Starbucks Expands Mobile-Payment Service Using Bar Codes

Apr 2 2010

Large coffee shop chain Starbucks has announced it is expanding its iPhone mobile-payment service, enabling consumers to pay for their caffè lattes or caramel macchiatos by flashing a 2-D bar code on their phone screens.

The huge chain, which has more than 16,600 stores globally, most in the United States, announced yesterday it has expanded the mobile service to more than 1,000 U.S. outlets, located within Target discount retail stores. All are equipped with scanners to read 2-D bar codes that link to customers' prepaid Starbucks Card accounts.

The bar-code technology is an alternative to Near Field Communication, which requires handsets equipped with NFC chips–of which there are few available. The Starbucks m-payment service only requires the user to own an Apple 3G iPhone.

But among other things, payments and NFC industry observers point out that the service also requires expensive 2-D bar-code scanners in every store, and the technology is less secure than contactless chips.

Consumers can download the Starbucks Card Mobile app to their iPhones or iPod touches for free to use the payment service. The application also enables them to check their card-account balances and easily reload value into the accounts over the mobile network using preregistered credit cards. A separate app offers a store-locator service. Starbucks launched a trial of the mobile-payment app last fall in 16 stores in its home base of Seattle, Washington, as well as Northern California.

Contactless-Free Shops
The nationwide expansion–although amounting to fewer than 10% of Starbucks locations in the U.S.–is significant, and the chain is likely to expand further and branch out to other phone models, such as BlackBerrys or those supporting the Android operating system. And if Starbucks becomes attached to using bar-codes for payment, it could pose a challenge to NFC and other contactless-mobile technology.

Starbucks has resisted attempts for years by Visa Inc. and MasterCard Worldwide to convince it to accept contactless payment at its U.S. stores, in large part because it promotes its own prepaid store payment or gift card, said a source. If Starbucks were to invest in contactless terminals to accept cards and, later, mobile-contactless payment, it would do so to support the Starbucks Card, not Visa’s contactless application payWave or MasterCard's PayPass, said the source. But Starbucks has yet to install any contactless terminals in the U.S. to support its closed-loop payment scheme. Some Starbucks in a handful of countries outside of the U.S. do accept contactless payment, including payWave and PayPass.

As for NFC, there are still few phones available that support the technology. Meanwhile, bar codes are already used for mobile couponing and ticketing, since most phones can support the technology. A key reason mobile couponing hasn’t taken off, however, has been the cost of getting the scanners installed at the retail point of sale, say observers. Scanners that read UPC product bar codes often cannot read 1-D bar codes on phone screens. In addition, screen resolution differs among phone models.

For example, one U.S.-based loyalty-system provider, Tetherball, abandoned bar codes in favor of contactless stickers for its offer to fast-food chains and similar merchants, calling contactless more quick and reliable than bar codes.

But screen resolution is not a concern for Starbucks, which is offering the mobile-payment service only on iPhones, at least for now. It is also using 2-D barcodes, which can store more data than conventional bar codes. This requires higher-end optical scanners, however.

“It’s rather costly on the equipment side,” said Charles Walton, executive vice president and chief marketing officer at France-based chip supplier Inside Contactless, told NFC Times. That’s one reason it’s unlikely bar-code based mobile payment will spread broadly across retail chains, he contends.

But he said he doesn’t believe Starbucks’ use of bar codes will hurt prospects for mobile payment using NFC phones, contactless microSD cards or stickers consumers can attach to their handsets.

“I think what it does is it begins to move this whole industry to phone-based stuff for consumers,” Walton said.

Stealing Bar Codes
Still, mobile couponing using bar codes is one thing, payment is another. Security becomes more important when consumers are spending money. And although Starbucks Card accounts are strictly prepaid and can only be used at Starbucks cafés, the risk of losses from fraudsters attacking mobile-payment applications are obviously greater than for mobile coupons.

Mobile payment from NFC phones or other contactless chips in phones would be much more secure than bar codes because bar codes are easy to copy, noted NFC industry observers. A fraudster would basically just have to take a picture of the bar code to copy it.

"2-D bar codes have no encryption," Einar Rosenberg, CTO of NFC application house Narian Technologies, told NFC Times. "If it (bar code) doesn’t change dynamically, the bar code image could be easily stolen and taken into Photoshop to create a fake image that you could load up on your iPhone and, therefore, steal somebody’s money."

The Starbucks Card Mobile App could include a feature that changes the bar code images frequently to deter cloning. But if the changes are sent over the network, the effectiveness of the dynamic security would depend on the network connection, said Rosenberg. In any case, 2-D bar codes are not even as secure as magnetic-stripe payment cards, which are often copied.

“(There is) no authentication of either participant of the transaction possible without some form of network-based authorization,” said U.S.-based payments specialist Patrick Gauthier, formerly senior vice president for innovation for Visa International. "So your security with a 2-D code is about as good as what you get with mag-stripe (cards) without the benefit of the issuer-supplied cryptogram."

He added that no bank or open-loop payment card network, such as Visa or MasterCard, would support putting full track-2 magnetic-stripe data, including the cryptogram, in a 2-D bar code because of security concerns. "For that reason, I am highly skeptical of the Starbucks solution for anything other than a closed-prepaid product," said Gauthier. 

Starbucks Card Mobile accounts can be reloaded automatically from registered credit cards, which could create more losses if accountholders didn't report their phones–or bar codes–lost or stolen. Starbucks did not immediately respond to a request for comment on the security issues involved with the bar code-based payment. In its press material, the chain does say customers can lock their apps with a pass code.

The Bar-Code Challenge
Gauthier does see QR codes and other 2-D bar codes possibly challenging NFC. For example, 2-D bar codes could take the place of NFC’s service discovery mode, in which NFC phone users can tap their phones against RFID chips in smart posters to download data or open an Internet connection. This would require new phones packing NFC chips and posters embedded with RFID tags.

Instead, with most any camera phone, users can snap a picture of a 2-D bar code printed on a billboard or product package. They send the image over the network, where it’s checked against an online database. Requested data, such as arrival times for buses or companies located in a particular building or a list of pesticides used in the growing of a farm product, get sent back to the phone. QR, short for “quick response,” codes are popular in Japan among mobile subscribers. 

But using bar codes are more time-consuming than tapping NFC phones. Subscribers have to open the bar-code application, take the picture and hope the network isn’t already overloaded with data traffic, said Gauthier. He believes bar codes and contactless-mobile technology will likely coexist, as they do today in Japan.

“So while Starbucks’ (mobile-payment) expansion is great news for iPhone and coffee lovers, I don’t think it is very relevant in the long run,” Gauthier told NFC Times. “My sense, though, is that if logic prevails you will see a combination of 2-D and NFC.”

But bar code-based mobile payment does have one advantage over NFC. The technology is on the market today. Whether Starbucks sticks with it or eventually moves to NFC or any other mobile-payment technology will likely depend on just how fond customers become of paying for their lattes with their mobile phones. 

HEADLINE NEWS

First Transit Agency to Sell Tickets Through Uber App Sees Relatively Few Takers Two Years on

Apr 21 2021

NFC TIMES Exclusive Insight – The Regional Transportation District of Denver was the first transit agency to work with Uber to sell its bus and light rail tickets through the Uber app in the spring of 2019. RTD later that year expanded the service to trip-planning app Transit and then last fall to the app for another ride-hailing service, Lyft.

Sydney to Test Multimodal Payments Involving Private Mobility Providers Using Digital Closed-Loop Card

NFC Times Exclusive Insight – A trial to be held later this year in Australia’s largest city, Sydney, if it proves successful, could offer one example for how agencies can encourage customers to take multimodal transport combining public and private operators. The economics behind the New South Wales government’s trial offer are unclear, however.

Rome Transit Operator: Covid Accelerates Demand for Contactless Payments but Customer Habits Hard to Change

NFC TIMES Exclusive Insight – The CIO of Italy’s largest public transit operator, ATAC SpA, said the Covid-19 pandemic has accelerated demand for open-loop contactless and mobile payments, but added that old habits are hard to break for customers and use of cash and paper tickets are still popular.

Dubai Transit Authority Plans to Launch Its Closed-Loop Card in More NFC Wallets

NFC TIMES Exclusive Insight – Dubai’s Roads and Transport Authority, or RTA, which in December first launched mobile fare payments with a digital version of its closed-loop card in Huawei smartphones, says it plans to expand the service to other OEMs, including Apple and Samsung.

Case Study: Transit Agency in Portugal Combined NFC with BLE for Mobile Ticketing; Faced Challenges

NFC TIMES Exclusive Insight – The agency that runs ticketing for 19 public bus, tram and train operators serving Porto, Portugal’s second largest city, says it has had success–and faced several challenges–with the rollout of its Anda mobile-ticketing app.

OMNY Hits New Usage Milestone as Open-Loop Payments Rollout Continues

NFC TIMES Exclusive Insight – New York’s Metropolitan Transportation Authority, or MTA, says it continues to see steady growth of its open-loop fare payments service, OMNY, announcing 50 million taps by customers using NFC wallets and bank cards to ride the massive New York City Subway and the city’s buses.

In-Depth: Contactless Open-Loop Pilot in Spain First Project from Vendor Partnership

Mar 11 2021

NFC TIMES Exclusive Insight – Bilbobus, which operates bus service for the city of Bilbao, in northern Spain’s Basque region, says it launched its recent trial of con

Moscow Metro Plans Rollout of ‘Face Pay’ Technology for Fare Collection

NFC TIMES Exclusive Insight – The Moscow Metro plans to roll out facial-recognition technology at every station by the end of 2021 to enable customers to pay fares, officials say. The project, while delayed, would be the largest of its kind globally.

Stockholm Transit Agency Launches Open-Loop Fare Payments for Multimodal Rides

NFC TIMES Exclusive Insight – Stockholm Public Transport, or SL, the city-owned company that oversees major public transport in the city, is the latest agency in Europe to launch open-loop fare collection, offering multimodal rides with a tap of a contactless EMV bank card or NFC device.

Case Study: Amsterdam Transit Operator Seeks to Go Nearly 100% Digital for Ticketing to Cut Costs and Enhance Service

NFC TIMES Exclusive Insight – GVB, Amsterdam’s largest public transit operator, says it seeks to replace an aging closed-loop fare card system and go to open-loop and other digital tokens with the planned rollout of its new account-based ticketing system.

Google Announces Plans to Enable Public Transit Ticketing in Maps App along with Rollout of Parking Fare Payments

NFC TIMES Exclusive Insight – Google has announced plans to launch public transit ticketing for more than 80 cities globally in coming weeks from its trip-planning Maps app and also to enable users to buy virtual closed-loop fare cards–starting with the Clipper card in the San Francisco Bay Area–directly from the app. That’s in addition to enabling payments for parking in more than 400 U.S. cities.

UPDATED: U.S. Federal Government Awards Grants to Help Transit Agencies Roll Out Contactless Payments and Mobile Ticketing

Feb 18 2021

NFC TIMES Exclusive Insight – U.S. public transit agencies have been keen to remove cash and paper tickets from their buses and trains and to keep more distance between customers and agency staffers because of the Covid-19 pandemic. Now they are getting a new boost from the U.S. federal government in the form of grant funds to enable them to enhance contactless and mobile payments systems, among other measures.