Hacker News Reader

When I first saw this, I had a different use-case in mind, where a person would just take a picture of their own credit card for an in-app purchase, instead of a vendor using it to accept money from another person. (Hence the focus on developers.)

If you AB tested giving someone a screen where they put in their credit card number, or a screen where they just took a picture of it, you might find that people are more willing to take a picture. People are probably more comfortable with a photo of their credit card being taken on their own phone than someone else's phone. To the app, both of these are CNP transactions.

That was my initial thought too. Instead of having to type all of your information using a tiny keyboard or on-screen one, you just snap a picture. I suppose, though, that most online markets allow you to save your information and the problem really isn't that big after the first entry. Something like this is kind of neat, but nothing new or novel. OCR has been good enough to do this for a long time.

> The other reason is based on UX. It feels really weird to have someone take a picture of your credit card using their cell phone. The apps that use this technology might be doing anything with that image.

To be fair, any company that gets my credit card number (restaurants, Walmart, Amazon, every random e-shop on the internet) could be doing anything with my credit card, so this concern isn't exactly new or very scary.

To you, no.

Consumers have an irrational understanding that swiping a credit card is safe. Taking a picture of it is likely the sketchiest action a merchant could take, in the eyes of the average uneducated consumer.

This cannot be overstated. Companies live or die based on the perceptions they create, technical details be damned.

Otoh, more people should take credit cards!

We should be moving away from credit cards. They are becoming an archaic technology.

What do you propose we replace them with?

http://www.facecash.com

Our phones

While low-tech, credit cards are very flexible. I worry that the more high tech approaches (NFC, etc) are motivated not because its a step forward, but because its an opportunity to grab more control of the market, and leave consumers more exposed to fraud.

How are credit cards more flexible than a computer in your hand? Worst case your phone acts exactly like your credit card where you read numbers off of it.

Also, how would a phone lead to more fraud? You could authorize each transaction by cryptographically signing it after entering a passphrase. With a credit card anyone that steals your numbers can charge to it.

Magnetic credit card readers are cheap; look at how much Square charges.

The fraud prevention mechanism for magnetic cards is mostly reactive and doesn't require "passphrases" or "cryptographically signing," which is a big usability win.

Since issuers are on the hook for unauthorized charges, and generally make money from transaction fees, it's in their best interest to find a good compromise between fraud protection and usability. Adding consumer software and a wide variety of commoditized portable computing devices into the mix doesn't seem worth the cost.

I think you are missing the point. This is not meant to be used like Square is. This is meant to be embedded into other application that accepts in app purchases that can't be done with the In App system provided by Apple.

Also did you notice its 15¢ per scan!! I believe it will add on to the 10¢-15¢ + percentage merchants have to pay to the processor per Transaction.

Yeah, this matters way more for transactions less than 5 dollars where it starts to be a large %. If you go to 100 dollar range, it doesn't matter at all. The 10-15 cents just means they are looking for people who sell big things, not coffee shops.

Or lots of little things over time. The user only needs to scan the card the first time.

The other reason to run CP .vs CNP is, of course, fraud resolution. If you had the card in your hand, it's much less likely to have been someone running an online scam.

But the, why doesn't having a photo of the card in-question also qualify for a CP?

I think Square moved toward being able to swipe because it's more 'traditional'. People were going to be upset about vendors taking a pic of their card.

On the other hand, Square requires a merchant to have particular hardware to receive payments (swiper), this method does not. Good point on the CNP vs CP though, I never knew about that.