Card acceptance infrastructure in India: A perspective

I have been scouting Bangalore for innovations in the payments industry. Bangalore is as good a place as any in India to deploy new offerings. The economy is vibrant, consumers willing to try new things, retail space is hyper-competitive with enough investments coming in...

Let me first take a step back and frame the merchant payments space (to help provide context). Retail payments are characterized by:

• It is customary to see a retailer have card acceptance devices from multiple acquirers. Depending on the card provided by the consumer for payment, the retailer decides to run the card thru' the acceptance device that provides him the most favorable terms (which typically results in an 'On-Us' transaction)
• Though there are third-party acquirers (e.g., Venture Infotek), leading card issuers are also acquirers (e.g., ICICI, Citi, HDFC...)
  
• Smaller retailers will charge a fee of about 2% (surcharge) for purchases paid using payment cards. Some of these retailers may also share their POS terminal. They will run the card transaction thru' the neighboring retailer's terminal!
  
• Benefits of India's cash economy (by some estimates, about 50% of India's economy) handily overcomes cash-handling costs borne by the merchant
  
• As multiple acceptance devices are the norm at retailers, deploying new payment products is not as much of a challenge as you do not have to displace incumbents.
• Over 70% of sales are cash-based (based on my informal spot surveys; will update this blog when I am better figures and support links)
  

Quite a few of the high-end retailers accept chip-n-PIN (EMV) cards, though very few card issuers in India have deployed chip-n-PIN cards. This is primarily to cater to tourists and visiting Indian diaspora (high-end high-margin clientele). Indian card issuers seem to have bought time till 2011, by which time they are expected to have rolled out EMV cards. I am keeping my fingers crossed regarding this target date.

It was a pleasant surprise to see PayPass readers at retailers. However, the excitement was tempered after finding out that the deployments were part of a trial. I hope that commercial deployments follow (both by card issuers and acquirers).

[Updated Aug 20 '09] First Data is continuing to push into India, first with their relationship with Kotak Mahindra (link), and next with their association with Yes Bank (link). First Data also offers a payment gateway (Merchant Solutons), in association with Standard Chartered Bank.

While I started off the post talking about Bangalore, I would like it to end talking about Delhi. As you might be aware, Delhi is having a coming-out party of sorts next year. It is hosting the Commonwealth Games 2010. Watch out for unveiling of new payment products next year around this event.

If you are interested in following trends in the Indian Payments industry, this is the conference for you (Digital Payment Conference, Mumbai, Aug 21 2009)

Heartland breach, One-time credentials & EMV

The inauguration is over, and we are waking up to a new tomorrow. We are realizing, as is to be expected, that nothing much has changed in our lives.

The latest breach, at Heartland Payments Systems, was shocking. However, a cynic would say that after Madoff, the TARP fiasco, 8 years of Bush... the Heartland breach seems rather benign. Reports are that, as many as, 100 million accounts could have been compromised. To put this in perspective, TJX breach affected 45 million accounts.

Security audits, certifications et al are necessary. But these are essentially a cat-n-mouse game. As long as there is value in the data, the bad guys will continue to try to steal it (and they will occassionally succeed). Making payment transaction data worthless maybe a way to break this vicious cycle.

One-time credit card numbers is one way to get there. Orbiscom, recently acquired by MasterCard, offers such a solution. Citi, Paypal, among others, offer such payment cards.

Additionally, the US might need to get moving on adopting EMV / Chip-n-PIN. Creating magstripe payment cards using skimmed data is too easy. Creating chip cards using skimmed data is a tad tougher. As the rest of the world moves towards EMV, the US will increasingly be the soft target. I wonder what the trigger needs to be for the US payments industry to decide that cost to move to EMV is cheaper than status quo?

Feedback / Comments?

Innovations, such as EMUE's card, can get us going again

Very rarely do you see so much buzz about a new payment technology as EMUE's display cards. This is indeed an exciting innovation. This card has the thickness of a traditional credit card, while it has a 8-digit display, 12 digit keyboard and a battery that last 3 years! Wow, this is truly amazing.

This product has the potential of being applicable in a variety of markets, including the US.

The ability to leverage the above product features to support MFA (multi-factor authentication) using a single device is what makes this product exciting. To appreciate this innovation, compare against the Gemalto CAP (Chip And PIN) reader being tailor-made for Barclays (PINsentry) to support MFA for online commerce. Who would want an add-on device if your payment card can do it all? The additional cost of the EMUE card (costs 5 times as much as an ordinary card to manufacture) looks inexpensive when compared to shipping CAP readers to customers.

I see an immediate opportunity to use this card for MOTO (Mail Order Telephone Order) transactions. Visa is piloting this card with bank(s) to complement VbV (Verified by Visa). I am not sure that the problems that merchants and consumers have with VbV will be addressed by using EMUE's card.

You get so excited when you read about such innovations that you forget that the economy is supposed to comatose.