An Alternative Payment Approach
By David Dorf-Oracle on Sep 24, 2010
Your account number may have been illegally obtained as a result of a merchant database compromise and could be at risk for unauthorized use.
Great. Well at least they detected the problem before extraneous charges appeared. As long as its profitable, thieves will always find new attacks regardless of how good PCI is or isn't.
Traditional electronic payments "pull" funds from your account, so you have to share your account details (via a credit card) with the merchant. But what if we changed the approach to "push" funds into the merchant's account as payment. That way the consumer doesn't have to share any account information, and the merchant is sharing a "deposit only" account. Seems just as convenient and much, much more secure.
Mobio has such a payment solution. They display a QR Code at the POS or on the restaurant bill that is scanned using your iPhone to get the merchant's account information. Scan the image, confirm the amount, and receive a confirmation of payment. Cimbal has a similar solution that even allows person-to-person payments.
The proliferation of smartphones has really opened a whole new world of possibilities when it comes to payment. Its definitely a hotbed of innovation right now.