Payment Card Roll Call: “Not Present” fraud likely to increase as EMV takes hold

Payment Card Roll Call: “Not Present” fraud likely to increase as EMV takes hold

rollingballNo retailer wants to become the next Target (pun intended).  Payment card fraud costs businesses and consumers billions of dollars every year.  What’s even more frightening, many of the breaches in the news are the result of innocent participants inadvertently granting access to the bad guys.  The Target breach in 2013 exposed the data of 110 million payment cards.  Hackers got into the network using perfectly good credentials of the HVAC company.  Sometimes password security just isn’t enough, which might bring in to question the security of all those SaaS subscriptions and online shopping sites folks use these days.

EMV chip technology, the standard around the world which has just recently become a standard in the United States, has done a lot to stem the tide of credit card fraud in other countries.  As it was implemented in various countries, guess where it pushed the fraudsters?  Where the anti-fraud technology wasn’t, of course! The United States was among the laggards in requiring EMV chip technology for payment cards, opening the door for bad guys and turning the US into a veritable haven for credit card fraud, “accounting for nearly 50% of global fraud losses, according to the Nilson Report[1]”.

EMV chip (or chip and pin) technology will go a long way to prevent credit card fraud for businesses accepting payment cards… in-person and counterfeit card fraud, anyway. Online retail, on the other hand, not so much.  A chip on the card doesn’t really help when the transaction is completed with the card not present (CNP).  Some industry analysts suggest that CNP fraud losses will exceed $6 billion within the next few years, making e-commerce and online payment security a high stakes game for even the smallest of retailers.  As it gets more difficult to hack the payment system when the card is presented, bad guys will fall back in even greater numbers to the card-not-present model to find their victims.

Online retailers and service providers must take additional steps to secure their systems and protect customers and business partners, and face the challenge with the understanding that effort must be ongoing as new threats emerge. Tokenization is a prime method of layering the system with security, making the merchant system somewhat less of a worthy target by not storing the card data in the system.  Even if the system becomes compromised, the bad guys wouldn’t find customer payment card information.  There are numerous other steps a business can take to secure the CNP sales, including applying behavioral analytics which might identify rogue activities, or using 3D Secure to authenticate a cardholder’s identity at the time of purchase.   The point is that CNP fraud is likely to spike as EMV technology takes a firm hold in the US.

Card fraud is already escalating rapidly for ecommerce retailers and other card not present channels – it didn’t take EMV to start on that roll but it will surely give it a push.  Paperless payment systems, SaaS subscription services and online application service usage are increasing dramatically and there’s no chip to get in the way of these transactions.  Sellers of any and every service utilizing online payments need to now pay particular attention to system and information security.  The risk has always been there, and EMV chips and other shifts in pay card technology simply give it a push.

jmbunnyfeetMake Sense?

J

 

[1] Chipping away at Credit Card Fraud with EMV; Information Week Tech Digest powered by Dark Reading, Nov 2015; NilsonReport http://www.nilsonreport.com/publication_newsletter_archive_issue.php?issue=1071

EMV and Retail – Your Trusted Advisor Should Be Advising You about This

EMV and Retail – Your Trusted Advisor Should Be Advising You about This

EMVChipCardThere is ‘big change a comin’ for retailers, merchants and any business that accepts credit cards for payments, and there are a great many businesses that are completely unprepared for it.  The change, what is being referred to as the “Payment Networks’ Liability Shift”, goes in to effect in October 2015 and places the burden of liability for fraud squarely on the shoulders of the merchants and card issuers who are not compliant with certain payment system security standards.  Accounting professionals and Trusted Advisors – here’s one of those things you should be helping your clients with.  Help them get informed, trained, and prepared.  Help them to understand the risk and decide on a course of action.  This is part of what makes a trusted advisor: they got your back.

The way things generally work in the US today, a fraudulent charge on a credit card is likely to end up being covered by the credit card company (the issuer). Starting in October, retailers are supposed to be able to accept payment cards with EMV chips (named for the founders of the standard: Europay, MasterCard and Visa), and must process those cards using the compliant technology that takes advantage of what the chip processing and security offers.  If these conditions aren’t met – like having a POS or payment terminal not capable of reading the EMV chip – the merchant is on the hook for the fraudulent transaction.  Given the volume of credit card and payments fraud in the country you’d think that most merchants would already be ready for this, but replacing all the POS and terminal equipment could be pretty costly.  It may take a bit of analysis to understand the real risk and compare that to the cost of compliance.  Certainly it makes sense to always be in compliance, but there are always factors which influence how quickly (or how completely) compliance may be met.

The liability shift is part of the influence being leveraged to get businesses to adopt newer and more secure models of electronic payment acceptance and processing.  It is simply the case that the magnetic strip on a credit card isn’t good enough any longer.  The new EMV Chip reading payment terminals require that the card be inserted and processed by the terminal rather than simply swiping the magstrip across a reader.  Over 40 years of using the magstrip approach has helped to earn the United States a top spot on the leaderboard for credit card and financial fraud, and we seem to be lagging behind in adoption and implementation of the EMV technology even though it has been shown to seriously curtail fraud even as payment card usage increases.  The EMV chip process, which encrypts information about the card so that even the local POS system doesn’t get access to it, is far more secure and is being widely adopted and used in Europe, Canada, Latin America and the Asia/Pacific regions.  Now the clock is ticking for US businesses to get ready to either update their systems or accept the liability for not doing so.

The shift in how payment cards are made and processed is simply one of many changes which will continue to occur as technology and human ingenuity continue to be applied in both good and not-so-good ways.  Recognizing that the pace of change is increasing, businesses must find ways to remain informed and prepare for those changes which will impact the business operation and sustainability.  This is among the essential roles the trusted advisor plays, and the current imperative simply underscores the growing need for such advisors by business large and small.

jmbunnyfeetMake Sense?

J

State of the Union: The Irrelevance of Good Accounting?

State of the Union: The Irrelevance of Good Accounting?

financeI’m a little concerned, and any professional in accounting and finance who works with small businesses should be just a little concerned, too.  Why?  Because there is a belief out there that some nifty software and Internet Of Things (IoT) approach to finance will ultimately eliminate the need for a small business to work with skilled, trained accounting professionals.  Remember the marketing slogan introduced by Intuit with QuickBooks – the one that suggested that, “if you can write a check, you can do your own books”?  Most accountants will tell you that it is not true, and the ability to operate a product like QuickBooks does not magically turn poor accounting and bookkeeping information into good business data.  In fact, it most frequently enables bad information to turn into bad business decisions – quickly.

DIY bookkeeping solutions have been around for a while, so why the distress about it now? Up until this point, it hadn’t been so overtly stated to small business owners that having less-than-great accounting data is very much OK, and that the role accounting professionals play in small business finances is more of a burden than benefit.  Consider the statement made by President Obama in his recent State of the Union address:

“Let’s simplify the system and let a small business owner file based on her actual bank statement, instead of the number of accountants she can afford”

If I’m an accounting professional, I am pretty steamed up about that statement because I know how screwy business accounting data gets when the work is done by folks without the proper training.  Incorrect or improper accounting treatment can make a big difference when it comes to filing those taxes mentioned…. and not in a good way.  That transaction on the bank statement… Is it a cost of goods sold or a regular business expense? Is it an asset or supply item? Is it a reimbursement or revenue?  Is the payroll deduction before or after taxes?  Is that even a viable payroll deduction item?  These questions and more arise frequently in a small business, and the treatment for these items is improper as often as not.

There is a big value in what a trained accounting professional can offer a small business owner, and the value often translates to eliminating unnecessary tax burdens and the delivery of accurate reporting – both of which are really important when it comes to actually trying to grow a healthy and sustainable business.

Small businesses are often considered to be the fuel powering our economy.  Doesn’t it make sense for us all to recognize that smarter businesses are likely to be more successful, and that more successful small businesses means growth in the economy?  The importance of good fiscal and financial management and reporting – in business and in government – is not something to minimize, and suggesting that it takes no intervention or skill to do the job properly reflects poorly not only on the person saying it, but on the entire establishment.

jmbunnyfeetMake Sense?

J

Audit or Advice? Small Accounting Firm Practitioners and Small Business Clients

adviceortaxesWhen a small business owner needs advice about running the business or strategizing on financial matters, one would think that the business owner would engage their accountant in the discussion.  Following along with that logic, many small firm practitioners believe that their small business clients will ultimately engage with them for this advisory work and move beyond statutory audit and compliance work.  For a great many firms, however, there remains a struggle to achieve more work and greater opportunity from client engagements; the firm remains relegated to performing mechanical functions of accounting and reporting and fails to gain the additional work which is truly desirable. There are a number of elements which present themselves in this discussion – considerations that the small firm practitioner may not be addressing – and which are likely contributing to the firm losing the opportunity to deliver more and deeper services to the client.

First, let’s consider why small business owners initially engage with their accounting professionals.  More than with larger businesses, smaller businesses tend to rely more heavily upon the involvement of outsourced accounting professionals simply because the business isn’t able to justify the cost of staffing the position full-time.  Needing office managers and bookkeepers or data entry operators is often a more evident need to the business owner, where assistance with daily operational and information management processes are more urgently required.  Functions considered to be “accounting” could effectively be outsourced to a 3rd party and handled in more of an after-the-fact basis.  For many small business owners, accounting is something which can be performed after all the real work is done, and presents the information necessary for payment of taxes, processing of payroll reports and the like.  The accounting professional is typically engaged because the business owner knows this work must be done by somebody, and believes the selected practitioner to be competent and trustworthy, and they’re also probably local.

With the convergence of market environment changes, regulatory and jurisdiction conditions, as well as changes in behaviors (cultural, sociological, technological), a new level of demand has been created for business and financial advisory services. Yet small business owners often remain reticent to approach their local small firm practitioner for the service. Why is it that the client doesn’t often approach their small firm practitioner with requests for advice and advisory services?

Part of the problem is perception.  Small business owners often believe that their needs require specialized knowledge and experience to address, and that the skill and experience can only be derived from a larger firm. Particularly if the smaller firm is not presenting itself in a manner that suggests that business advisory services are not only offered but are a specialty, the firm may simply lose to competitors who communicate the ability more effectively (something larger and more established firms are able to do via referral and reputation as well as through marketing).

A possible way to address the competency and perception issue is partnering, where firms join to collectively deliver solutions to the client.  Where one firm may specialize in an aspect of the engagement and the other firm addresses other areas, the delivery of full service to the client is ultimately the goal, and sharing the work and the revenue is often a more agreeable approach than losing out on the engagement altogether.

Another factor presenting itself in the equation is the “entrepreneurial spirit” from which many small businesses are fueled.  A small business owner is often somewhat of a superman, taking on multiple roles and performing a variety of functions in the business.  It is this DIY (do-it-yourself) attitude that contributes to the business growth and success, but it is also sometimes the barrier to achieving a higher degree of success. Believing more in the personal power of critical thinking than in the reliance on the professional’s education, experience and insight, the business owner simply refrains from asking for advice because they don’t think they need it.

Frugality is another factor playing into the small firm/small business relationship.  Small business owners may want advice, but they don’t want to have to pay for it.  Anyone selling products or services to small business recognizes that there is a certain amount of consulting and advice that accompanies most sales.  For some, this is simply a part of the sales process; helping the customer determine that this is the best choice and they should buy it.  It’s not so simple with accounting and finance, however.  There’s a big difference – and perhaps large risk associations – in giving advice versus performing accounting and compliance work.  Certainly, advisory services aren’t something the firm would elect to give away, so it becomes essential that the value of the advisory service be expressed in a way that the client can understand and believe.

 I once heard a financial planner address this same argument, where a prospective client suggested that they couldn’t really afford to pay for the advice.  The financial planner countered with the argument that a good financial plan will increase the return, which then recoups the cost of the advice.  If you pay $100 for the advice, and you earn $500 more than you would have without the advice, then it kind of feels like you’re getting paid to get advice because you gain more than you spend.  It’s the same with accounting, finance and business advisory services: sound advice should improve the rate of return, which would more than compensate for the cost of the advice.  The trick is getting the client to view the service as something real and valuable and not as snake oil, and to make a commitment to following the advice.  Real value must be communicated and tangible results measured and delivered, not smoke and mirrors.  Otherwise, the client return isn’t there, and the advice proved valueless.

As regulatory requirements increase – and become increasingly complex – the demand by small business for outside help also increases.  It is this ever-expanding demand which represents opportunity for small firm practitioners to capture more (more interesting and more profitable) work from their small business clients.  But competition is also growing from new providers and systems delivering advice, forcing adjustments to how the small firm must present its offerings and services, as well as change how they deliver and support those offerings.Whether through partnering and referral models, the development of new competencies and capabilities, creation of new workflows and methods, or some/all of the above, small firm practitioners must adapt in order to get that opportunity.

While the small firm practitioner may recognize that the small business client is greatly in need of advisory services, what they may not recognize is that the traditional approach has turned around, and it has become more likely that the client will seek advice first and statutory audit work second. For small firm practitioners, it is time to recognize that relationships are changing and how business is done must evolve to meet and advance that change.

jmbunnyfeetMake Sense?

J

Revenue Recognition and closing the reporting GAAP

Revenue Recognition and closing the reporting GAAP

chartOne company earns what the other company spends.  This is business, and it seems like it would be pretty straightforward, accounting for the money coming in and the money going out.  But it is really not that simple when it comes to business finances and accounting for revenue.  With investor pressure to improve share prices and market pressures forcing greater competition, businesses have always sought out ways to make the performance look as good as possible – on paper even if not in reality.  It is this requirement to make the business look better than it may actually be that drives “innovation” in financial reporting, and encourages some companies to use whatever rules are available to mislead investors or paint a rosy picture for stakeholders.  When the balance is lost and financial reporting standards become so oblique as to allow regular and gross misrepresentation, it is time to change the standards.

There are numerous instances of fraud and scandal reported from the finance departments of big businesses, but instances of improper or misleading revenue recognition can happen in even the smallest of companies, and not necessarily on purpose.  It is important to understand that properly and accurately reporting business revenue and earnings isn’t done just for investor satisfaction, it is an essential part of describing business performance that any owner or manager must be able to rely on.

Generally Accepted Accounting Principles (GAAP) provide investors and business owners with some consistency in the financial statements they use to analyze company performance, but only minimally.  This is partly due to the fact that GAAP is based not only on some standards established by policy boards (the authoritative standards) but also on “generally accepted” standards, which are often not really standards at all but simply past practice that was found to be accepted.  Especially in the global economy where fewer businesses operate solely within traditional territorial boundaries – and where accepted reporting methods vary widely – having a single financial reporting standard has become more important than ever.

Make it so, Number One.

Now there are new rules from FASB (Financial Accounting Standards Board) and IASB (International Accounting Standards Board) which provide clear and detailed guidance for how businesses recognize revenues.  These rules are based on a consistently applied set of principles, no matter what sort of business is involved and regardless of where the business is located.

A focus of the new rules of revenue recognition centers on customer contracts, delving into the details of how earnings from those agreements should be recorded. Consider that many businesses combine multiple products and services into a single agreement, even though there may be several deliverables or milestones included.  This method of booking customer contracts allowed companies to report revenues they were not yet due as part of a total agreement, often resulting with inflated earnings reports.   Stakeholders would perceive that the company had reached one earning threshold, but the reality was something quite different and performance expectations were unmet.

“FASB and the International Accounting Standards Board (IASB) issued converged guidance on recognizing revenue in contracts with customers. The new guidance is a major achievement in the Boards’ joint efforts to improve this important area of financial reporting.”  http://www.fasb.org/jsp/FASB/Page/BridgePage&cid=1351027207987

The new rules force an additional level of discussion, including a full set of disclosure requirements that will provide more information about contracts with customers.  Businesses must identify each promised deliverable and attached revenue or earning component, which helps to better understand how the revenue may be earned (and recognized) as the business performs on the various obligations to the customer.

Just take a look at some big ERP companies and the lawsuits generated from problems and failures in delivery – problems that might have been more clearly identified to investors and stakeholders if the tie between product sales and services to be performed were more clearly described.  In many cases, these situations exemplify the revenue recognition reporting problem, where large customer contracts and license sales were fully booked and recognized even though implementation services milestones attached to those license sales remained undelivered.

“2010 – JDA Software (i2) – Dillard’s, Inc.:  Dillard’s had alleged i2 failed to meet obligations regarding two software-license agreements for which the department-store operator had paid $8 million.” http://www.zdnet.com/blog/projectfailures/erp-train-wrecks-failures-and-lawsuits/12055

For private companies, reporting periods beginning after December 15, 2017 must follow the new guidance.  It may seem like a long period of time – from the decision to apply the new rules to the effective date – but the number of businesses the new rules will impact is large.  The FASB made a decision to delay the effective date because of the broad scope of organizations affected and “the potentially significant effect that a change in revenue recognition has on other financial statement line items.”

Business owners and their accounting professionals need to make sure that financial systems and processes are up to the task and can track and produce the detailed reporting these new rules require. For investors and analysts, the new reporting rules and detailed information they generate will go a long way towards minimizing the impact of innovative revenue reporting practices, and will hopefully bring a new level of believability and usefulness to business financial reports.

Make Sense?

J

Accounting for Point of Sale

Accounting for Point of Sale

There are a lot of solutions available to help retail businesses get business done.  From touch screen technology to mobile credit card and payment processing, retailers have many choices when it comes to selecting the right technology for the establishment.  But even the best point of sale system can lack the critical element that makes it truly valuable for the business.  This critical element is integration to a trusted accounting and finance solution.  While the POS system may include a level of basic accounting functionality, the reality is that a dedicated financial application will perform better in the long run.

Just as specialized line of business applications are used to handle operational functions, the financial application should be considered to be the “line of business” solution for the accounting and finance department (even if it is a department of one). This system not only services essential processes like receivables management, bill payments and bank account reconciliation, it serves as the basis for payroll, financial, tax, performance and other reporting. Further, the financial systems are often the first and primary source of analytical data, illuminating KPIs and cash flows and ultimately the business value.

The point of sale application generally handles the selling of and payment processing for goods and services sold by the business.  Whether it is composed of registers and terminals connected to a host system, PCs running POS software, or mobile phones and tablets running mobile payment processing apps like Square or GoPayment, point of sale addresses the retailers need to capture and record sales and payment information, sometimes customer information, and often inventory information.

The data from the POS solution must make it to accounting in some manner, yet point of sale applications are too-often approached as a standalone business requirement, somehow disconnected from other aspects of the business including the back-office.  Sales and items may be recorded in the POS system, yet only summary sales data ends up being re-keyed into the accounting system.  Centralized inventory management is all but nonexistent in these cases, and gross sales total are often recorded rather than individual transactions and receipts being transmitted to the accounting system.  The process of re-keying information from the POS to accounting systems is not only an efficiency-killer, it is also introduces a great potential for errors.  When the business elects to conserve on data entry and post only summary information to the accounting system, valuable detailed sales and transaction data may be lost.

The right approach to bringing point of sale together with accounting is to automate the process of integrating POS data with accounting on a regular basis – with AUTOMATION being the key.  Rather than establishing a process that requires manual entry of information from either system, a data integration solution is the best approach, with an import/export solution running second. The point is the elimination of manual re-entry of information.

There are numerous tools available that can take formatted POS data and import it into products like QuickBooks, for example, where it can be properly accounted for.  While QuickBooks Point of Sale integrates with QuickBooks desktop products, other POS solutions can also connect with QuickBooks if the right integration tool is selected, and there are quite a few available.  Check with the POS vendor and ask about a direct integration with QuickBooks desktop or whatever financial system you use. If there isn’t a packaged integration solution available, then check out products like Transaction Pro Importer, which can automate a variety of data import processes and ease the burdens moving external data into QuickBooks.pointofsale

The other factor in getting point of sale data to accounting is actually getting it there… transporting the data from the POS location to where the accounting system lives.  In many situations it is not desirable to keep the accounting system on the same computers as the point of sale systems, and in some cases it isn’t even possible.  But there is generally a way to get the information in a form that makes it possible to transmit it in some manner.  Among the most popular approaches to solving the “getting the POS data from here to there” problem is to use a data sync solution like Dropbox.

If the point of sale data can be exported or output to a file on a PC hard drive, then it may be able to be stored in a Dropbox folder on that PC.  At the home office where the accounting system resides, the operator would access the sync’d files from the local PC Dropbox folder and import the data to QuickBooks.   For QuickBooks Point of Sale there is an option to create a “mailbag” of sorts from the POS data of a remote store, which QuickBooks POS at the home office would pick up from the Dropbox folder and push to the QuickBooks financial application.

For businesses using POS systems like Micros or POSitouch and others, there is likely a service or application that will produce the POS data for import to QuickBooks or other financial system, pulling POS data files placed in the Dropbox folders by the POS app or performing the function as a web service or SaaS integration.

While I am a big fan of application hosting services and running QuickBooks desktop editions in the cloud, I’m also a realist and recognize that many POS solutions either can’t or shouldn’t be hosted.  There are situations where a hosted point-of-sale makes a lot of sense, and then there are cases where no bandwidth or proprietary hardware-based solutions make hosting not even an option. That doesn’t mean that the financial systems shouldn’t be hosted, though, and there are numerous ways to get the sync’d POS exports to the hosted QuickBooks environment, for example.

The key for retailers is to make sure there is a solid process for getting detailed and accurate POS information into the accounting system on a regular basis.  Manual entry is never the best answer.  With all of the technology and tools available, manually re-entering sales information is a waste of time and is likely to produce errors.  The better answer is to use an approach that automates the regular collection of point-of-sale data from all sources, delivering the data in a regular and consistent manner to accounting, and providing the basis for end-to-end automation supporting the integration of the point of sale system data with the rest of the business accounting.

jmbunnyfeetMake Sense?

J