Comfortable technology to simplify the procedure of payments with plastic cards was successfully tested in the USA in 2002. Today, PayPass is actively used in the European Union, the USA, Japan, the developing countries of the Asian region and the CIS countries.
On the Russian market PayPass was released in 2008, after which the following banks took up the issue of plastic supporting the technology: Citibank, Russian Standard, Petrocommerce, Moscow Industrial Bank, Alfa-Bank, Raiffeisenbank.
paypass card
The PayPass technology is based on the principle of contactless payments based on the MasterCardWordwide product. The key benefits are the simplification and acceleration of the buying process. To conduct a transaction between the buyer and the cashier, it is enough to attach a card that supports PayPass technology to a special terminal and express consent to the transaction. There is no need to take the card out of your wallet, bag, pocket or other storage place. The technology is available for magnetic stripe and chip cards.
PayPass contactless payment
When paying for goods or services with PayPass technology, there is no need to enter a pin code and sign a check during the purchase process. The limit on the purchase amount in force in Russia should not exceed 1000 rubles. The technology is only gaining momentum in Russia against the backdrop of widespread use in Europe. A popular payment method provoked a new round of fraud in the segment of reading information from plastic cards of bank customers.
How to use PayPass
Thanks to PayPass technology, payment for inexpensive services or goods has become possible not only using plastic card, but also through a key fob, watch, telephone and other devices into which an electronic chip is embedded, tied to bank account client. The most interesting version of the chip is offered in the form of an adhesive sticker, which is conveniently attached to any carrier. The convenience of using PayPass is to save time in the process of everyday payments in a cafe, at a gas station, in a store or public transport.
PayPass chip owners save about 30 hours of time per year thanks to a progressive simplified way of cashless payments.
Payment via PayPass
If PayPass technology is used to pay online, the user will need to enter a special verification code. In POS-terminals that are not equipped with the option to recognize contactless chips, it will be possible to pay with a card in a standard way, using a magnetic stripe or a contact chip. Some experts tend to believe that PayPass technology has certain security problems. Their essence boils down to the fact that advanced in use information technologies fraudsters can use readers to debit small amounts from the card remotely without having to confirm the payment.
Paypass system
Depending on choice commercial bank for cooperation, the status, format, as well as the parameters for using cards with contactless payment technology are significantly different. The difference can be traced not only optionally, but also in the cost of providing services. For example, Citibank is focused on issuing a co-branded ( joint projects banks with other companies as part of special programs for a specific target audience) plastic with PayPass, while Alfa-Bank can also issue contactless payment technology.
PayPass terminals
When using PayPass terminals, users include an RFID chip in their technological arsenal. It should be noted that this element does not contain the required set of data, which is sufficient to pay for online purchases, such as a CVC2 code or username. Theoretically, an advanced attacker can read a one-time access code in order to perform one or more operations. But due to the technological complexity, the mentioned method of deception is unlikely to be widely used.
Advice from Sravni.ru: PayPass technology makes life easier for a modern person and saves time. But not too wide distribution on the territory of the Russian Federation makes a convenient algorithm for paying for purchases inaccessible in a number of areas. If you are in Moscow, St. Petersburg or another major regional center, the possibility of using PayPass is guaranteed not to be superfluous.
More recently, plastic cards have entered our everyday life, and now there are alsocontactless cards. They use new technology in payment systems, which is calledpaypass. The system was created to speed up and simplify payments with Master Card and Visa cards. This technology can be applied to any cards, including magnetic stripe cards.
Main advantage: contactless cards save time
In a store, at a gas station and wherever you can pay with a bank card,contactless cardswith PayPass technology will free you from signing checks and entering a PIN code. To pay, you just need to touch the card to a special terminal, then agree to the purchase. If the cost of the goods you have chosen is not more than 1000 rubles, the payment will be processed instantly - this is the property of contactless cards.
Traveling in transport, medicines in pharmacies and gasoline at gas stations, groceries in stores, using PayPass technology is easier and faster. The number of terminals is growing every day, as well as the popularity of the system. PayPass cards first appeared in the USA, and today they are used in more than 40 countries around the world.
Advantages of PayPass technology
Advanced technologies provide such advantages:
- payment becomes easier: no need to swipe the card in the terminal, no need to enter a PIN code. You don't even need to sign a check. Checking on the terminal and touch it with the card. Everything is paid and confirmed by a standard check.
- payment acceleration:the card does not need to be taken out of a bag or wallet. We touch the terminal with a card, you can not even take it out of your purse or wallet.
- improved protection:cards are always in the hands of the owner, they do not need to be given to the cashier. It is impossible to pay twice for the same purchase - specially designed sound and light signals will interfere.
The only drawback of the contactless payment system is that the amount of such a purchase cannot exceed 1000 rubles.
How to open a card for contactless payment
PayPass cards are issued only by banks that use payment Visa systems and MasterCard. in information banking technologies involves the use of sufficiently large cash injections, technical base, competent specialists and time, and not all banks can afford it. Issuance of cards with PayPass technology is possible in banks:
- Moscow Industrial Bank;
- Bank of Moscow;
- Raiffeisenbank;
- Petrocomertz Bank;
- tks;
- Russian standard.
Contactless cards have recently started moving in Russian , but their widespread use is expected. Obviously, it will become easier and more convenient for such special categories of the population as travelers, shopaholics and motorists to live. And the majority will like the ease of use, speed and security of cards with contactless payment technology. After some time, necessary to equip trading enterprises with terminals for contactless payments, a new round in the development of the convenience of electronic payments will begin.
Recently, banks began issuing Visa/MasterCard cards with one-touch payment - PayPass, over the radio. I was interested to see how it works - so I ruthlessly "dismantled" MasterCard Yandex.Money. The results of the autopsy are under the cut.
It will also be interesting to evaluate the complexity and production technology of the "card" chip, in light of the current talk about "national payment systems".
The first layer of the card is dissolved in acetone. Now the antenna is visible: 
The chip itself: 2 pins go to the antenna, 5 - for the physical connection. By the way, the card is visible on an Android phone with NFC, identified as Type A (ISO/IEC 14443-4 Smart Card and ISO/IEC 7816-4 - Proximity Payment System Environment). Accordingly, the chip works like subway tickets - at a frequency of 13.56 MHz, receiving power at the same frequency. 
The chip itself is larger: 
The entire surface of the microcircuit is covered with metallization so that it is impossible to interfere with the operation of the microcircuit without additional difficulties: 
I accidentally crushed the chip from the first card when I tried to tear it off, the second chip was covered with a black coating during etching: something was mixed into the glass, or I made a mistake.
Nevertheless, we still managed to see static and flash memory, estimate their size and technology: about 2.5kB SRAM on a chip, 32kB flash, ~350nm production technology: 
So there are no special super-technologies here, for comparison - micron chips for the metro turn out to be even more modern technologically (180nm, operation at the same frequency of 13.56MHz - although the protocol there is certainly orders of magnitude simpler).
PS. Is there anyone from the Yandex.Money support / security service among the readers? Please write to me in the mail from the work address, there was a question on your part.
Content
The global trend in innovation is paypass contactless payment technology. This feature simplifies the transfer through the use of a bank card by the buyer Money seller, making the process instant and very convenient. "Plastic" can not even be taken out of a jacket pocket by touching it to the POS-terminal and paying for the purchase with one touch. The younger generation of citizens - holders of bank cards - prefers financial instrument because of its progressiveness.
What are contactless payments
The one-touch payment method that does not involve physical interaction between the “plastic” holder and the POS-terminal (point of sale, an electronic technical device for accepting a bank card with a microchip or magnetic strip for payment) is called contactless payment . The operation is as simple as possible and takes a minimum of time. To make it, you should attach "plastic" or a smartphone with virtual cards at the POS terminal.
The two most common technologies for contactless transfer of funds today, based on the ISO / IEC 14443 standard (modulation method, RFID - Radio Frequency IDentification short-range data exchange protocol, radio frequency identification):
- mastercard paypass;
- visa paywave.
How paypass technology works
To support the paypass technology, the Mastercard standard card is equipped with a microchip - a contactless payment module - and a small antenna. The radius of action of the device is 40 - 80 mm. It is enough to make contactless money transfers - the buyer needs to bring his card to the POS-terminal: in a few seconds the device will read the data, the purchase will be instantly paid.
Giant companies Apple and Samsung are busy developing technologies that allow tying contactless "plastic" to the current mobile application. Paypass is supported by devices with a built-in NFC chip - near field communication, the so-called near field communication, short-range wireless data transmission.
NFC technology may be available for use on both types of bank cards: debit and credit. Mobile applications simplify the process of using "plastic", which is supported by the contactless payment system - the success of the transaction is confirmed by the light on the POS-terminal and the corresponding sound signal.
Advantages and disadvantages of contactless payment by bank card
Contactless payment plastic card has its pros and cons. Starting with the shortcomings, which, by and large, are only 3, it should be mentioned that for the full operation of the paypass system, a special POS terminal is required, which must be installed at the outlet of the seller of goods and / or services. Store owners are in no hurry to install expensive devices, avoiding unnecessary expenses. Because of this, the widespread adoption of contactless payment technologies is not progressing as fast as the consumer would like.
The second disadvantage is relative vulnerability. A card equipped with a paypass chip may be the object of fraud. Payment terminals write off, without requesting a pin code, an amount within 1 thousand rubles at a distance of up to 10 m. A hacker, the owner of home-made equipment, for example, an RFID reader (an electronic device for automatic identification of objects that reads and writes data using a high-frequency radio signal), will have 15 minutes in a crowded subway car to go through the cabin and rob several dozen people.
The third drawback can be considered an understated limit on the amount of purchases, which is only 1 thousand rubles. Residents of megacities, who are accustomed to constantly paying for goods and services with a bank card, will face inconvenience during their usual shopping. A check over a thousand rubles will have to be closed by entering a pin code. The advantages of using cards with contactless payment technology are still greater than the disadvantages:
- Money is transferred to the seller instantly.
- The buyer has the opportunity to pay for a product or service purchased anywhere in the world.
- The operation of transferring funds is simplified as much as possible.
- The paypass option is usually included in the cost of the annual plastic service.
- The risk of fraud with a contactless payment card is recognized as low.
How to protect your paypass card
Banks that issue "plastic" that supports contactless payment technology are trying to secure its use. To correctly use this financial instrument, its owner must follow a number of rules:
- do not physically contact the cashier - in this case, no manipulations with the client's account can be made;
- do not release a credit card / debit card;
- after the interaction of the POS-terminal with the card, funds are not debited twice from the same account - the device will notify the payer by flashing a light and a sound signal about the successful completion of the operation;
- in case of loss of the card in case of loss, theft - the financial instrument is subject to immediate blocking, funds are frozen on the first call to the bank or independently through Personal Area online.
Disabling the function of contactless payments on a Sberbank card
When performing financial transactions, a client account is created, but the data bank card are not included on it. The information is stored on the system server in order to protect the funds of the "plastic" holder. Customer credit institution can connect to the system for free - the user of the Android Pay application is exempted from paying a commission when making purchases if he uses a contactless Sberbank card.
On discredited "plastic", with which its holder had problems, the paypass option should be disabled. You can do this in two ways:
- using the entrance to your personal account through the official website credit institution;
- personally visiting the bank office, writing a corresponding application.
In your personal account online
To disable the option through your personal account, a client who owns a Sberbank card with paypass should visit the official portal of the credit institution using a personal computer with Internet access. Go to the bank's website and follow the steps below:
- Enter your username and password.
- Receive a six-digit confirmation code via SMS. Enter it in the cell of the electronic login form intended for this.
- Log in to your personal account. Select the section with the bank card you are interested in.
- Prohibit the use of paypass technology for this "plastic".
At a bank branch
You can cancel the use of contactless payment technology for a specific plastic card through a bank branch. First, by phone hotline financial organization, secondly, by visiting the office of a credit institution in person:
- contact a bank employee;
- tell him about the desire to disable the paypass function;
- follow the instructions.
Mechanical way to protect the card
The contactless payment function can be disabled mechanically. To do this, wrap bank card with ordinary foil, preventing the correct operation of the paypass module. A good means of protecting "plastic" with contactless payment technology can be a special case with a metal layer that prevents the device from emitting radio waves and blocking the acceptance of incoming signals.
How to disable NFC in the mobile application
In the quick settings menu, next to the Wi-Fi and Bluetooth symbols, there is an icon with the letter N - just like in the notification panel, there is an NFC signature next to it. To turn off this function, move the slider opposite, bringing it to an inactive position. If you did not find the corresponding item in the quick settings of your phone, open the usual ones. Select the "Wireless Networks" section, click the "File and Data Transfer" tab and move the NFC option slider to the "off" position - the N symbol will disappear from the notification panel.
Delete the application completely
You can disable the contactless payment feature on your phone by deleting the mobile app completely. To do this, select the program icon on the device screen and move it to the trash. Make sure your cart is empty. After performing these actions, the service of contactless payment for goods and / or services via a smartphone will become unavailable.
Temporarily block
You can interrupt the application for a certain period by temporarily blocking it. To do this, you should not delete it entirely. To pause the mobile app, follow these steps:
- Select "Settings" from the menu of your smartphone.
- Find the "Advanced settings" section and go to it.
- Open the Wireless Networks tab.
- You can turn off the NFC module by moving the slider opposite so that the application becomes inactive.
Video
Did you find an error in the text? Select it, press Ctrl + Enter and we'll fix it!Theft of money from cards has always been a common type of fraud. But with the advent of contactless payment cards, it has become even easier for criminals to steal other people's funds. If the contactless owner Visa cards PayWave or MasterCard PayPass, then you are at risk when you can very quickly and imperceptibly withdraw your money from your account.
Contactless cards: convenience of payments and increased risks
Banks offered their customers new cards equipped with contactless payment technology - Visa PayWave and MasterCard PayPass. The purpose of their release is to facilitate the processing of payments and reduce the time spent on financial operations. These cards differ in that there is no need to swipe them through the terminal. It is enough just to bring them to the reader, and the money will be written off. There is no need to even take the card out of the wallet. When paying for goods or services worth up to 1000 rubles, you do not need to enter a pin code. You just need to bring the card to the reader. Paying with them is fast and convenient.
But it is precisely the fact that money can be debited from the card at a distance using a special device without the need to enter a pin code or put a signature, which made them easy prey for scammers. Zecurion calculated that in the first quarter of 2016 alone, about 1 million rubles were stolen from such cards.
Did you like the video?! Subscribe to our channel!
How does theft happen?
To withdraw money from a contactless payment card, it is enough for a fraudster to purchase or make a special reader on his own and approach the victim with it at a distance of up to 20 cm. Even at such a distance, the device reads data from the card.
Contactless cards are equipped with special RFID chips, and devices that allow you to get information from them are called RFID readers. The fraudster only needs to bring it as close to the card as possible. So that the victim does not notice anything, thefts usually occur in crowded places - public transport, a market, a crowd of spectators at a concert, etc. The criminal only brings the device to a person's pockets or his bag unnoticed by him. There is no need to even bring it too close - 10-20 cm is enough. A few seconds, and all the data is in his hands.
The criminal either uses them to make payments through online stores that do not require a password or CVV code. However, there is a restriction for owners of a contactless card - the amount of the transaction should not exceed 1000 rubles, only in this case there is no need to enter security data. But there are no restrictions on the number of transactions, so the fraudster can carry out several of them until he uses all the available funds on the victim’s card.
Also, some criminals make "white cards" on which a magnetic strip with the data of the victim's card is applied. After that, they withdraw money from an ATM.
Some statistics
According to Zecurion, a company involved in information security, in 2015 more than 2 million rubles were stolen from contactless cards of Russian citizens. As the number of users of such cards grows, the theft of money will increase accordingly. Zecurion experts predict that at least 2.5 million rubles will be stolen in 2016, by 2017 this figure may reach 5 million rubles.
How to protect yourself
It is almost impossible for the owner of a contactless payment card to protect himself from a fraudster, since it is very difficult to notice him in the crowd in which the criminal is operating, especially considering the fact that he uses the reader covertly. Therefore, you can find out about the theft of money only after they have been debited from the card. But there are ways to help reduce the risk of theft of funds:
- The maximum amount that can be debited from the card without the need to enter a PIN code is 1000 rubles. However, it is possible to write an application to the bank to reduce it. This will allow you to lose a smaller amount of money in case the thief still managed to steal your card details.
- It is recommended to connect SMS-informing about any operations that are made from the card. This will allow you to detect theft in time and block the card. Despite the fact that there is a limit of 1,000 rubles for conducting a transaction with a contactless card, a fraudster can make several payments. By connecting SMS-informing, you will be able to find out about the theft of funds after the first operation and not allow you to write off all the money from the card.
- Be careful and attentive in transport.
There are also wallets and cases on the market that purportedly protect the card from being read, but no research has been conducted on whether they are really capable of preventing theft or not. Therefore, do not rush to buy them.