QUOTE(cybpsych @ Jul 10 2019, 05:25 PM)
not from your issuing bank/card.
it's between acquiring bank and merchant.
non-otp (2D or non-3D) transactions, the risk is borned by the merchant (if they chose* not to trigger OTP/3D).
if so, the merchant will not tag the transaction as "3D", so your card/issuing bank will just charge your card as-is (without OTP validation). This is why fraud can happen easily.
if merchant tag the transaction as "3D", the issuing bank will trigger OTP to you (cardholder) to verify the transaction it captured. this is why 3D or our SMS OTP implementation solves a lot of fraud transactions coming through the banks.
*why merchant chose 2D? it's mainly due to "user experience". they dont want user to be kept asking to enter OTP. or they want the payment to have seamless flow, like auto-reload, etc.
noticed how TNG ewallet or boost works? 1st time adding card, definitely need OTP. at this stage, your card will be properly validated and then stored securely (encrypted). on subsequent reloads (charging the card), just charge seamlessly without OTP because the card already authenticated earlier (during card saving).
here, we are so used to getting OTP
it's a little safety net for us in case our card get frauded unknowingly.
But I just wonder how boost can set certain top up will trigger otp, certain don’t..it's between acquiring bank and merchant.
non-otp (2D or non-3D) transactions, the risk is borned by the merchant (if they chose* not to trigger OTP/3D).
if so, the merchant will not tag the transaction as "3D", so your card/issuing bank will just charge your card as-is (without OTP validation). This is why fraud can happen easily.
if merchant tag the transaction as "3D", the issuing bank will trigger OTP to you (cardholder) to verify the transaction it captured. this is why 3D or our SMS OTP implementation solves a lot of fraud transactions coming through the banks.
*why merchant chose 2D? it's mainly due to "user experience". they dont want user to be kept asking to enter OTP. or they want the payment to have seamless flow, like auto-reload, etc.
noticed how TNG ewallet or boost works? 1st time adding card, definitely need OTP. at this stage, your card will be properly validated and then stored securely (encrypted). on subsequent reloads (charging the card), just charge seamlessly without OTP because the card already authenticated earlier (during card saving).
here, we are so used to getting OTP
Jul 10 2019, 07:47 PM

Quote

0.0330sec
0.63
7 queries
GZIP Disabled