Chase Makes The Right Security Move After SWIFT Breaches

A report Tuesday (May 17) that J.P. Morgan Chase “has limited some employees’ access to the Swift global interbank messaging service amid questions about security breaches at a pair of Asian banks that used the funds-transfer platform” raises some concerns, but it appears to be just enforcing a stricter “need to know” and “need to access” approach from Chase.

Although there have been other reports raising the possibility of an earlier Swift attack—with a major Bangladesh bank—being an insider job, it could just as easily be an attack where the bank employees were victimized. Employees might have had their credentials stolen via keystroke-capturing malware or being tricked into visiting a credential-stealing site designed to look like Swift’s access area.

Read More

Chase’s Removal Of ATM Limits Is The Right Idea But For The Wrong Device

Moving more and increasingly complex payments capabilities to ATMs and away from bank branches is a good thing, as we’ve argued before with ATM ApplePay and with MasterCard’s patent application to turn ATMs into full-fledged POS units. But there is a line where it doesn’t make sense and JPMorgan Chase’s current debate about removing per-day cash limits crosses that line.

First of all, unlike mobile devices, ATMs have a very physical limitation: Once the cash that some human loaded into the ATM runs out, the ATM loses much of its most-desired functionality. Sure, it can still accept deposits and reveal balances, but not that much more. To be candid, those particular services are much better handled by a mobile app. (Note: That is true up to the limit of mobile deposits which, I assure you, I’ll get back to shortly.) The ATM’s most powerful function is to dispense cash, as that is something mobile apps can’t do. When the money is gone, the ATM becomes rather pointless.

Read More

Why The ChasePay/Starbucks Deal Makes A Difference

When Chase revealed on Tuesday (Feb. 23) that it had cut a deal with Starbucks to incorporate ChasePay into the SBUX mobile app this year, it signaled that ChasePay needs to be taken seriously. More precisely, it means that the mocha-merchant mobile-powerbroker takes ChasePay seriously, which is perhaps the best endorsement it could get.

ChasePay’s previous big deal was with MCX, which, to be fair, isn’t exactly the endorsement you want in mobile payments to be taken seriously. But for those care about mobile money—and who in this space doesn’t?—nobody disses Starbucks.

Read More

The Confusing Side Of Chase Pay

When Chase rolled out Chase Pay late last year, it risked customer confusion because it was adding a new payment mechanism to the Chase mobile packages already offered. Chase customers already have a Chase Visa card and, based on Chase’s recommendation, more than a million of those cards are already loaded into Apple Pay. Now Chase Pay will be automatically added to the Chase mobile app that already has 21 million active Chase customers, which guarantees there will be a significant overlap with the users of Apple Pay. The goal of Chase Pay is to have all 21 million Chase customers use Chase Pay with their existing Chase-issued credit, debit, and prepaid cards for in-store payments, which of course means they will need to learn how to use Chase Pay.

Cardholders will retain all the same rewards and consumer protections using Chase Pay as they have with their existing cards. Currently the Chase web site identifies the primary benefit as merchant discounts. But Chase customers that already have Chase cards provisioned into Apple Pay or Android Pay will confront an impossibly confusing choice relative to acceptance. Since Chase Pay will have a limited acceptance footprint that is different than the limited footprint associated with the NFC-based competitors, it strikes Mercator that a customer will simply become even more unsure what mobile app is accepted at which merchant locations and will revert instead to the tried and true physical card.

Read More

MCX Finally Gets Its Interchange Break—After Chase Hands It To Them

When JPMorgan Chase on Monday (Oct. 26) promised new mobile capabilities for its online Chase Pay program next summer, it chose to take a decidedly retailer-oriented approach. With the lures of lower interchange fees plus all of the fraud cost protections of the EMV liability shift without having to accept EMV, Chase has given retailers concrete reasons to push Chase Pay over other payment methods.

The Chase announcement named MCX (and specifically members Walmart, Target, Best Buy and Shell) as premier partner. Interestingly, the interchange reduction effort that caused MCX to form years ago but had been all but abandoned by the group recently is the centerpiece of Chase’s 2016 plans. What MCX couldn’t get on their own was handed to them by Chase.

Read More