Mastercard Likely To Remove Card Number Requirement For Online Shopping To Combat Online Fraud

Mastercard Inc, a global leader in the payment processing industry, is taking steps to combat the threat of online fraud by eliminating traditional credit card numbers from online transactions. This move is part of a broader strategy to replace outdated security measures with advanced biometric technology.

A decade ago, Mastercard introduced a technology that replaced consumers' credit card numbers with unique digital tokens. These tokens act as a secure stand-in for the actual card numbers, making them useless to hackers if intercepted. The success of this technology has been staggering, with Mastercard now processing 1 billion tokenized transactions every week. This is a leap, considering it took the company three years to process its first billion transactions using this technology.

Tokenization has become a cornerstone of Mastercard's strategy to fight fraud, especially in the wake of high-profile breaches that targeted major retailers like Target Corp. and Best Buy Co. In these incidents, fraudsters absconded with millions of consumers' credit card details, exposing the vulnerabilities of traditional payment systems. In response, Mastercard, alongside its rival Visa Inc, introduced tokenization technology to protect consumers. The initial focus was on in-store purchases, where card numbers were replaced with tokens, significantly reducing fraud.

The widespread adoption of payment services like Apple Pay further fueled the success of tokenization, particularly for in-store transactions. However, as in-store security tightened, criminals began shifting their focus to online purchases, where consumers manually entered their card information. This shift in fraud tactics has prompted Mastercard to expand its tokenization efforts to the e-commerce space.

Mastercard's Chief Executive Officer, Michael Miebach, recently outlined the company's plans to further revolutionize online security by incorporating biometric data into the tokenization process. This initiative aims to replace traditional security measures, such as passwords, with biometric identifiers like fingerprints and facial recognition. Miebach highlighted the shortcomings of passwords, which were once seen as the gold standard in online security. "That worked for a while. And then it started to become the vulnerability instead of effective safety and security," he noted.

The shift towards biometrics comes at a critical time, as online payment fraud continues to rise. According to industry forecasts, global online payment fraud is expected to surpass $91 billion by 2028. The growing threat has underscored the need for more robust security measures.

Mastercard's new strategy involves collaborating with banks and payment providers worldwide to integrate biometric-based tokens into their systems. One of the first markets to see this rollout is India, where Mastercard has partnered with PayU and major banks, including Axis Bank Ltd., to introduce biometric-based tokenization. In India, where one-time passwords are commonly used to authenticate transactions, this move is particularly significant. These passwords, which are typically sent to consumers via SMS to verify their identity, have become increasingly vulnerable to fraud. By replacing them with biometric tokens, Mastercard aims to enhance security and reduce fraud in one of the world's largest and fastest-growing markets.

Miebach emphasized the importance of protecting data in the digital economy, stating, "The digital economy - what is the one thing that's holding it back? It's the risk of data breaches, fraud, and so forth. And tokenization is a big lever to curb those."

Looking ahead, Mastercard has set an ambitious goal to have all e-commerce transactions in Europe fully tokenized by the end of the decade. This would mark a significant milestone in the fight against online fraud and set a new standard for secure online transactions.

As the digital economy continues to grow, so too does the threat of fraud. Mastercard's innovative approach to security, which blends tokenization with cutting-edge biometric technology, represents a new era in online payment protection. By eliminating the use of traditional credit card numbers and replacing them with secure digital tokens, Mastercard is not only protecting consumers but also paving the way for a safer and more secure online shopping experience.