EMVCo News

EMVCo has released security requirements to support the development of multi-factor authentication (MFA) solutions capable of preventing or detecting attacks that could compromise the security of payment authentication. The "multi-factor authentication solutions for payments security requirements" document is publicly available from the EMVCo website.  MFA is an authentication method that requires the payee to provide two or more factors to confirm their identity. There are three types of...

Global technical body EMVCo has issued its 100th Security Evaluation Certificate for Software-Based Mobile Payments (SBMP) solutions. This milestone reflects significant industry uptake from device manufacturers and product vendors to demonstrate the security of their solutions through a globally recognised programme, promoting trust and confidence across the payments ecosystem and simplifying the deployment of safe and secure mobile wallet solutions. Different security components The continu...

Banks, payment service providers (PSPs), schemes, and other financial institutions can now benefit from a uniquely high level of sensitive data protection and application attack resistance, following the launch of White-Box Works, a next-generation EMVCo-evaluated White-Box code generator, from PACE Anti-Piracy, Inc. Unlike traditional solutions, White-Box Works gives the customer complete and independent control over their protected code, thereby ensuring their encryption keys and proprietary...

Global technical body EMVCo has confirmed its security evaluation methodologies and processes support IoT payment use cases, enabling emerging solutions and devices to be evaluated quickly and efficiently. Device hardware evaluations are playing an increasingly important role in IoT assessments across various IoT payment use cases, security frameworks and emerging compliance models. EMVCo, in collaboration with globally recognised independent laboratories, has worked since 2005 to evaluate the...

The growth of e-commerce, m-commerce and remote commerce transactions is showing no signs of slowing down. In 2021, over 2.14 billion people worldwide are expected to buy goods and services online, up from 1.32 billion in 2014. The growth of card-not-present (CNP) transactions has driven a new age of consumer convenience but in parallel, a new age of fraud. As EMV® chip card adoption gathers momentum, with 76.7% of card-present transactions being EMV, fraudsters are looking for an easier wa...

FIME’s EMV® 3-D Secure (3DS) test platform and laboratory have been qualified by EMVCo for ACS component testing, protocol 2.1. The combination of an automated test platform and FIME’s 3DS experts brings agility and efficiency for payment solution providers (PSPs), EMV 3DS vendors and banks while ensuring the compliance of new authentication implementations. With the platform, they can accelerate the testing and certification of their 3DS ACS solutions according to the EMV®...

Consumers are managing their financial services in more digital and diverse ways than ever before. But as card-not-present (CNP) transactions across e-commerce, m-commerce and remote commerce rise across the globe, so does fraud. Adding security without simply creating more points of friction is a real challenge, but one that the EMV 3-D Secure protocol – EMV 3DS for short – is trying to combat. The protocols are generating real interest across the industry, but what exactly is EMV...

EMVCo announces the publication of the EMV 3-D Secure Protocol and Core Functions Specification v2.2.0. The updated specification includes enhancements to promote an optimised consumer experience while supporting new authentication channels when making e-commerce transactions.  EMV 3DS is a messaging protocol that promotes frictionless consumer authentication and enables consumers to authenticate themselves with their card issuer when making card-not-present (CNP) e-commerce purchases. The...