💳 PlayWithPayments Blogs

By Pratyush Saxena

Practical explanations of payment systems, ISO messaging, HSM and cryptography, card processing, security, and fintech architecture.

ATM

Inside the ATM: What Happens After You Insert Your Card? NDC States A, B, C & D, Part 2

Explore how APTRA Advance NDC States A, B, C, and D manage card reading, PIN entry, envelope dispensing, and operation code buffers.

Read More

ATM and Card Payments

Inside the ATM: The Hidden Logic That Controls Every Transaction

Explore how states and state tables in APTRA Advance NDC control ATM transaction flows, from card reading and PIN entry to host communication and cash dispensing.

Read More

Digital Public Infrastructure

DIGIPIN: A Digital Address Grid with Payments-Style Thinking

How India's 10-character DIGIPIN turns geography into a standardized, machine-readable location reference.

Read More

Payment Security

Payments and Messaging Share a Common Security Principle

What end-to-end messaging encryption and payment PIN verification teach us about protecting secrets.

Read More

Fraud Prevention

How a Banking App Can Detect a Phone Call During a Payment

How device and contextual signals can complement transaction data in detecting social-engineering fraud.

Read More

EMV

Two GENERATE AC Commands, One Online Leg

Why EMV uses two local GENERATE AC commands even though online authorization normally involves one issuer round trip.

Read More

HSM and Key Management

DUKPT: The Key Concept That Changed How I Think About Payment Encryption

How Derived Unique Key Per Transaction reduces reliance on a single static transaction key.

Read More

EMV

Terminal Action Analysis: Who Decides Online or Offline?

How TVR, IAC, TAC, and EMV Tag 9F27 influence terminal decisions during card transactions.

Read More

HSM and Key Management

HSM Security Is Built on Trust, Not Just Technology

Why M-of-N quorum, dual control, and key ceremony procedures are as important as cryptographic strength.

Read More

EMV

Inside an EMV Chip: What Really Gets Personalized?

A practical look at BER-TLV data, application files, DOLs, and issuer-controlled updates in EMV card personalization.

Read More

Cryptography

RSA Authenticator Does Not Mean RSA Generates the OTP

A reminder to distinguish a product name from the cryptographic mechanism behind a one-time password.

Read More

ATM and Card Payments

The ATM's Silent Brain: The FIT Table

How the ATM's local Financial Institution Table influences menus, routing, transaction permissions, and cryptographic preparation.

Read More