If you follow the comings and goings within the financial
services industry you’re familiar with the issue of EMV. It’s an issue every
consumer needs to be aware of because the changes being discussed affect your debit
card.
EMV stands for Eurocard, MasterCard, and Visa. It is a
security standard established by the three card brands (MasterCard subsequently
acquired Eurocard) in 1994 for payment cards like your debit card. Rather
than rely on the humble magnetic stripe on the back of your debit card for
dealing with your personal card data, EMV uses a harder-to-hack computer chip
on the card for authorizing your PIN.
Today all industrialized countries with the exception of the
U.S. and Israel have adopted EMV. There are a lot of reasons for that which we
won’t go into. Suffice it to say that the financial industry is in the midst of
a barroom debate over the best way to implement the standard.
Here are the players: On one side you have the two big card
brands, Visa and MasterCard. Allied with them are the major card issuing banks.
These are the institutions that issue millions of debit cards that carry the
Visa and MasterCard brands.
Visa and MasterCard have upped the ante on EMV by setting deadlines
for various industry segments to comply with their diktat to accept EMV-enabled cards. Their leverage is an attempt to
shift
fraud liability from the card issuing bank to the retailer or ATM where a debit
card may have been scammed.
On the other side you have the other players who are
involved every time you use your debit card. These include the retailers who
accept the cards, the ten or so PIN
debit networks that transport your card data back and forth from your
financial institution so your purchase transactions can be authorized, transaction
processors and assorted smaller financial institutions like credit unions and
community banks.
It’s important also to note that this debate is being
conducted against the backdrop of a ten-year feud between the big-box retailers
on one hand and Visa and MasterCard on the other. Like most business conflicts this feud comes
down to money. The retailers have alleged that the card brands make too much
money processing the card that people use to pay for stuff they sell. So far
the retailers appear to have gotten the better of the card brands. This
includes billions of dollars in settlements, not to mention Congressionally-mandated
price caps on how much banks can make on the interchange they charge
retailers for authorizing their card transactions.
So amid this poisoned atmosphere the parties are attempting
to negotiate the implementation of what is arguably the biggest technology
shift in the payment card business since electronic data capture at the
point-of-sale terminal.
A key sticking point right now is a piece of software in
computer chip called an Application
Identifier, or AID. The way things are done now a POS terminal or ATM will
pick up the bank identification number from a card and rout the transaction to
that bank for authorization. But EMV is different. The routing scheme is determined
by that AID. So the transaction will be routed over the network that has its
AID on the card.
The issue of routing is important here to consumers. He who
controls the routing for the most part controls who gets the bulk of the
processing fees when you use your card. If a consumer’s card doesn’t have the
application that routs the transaction over a particular network, that network
makes no money. So the threat to consumers ultimately is loss of this multitude
of competing networks and potential higher card fees.
Right now Visa and MasterCard are in the catbird seat. As
global companies they’ve been issuing millions of cards with their AIDs for
years. They also have relationships will all of the major card-issuing U.S.
banks. Their motivation to negotiate with their potential competitors who are
starting from scratch in EMV appears, shall we say, limited.
For their part the PIN debit networks (Everyone in this
story has an acronym or nickname. Let’s call them the PDNs) not named Visa or
MasterCard have struggled mightily to come up with a solution. Their proposal
is to join forces and develop a single common U.S. debit payment AID.
This seems like a common sense solution: cards with a Visa
or MasterCard AID as well as the common AID. But it creates two new problems.
First, will card issuers, who own the card real estate, agree to put a second
application on their cards, just to keep the PDNs in business? And second, will
retailers configure their system to recognize that common AID? At least one
large big-box retailer has said it will only accept cards with one application
of which the AID is part. Any others will be stopped at the register.
So there you have it. A high stakes game of Texas Hold ‘em. Who
wins? Here’s what I think:
The PDNs are fighting for their collective lives here. The
common AID is a good solution but time’s probably running out on them. They’re
like a football team that’s run out of time-outs and is having trouble getting
the right players on the field for one last Hail Mary play.
As far as the retailers go, they can harrumph all they want and
arrogantly lay down the law to issuers. But big-box retailing is a high-volume,
low-margin business. Are merchants
really going to jeopardize throughput in the checkout lane by sticking to their
one-application rule? Will they incur the ill will of customers and the cost of
abandoned orders and carts as disgusted customers walk out of their stores? Their
technologists might want to. But has anybody talked to the C-suite? Standing in
a checkout lane at these stores is already like watching paint dry. You really
want to make it slower by having cards rejected in lane? Time is money. I’d call their bluff.
And are these retailers, who have fought the global brands
tooth and nail for ten years going to give the global brands a captured market?
Put their only competitors, the PDNs, out of business ? I’m not taking that
bet, either.
And why wouldn’t card issuers put a second application on a
chip? Sure, it might require a little baksheesh from the PDNs, but this is business.
Everything comes down to money. If the PDNs understood that, which I don’t
think they do, they’d start talking dollars with the issuers. Will that happen?
I’ll bet that it does.
This is a long story. But long story short, EMV will happen
when the business people in these organizations figure out who gets to make the
money here and how much. Right now the process is being driven and filtered by
the technologists. Once the business people figure out which way the money
flows, EMV will get implemented. Like everything else in business, it all comes
down to money.