Caroline Cypriano

speaker

273 appearances 1 recordings 1 series first heard Apr 2026 last heard 9 Apr

Caroline Cypriano’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 1 in all, peaking in Apr 2026 with 1.

Appearances

newest first · ▶ plays the moment

Off the Rails from the U.S. Faster Payments Council - FPC · 9 April 2026 Caroline Cypriano of JJ4Tech on QR Codes, Transaction Monitoring, and Surfing · 9 Apr 2026 podcast

I've got to put a little bit more of light into the QR code subject.

So the question isn't whether QR codes introduce risk.

It's whether they are more or less secure than the alternatives that we have.

And increasingly, the answer is that they can be a lot more secure.

So from a standards perspective, and I know that we were talking about standards before, so I think this

it is good to highlight how standards can actually make the QR code technology safer, right?

There's a significant amount of work being done to ensure QR code safety.

So X9 is also developing standards like X9-148 and X9-150, which are designed to bring cryptographic security and interoperability to QR code payments.

So one important concept here

is the use of public key infrastructure, also known as PKI, right?

So in simple terms, this is a private key issued by a trusted authority.

And when it's scanned, the receiving application can verify its authenticity

Using a corresponding public key.

So this means you're not just scanning a static image, you're interacting with a verifiable trusted payment payload, which significantly, significantly, God, I'm having trouble with the big words today.

reduces risks like code substitution or tampering.

And I think that beyond that, the standards and implementations include also multiple additional layers of protection.

At the technical level, you have mechanisms like

check sums to detect data corruption, validation of the payment payload, and safeguards such as timestamping and reuse prevention.

So at the application level, you also have financial institutions that can apply behavior analytics and anomaly detection to identify suspicious activity in real time.

And also importantly, modern QR code implementations are increasingly real agnostic, but bank mediated.

Showing 81–100 of 273 · page 5 of 14