ACH Advances
MPR Advises MCA Companies to Perform Penetration Tests
November 20, 2012The Merchant Cash Advance (MCA) industry is riding high from a stream of recent publicity and investor interest. Billions of dollars are pouring into the market and some companies are desperately trying to upgrade their software platforms to keep up with the growth. With more exposure comes new curiosity, and not all of it is positive.
There is no widely used software platform in the MCA industry, which is a good thing and a bad thing. It’s bad in the sense that each company has more or less created their own database system, increasing the odds that some companies will have security flaws. It’s good in the sense that if one company suffers some kind of breach, the method used should not be applicable across the entire industry.
Don’t worry, we’re not posting this to scare merchants. In fact, we don’t recall a single MCA firm ever having suffered a public data breach, a statistic unheard of in other industries. So why bring it up? As MCA firms collect more data and handle more money, the more likely they will become attack targets by hackers. The more valuable the stash, the more sophisticated the attacks. Major players like Heartland, TJX, and Global Payments have had sensitive information compromised on hundreds of millions of customers. The moral of the story? Prepare yourself as much as you can.
If you think it can’t happen to you because your system was developed by a third party, you’re wrong. It’s time to get tested. A Penetration Test, as defined by wikipedia is:
a method of evaluating the security of a computer system or network by simulating an attack from malicious outsiders (who do not have an authorized means of accessing the organization’s systems) and malicious insiders (who have some level of authorized access).
Some may be inclined to compare a Pen Test to sitting in the waiting room of Student Health Services. You’re scared of what they might find and maybe you’d rather not know, but not getting tested at all is the worst thing you can do.
One such Pen Test was performed by an MCA firm months ago that had just purchased a customized software system from a third party. We will not name the firm or the software provider.
After a year of designing, testing, and writing fat checks to a prestigious group of software developers, the MCA firm had finally implemented a state of the art system that would propel them to the next level. After a month of using it, they asked a new hire to do some tests to make sure all of the basic features were working. The bells and whistles were decked out to the nines but no one had tested the easy things like going through the motions of resetting their password if they forgot it.
The new hire noticed something slightly off with the basics and reported his findings to the executives. Interested, but not really worried, they gave him permission to act as if he were a disgruntled employee. Turnover was high in the telemarketing department and there was occasionally a person that would shoot off a couple of dumb e-mails on their way out. But now with a system in place, could they do real damage?
The disgruntled employee test was really a simple Pen Test and this firm is eternally thankful that it performed one. Within 7 minutes, the new hire was able to access and modify every piece of data in the system. He was able to exert administrative power without having administrative level access. The worst part of what he did? There was no way to prevent against this mess because of how the software was coded. The best part of what he did? It was only a test and all modifications were immediately reversed.
It took a long time for the MCA firm to take a corrective course of action. Whether they ended up patching the software or tossing it altogether, we won’t say. What’s important is that they were able to identify these flaws on their own and early on. Many companies in this industry have long-term funding projections that exceed $1 billion. At that size, there will be much more to worry about than disgruntled employees. The bad guys will be lined up around the block in cyberspace trying to get in. SQL injections, buffer overflow attacks, DDoS Attacks, and much more will be lighting up those systems on a daily basis. Most MCA account reps advise their merchants about PCI compliance, but today we’re reminding you to take your own advice.
Resources:
In-house Penetration Testing for PCI DSS
Penetration Testing Guide and Samples
Security Assessment-Penetration Testing and Vulnerability Analysis
Cost of a Data Breach
Estimate Your Risk Exposure
Global Payments Breached
Pass it on.
– Merchant Processing Resource
https://debanked.com
Betting on the Future With Merchant Cash Advance
November 14, 2012
An excerpt of the article in ISO&Agent’s November/December 2012 Issue:
“The business of merchant cash advances is changing, and ISOs are finding they need to do the same to keep up.
Long considered a niche product ISOs could rely on to add value to a contract, today’s cash advance market is highly competitive and heavily saturated. The situation creates a tradeoff for ISOs. On one hand, more merchants are aware of cash advance, which means there’s more demand for it. At the same time, more financial services providers are offering it, and that means greater competition.
With credit card companies offering cash advance and alternative lending, it can be tougher for ISOs to build loyalty among the merchants who receive them, ISOs and merchant cash advance providers say. ISOs might also have to overcome the negative reputation merchant cash advance has in some circles.
ISOs should rethink their strategies and stay on top of merchants when it comes to cash advance, says Sean Murray, CEO of Raharney Capital, a New York consulting firm that caters to merchant cash advance companies. “You know the saying, ‘Always be closing?’ Well, you should always be offering merchant cash advance,” he says.
It’s not uncommon for an agent to offer a merchant cash advance in January, then come back to try again in March only to find that 10 other ISOs hit up the merchant in February, Murray says. “You can’t just throw it in there casually every few months. Everyone is marketing cash advance,” he says.
But opportunities arise…”
Read the full article in the November/December magazine available on the site.
It requires you sign up for a FREE subscription
Forward?
November 8, 2012The election is over and now it seems we will be “Moving forward, not back.” The republicans that have already come to accept Romney’s defeat are sounding a lot like Sookie Stackhouse:
Onwards we go to help the little guy, a process many feel can’t happen until we end trickle-down economics. It’s the trickle part that doesn’t sound good. Money should flow freely gosh darn it, not trickle! We couldn’t agree more. Here’s a broad diagram of the economy at work:
It’s popular to hate Wall Street, but Wall Street provides small businesses with financing to expand, who in turn employ more people in the process. Wall Street is not just banks and Merchant Cash Advance companies. It is any party that has enough money to invest in others while being able to absorb potential losses. A private investor is Wall Street. Wealthy friends or family members are Wall Street.
Tax these parties more and there is less money to invest in small businesses which means fewer businesses will receive capital to expand and hire. Wall Street will make less money as a result of less money being invested and therefore tax revenue will decrease. With fewer businesses hiring, less people will be employed and therefore less people will be paying taxes. Taxing Wall Street more does not necessarily mean more net tax dollars.
This Darn Trickle
One can dislike the economic chain since the flow of money between parties may not happen perfectly or because it allows Wall Street to get richer. There is nothing wrong with the rich getting richer, so long as the middle class and poor get richer too. If small businesses use the money invested by Wall Street wisely, they too will eventually become Wall Street. The amount of new jobs created as a result of a small business’s success means more wage earners will have a shot at becoming small businesses. In economics, a wide divide between rich and poor can be positive, for it creates a ladder that anyone can climb with no cap.
Empower the Little Guy
There is a competing theory and that is to believe that the economic chain starts with middle class wage earners. One could argue to significantly lower taxes on the middle class and the poor and impose much higher taxes on the rich. By doing so, consumers would have more money to spend at small businesses, prompting those small businesses to draw up plans to expand. That expansion capital still needs to come from somewhere and less of it will be there if Wall Street has been further taxed. Perhaps a small business could save money for a few years and use their savings to self-finance their own expansion. Under this theory, everyone becomes part of a very broad middle class. The extremes disappear.
Whoops
When the extremes disappear, there will be few investors with the capability to make large investments or investments that are particularly risky. A small business owner could save up for several years and open a 2nd location without an investment, but could he open 200 nationwide? Not without Wall Street. How many jobs will be created by the opening of 1 store? How many would be created by the opening of 200?
Now calculate how much new tax revenue is generated in each scenario, as well as the number of people that move up from being poor and unemployed to middle class and employed.
When the rich aren’t getting richer, the other classes can’t really move up either. Everyone stays in a broad middle class and innovation and advancements decline. The consumer or small business owner with a potential $100 million innovative idea won’t be able to raise the capital to see it through. How can they when the rich have been prevented from becoming really rich? What if they had a $10 billion idea?
One could argue as a single class society, that a $100 million idea or $10 billion idea could be financed by the government. This is true. It is also textbook state socialism. A one class society is also the premise of Marxism, where everyone is getting their needs met through cooperative work.
Marxism ignores the realities of a global economy. Ultimately, Americans need to obtain resources from other nations, and stay ahead technologically so as not to be conquered by outside forces. A classless society is a stale society, with no economic movement, social movement, or technological advancements.
How will the Merchant Cash Advance Market be Affected?
Merchant Cash Advance companies typically invest in businesses with less than 50 employees. Under Obamacare, any business with less than 50 employees does NOT HAVE to provide health insurance. This program may not affect the business as a whole, but the law mandates that all individuals purchase health insurance for themselves if they don’t have coverage already. Small business owners in the MCA market may be incrementally stressed by having to purchase health insurance. Their employees will be further stressed by having to buy it as well. As a result, wages may need to go up to help workers pay for their own insurance and less money will be available to grow and hire.
The total public debt outstanding has exceeded $16 trillion. That debt has to be paid for somehow and it is more likely than ever that Wall Street is going to have to pay up. This will not stimulate growth and as such, the economy is not likely to pick up any time soon.
Traditional lenders are going to remain quiet while the alternative lenders are going to power through it. A business could save up for three years and open a 2nd location or it could open it today with a Merchant Cash Advance. In three years, the location they want may no longer be available and that individual looking for a job will have run out of unemployment benefits long ago.
A Merchant Cash Advance helps small businesses expand today, hire today, generate more tax revenue for the government today, and helps everyone move up the economic ladder. Baby steps are better than none at all. What starts with a 2nd location may lead to a dream of owning 200 locations nationwide. They’ll need a bigger fish than MCA to get there. Let’s make sure we don’t tax those fish to death.
What do you think Michael?
Forward!
– Merchant Processing Resource
https://debanked.com
Sandy
October 30, 2012deBanked’s office was empty on Monday and early Tuesday morning due to Hurricane Sandy. Instead, we were out dealing with the reality of having no power or water for at least a week. We did survey some damage in east midtown Manhattan, an area where floods exceeded over 5 feet last night on 36th street, completely submerging cars. Floods subsided by morning.
Window washing deck stuck in the trees
a building near the 34th Street Heliport
Stop
Toppled phone booth
Debris
One quote that got us through the night’s harrowing ordeal was a facebook update from Seth Broman, Merchant Cash and Capital’s VP of Business Development:
Dear friends and family, if this is the last communication I have for days with battery % approaching single digits, please make sure that all my rosters are properly updated for the bye weeks, proper waiver moves are processed, I vote against every trade except my own and I’d rather play without a kicker than drop Chicago’s D. Thanks, Seth
We hope everyone is safe. Did the storm affect you?
Traditional MCA Gets a Speed Makeover
October 24, 2012
“How about you fund me first and then you change my merchant account?”
Some account reps will testify that closing a traditional split-funding or lockbox deal can be a bumpy road. The pay-as-you-grow system sounds fantastic over fixed payments until they learn that they have to change their merchant service provider, process sales for two full days, and then wait an extra day for the ACH to arrive in their bank account. The switch could take a few days to several weeks. Have you ever tried to convert MICROS?! A good account rep can keep the customer patient, but that job gets a lot tougher when the fixed daily ACH guys interject right before the contract is signed. We’ll fund you in two days with no processing change required! The customer would have to settle for a fixed daily payment, but that may be secondary to their stress about switching processing before receiving funds. Many things could cross their mind:
- What happens if the download fails?
- What if they say I need a new credit card machine?
- What if my current processor locked my machine with a password? How long will this delay everything?
- What if I don’t process sales every day? Will I need to wait until I have two full days of activity?
- What if there are additional underwriting steps after I switch?
- Are they going to withhold a percentage from my processing before I even get the money?
- How long is this really going to take? I would prefer if I just had the money now and then I’d feel a lot more comfortable doing the rest.
- I kind of need the money by tomorrow, I really can’t risk this taking longer than they expect.
So when RapidAdvance announced their new Rapid Funding Program, we thought, “is this really what we think it is?” We had Sean Murray reach out to Mark Cerminaro, the SVP of RapidAdvance and we learned the program is real. They can and will fund merchants prior to changing the merchant account or setting up the lockbox. In the interim, they set up a temporary daily ACH repayment to protect themselves should the conversion experience any hiccups. Murray asked if this was perhaps a response to the fixed ACH payment phenomenon that has exploded in the last year. Cerminaro responded (We paraphrased some of his words in this story), “Variable payments offer benefits. Many merchants would prefer to set up their financing this way. Some of our biggest resellers still focus heavily on split-funding as opposed to the alternatives. We believe this program will help both them and the merchant.”
With the slew of new players in the merchant financing market, is speed just window dressing for an old product? An article in Upstart Business Journal called MCAs old! The fixed payment merchant loan seems to be all the rage these days, leaving some to wonder if traditional MCA is on the decline. Cerminaro says that assertion is false. “We’ve experienced substantial growth this year on our traditional MCA product, on all of our products actually. When big companies like American Express and Amazon came in offering their own Merchant Cash Advance or loan program, it made merchants more comfortable that our product and similar ones to it are mainstream. The New York Times even ran an article that listed Merchant Cash Advance as an acceptable form of financing for small businesses. This is all making Merchant Cash Advance more attractive than it ever was before.”
On 7/28/11, we penned an article that said the Merchant Cash Advance industry was waiting for its big moment. At that time, we believed the merchants weren’t using Merchant Cash Advance financing simply because they just hadn’t heard of it. It was the hottest thing that no one was talking about. Of course the era of anonymity is gone and businesses are rushing to get funding hand over fist. The only question now is whether or not this will continue to drive rates down. Cerminaro alluded that some funders are undercutting so much that they’re forgetting to price in the risk. Other industry insiders feel the same way and the debate over it has become the most active thread on the recently founded, DailyFunder.com forum.
Contact Mark Cerminaro for any questions or clarifications regarding RapidAdvance’s Rapid Funding Program at mcerminaro[at]rapidadvance[dot]com.
– Merchant Processing Resource
https://debanked.com
Is Google Getting Greedy?
October 21, 2012By now, you’ve probably heard of Google’s earnings release blunder when their financial printer published an unfinished report. That version went viral and was clearly not ready for print since it included a placeholder note that said “Pending Larry Quote,” a space that was reserved for a quotable by CEO Larry Page.
Ad revenue was up 16% for the quarter, a 33% surge over last year’s numbers. But is Google getting greedy? We like to search for MCA industry news and in the last couple weeks, we noticed an interesting “glitch” that started to happen. Approximately 1 out of every 15 times (we didn’t run a statistical analysis), zero results show on the page. It doesn’t actually say “no results found,” but rather looks as if the results failed to load. That is of course except for the ads. The ads conveniently become the only clickable options.
This happens often enough that it has become annoying. We’ve experienced it with multiple browsers and three computers. Has anyone else fallen victim to this glitch?
Perhaps it’s psychological, but it seems like this occurs most frequently on business lending related searches, when the revenue-per-click Google earns just happens to be at its highest. Is Google getting greedy?
Is it Just us or are the Deals Getting BIGGER?
October 15, 2012
Two years ago, it was easy to say that the average Merchant Cash Advance (MCA) deal was about $20,000 to $25,000. The claim used to be, funding up to $250,000! And yet very few companies would actually go that high when it came down to it. But now?
A million here, a million there… It’s all just business as usual. Nothing to see here everybody. Go on Tozzi, write another article about how MCA is for minuscule retailers that can’t get approved for a low limit credit card. Whether you call it MCA, Merchant Financing, or Merchant Lending, there’s no doubt that capital has become more accessible to businesses across the country. And the amounts being disbursed are getting BIGGER.
On October 12, 2012, Rapid Capital Funding (RCF), a mid-sized funder in Miami, FL provided $1,250,000 to a national convenience store chain. RCF published an official company announcement about it, but we actually got wind of the deal a week before it closed. deBanked staff is friendly with the folks at RCF, particularly with their lead underwriter, Andrew Hernandez. Hernandez is an industry veteran, with five years of MCA underwriting experience under his belt. So while RCF hasn’t had the reputation for taking on big paper in the past, we can’t say that we’re shocked that they’re marching down that path.
Other big deals this year in the MCA space:
United Capital Source – $1,250,000
YellowStone Capital – $751,000
Do you think we’ll be seeing more of this? Send us your comments.
– Merchant Processing Resource
https://debanked.com
Legal Questions about Merchant Financing?
October 9, 2012
“Many merchant advance agreements state that the sales agent can only send merchant advance contracts to the one merchant advance company. It is important to identify such exclusivity terms and make sure they are deleted from the agreement. Just to make sure, you would also want to add a provision that states unequivocally that the relationship is non-exclusive. Otherwise, if you send merchant advance contracts to a competitor, the merchant advance company that thinks you are exclusive could use that act as a reason to termination your compensation under the agreement.”
– Paul A. Rianda
Whether you’re an agent, ISO, or funder, you will at some point need sound legal advice. There is very little information on the Internet and hiring an attorney is expensive (though we highly recommend it!). If you feel like you just need a little guidance, we recommend you check out the publications by Paul A. Rianda, an attorney that has worked extensively in the bankcard and merchant financing industry. Below are a few articles that everybody should read:
