Quantcast StorefrontBacktalk » Blog Archive » Bribes Make Citibank India’s NFC Trial Work Well
advertisement
advertisement

Bribes Make Citibank India’s NFC Trial Work Well

Written by Evan Schuman
March 10th, 2010
Like this story? Share it
To share this story with people in your social network, please click on the network icons below.

In a major near-field-communications (NFC) trial in India—one lasting six months (ending last month) and involving more than 3,100 consumers, 44,000 transactions and more than 26 million India Rupees (about $573,000 U.S.)—Citibank saw how extremely willing consumers in Bengaluru were to use NFC to make purchases. That is true, of course, as long as the bribes are substantial.

Not only is this the most extensive NFC trial we’re aware of, but Citibank and some key technology partners have issued a 37-page report detailing the study’s results, warts and all. One key partner, for example, was Nokia. It provided the phones that consumers, according to the report, found to be “well below their expectations.” Other partners included Vodafone, MasterCard, Vivotech and the company that prepared the report, Edgar, Dunn & Company.

The sections describing the bribes and how consumers reacted to those incentives were the most interesting. In India, it’s typical for consumers to purchase their phones, as opposed to having them bundled in with their wireless carrier’s services.

The Nokia 6212 used in the trial has a list price of $240; trial participants paid $110. But if the consumers made 12 purchases, they got to keep the phone for free. With six purchases, the phone’s cost dropped to $55. Some retail participants—including QSR Subway, supermarket Nilgiri’s, food and grocery outlets M.K. Retail and Reliance Fresh, Landmark book shops and fashion accessory retailer Shopper’s—offered special discounts, as well.

Some 86 percent of participants made more than 12 purchases and, therefore, got the phones for free. The report dubbed the 18 percent who made exactly 12 transactions “gamers, customers who want to participate at exactly no cost to themselves.” The report even allowed for a modified gamer category, perhaps one that might be called the Wants-To-Be-Really-Certain-Gamer: “It is possible that those with 13-transactions-only were also gamers and made just one more transaction to ensure that they definitely qualify for the full incentive.”

Gamers or not, the change in purchase behaviors noted in the report were swipingly eye-opening. The study used some 32,620 consumers who opted to not participate in the NFC trial (dubbed, logically enough, non-adopters) as the control group, to see if those consumers would have—in that economy during those months—made more purchases anyway. It compared them with consumers who were lobbied to join the trial (solicited-adopters) versus those who simply walked into the store and purchased the phones on their own (self-adopters).

While the non-adopter control group made 7.1 percent in additional purchases (compared with earlier months) during the trial’s six month duration, the number of purchases by solicited-adopters almost doubled (a 96.3 percent increase) and the number of purchases by self-adopters grew a staggering 329.1 percent. When looking at ticket size, the details show an almost identical pattern, albeit not as dramatic. Non-adopters grew their purchase value 11.9 percent, with solicited-adopters growing 55.5 percent and self-adopters increasing their receipt value 231.6 percent.


advertisement

Leave a Reply

Newsletter

Quickly catch-up on the latest in E-Commerce and Retail Tech with our free weekly newsletter, with urgent bulletins as news merits.
advertisement

Most Recent Comments

Kill All The Passwords

This article does mention, but does not give enough attention to, the fact that the attacks discussed are only feasible when the encrypted password file can be copied and subjected to an offline attack. The trick is to have authentication performed on a separate, much more strongly secured host - such as an Active Directory Domain Controller, or a Kerberos server, or a NIS+ server, or even using something as banal as an LDAP-over-SSL authentication dialog. In these environments, the odds of the "password file" being stolen and subjected to an offline attack go to near zero, and only online attacks may be carried out by the attacker. With sensible exponential backoff between failed password attempts, lockout after a modest number of failed attempts on a single account, and pattern detection, that minimum 7 character password is quite secure enough. Passwords aren't dead yet for security purposes, and they will be with us for a very long while to come for practical purposes. The trick is to employ them correctly. Read more...
The possibilities you describe are years away from being implemented at best, so for the moment passwords are an ugly reality. Luckily, password managers can easily manage hundreds of passwords of any length. The only thing a user needs to remember is the master password. It seems like an easier task to educate users on how to use password managers rather than implement complex security technology on a global basis. Read more...