Do your customers get their Christmas stolen? Tell them how to prevent it

Avatar img
Christian Cuenca
Information Security Officer @Kushki
diciembre 21, 2020
Lectura de 2 minutos
Do your customers get their Christmas stolen? Tell them how to prevent it

Are your customers wary of Christmas shopping?

Do your customers mistrust Christmas purchases? They are probably not the only ones. We are a few days away from celebrating two of the year's most important Christmas and New Year festivities. On this occasion, our company and family dinners and Christmas purchases will not be the same as in previous years, giving way to distractions that can result in exposure to cybersecurity dangers related to cybersecurity.

Figures show it: During this year and in the pandemic period, there was a 59% increase in the number of complaints about computer crimes in Colombia, according to the register of the Cybernetic Center of the National Police. In Chile, NovaRed company detected a 40% increase in computer crimes during February and March this same year, with a 90% increase only in the phishing method.

In the current scenario, it is natural to spend our days with several connected mobile devices (laptops, smartphones and tablets), which allow being in contact with our families, participating in events, making our purchases and for leisure moments. Therefore, Kushki wants to provide a series of recommendations that you can offer your customers to stay alert and avoid being another victim of these cybercriminals.

Make sure that the business and the website are safe before buying

One of the main methods cybercriminals use, is to send attractive offers, which are very difficult to reject. For this, your customers must research the company, the product or service that is the subject of this offer, where previous users have validated the veracity of these.

Use recognized gateways and payment methods

Something critical to consider is the payment gateway that they are going to use to make their payment, since this one will be in charge of processing the financial confidential data. For this, Kushki is an excellent option, since it is a recognized gateway in the industry, and the largest shops in the region operate through it, providing them with security in data processing through their PCI DSS certification.

Never disclose more information than necessary

One must be cautious: Never provide card information data, financial accounts data, or passwords through phone calls to people who claim to be part of a financial institution. Similarly, refrain from doing it with shops where purchases have been made. Monitor financial transactions

It is important to verify all consumer notifications that financial institutions send, from the smallest amount to the highest amount of money. A technique used by cybercriminals is to make minimum charges to avoid being detected.

Keep all devices up-to-date

Update periodically all technological resources that are used to make online purchases. This way, your customers ensure that the system is operating at 100% and is not prone to errors or data leaks.

Act fast

If financial information or card data is suspected of being compromised, your customer must immediately contact the financial entity to update them.

Handle the credit card correctly

For being responsible and cautious with the use of the credit card, it is important to observe the following recommendations:

  • Limit use amounts
  • Limit uses abroad
  • Activate consumption notifications, indicating the time, date, amount, and company where it was made
  • Save the confidential data of each card
  • Never provide information such as the card number, the expiration date or cvv code through calls, social media or email.

Just as your customers must be careful, you, as a business, must also take certain precautions. Make sure to keep all your protocols up to date to prevent fraud in these holiday periods. Choosing a good gateway and establishing clear security rules is a good start.

Be the life of the party with the latest information on digital payments.

Subscribe to our Kushki Hub to receive alerts about our new content.

Suscribe illustration
Don't know which product is right for your business?
Does the world of payments catch your attention?

More about our kushki Hub

How governments and fintech companies can join in a collaborative way?

Slow and bureaucratic. That is the perception that has existed historically about public institutions and the formalities that are conducted through them. A sector that until recently had not been digitized, and that has not yet dimensioned the full benefits of doing so, nor has it counted the savings in the amounts of money and time that digitization could bring. But that pace has already been accelerated, because the pandemic has put face-to-face formalities at risk, forcing to make them available online. According to data from the Inter-American Development Bank (IDB), a face-to-face procedure costs governments up to 40 times more than a digital procedure, given the resources that must be available. Also, it takes an average of 5.4 hours for a citizen to do a procedure, and up to 11 hours in some countries. In contrast, a digital process can take up to 74% less of that time. In the European Union, 81% of procedures are online. In our region, only 7% of the population performed its last process digitally way. Data from the Economic Commission for Latin America and the Caribbean (ECAC), position the region at an intermediate development level in respect to other regions of the world in terms of a digital ecosystem. With an index of 49.9 (on a scale of 0 to 100), Latin America is lagging compared to Western Europe (71.06) and North America (80.8). In addition, the annual growth rate in digitization has also been slowed, growing by 6.21% between 2014 and 2018, the lowest of all emerging regions. Some utilities already offer digital payments for procedures; however, dissemination is low, which does not encourage its use among contributors. In addition, many public portals are complex and user-unfriendly, which derives in a low conversion of transactions, and a delay compared with the different public administrations systems of the world. In fact, ID figures point that 40% of digital formalities are very difficult to understand and cannot be completed. The opportunity In Estonia, a leading country in terms of State digitalization, 99% of formalities are made online. One of the main advances are digital signatures, which are used 1.3 million times per week. According to the Government of that country, thanks to that, they save a working week per person per year or 2% of the Gross Domestic Product (GDP). Other of its advances, have included eliminating the use of paper in procedures, implementing the digital vote, creating virtual residences or e-residencies, and even a digital identifier since a person is born in that country. All that makes it clear that there much to advance and to imitate from the countries that take the lead and are more developed in this topic. The digitalization process of the public sector has a series of associated benefits: Advances can be reached in an agile and short-term term fashion, with an immediate positive perception and satisfaction of citizens. That is to say, they are measurable and testable in quick deadlines. Also, the introduction of technology in the public administration generates less corruption, since everything is registered, there is less commuting and vehicle traffic, less pollution and environmental impact, and administrative efficiency with lower costs and bureaucracy. A technological partner In Colombia, Sushi digitalized the process for obtaining the Property Transfer Certificate, issued by the Superintendence of Notaries and Registry Offices (SNR). This certificate is required for a series of formalities in Colombia, and provides all the information about the property and its owners. Its demand is high: Between 23 thousand and 75 thousand certificates are issued each day, because it is required to buy or sell a property and apply for mortgage credits, among other things. With Sushi, SNR users can digitally acquire theircertificates, saving time and money in commutes to offices. Obtaining the certificate with this method takes less than a minute. Another case is the Sole National Transit Register (RUNT), responsible for delivering cars' vehicle records. Through the alliance with Sushi, it is now possible to pay for the document with cards and the PSE, expanding the available payment options. The virtual counter In Ecuador, the Municipality of Guayaquil has also started to digitalize with our solutions. Payment of the property tax, a mandatory levy that is charged once a year for each property, can now be made online through a portal with a payment button specifically developed for this entity. The user accepts the payment of a fee for the use of the service, but that equals time-saving and greater comfort. For the implementation of this project, we have a multidisciplinary team of experts in the online collection, safety and payment experience industry. The current situation of the pandemic worldwide, has enhanced electronic commerce, and also the digitalization of public entities that seek to approach their users easily and safely. State Transformation In November 2020, the Sixth Ministerial Meeting of E-Government of Latin America and the Caribbean was held; where it was exposed that Ecuador has achieved substantial changes in digital transformation, rising 10 positions regarding 2018 in terms of application of E-Government at a global level (74th out of 193 countries). Currently, the country records more than 70% of online formalities of the Central Government, and it is expected to be 90% by May 2021. Although the Cisco Digital Readiness Index 2019 ranked Chile as the most digitally ready country, followed by Uruguay and Costa Rica, countries of the region are still in a fairly low position regarding the global level, which shows that there are still unattended needs to solve by collaboration between fintech companies and governments.
Avatar img
Álvaro Maldonado
Gerente Comercial @ Kushki Ecuador
diciembre 17, 2020

Double diamond methodology for user experience design

Today, most companies seek customer loyalty and to generate conversion through the sale of their products in online stores. This positioning depends on many factors; one of them is the design of user interfaces, which covers the visual aspect of a platform (being attractive), as its usability and usefulness, thus the importance of a UX designer. In this article, I will tell you about what user experience design is, the methodology we use in Kushki, the challenges we have faced in the process, and the reason why we choose to apply the double diamond methodology. The easiest way to explain what a UX Designer or User Experience Designer does, is by sharing an example, something that you have probably lived and become familiar with: Imagine that you are on a website that sells shoes, intending to buy a pair of sneakers with specific features. You already have what you want, so when heading to the sneakers section, you start searching the “filter” button to facilitate your search, but you do not find it anywhere. After seeing pages and pages of the digital catalog, you finally find what you were looking for and go to the pay section. At that time, you discover an extensive payment form that you start filling out discouraged, while you think this is taking much longer time and effort than you thought. Eventually, you surrender and leave the website, and prefer to buy your shoes in another store, or simply to forget about it completely. But, why did you quit? Because your frustration with the process was stronger than your wishes to buy the shoes, that is, the user experience was unsatisfactory. And you ask yourself, what does this have to do with the UX designer? It is simple: The UX designer has the mission of converting the search and purchase process into a rewarding experience, that provides all accessibility elements with a high degree of practicality, for the user to do his/her activities on the website, in a fluid and seamless way, almost “without being aware of it”; this is what we call user experience. In other words, we define user experience design as the development and improvement process of quality interaction between human and computer, and all the aspects of a digital or physical product or service. The challenge is based on creating a useful, user-friendly product, that provides value and acceptance in its use in the shortest time possible. A designer not only has participation in the creation of a visual product, but performs a practical process of research, ideation, and finally, the development of prototypes that allow testing results. To achieve a high-quality UX design, there must be a perfect fusion of multi-disciplinary services. The Double Diamond methodology at Kushki As a team, we apply various rituals of agile methodologies to manage projects with greater efficiency, and focus on the added value of our digital solutions. For this, we use the steps of the Double Diamond framework as follows: Discover: We investigate which improvement opportunities are. In this step, we validate, with real users, which are their concerns. We ask our interviewees to give us a tour of their day-to-day activities to detect the problem, and we also certify the project's scope. Define: With the results of the previous point, an information organization process begins, with the purpose of understanding and mapping which are the required points that can solve the raised problem. In this phase, flow charts and lists of requirements are made, among other tools, which are necessary for the next stage. Develop: In this point, we focus on the visual construction of the product or feature, considering the logic and pain points identified before, that is, prototyping. We also make validations with experts, so that we can ensure that we can make the delivery with a perfect finish. Deliver: It consists of a demonstration of the properties of the features that are proposed in the prototype. Important challenges that we face in the development of the experience As a user experience design team, we worry about our solutions being reliable, useful, and friendly. As a team, we have identified three constant and fundamental challenges to consider in each solution we develop: Make the user feel safe. Not only do we have the best security certifications, but we have also implemented other measures that allow the user to have greater control and understanding in the process. For example, a preview of the configurations they wish to make, alert messages, action confirmation, information edition, etc. The objective is to help users to make good decisions, making them feel safe in the process. Speak in their language. Unfriendly and incomprehensible language can hinder the understanding of transaction processing tools. “Preauthorization and capture,” “dispersion,” “chargeback,” among others, are terms that are not commonly used, and not from the domain of people. This is why the way we communicate with our customers, is a constant and important challenge that we face as a team. To solve these possible understanding difficulties, we have numerous indications, notes and tooltips in the Customer Console, as well as the knowledge base. It is essential to talk to the user in a clear, direct and simple to understand language. Information saturation. It is very easy to confuse the user when it comes to financial transactions. The user needs to have key and concise information at hand. For this, it is essential to know him/her and his/her needs, to be able to propose solutions with an information architecture that covers his/her pain points, reducing the cognitive burden of our user. Why do we choose this methodology? One of the characteristics that we value more from this framework, is the possibility of iteration within each diamond, with the objective of approaching each time to the ideal “as if.” The intention is to have a clear problem when both diamonds converge, resulting in a positive effort-time ratio. The main benefits that we find in this methodology are: It fosters communication between teams. Goes through consultations with experts and other relevant areas. It applies for small, medium, and large projects. The framework can be implemented to find solutions to all kinds of problems. It is adaptable according to the project. It encourages us to understand which the correct methods and activities are to address a problem or opportunity. Clarity in processes. It allows defining the phases with greater accuracy throughout the development of a UX project. Finally, trust and efficiency in developed technologies are really important for the fintech world. By themselves, financial transactions consist of complex processes that require a high level of accuracy and processing speed. Our objective is that, this is a transparent, fast and secure process for the end-user. As a team, we constantly face new challenges that lead us to convert a cumbersome process into one that can develop naturally and intuitively, so we must consider experience design as a global concept that affects the entire interaction chain between brand and customer alike.
Avatar img
Andreína Medina Yáquer
UX/UI Designer @ Kushki
diciembre 07, 2020

The opportunity of digital payments: Why I decided to take the step from Visa to fintechs

When I entered Visa in 1997 as a young engineer, I never thought that I would stay there for 22 years. Without knowing much, I was attracted by the world of payment methods, because it is associated with credits that favor the economic growth of small and medium-sized companies, and because their convenience facilitates our daily life. But, beyond that, it was a good opportunity for a young professional like me. First, I entered the computer area, taking charge of the implementation of microcircuit cards, a type of smart card that, at that time, were quite a novelty. Up to 2003, I was in the area of new Visa technologies. From there, I went to risks and fraud, leading the area in Mexico, the country where there is most fraud throughout Latin America and the world. Zoom to the matter The fraud problem in Mexico is nothing new and gives space for much analysis. According to a survey conducted in 2019, 77% of Mexicans claim not to buy online for fear of being a victim of this crime. That is, the topic is very present among citizens. Moreover, according to data extracted from a study conducted by Visa itself, currently, chargebacks in Latin America occur in 1.7% of orders, and reach 2.3% in Mexico. Data from the National Commission for the Protection and Defense of Financial Services Users (Condusef) says that, during the first quarter of 2019, one million and 188.000 chargebacks had already been claimed in the Mexican nation. The contrast is strong, because in Europe chargebacks barely reach 0.8%. The topic does not discriminate, because, by having worked in fraud and risk areas for so many years, I can surely say that cyber threats attacking fintechs are nothing different from those of any bank or big company. Cybercriminals target big and small alike. That is why, the big difference lies in how we are prepared for these threats. There, I consider that training and awareness-raising of employees is fundamental. As contributors and members of the payment ecosystem, we must understand that we are critical entities to protect the institutions where we work adequately. In my experience, the best tool is education and compliance courses, and stay constantly updated. The emergence of fintechs But, returning to the topic of my professional career, already having some time in the industry, I began to identify the main problems that exist in the region regarding payments. In Latin America, cash use prevails with impressive figures: According to Americas Market Intelligence, approximately USD 1.7 billion in cash in physical stores were spent in the region that same year, representing 81% of total retail spending, compared to 25% in the United States and 18% in China. Electronic payments have had a tough task, trying to expand through the different Latin American countries, often slowed by banks, which have problems expanding their penetration due to the large operating burden they have, which makes it very difficult to exhort these institutions to make changes. All this happens at the same time when businesses need to sell more and more on the Internet, especially due to the pandemic, which brings technological and security requirements that often are out of the core of their business, or that do not have the knowledge necessary to be able to do it on their own behalf. This is when fintechs start to timidly appear. These small and agile technology companies expand the base of e-services by offering greater innovation and competition to make payments, achieving simple processes quickly, such as putting a business in the capacity to sell in a matter of a few days, something unthinkable for a large financial institution. More importantly, they contribute to increasing banking access to the Latino population. According to 2020 LATAM Fintech Report by KoreFusion, Mexico leads the account of countries having the most fintech companies in the region, with 249. Colombia follows with 128. This is mostly due to the creation of the Mexican Comprehensive Fintech Law in 2018, which is a pioneer in Latin America, which has attracted international investment and the rise of financing amounts. In 2020, although the year does not yet end, it is likely that the figures have increased due to the pandemic and the digital payments boom. Kushki Challenge With the boom of fintech companies, and seeing how the ecosystem has grown in recent years, I began to consider the possibility of guiding my career towards this promising world of fintech companies. Over time, it has been clear that not all these companies are going to survive, and only those that have been able to identify market deficiencies very well, by developing versatile, flexible, and convenient solutions, are the ones that are to prevail, even when times become difficult. And that is what I saw in Kushki, where I have been acting as CCO (Chief Governance & Compliance Officer) since some weeks ago. It is a tremendous challenge, since my goal is to guarantee an optimal operation throughout the region, but adapting to the regulations of each specific country. It is not an easy task, because each country is a world unto itself. At the same time, my work is to provide differentiated values that position us as our customers' main technological partner, whatever their category or country of origin.
Avatar img
Eduardo Canton
Chief Governance & Compliance Officer @ Kushki
diciembre 02, 2020