Square CEO takes high-road, downplays VeriFone’s security claims

Security

Yesterday, we told you about VeriFone’s unprovoked, online vendetta waged against mobile-payments startup Square. VeriFone CEO, Douglas G. Bergeron, wrote and open letter to humanity and created a YouTube video declaring that consumers were in “dire risk” because of Square’s card reader. Although the accused company did not respond to requests for comment yesterday, Square’s CEO has published a letter of his own, downplaying VeriFone’s concerns, while taking the proverbial high-road.

“Any technology—an encrypted card reader, phone camera, or plain old pen and paper—can be used to ‘skim’ or copy numbers from a credit card,” writes Jack Dorsey, Square’s CEO. “The waiter you hand your credit card to at a restaurant, for example, could easily steal your card details if he wanted to—no technology required.”

The letter goes on to reassure Square users that the company is “constantly improving the payment experience to enhance security” and that it’s partner bank, JPMorgan Chase, “stands behind every aspect” of the company’s service. Hit the jump to read the full context of the rebuttal.

Today one of our competitors alleged that the Square card reader is insecure. This is not a fair or accurate claim and it overlooks all of the protections already built into your credit card.

Any technology—an encrypted card reader, phone camera, or plain old pen and paper—can be used to “skim” or copy numbers from a credit card. The waiter you hand your credit card to at a restaurant, for example, could easily steal your card details if he wanted to—no technology required. If you provide your credit card to someone who intends to steal from you, they already have everything they need: the information on the front of your card.

The bank that issues your credit card recognizes this and does not hold you responsible for fraudulent charges. When they are alerted to odd activity, they simply give you a call and will reverse the transaction. With Square, your credit card is designed to be used without worry,in more places than ever before.

Our partner bank, JPMorgan Chase, continually reviews, verifies, and stands behind every aspect of our service, including our Square card reader. And we are constantly improving the payment experience to enhance security. For instance, you can request an instant text message or email receipt delivered from our secure squareup.com server after every transaction.

At Square we work tirelessly to remove all complexity from accepting credit cards. That includes removing every concern around security. We thank you for your increasing supportto make Square the leading way to pay with a credit card, safely.

Jack Dorsey
CEO, Square

March 9, 2011

Read

7 Comments
  • Guestbro

    >JPMorgan Chase, “stands behind every aspect”

    I feel so much more comfortable now!

  • weirdo

    “and that it’s partner bank, JPMorgan Chase,” –> “and that its partner bank, JPMorgan Chase,”

    That would make me feel better.

  • Roger A

    As a Square user, I feel comfortable using their product. I feel comfortable giving my card to other users to run though readers as well. Regardless if I like JPMorgan Chase bank (this is the bank they do their merchant accounting with) does not matter to me. I dont care if its BofA, Wells Fargo, Ally, JPMC or anyone else, because MY OWN BANK backs my butt up if something goes wrong. Stop being paranoid.

  • Steve Hillshire

    “The waiter you hand your credit card to at a restaurant, for example, could easily steal your card details if he wanted to—no technology required”
    So basically this clown is saying because someone *could* easily steal your credit card info, we don’t secure your card data that we store because its going to get stolen anyway. Wow. That’s great rational. This guy needs to get a clue. I’m surprised Visa isn’t getting in and jumping on this. With products like this you might as well put your CC # on the side of a bus!!

  • I5xswipe

    This is anti-competitive behavior. Credit cards are designed inherently not secure. The account numbers are printed right on the face, including the CCV on the face of some, rear on most. There is nothing secure about them!

    This is a shallow attack on a shockingly successful upstart. I am a square user myself. This is no more insecure then carbon copy paper, camera, or plain old pencil and paper. In all cases all credit card users by federal law are not responsible for more then $50 in unauthorized charges (unless you get baited into the account watch things the credit company will bill you monthly and usually raise your responsibility!)

    If you want secure payment processing then you will have to wait till NFC takes off, until then this is just as safe as the credit card readers at brick and mortar stores as well as your bank ATM. They are in my opinion less safe with the higher likelihood of card skimmers being attached to them.

  • Sean

    Im perfectly comfortable with Square. As Jack Dorsey stated, everywhere you buy something with a credit card you are putting yourself at risk. Every credit card company protects you fully which negates this security flaw.

  • http://blog.amwmedia.com Andrew Worcester

    Honestly, I was thinking the same thing when I heard VeriFone’s slam. If you’re handing someone your credit card, there’s a certain amount of trust inherent in that action. Also i think it’s worth pointing out that the CVV number can not be skimmed through this process because it’s not found in the magnetic strip’s information.

blog comments powered by Disqus