EMV Migration Presentation on State of Play Cédric Sarazin Chairman of the Card Fraud Prevention Task Force European Payment Council - EPC Director, Development & Strategy Cartes Bancaires Fraud Prevention Expert Group - Brussels - 16. May 2006 1
European Payments Council EPC was established in June 2002 64 members : major European banks & European Banking Associations representing 27 European countries to investigate & recommend an architecture for the Single European Payment Area (SEPA) defined as countries and territories subject to EC Directives, Regulations, and Recommendations for credit transfers, direct debits and card transactions in Euro 2
EPC Card Fraud Prevention Task Force Î forum for experts from European and International banks & schemes to discuss fraud prevention related issues Î develop tactical initiatives to fight against card fraud across SEPA Î promote card fraud prevention tools Î monitor implementation of security standards and procedures, e.g.: Quarterly EMV Implementation Snapshots since 2004 3DSecure Implementation snapshot under construction Î Work on a SEPA Card Anti-Fraud Database Objective to create first pan-european statistics and analysis on card fraud 3
Communication plan under study EPC CFP TF Recent activities - 1 to promote EMV migration to banks (and to other stakeholders: merchants, administrations, etc.) more generally to promote security oriented standards & practices (Internet fraud, ID Theft, use of databases ) in each domain, identification of the migration holes and creation of generic arguments Ban of magstripe fallback foreseen (date to be decided) Refinement and extension of the implementation snapshots concept to the main standards (EMV, 3D- Secure, etc.) Work on a card anti-fraud database for aggregated statistics on card fraud in Europe 4
EPC CFP TF Recent activities - 2 Inventory of the main standards & certification procedures in the area of card security and fraud prevention Geographical zone of usage? Level of generalisation? Interoperability standards, e.g. EMV, 3D Secure Implementation standards, e.g. card, terminal or protocol implementations Objective to make appropriate convergence recommendations and initiate the work if needed 5
End March 2006, EMV Migration in EU25 47.4 % of the payment cards 52.7 % of the bank ATMs 38.1 % of the POS Terminals had already been migrated to EMV! 6
EMV Migration in EU25: Cards % in EU25 100% 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% 04 04 04 04 05 05 05 05 06 06 06 06 07 07 07 07 08 08 08 08 09 09 09 09 10 7
EMV Migration in EU25: Cards % in EU25 Countries 100% 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% % of EMV Cards in EU25 04 04 04 04 05 05 05 05 06 AT BE CY CZ DK EE FI FR DE GR HU IE IT LI LU LV MT NL PL PT ES SE SI SK UK EU25 8
EMV Migration in EU25: POS % in EU25 100% % of EMV POS Terminals in EU 25 90% 80% 70% 60% 50% 40% 30% 20% 10% 04 04 04 04 05 05 05 05 06 06 06 06 07 07 07 07 08 08 08 08 09 09 09 09 10 10 10 10 11 11 11 11 9
EMV Migration in Europe: POS % in EU25 Countries 100% 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% % of EMV POS in EU25 04 04 04 04 05 05 05 05 06 AT BE CY CZ DK EE FI FR DE GR HU IE IT LI LU LV MT NL PL PT ES SE SI SK UK EU25 10
EMV Migration in Europe: X-border POS Transactions 80 % 70 60 50 40 Average 32,88% 30 20 10 0 11 French EMV cards at Cross border merchants Acquired Payment transactions, Apr. 22. 2006 Nbr of transactions processed on EMV mode / total face to face(%) By construction, France is not on this chart Luxembourg Irlande Lettonie Belgium Tcheq Rep UK Estonie Spain Lituanie Hungary
EMV Migration in EU25: % of EMV ATMs in EU25 100% % of EMV ATMs in EU 25 90% 80% 70% 60% 50% 40% 30% 20% 10% 04 04 04 04 05 05 05 05 06 06 06 06 07 07 07 07 08 08 08 08 09 09 12
EMV Migration in EU25: % of EMV ATM in EU25 Countries 100% % of EMV ATM in EU25 AT BE 90% CY CZ DK 80% EE FI 70% FR DE 60% GR HU IE 50% IT LI 40% LU LV 30% MT NL PL 20% PT ES 10% SE SI SK 0% 04 04 04 04 05 05 05 05 06 UK EU25 13
90 80 70 60 50 40 30 20 10 0 EMV Migration in Europe: X-border ATM Transactions Average French EMV cards at Cross border ATMs Acquired ATMs transactions, Apr. 22. 2006 Nbr of transactions processed on EMV mode / total (%) 14 By construction, France is not on this chart Estonie Finlande Luxembourg Danemark Suède Belgique UK Suisse Autriche Rep tcheque Portugal Irlande Espagne Moyenne % 50,74%
Others: 3DSecure Implementation Snapshot 3DSecure-capable cards (BIN 3DSecure registered) 3DSecure registered and activated cards 3DSecure registered/equipped merchants (i.e. completed with authentication) Merchant 3DSecure transactions, over all Internet transactions Full 3DSecure transactions, over all Internet transactions EU country UK 39% 2.3%? 10.3% 3.2% FR 100% 1.2% 35.7% 10.84% 0.35% BE 95% 32% 1% 64% 10% (of transactions processed by registered merchants) (of transactions processed by registered merchants) 15
Thank you for your attention www.europeanpaymentscouncil.org - cedric-sarazin@cartes-bancaires.com 16