Remix.run Logo
gambiting 7 hours ago

Many countries have alternatives already. In Poland Blik is ubiquitous and very very easy to use. And I love how it's implemented, Visa and MasterCard could learn from it.

Tldr - you open the app on your phone and it gives you a 6 digit BLIK code, you give that code to the seller, then a notification comes up on the app saying "seller X is trying to debit your account by amount Y, agree?". It's brilliant because then the seller gets nothing identifiable about you. Even if someone overhears the code, it's only valid 60 second so it's useless. Unlike with regular cards there is no risk of losing one or using a fake terminal that scans your card instead. And any transaction has to be explicitly rather than implicitly approved. Love it.

ArekDymalski an hour ago | parent | next [-]

BLIK rocks. In addition to being a payment system for goods and services it can be used for instant private money transfers between individuals.

lxgr 5 hours ago | parent | prev | next [-]

This is indeed one of the biggest weaknesses of "pull-based" payment cards, and something most if not all natively phone-based methods do better.

The best credit and debit cards can do is PIN verification or biometrics (for Apple/Google Pay), but even there you still trust the terminal to not show you a different amount than you'll be charged (assuming the screen is even pointing towards you; I've often been asked to tap without seeing what I'm even consenting to).

Online, there's 3DS, but that's not required everywhere and for every transaction.

There once was a vision to extend both positive cardholder approval and cardholder authentication for each card transaction, but it turns out the friction of that is higher on average than just letting everything but the most egregiously suspicious fraud go through by default and handle the rest via the disputes process.

Out of curiosity:

> you open the app on your phone and it gives you a 6 digit BLIK code, you give that code to the seller

Is this the flow for online payments as well, or only for in-person payments?

TeMPOraL 5 hours ago | parent | next [-]

> Is this the flow for online payments as well, or only for in-person payments?

On-line, too. Or should I say, first, because AFAIK on-line came first. I've been using it for years as my default on-line payment method where available, before noticing it becoming an option on POS terminals.

gambiting 5 hours ago | parent | prev [-]

>>Is this the flow for online payments as well, or only for in-person payments?

works for both

lxgr 5 hours ago | parent [-]

Interesting, I wonder if there is some other initiation channel then? The chance of collisions with random 6-digit codes seems non-negligible.

TeMPOraL 5 hours ago | parent [-]

I've been wondering this too. As I understand it, BLIK codes are generated on the back-end, so I imagine they have some clever anti-collision measures in place. What I know is:

- The TTL of the code is variable; on some days I've noticed it to be as low as 60 seconds, on others around 3+ minutes. Not sure if it depends on the type of transaction or time of day.

- After entering the code in charging widget/terminal, or giving it to a merchant, you still get a screen on which you need to explicitly confirm the transaction; it displays the amount and name of charging entity, so this would presumably reduce the impact of possible collision.

- Sometimes the codes generate instantly, sometimes it takes a few seconds; I always assumed it's network connection lag and/or usual webshit performance issues, but it would also be consistent with an anti-collision measure - if you run out of 6-digit codes, wait a second or two, some will free up.

- Not once I've heard any report or rumor about a collision.

wincy 2 hours ago | parent | prev | next [-]

I misread blik as “bilk” which is… probably the last word you’d want associated with your credit card or payment processor in English.

kulahan an hour ago | parent [-]

There used to be a beer designed to be mixed with milk called bilk. Last I heard, it was terrible. Maybe it's still around - I think it's Japanese, so it's unlikely I'd happen across it.

tgsovlerkhgsel 5 hours ago | parent | prev | next [-]

That's the problem. Every country has an alternative or ten, but what people actually need is one system that works across borders. That's the only way it reaches enough critical mass to be useful internationally beyond the EU, which nowadays is a requirement for it to be able to replace Visa/Mastercard in a decade or so.

thaumasiotes an hour ago | parent [-]

There's never been a system like that. Given this reality, it seems like a stretch to say that people need one.

iknowstuff 4 hours ago | parent | prev | next [-]

Yeah but approving every purchase from a merchant I trust, like Amazon, would be annoying. Gotta allow for one tap to purchase, like eg apple pay does

snicky 43 minutes ago | parent [-]

IIRC BLIK asks you if you want to skip the verification next time you buy from the same merchant.

5 hours ago | parent | prev | next [-]
[deleted]
floam 5 hours ago | parent | prev [-]

6 digits effectively the time salted … the other digits are your lat long lol.