Hacker News new | ask | show | jobs
by anonymouse008 1594 days ago
The real news is Apple specifically took a non competitive stance — making the API available to third parties like Stripe - rather than building in house, leveraging Apple Card connections, or similar
7 comments

They can always take a competitive stance later, once small businesses have gotten rid of all their PoS hardware. This makes that initial adoption much easier.
While it will reduce how often card readers will be used, card readers will be around for a while yet. In many markets contactless (atlest with real plastic) still has limits requiring the card holder to validate themselves (in the UK it’s a max of £100 per transaction and £200 over multiple transactions) and some card holders dislike contactless completely so have cards without it.

So in those markets you will still need supporting hardware for the times you can’t accept contactless or risk losing the sale.

The iPhone has a secure element that will allow for it to implement the SCRP (Secure Card Reader for PIN) PCI standard.

So this allows for an iPhone/iPad/Android phone/tablet to implement EMV contact/contactless payments (obviously contact would require a physical card reader). Contactless payments above floor limits (eg in Australia $100) can require a PIN that would be entered through the tablet.

True, but there is nothing to prevent completing biometric or PIN authentication on your own phone once you have tapped on the merchant's is there?
For me personally, I only use my real plastic when my battery is low on my phone. So you have to account for times may not have their phone with them.

My bank allows for location based security. If my phone is not near the location the card is being used I then have to use chip and pin instead of contactless (dead battery, poor cell service, unable to get a decent location fix because of the building, all these can trigger the need to revalidate).

And a lot of people still don’t have banking apps on their phone (one of the reasons banks had to support SMS 2FA when implementing Strong Customer Authentication).

I’m not too sure if the banks/ Visa/MC would be too happy allowing users to enter their pins on the retailers phone as pin pads are supposed to be encrypted.

We are seeing cards come with biometrics and pin pads on them, these cards will help with “card terminal less” transactions, but both bans will have to start issuing them and card users will have to be happy using them (I still know quite a few people who refuse to use contactless at all).

So imo those BlueTooth card terminals will be with us for a while to come, they will just be used less, which is why imo Apple worked with partners who already have such terminals as a fall back for whenever contactless can’t be used.

Why are you allowing your bank to know where you are 24/7? Is inputting a PIN really so bad?
Its done on your device, not on banks side iirc, but its an optional thing you can opt into if you wish, thats not the default config when opening an account (can also be toggled on/off at will in the app, so i'm not too worried about it tbh).
Also not all banks are even universally issuing tap to pay cards. None of my credit or debit cards are yet
That is primarily a US issue. In EU/AU/CA/NZ and increasingly in Asia, EMV chip+pin and contactless(+pin) are used and mag stripe is specifically excluded from the new standards.
I wonder if Apple would be wary of the regulatory attention that might attract.
I am surprised Apple didn't make this a closed system and compete with Square for small businesses.
They're playing the long game. Apple wants market usage to build bargaining power with the banks. They saw how the original Google Wallet was blocked from adoption because of control by the carriers and banks. Remember ISIS Mobile Wallet? (That name aged terribly..)

We saw how it took 10+ years and a dominating market position for Apple to show their claws with controlling 3rd parties with the App Store. Make no doubt that once a significant portion of the market uses Apple hardware or services for transactions, that they will want control and a cut of the transaction.

Notice how they say: partner-enabled iOS app

This means Apple has to endorse each 3rd party, and they remain under Apple's control just like app developers.

> We saw how it took 10+ years and a dominating market position for Apple to show their claws with controlling 3rd parties with the App Store. M

Really? I thought Apple's position was fairly consistent and it took 10+ years for the companies using the App Store to get antsy.

That's a fairly revisionist view of history. Large partners had earlier had special pricing (ex: Netflix) lax enforcement of rules (ex: Facebook). Blowups where Apple presumed the right to levy a fee are also well known (Amazon book sales, Uber fares).

The smaller fish got consistently screwed and no one was happy per se, but the sheer stupidity of Apple's recent actions do not help matters. For example, the app store cut is 30% unless you beg for scraps as a small business at which point you can get 15% until you start making $1 million. Income cliffs aren't how real taxes work (let's be clear here: Apple is pretending to be the government with taxes and fees and shadow court system of app review), they're just how Reagan demonized them back in the day.

Yes, Apple is increasingly competing with Governments of the worlds, in taxation of digital ecosystems, I am sure as they sabotage this market by these steep taxation, their will be blow back from governments as well after lobbying form business, They are not so small now like Nintendo that they can get away with this steep cuts. Problem is that governments will retaliate by arm twisting apple to approve third party app stores, which will be bad for whole iPhone ecosystem.
Fair point about the previous inconsistent enforcement. Thanks
Think it depends on the lens you view this with.

If it's iphones have reached saturation with small business owners, let's build a business on top of that already dug and locked in moat, then perhaps.

If it's offering this feature is a driver for more small business owners buying and sticking with iphones and the accompanying ecosystem, you can see how it's perhaps the smarter play to be an open platform here.

Right - the last thing Apple wants is to let Google take the high ground of "only our platform makes this business-critical API available to multiple apps, therefore if you're a small business owner you need to choose Android."
It competes with anyone selling point of sale hardware. I think Square falls into that camp, no? I wouldn't want to be in that space right now. I don't see how this doesn't usurp a big chunk of their market since it isn't even a decision between buy this or buy that, but buy that or just use the thing already in my pocket.
This was my initial thinking, but then I think most businesses won't want to use a phone as their payment platform. My reasoning is that when I go into a business and I tap the Square terminal, I am assuming that terminal belongs to the business, because what individual would have their own square terminal.

If the person who is ringing me up has an iPhone, and says "just tap this", there is a part of me that is wondering if this is the company's iPhone, or their personal device? Of course, this is easily resolved with the right surround which would remove this question, but I think it's somewhat valid.

Isn't this how it works in Apple stores (I'm not an apple person). Don't they walk around with iPhones in this big chunky yellow cases, and then you just pay for stuff through that? Maybe I'm wrong...

Are you concerned about a malicious employee using their own iphone to steal the money? Why couldn't they give you their own square terminal? On that note, when you pay cash why can't they just pocket whatever you give them?

I don't see why you care anyway, they would be stealing from the store, not from you. You would already have whatever item you are buying.

A colleague of mine owned a lunchstand, where the cook brought in his own receipt printer and used it for a large portion of daily business, and later bought the business.
Because I can somewhat trust the Square terminal will show the correct amount? If I swipe some random persons iPhone, whats stopping them from showing a $10 total and charging $1000?

Is the iPhone gonna print a receipt?

This is an interesting to think about. Say you're at an ice cream stand that has a Square Reader (the little square hockey puck reader) that's paired with an iPhone running Square's payment reader.

The merchant rings you up for $5, shows you the phone in their hand indicating the cost, and the Square Reader lights up to show it's ready for payment. You pay via inserting your credit card, which processes in a few seconds, and then the payment is complete. The merchant is no longer showing you the phone, and presumably hits "No Receipt".

However, the merchant actually has a second out of sight device that is set to charge $500 and is actually paired with the Square Reader. Because you've paid with a physical card, there's a good chance you won't notice the charge till you go to pay your credit card or check your bank account.

This would probably be a short-lived scam, as the merchant's malicious Square account would have to be linked to a bank (I think this is the only option), which would identify them. I'm pretty sure Square requires ID verification of some sort as well. So reporting this malicious transaction to your bank/credit card would flag them.

Additionally, if you're paying via a mobile wallet, you'll likely get an immediate notification saying "You paid $500 to Malicious Ice Cream Vendor".

Now let's think about Apple's new plan. It could be that Apple layer's it's own mandatory interface that shows "Pay $5 to Ice Cream Vendor" regardless of the app being used. Maybe this is actually the employee's phone instead of the company's device, but that's the same as the employee stealing cash out of the register, so not really your issue.

Or Apple could not layer it's own UI, and just open up the radio as an API. Apple could require that apps that use this API to have some additional verification to prevent someone from making an app that displays "Charge $5" when it's really charging $500.

All that being said, I only see smaller merchants using iPhones + Square Readers. Maybe some boutique stores, food trucks, etc. Once a store gets large enough, they usually want dedicated hardware, even if it's a Square Stand.

---

Here's Square's hardware page if you want visuals: https://squareup.com/au/en/hardware

Why do I currently trust any contactless payment terminal to debit the right amount from my Visa card ? The trust is built with every transaction.

The first time I used one of those strange little white terminals it seemed a bit dodgy ... but you pretty quickly come to trust that what's on the screen is what gets debited.

Also I doubt Apple would leave a nice app-accessible text field on the Tap To Pay dialog where I can insert my fake amount. Right ?!

You don't have to trust them, you trust your credit card company. All you have to do is tell them its fraud and the charge goes away.
So, yes, it is a concern about a malicious actor. Likely an employee, but hey, with just an iPhone and a big enough store, can't anyone just pretend to be an employee?

I would like to go to a store where I trust the business, the employee, and the entire pipeline. I understand that is idealistic, but yes, this is how I feel. It's like saying "why do you care if the employee is underpaid, you're saving money", which describes the whole tipping culture in the US.

To accept the payment successfully you must have a merchant account and have completed some KYC with one of Apple's payment partners though, surely?
Square readers are dirt cheap, like $60 or less. If an employee wanted to defraud their workplace like that, it's no barrier. They'll be caught when the shop reconciles things.

Why would you need a special surround? And why is that an issue for you the consumer?

A bunch of the Square payments are done using a company owned iPad that sits in a Square holster
Anyone who is going to be buying PoS from Square at a rate greater than just the phone attachment reader, this won't be sufficient for. Using a phone for a business you personally run is fine, using a phone as the central point of your business for even a relatively small fast casual is going to be a nightmare.

And for those even on Square Apple's ipads are still the preferred choice as far as I can tell. So there isn't much of a benefit other than fees.

For anything larger than a small fast casual you quickly run into greater integration needs with things like KDS (of which a few do use tablets, Toast, Fresh, etc, and even then I think ipads are preferred. I know Square integrates with a few of those as well as NorthStar so, I don't think they may have much to fear other than at the low end mom and pop stores.

POS and payment hardware used to be a fairly high margin vertical hardware business, but I don't think so any longer. The real goal now is merchant / customer acquisition and service lock in. Basically I'd expect the hardware will be given away at some point.
I'm not even sure there, at least for another few years. No store, mom and pop or otherwise, would want to be "tap to pay only" as a means of taking credit card payments. There are still plenty of cards out there that don't have RFID chips.
Wow really? That’s surprising for some reason. Here in Australia that’s super common, RFID is in every card you can think of.

If I go to the farmers market on the weekend, they all accept cash or tap-to-pay with a Square tap-only reader, and that’s it.

Payments and mobile service are some of the more weird things about the US given how easily startups or new tech is developed there. There last time I was in the US was years ago. I still had to swipe my card in a few places and getting a new SIM involved me having to talk to someone. By this time in Australia contactless payments were almost everywhere and you just needed to go to a convenience store to get a SIM and activate online.

It looks like they are going through similar weird things with instant bank transfers. In Australia all the major banks just have instant transfers built in. I use the bank app to transfer to friends and they get notified. In the US you Venmo or PayPal or whatever.

Yea... the Apple Card doesn't have RFID chips.
No one uses a mag reader here in Canada. Europe ditto, and sounds like the antipodes too. I don't know anyone who doesn't have RFID cards, debit or credit. Swiping a card through a mag reader is the backup option alone here.
I'm in the US. It's not uncommon here. In fact, two of my cards, a Chase Visa, and an Amex, both only support mag stripe and chip; they do not have an RFID chip in them. I could get them replaced, but why? Every POS system supports those; not everyone supports tap to pay.

The US may be an anomaly here, but it always has been. The UK had chip and pin roll out while the US still had mag stripe being the most common; we slowly added chip and signature (we still don't have chip and pin), and now we still aren't anywhere close to universal in tap to pay.

> No store, mom and pop or otherwise, would want to be "tap to pay only" as a means of taking credit card payments

In the USA maybe. Elsewhere it's already huge.

Yep, my apologies for the US centric mindset in the comment; I can't speak to elsewhere.
I assume Square makes vastly more on fees than on hardware, so the opportunity to make fees off more merchants who have a smaller barrier to entry is probably beneficial, even if they don't buy hardware.
Fees are definitely where the money is made in the payments sector, however, most proper terminals are leased so that represents a fairly large source of revenue for merchant service providers. A company I worked for were leasing terminals starting at £20 a month, and then took a cut of transactions plus a whole host of other bolt-ons like PCI non-compliance fees (which is it’s own racket, they’re not incentivised to ensure merchants are PCI compliant because it’s a significant revenue stream).
Square sells hardware, but losing money on that. I don't believe it is intended to compete with payment processors providing hardware, but more so commoditizes it/flattens existing players in cases where a POS terminal system isn't needed.
Square's primary business is credit card processing. The hardware is secondary at best. (It might not even be sold at a profit!)

I would be very surprised if Apple tried to enter the credit card processing industry. It isn't the sort of thing they're positioned to do well.

Square probably makes zilch on their hardware sales as it is, the real business is percentages on sales.
It competes with anyone selling point of sale hardware

No.

It allows sole proprietors, freelancers and the like to not have to get a Square reader to take credit card transactions. That's super convenient, especially for getting a deposit from a client, for example.

It also requires a newish iPhone (iPhone XS or later device), so there will still be plenty of iPhones out there that won't support this.

I am surprised Apple didn't make this a closed system and compete with Square for small businesses.

Apple isn't Microsoft. When was the last time Apple created something consumer facing from scratch instead of using industry standards or market leaders if they exist? They generally don't explicitly compete with commodity businesses unless there's something unique they're attempting to accomplish. They do stuff just because they can.

They partnered with the banks to create Apple Pay.

They partnered with Goldman Sachs and MasterCard to create the Apple credit card.

Besides, it would be a huge undertaking to build out a payment platform like Square to compete with them. Of course they could have bought any number of payment processors if they wanted to if they wanted to go that route.

Stripe and Shopify already have millions of customers so it only makes sense to partner with them.

The obvious thing most people on this thread is this being the basis for Apple's cryptocurrency aspirations.

Tim Cook owns some and he said Apple as a company is looking into cryptocurrency [1]. It only makes sense that Apple will eventually support bitcoin and other transactions natively on the iPhone, peer to peer.

[1]: "Tim Cook said Apple is looking at cryptocurrency – Here’s what the company is likely to do" https://9to5mac.com/2021/12/28/comment-tim-cook-said-apple-i...

> When was the last time Apple created something consumer facing from scratch instead of using industry standards or market leaders if they exist?

I'm too lazy to recall every detail, but it happened, often. Last exemple I have in mind is maps. As far as tech is concerned, I believe metal is their own inhouse invention?

I'm too lazy to recall every detail, but it happened, often.

Uh huh.

Last exemple I have in mind is maps.

They're working with several providers, including Yelp, Open Maps and Garmin. I've submitted corrections and additions to Apple Maps; anyone can do it.

As far as tech is concerned, I believe metal is their own inhouse invention?

Metal is a set of APIs for developers; it's not customer facing. Most users aren't going to know which graphics API their software uses. Apple supported and uses OpenGL for a long time and it's still available for backwards compatibility I believe.

The most obvious things are their cash cows: the iPhone and the app store.

The M1 is also customer facing, vs partnering with Intel to make it

Did they not partner with TSMC?

IIRC, Apple wanted Intel to fab their silicon, but Intel refused. It’s only since Gelsiner took over that Intel is open to fabbing other designs.

It's a closed system in that the applications that are installed in the Wallet require approval from Apple and that includes fees as does the provisioning of the existing EMV and other Wallet applications (not the other Wallet uses like passes etc).
I think on the vendor side it's a lot harder than it looks. This isn't the kind of thing Apple is good at.
They probably don't want any more anti-competitive criticism right now.
Apple relies on payment processors for ApplePay as well, so this is normal.
Hey! Apple Card is also a partnership (with Goldman Sachs). Goldman is not in acquiring business, so Apple had to find another partner
Presumably, in order to become an approved partner, you need to pay a kickback to apple.
Exactly! Same story as with Apple Pay: if you, as a card issuer, want your customers to use Apply Pay, you need to pay Apple.

Running "software POS" on Android does not require any special "partnerships" with Google, as access to NFC is open.

And probably an NDA so that you can't reveal the kickback
Not that we know of yet.