As you know, we recently updated our approach to SCA which caused payments to be rejected if any of the following conditions were met:
If you made five consecutive contactless transactions using your Curve card.
If the combined value of transactions reached the limit of 150EUR or 300GBP before making a chip and pin transaction.
If a single contactless transaction exceeds the value of 50 EUR or 100 GBP.
We’ve listened to the feedback from users here on the Community and the Curve team have decided to remove the five transaction limit.
We’ll now only request that you make Chip and Pin transactions to reset SCA after your contactless spending reaches 150EUR/ 300GBP during consecutive transactions or if you attempt to make a single transaction over 50 EUR/ 100 GBP.
Great that Curve have our security at heart but there has to be a bit of a balance… Frustrating when out and about running errands etc and make series of small purchases (coffee/snack/bus ticket) and have to re validate after that.
Why? Why not just ask for PIN, making it contactless+PIN? Here in Portugal it’s extremely confusing to use Curve contactless as every three contactless transactions it asks for PIN, making it contactless+PIN, in accordance with the national rules, Portuguese cards themselves being synced with this limit, so that’s it when using those, then Curve has this other separate limit which could be made less of an annoyance if it just asked for the PIN instead of declining the transactions and forcing chip+PIN for no apparent reason.
Why does Curce think there’s anything inherently safer with chip+pin as opposed to the contactless+PIN everyone else uses?
Edit: the problem is compounded by the fact that chip+PIN with curve results in endless DCC prompts where the terminal is bent on charging in GBP using some insane exchange rate
For me in the Netherlands it seems to already kind of work like this for my Curve card.
Two weeks ago within a matter of minutes I made:
a transaction of €150, paid contactless, POS terminal asked for PIN but not to insert my Curve card;
a transaction of €100, paid contactless, POS terminal asked for PIN but not to insert my Curve card;
a transaction of €50, tried to pay contactless, POS terminal rejected. No reason given on the POS terminal, nor in the Curve app. Then I inserted my card into the terminal and used my PIN, transaction went through successfully.
I made these transactions before Curve dropped the five transaction limit, but can’t remember if the rejected transaction was the fifth contactless in a row.
But if it was and the transaction was rejected for this reason I agree with @megamaster that it shouldn’t have been rejected, because I used my PIN (though not the chip).
Thank you for this change, the 5 transaction limit was really frustrating. I mostly use ApplePay, but occasionally it’s more convenient to just use contactless, however it felt like I would reach the limit at the least convenient times. It sounds like this change should make it less frustrating.
Both of these issues seem to be due to having a U.K. card BIN, and therefore a card which follows standard U.K. rules. For historical reasons, we use “Offline PIN” in the U.K. (this means that the chip on the card itself, not the bank, verifies if the PIN is correct) rather than “Online PIN” (which many other European countries use; the bank stores the PIN in this case and verifies whether it is correct or not as part of the transaction authorisation).
Online PIN allows for contactless + PIN as an authentication method but Offline PIN doesn’t (it can’t do, since the bank has no ability to reply with whether or not the PIN is correct and if the Chip is not inserted it can’t be read, so the chip can’t verify it either unless inserted).
DCC will again be because your card BIN identifies as British so the terminal “thinks” you want to pay in pounds.
Curve do issue some cards with local BINs, but I don’t think local BIN cards have been rolled out across Europe yet. It may be that they aren’t yet available in Portugal, or if they are it may be that your card is fairly old and dates from before they were available. I am sure a Portuguese BIN card would be fully set up for Online PIN and would therefore work as expected with contactless terminals. The decline + Chip & PIN procedure is “expected behaviour” for a British card as that is how all cards currently work with SCA and offline PIN.
That’s a very nice reply, thanks! I knew UK cards worked like that but didn’t know or consider it could be due to the online/offline situation. My card actually just expired and the replacement never arrived. I already have a ticket open about that for several weeks now…
i understand what you’ve written here, but i don’t really understand why curve has made this change. nonsense that i cannot make a single transaction bigger than 10600 huf (=29 eur!) without chip+pin, why has the card contactless function then? funny that according to hungarian regulations you can make contactless payments under 15000 huf even without pin code! curve’s killed contactless in hungary, this change is the weirdest i can imagine, doesn’t make any sense to me. ok, i mostly use the card with apple pay, but making the physical card so unusable is very strange to me
btw i have a hungarian bin card, we definitely have online pin here, but it doesn’t matter: i’ve tried to make a 13980 huf (so bigger than 10600) paypass purchase, i’ve immediately received the “nonono, you have to use chip+pin” notification