MasterCard follows Visa’s lead on EMV Push

31 January 2012

http://www.mastercard.us/mchip-emv.html

Yesterday MA followed lead and announced plans to support US rollout of EMV. Many of you are probably wondering what this all means in light of mandates and deadlines. The politics and business drivers behind this push are quite complex, but it is important to note that neither large US issuers nor retailers are enthused about this push for one primary reason: there is no business case for the change (on either side). Historically, networks do not change without sound financial incentives ( or there is some sort of regulatory mandate).

A Bank makes money by managing risk. Within the payments space large banks have invested billions of dollars in custom fraud infrastructure. The effect (if not the goal) of bank investment in custom fraud infrastructure is to push fraud into the weakest link (or bank) in the network. Smaller banks must seek partners like FIS, FirstData and the Networks to help them keep up. The EMV standard is used by card issuers in just about every market globally, except the US. EMV is effective in addressing certain kinds of fraud such as counterfeit and skimming. Within an EMV environment, international issuers and acquires thus could relax in maintaining related fraud controls IF cards existing in an EMV only environment.  However international travelers to the US and US travelers abroad lead to fraud “leakage”. US issuers did not suffer, due to their fraud infrastructure, but the other banks have.

Thus the “true” benefits of EMV cannot occur until there is 100% adoption at POS (10M in US), complete elimination of the mag stripe in the plastic that we all carry (approximately 1.5 billion in US). This is the conundrum facing any new technology here:  New Plastic must completely replace the old. In other words there is no “Incremental” fraud savings to an incremental rollout, nor is there a business case for either issuer or retailer to implement. Take this on top of the fact the EMV is 20 year old technology and we have a very challenging environment.

What are the benefits in retail? Both Visa and MA have established a carrot and stick approach. Given only the issuer can reduce interchange, the carrot is reduced PCI compliance costs and some terminal subsidy. The stick is a liability shift for to the merchant  if a consumer presents an EMV capable card and the merchant terminal does not accept it.  Given that the big issuers have no plans to reissue cards, the merchant risk is fraudulent EMV cards (starting in Oct 2015 for Visa). Perhaps if retailers see an EMV card, they should request an ID.  For issuers, the compliance dates are longer and the stick which Visa and MA have constructed is weaker given that US issuers already bear costs of card present fraud.

So what are Visa and Mastercard trying to accomplish? From a political standpoint they must address the international issuer concerns and be viewed as supportive of the EMV standard. But more importantly Visa and MA want to cement their control of the network, particularly in two areas: mobile and US debit cards. In mobile, Visa and Mastercard are aggressively trying to make mobile POS payments a “premium” service used exclusively by credit cards. A key to success in mobile is POS readiness to support contactless payment. The EMV mandate certainly helps provide another incentive to merchants. With respect to the Debit, the Durbin Amendment has impacted the incentives for US banks to continue support of Signature Debit. In the US, PIN Debit enjoys a slightly higher growth rate (15.6% vs 14.3%), consumer preference (48% vs 34%), lower fraud rate (2009: Signature $1.12B, $181M PIN debit card),  and obvious merchant preferences (96% of PIN fraud losses assumed by issuers, vs 56% in Signature). PIN debit transactions do not need to be routed through Visa and MA, and PIN only cards do not require their logo. EMV debit cards may be a tool for Visa to maintain a US debit business (MA US debit penetration is low).

What to expect?

Note that in virtually every geography, EMV was a regulatory driven initiative. In the US this is not the case, as the large banks have proven capable of managing fraud. Large issuers are thus reluctant to undertake any mass reissuance of cards, and US regulators are reluctant to have US Banks pay for a system that will primarily benefit issuers outside of the US. My guess is that we will start to see a trickle of new cards being issued on EMV starting in 2014 or so.

Retailers will have a similar adoption dynamic as they assess cards being used at their stores, and what future payment networks may offer not only in terms of compliance and interchange, but also in delivering customers through incentives and advertising.  I’m certain that the retail “first movers” in NFC must be pulling their hair out as they discover that their new NFC payment terminals are not equipped to accept the mandated EMV card. These retail CEOs will discover that the “stutter” in reterminalization was intentional and it will be a cost they will bear twice in 2 years.

In this dynamic environment, there will be high demand for companies that can help retailers develop a plan and navigate this chaotic environment. Oddly enough, start ups like Square and Payfone may have a tremendous advantage in simplifying the checkout process. In other words, EMV could actually provide the impetus for new payment networks to gain a foothold.

Mobile Money: MNOs will Rule in Emerging Markets

Updated Dec 15, 2009

Regulators in Africa and India are working actively to ensure consumers (and the global banking system) are protected in the exciting confluence of mobile and finance. Their involvement is completely appropriate given the opportunity to improve the lives of millions of unbanked people around the world. Defining responsibility and the commensurate controls associated with connecting non-traditional (unregulated) networks to highly regulated banks is a herculean effort which may lead emerging markets to remake a “payment system” that is more efficient than that which exists in today’s developed countries. This opportunity for “leap frog” improvements will be driven by the unique path emerging markets are evolving. Key stakeholders will be able to leverage learnings of developed countries, and trials in emerging markets, as they develop infrastructure necessary to support a network that enables both financial services and telecommunications.

Today’s regulatory approach, within these emerging markets, may be best summarized as an “experimental period” with simplified controls. Very early regulations have focused on simplicity by ensuring that the “value” stays within the MNO network, and limiting: balances, ticket size and beneficiaries. By constraining transfer of “value” to well defined  MNO services (ex top-ups) regulators have certainly addressed many risk, AML and audit issues. These early controls have provided time for regulators to review progress and fashion new regulations in which existing regulated entities can comment. This order, with which emerging economies are proceeding, may come as a shock to some in the developed world.

Many believe that this more cautious orderly approach in mobile payment was driven by the unstructured success of MPESA (links below). An estimated 10% of Kenya’s GDP currently passes through this channel.  Governments, banks and MNOs leveraged the learnings of the Kenyan market, first among them is: once a new payment system takes hold, it is hard to change. The alacrity with which MPESA was adopted by Kenyans has caused “a new awareness” among governments and business for both the opportunity to provide access, and the challenges faced in managing it. For regulators, there is a renewed sense urgency for defining the “rules” by which to protect consumers and hold participants accountable. Ex in India below

Vodaphone MPesa in India

Regulatory changes have significantly impacted many investments made to date, with the key example of Reserve Bank of India’s Aug 2009 regulation preventing non-banks from domestic money transfer (destroying Obopay’s P2P plans). Banks have created much friction for the expansion of “pilots” and their capabilities. The banks’ position is that once value is exchanged between network participants, or to another network, that these services compete directly with a regulated “payment system”. So we have a “dance” of 4 parties: Regulators, MNOs, Banks and Consumers. In my discussions, the regulatory approach may be generalized by the following:

A)    Experiment.  Set interim guidelines with expectations that they could be revoked/changed. Communications regulators are driving this approach as they try to assist their stakeholders. MPESA began because of Communication regulatory authorization… not KCB

B)    Review. Require submittal of plans to both communication and banking regulators.

C)    Establish. Legal/Regulatory accountability. Define responsibility and audit guidelines for responsible regulators. For example in Kenya their was very little consumer protections for electronic transactions, the Kenya’s electronic transactions act was just established this year and serves as a model for Africa.

D)    Define Audit responsibility for MNO. May force partnership with regulated bank for clearing and settlement. Set auditing guidelines for MNOs under communications regulations (Monitor/audit payments and transfers).

E)     Constrain. Set limits on MNO services and “value” allowed to accumulate in MNO “wallet”, …etc. Example RS 5000 in India, Prohibit/restrict any bank functions in MNO. ex, No interest bearing accounts.

F)     Isolate. Restrict payments connections external networks. Ex in Africa.. Commercial “beneficiaries/payees” must be approved over a certain volume threshold. (regulatory Instrumentalism). Note: MNOs have addressed this by shifting value to a “regulated” payment (ex. Pre-paid card) and partnerships.

G)    Enforce KYC responsibility for MNOs engaging in payments at Cash in/out points. Example retail partner is responsible for validating identity.

Business Model

It is difficult for established businesses to create effective business models “down market” from their current customer base (see Clayton Christensen – Innovators Dilemma). MNOs may be best positioned to execute, on the mobile money value proposition, given that the “unbanked market” is market that they serve much more effectively today (reputation/brand/service/efficiency), and the fact that “mobile money” is a key to sustaining their growth.  I cannot underestimate this point. For banks serving the unbanked represents a low margin (if not money loosing) value proposition for all of their current products. Similarly, payments are a profit neutral business for banks separate from the lending or commercial services which surround them. Bank product lines are typically not focused on accounts with balances of less the RS 5,000 ($100). In addition, existing Bank systems typically do manage millions of small ticket real time money transfers (think SEPA or Wire) with associated risk, authorization, and AML controls. This “gap” in serving emerging markets is prompting indigenous efforts (ex RBIs: RTGS, National Infrastructure for Mobile Payments, and India Card).

For MNOs in emerging markets, mobile money is aligned to their current business and in fact essential for growth. Allowing “cash in” and “transfer” enables customer usage  through pre-paid plans. For MNO consumers, access to money services provides ADDITIONAL value to their EXISTING MNO relationship (more on this later). MNO success in “mobile money” is assured because the service further enhances the EXISTING MNO business model, a model which the team and infrastructure to: market, sell and service the unbanked is established (and profitable).

The consumer value in mobile money stems from the macro economic transformation that exchange of value provides in moving from “informal” communication to money centered “business” communication. Payments and value may well evolve differently in emerging markets over the next 5 years as payments, telecommunication, regulation and new services establish a unique ecosystem that serves 1 Billion consumers never “connected” to the world’s economy. It is the combination of “network access” and “value access” that provides transformational opportunities to the world’s consumers. This market dynamic leads to transformational “leap frog” opportunities within emerging markets.

MNO Fragmentation

The principle challenge for MNOs to address is in emerging markets is: fragmentation. A large reason Vodafone was successful in Kenya was that they had 80% of share. Fragmentation of consumers in highly competitive mobile markets, combined with conflicting standards, technology and retail partnerships may cause consumer confusion. This chaos is anathema to the “trust” necessary to establish consumer confidence in payments and value storage. For example, in Nigeria can you pay your utility bill on any cell plan? Dominant MNOs will likely race to establish payment networks and partnerships, even in the constrained regulatory environment. Less dominant MNOs will likely look to regulators, standards, interoperability and other mechanisms to level the playing field. It is essential that MNOs get this right the first time, as “trust” is something earned over many years and quickly destroyed.

In emerging markets, MNOs may be best served by attacking “breadth” opportunities first. Very simple services that can have very broad impact, with very little assistance from external vendors may provide better support for immediate growth:

  • Nature of network effects are that you must deliver value to everyone on the network (whether a bank or an MNO). Successful networks must have established physical distribution points.
  • Objective in payments is to establish use and acceptance. Example, receive your pension… now establish a savings account, or send money to your grandson.
  • Trust.. Serviceability, manageability, and risk management in “simple services”.

For Bankers

As a banker myself, I never admit defeat in attacking a profitable market segment. Given that payments are not particularly attractive for banks (separate from the products and balances that support them), there are several strategic options (Beyond the scope of this post.. but which I would love to discuss). In general banks should maintain engagement with regulators and MNOs, and focus on providing services that protect their network and enable access to consumers. Examples:

  • Switching. Extending payment capabilities in existing accounts and networks. Switching between multiple MNO value stores
  • “Participating” on the mobile network. Micro lending through “supporting role”.
  • Risk Management.
  • Partner w/ large existing customers in their participation. Example, Pension/Payroll to mobile plans, or connecting to MNOs to business (retail lockbox on mobile)
  • Managing compliance. Example: Cash out

For Software Vendors (ISVs)

In emerging markets, I would expect to see rapid evolution constrained only by regulation. Expect to see very simple services that can have very broad impact, and support MNOs existing value. A key distribution point for these services are local agents. For those of you in the US, think of these agents as the local “country store” of 80 years ago, trusted members of the community that frequently extend informal credit. Banks in Kenya are just gained access to agents in distribution of their services in order to compete with Vodafone and ZAP.

Many of the “consumer facing” services will require very little assistance from external vendors until the networks mature and value is transfered beyond the MNO network. Example issues for vendors today:

  • MNOs have very solid SMS development skills. Look at MPESA, ZAP, GCASH.. who developed the software behind them? The MNO.
  • Simplicity lends itself to better risk management, a key for reinforcing the “integrity” of a new payment system. Solid risk management is even more pronounced in the face of new regulations.
  • CEO visibility with MNOs, Banks and Retailers. Paying a “US Vendor” for anything relating to a payment function is not likely. Citi mobile teams have built tremendous SMS applications in weeks (sorry Silicon Valley).
  • Government Visibility. In addition to CEOs, governments and regulators are highly involved in addressing the needs of their citizens, whether “unbanked” or “unphoned”. Regulators globally are looking to share learnings from Kenya, Philippines, India, … Banks expect between 600M-800M people will gain first time access to financial services over the next 8 years. A tremendous market, that will be served much differently then banks (and retailers/MNOs) have operated in the past.

This is not to say that ISVs have no role, but rather their role will be supportive of facilitating exchange of value… NOT leading with a brand (ex Obopay). Examples:

  • Government  pension distribution across multiple MNOs
  • Business connection to multiple MNOs payments
  • Businesses clearing settlement, AR integration and reporting
  • CRM solutions for customers, automated response
  • Assist MNOs, Banks and Businesses in compliance and reporting.
  • Bank connection to MNO networks. Ex: micro lending… receive your pension… now establish a savings account, or send money to your grandson.
  • ISVs should look at supporting services in connecting business to this new network.

Related articles