TCH takes to task the fact that the FTC has relaxed regulation on innovators, a decision that the agency has made, wisely, so that innovators have enough slack to get out of the starting blocks and to see if their business can scale or even has a shot. They recognize, rightly, that innovators have to work through the highly regulated payments ecosystem to even get to the starting line.
Rather than applauding that, as everyone who’s a champion of innovation should, the TCH, in its paper, sees that as a threat, suggesting that a lighter regulatory hand puts the banks in the position of having to pay for the sins of the innovators if something goes wrong. And that APPs play fast and loose with security standards because they are new.
Ignoring two big points: how innovation actually ignites and gets to scale and how innovators are using the latest technologies to both create and inspire new ways to secure payments transacting.
TCH cites the flaws in Apple Pay security, overlooking the facts associated with Apple Pay’s account takeover problems earlier in the year. Apple Pay relaxed account provisioning in order to minimize the friction associated with onboarding new customers. There was fraud, fraud perpetuated by the hackers who had account numbers from the Target and Home Depot hacks. The media sensationalized the “6 basis points of fraud” but failed to point out that the 6 basis points of fraud was on a very tiny number of transactions and transaction volume. You don’t have to be a math whiz to know that even a large percentage of a small number is still a small number. Since then, Apple Pay has tightened its provisioning systems.
TCH also cites Venmo and its one instance of a customer having a mix-up with a P2P transfer. TCH implies that the customer service breakdown, which Venmo admitted to, “might even be an intentional one” so as not to have to deal with the issue – pushing it off on the bank to make good for the customer. Intentional, seriously? The example ignores the fact that since the bank, not Venmo, moves the money, the bank had to be the one to put the money back into the customer’s account.
Payments tokens, an innovation that came out of the networks’ and issuers’ bid to secure mobile payments innovations for schemes like Apple Pay, Android Pay and Samsung Pay, is intended to make transacting via the mobile device more secure for everyone. Security tokens, an innovation that we’ve had in payments since the mid-2000s came courtesy of an innovator, Shift4, and is how online transaction data is kept secure.
There are also a slew of innovators working tirelessly to leverage the power of mobile and biometrics to authenticate the digital identities of consumers transacting in an increasingly digital world using connected devices. And, it’s the innovators who’ve devised new ways of encrypting cardholder data as it travels from the merchant point of sale through the acquirer to the issuer for authorization and back to the merchant for approval, working in collaboration with the payments ecosystem.
That’s why I found TCH’s position in its white paper so disturbing.
[bctt tweet="It’s sickening to read how many billions of dollars are going into the compliance operations of banks today, instead of innovation initiatives."]
Sure, I get that their job is to protect the banks that are its members. And that the banking industry has taken it on the chin since the financial crisis. It’s sickening to read how many billions of dollars are going into the compliance operations of banks today, instead of innovation initiatives. Banks are under siege from new regulations, some, unfortunately in response to bad behavior by banks on things like overdraft fees.
Banks are also under the thumb of a new regulator. The CFPB has an unfettered ability to march into a bank, decide that a product is bad, fine them regardless of whether it is or isn’t really harmful to consumers and without regard for the unintended consequences of their actions, and then require banks to staff up to monitor those activities on a going forward basis. Understandably, the fear of reprisal from the CFPB has curtailed a lot of the innovative ideas that might otherwise come out of the banking sector.
But that isn’t a reason to throw sand in the wheels of progress. Misery may like company, as the saying goes, but it sure won’t get us anywhere close to achieving the full potential of innovation in payments.
Sadly, the TCH is not alone in taking the position that the only way to protect regulated incumbents who can’t or won’t change is to throttle the innovators who are using new tools to imagine a better and more valuable future. Innovators are being attacked all over the world — and especially in Europe.