If you missed MineSec and OpenRice's webinar on the revolutionary concept of Tap to Own Device (TTOD)—a game-changing technology transforming consumer transactions, ownership models, and digital payments, watch it on-demand now!
Whether you're an ISV, fintech innovator, merchant, or technology enthusiast, this session will provide valuable insights into the impact of TTOD and how businesses can leverage it for growth.
This webinar was first broadcasted on 7 May 2025.
Every effort has been made to ensure accuracy across the webinar content and Q&A as of that date. Subject to change as new data or guidance becomes available.
Questions & Answers
- Is there a transaction limit for Tap to Own Device (TTOD)?
The transaction limits for TTOD follows the contactless payment limits set by different countries and jurisdictions and will therefore differ. - What are the secure security measures in place for TTOD?
The security of TTOD is maintained through a multi-layered approach involving the industry-wide standard PCI MPoC and at times, card scheme-specific certifications. The PCI MPoC certification ensures the software meets specific security requirements for payment acceptance. Different card schemes may also have their own specific test plans, designed to validate the security and functionality of the TTOD technology according to each scheme’s rules. - What are the implementation options for this: a standalone APK accessible through deep linking, or an embeddable SDK?
At MineSec, our solution offers flexibility. You can either integrate it as a standalone APK, triggered via deep link, or embed it as an SDK within your existing application. The choice depends on your architectural preferences and the level of interaction required within your core application. We can discuss which approach best aligns with your development resources and long-term maintenance strategy. - Does TTOD work on iOS?
TTOD technology is currently supported only on Android operating system. - Is the solution PCI MPoC certified?
Yes, it is PCI MPoC certified. - Is TTOD designed for small and medium sized enterprise or large enterprises?
TTOD, and SoftPOS, is suitable for enterprises of any size and not confined to a specific segment — its flexibility and scalability make it an excellent fit for both small businesses seeking simplicity and agility, as well as large enterprises aiming for scale, innovation, and operational efficiency. - When will TTOD be available in other countries?
TTOD is currently being piloted in various countries by Visa and Mastercard. To find out more, please contact your local Visa or Mastercard representative. - How do we apply to be a part of Visa’s or Mastercard’s TTOD pilot programmes? What are the requirements we need to meet to be eligible for the pilot programmes?
To learn more about applying to the pilot programs, please contact your local Visa or Mastercard representative. As an existing partner, MineSec can also collaborate with you on your participation in these programs. - Do you accept PIN for TTOD?
Yes, MineSec's SoftPOS solution supports secure PIN entry directly on the device screen, enabling merchants to process all types of contactless transactions - including high-value ones - without needing external hardware. This ensures a seamless and compliant payment experience for both merchants and their customers. - Have there been any chargebacks, for instance, claims of "service not provided" or similar issues?
With TTOD, because the physical card is required for payment processing, it's categorized as an offline or "card-present" transaction by networks like Mastercard, Visa and Amex. They have confirmed this classification. This offline nature inherently reduces the risk of online payment fraud and potential chargebacks, making it a more secure approach. - What are the benefits of TTOD for merchants?
For merchants, TTOD offers a significant advantage. While online transactions are normally charged with higher Merchant Discount Rates (MDR), TTOD presents a hybrid solution. Although the user journey starts online, the physical card is presented at the point of payment. This allows card schemes to classify it as a "card-present" transaction, enabling the application of lower offline MDRs. This shift from a "card-not-present" to a "card-present" transaction results in substantial cost savings, benefitting both the merchant and the Payment Service Provider (PSP). - If the SDK is embedded into a large business application, does it affect business app in term of scope of import certification?
No, MineSec SoftPOS SDK will take care of the secure card reading and data encryption, it will not affect the scope or logic of the business application. - Do consumers need to download and install the OpenRice app to have this TTOD payment features or can they just get a link from the merchant to pay by TTOD?
Yes, the TTOD solution is integrated in our OpenRice Pay. The user experience with OpenRice Pay involves the user using the OpenRice app to scan a merchant-provided QR payment code (e.g. for HKD500) using the OpenRice app. This initiates an online payment flow within the app, culminating in the user tapping their physical card to complete the transaction.
Regarding remote payments (e.g. from an IG shop or office), merchants have inquired if they can simply share their QR code for remote scanning and payment. Technically, this is possible within a short timeframe. However, the payer must have the OpenRice app to initiate the payment flow and ultimately tap their card. Therefore, while a QR code can be shared, the payer needs the app to complete the TTOD transaction. - Does OpenRice need to be an acquirer or PayFac to be able to process TTOD transactions?
OpenRice is an acquirer/payfac and a payment service provider, supporting a wide range of payment methods. This includes credit cards like Visa, Mastercard, China UnionPay, and American Express, as well as various QR-based payment solutions. While we continue to utilize traditional payment terminals, we've expanded our offerings with the enhanced flexibility of SoftPOS. - Is the terminal in TTOD an online POS terminal or a physical POS terminal?
That's right. The terminal for TTOD is simply a standard Android smartphone with NFC capabilities and an internet connection. The underlying SoftPOS technology is designed to function on any standard NFC-enabled Android phone. - Have you expanded beyond the Asian market? Are you currently operating in any European country or conducting any pilot programme in Europe?
MineSec has a significant global presence, with deployments in over 35 countries across Asia Pacific, Europe, the Middle East, and South America.
OpenRice has plans to expand its services, including this payment solution, beyond Hong Kong. While expanding services like table booking to Southeast Asia and the Greater Bay Area is underway, payment solutions face more complex challenges. This is due to the need to investigate and comply with diverse payment regulations in each new country. It's a more intricate process, for which OpenRice is actively exploring solutions for international expansion.