Leandro Pinheiro is the co-owner of Lux’s Semi Joias, a jewelry store in Sao Paulo, Brazil. Here, Leandro shares his Cashless Pioneers story with MasterCard and how chip & PIN card readers have brought peace of mind for his company and customers.
My name is Leandro Pinheiro and I own a fashion jewelry store called Lux’s Semi Joias. Being an entrepreneur is second nature to me. When I was ten years old, I saw an opportunity to sell chocolate bars to my classmates because my school, at that time, didn’t have a cafeteria. Since then, I never stopped seeking out opportunities to pursue different business ventures.
Lux is a young, flexible and agile company that adapts to an ever changing industry, while relying on a solid backbone based on our more than 15 years of experience direct selling in the beauty and wellness sectors.
We offer our products on consignment, requiring no initial investment from our sales representatives, who receive full support and materials free of cost.
Each sales rep is equipped with a Payleven chip & PIN card reader and their customers can pay their purchases in up to three monthly installments at zero interest. For many of our sales reps this is an opportunity to create another stream of income. Most of them have a salaried job in addition to working for us, but for some, Lux is their main source of livelihood.
We’ve accepted payment cards since day one, which has been crucial to the success of this company. Replacing traditional terminals for Payleven’s readers has brought a lot of benefits. Our current readers are free of monthly rental fees and we can better direct that money to invest more in the company itself, in improving our catalog and our online store.
We have a team of 40 employees and expect to reach 60 by year-end and set to implement an integrated management system, which should enable sales reps to self-serve and place orders directly into the system. After we roll out our virtual store, they will also be able to sell online and get a commission for their sales.
15 Comments
I used Master card for my business, I ask my customer to pay with Master card.
thank you
Thanks mastercard.com blog team
Thank you for sharing such a creative post as per your interest. It’s nice.
Thanks for sharing the information
Selling jewelries is always risky specially when it comes to payments. Using cards and pin is the secure way of receiving payments.
Dies ist eine sehr interessante Geschichte. Danke für das Teilen. Ich möchte Ihnen einen einfachen Weg zeigen, um Geld zu verdienen. Dies kann durch Spielen von Online-Slots erfolgen. Versuch es.
writing the information on smart cards (smart card reader/writer devices and blank smart cards
Thanks for sharing the information well post
While researching malware for ATM jackpotting used by a Brazilian group called Prilex, our researchers stumbled upon a modified version of this malware with some additional features that was used to infect point-of-service (POS) terminals and collect card data.
This malware was capable of modifying POS software to allow a third party to capture the data transmitted by a POS to a bank. That’s how the crooks obtained the card data. Basically, when you pay at a local shop whose POS terminal is infected, your card data is transferred right away to the criminals.
However, having the card data is just half the battle; to steal money, they also needed to be able to clone cards, a process made more complicated by the chips and their multiple authentications.
The Prilex group developed a whole infrastructure that lets its “customers” create cloned cards — which in theory shouldn’t be possible.
To learn why it’s possible, you might first want to take a quick look at how EMV cards work. As for the cloning, we’ll try to keep it as simple as possible.
So, we have a card that is capable of running applications, and during its first handshake, the POS asks the card for information about the apps available to it. The number and complexity of steps needed for the transaction depend on the available applications.
The card-cloners created a Java application for cards to run. The application has two capabilities: First, it tells the POS terminal there is no need to perform data authentication. That means no cryptographic operations, sparing them the near-impossible task of obtaining the card’s private cryptographic keys.
But that still leaves PIN authentication. However, there’s an option in the EMV standard to choose as the entity checking if the PIN is correct…your card. Or, more precisely, an app running on your card.
You read that right: The cybercriminals’ app can say a PIN is valid, no matter what PIN was entered. That means that the crook wielding the card can simply enter four random digits — and they’ll always be accepted.
The infrastructure Prilex created includes the Java applet described above, a client application called “Daphne” for writing the information on smart cards (smart card reader/writer devices and blank smart cards are inexpensive and completely legal to buy.) The same app is used for checking the amount of money that can be withdrawn from the card.
The infrastructure also includes the database with card numbers and other data. Whether the card is debit or credit doesn’t matter; “Daphne” can create clones of both. The crooks sell it all as a package, mostly to other criminals in Brazil, who then create and use the cloned cards.
What a fresh start with this content. Thanks
Love the whole setting. Thanks
Like if you want me wear clothe according your likes, i’ll put on
Hey! Quick question that’s completely off topic. Do you know how to make your site mobile friendly? My site looks weird when browsing from my iphone 4. I’m trying to find a theme or plugin that might be able to resolve this problem. If you have any suggestions, please share. Appreciate it!