisation:

  • Randomly generates a value for plain text
  • Format maintained without any loss of security
  • Encrypted data remains within the organisation, allowing heightened security

Benefits of using tokenisation for payment security

Reduced impact of a potential data breach

While we hope it won’t happen, data breaches are all too common in businesses and industries across the board. You don’t have to be a large corporation to become a target, either. In fact, SME’s are often recognised for their inferior systems security, making them a primary target for hackers. 

Using tokenisation, however, sensitive data like credit card numbers aren’t accessible during a  breach. This is due to the fact that data is stored as tokens, and are therefore unusable to anyone but your organisation. So while tokenisation may not be able to protect your business against a breach, the financial impact will be significantly reduced by using tokenisation for data security. 

 

Protect your reputation and build trust

As a business, your reputation is arguably your most valuable asset, one that can take years to build yet an instant to destroy. To ensure your reputation remains intact, building and maintaining trust among your customers is absolutely critical.

Particularly for online businesses, customers need to have significant trust in your ability to protect their data in order to feel comfortable making a purchase.  

Tokenisation helps businesses to build and maintain this trust by demonstrating a dedication to data security. As the most impenetrable method of protecting payment data, consumers feel confident that their card details are safe and your business maintains a reputation of putting customers first.

 

Compliance with the Payment Card Industry Data Security Standard (PCI DSS)

To ensure security of cardholder data, any business accepting, processing, or storing card details must be compliant with PCI-DSS regulations. 

There are 12 levels of PCI-DSS requirements depending on various factors of your business – primarily, how many annual transactions you process. Regardless of your requirements, striving for the highest level of compliance is always recommended and tokenisation is a great way to achieve this. 

Of course, tokenisation doesn’t guarantee compliance. However, partnering with a PCI-compliant payment service provider to offer tokenisation means you’ll also benefit from other secure services that help you to meet your compliance obligations.

 

Offer industry-leading security with tokenisation

Tokenisation is undoubtedly the most advanced way of securing cardholder data for payment processing. If the security of your customers is paramount to your business, learn more about implementing tokenisation with a PCI DSS Level 1 certified provider like Latpay.