|
||||||||||
| Introduction | Overview of South African online payment infrastructure | The law of payment | Online payment systems based on electronic funds transfer principles | Electronic money | True electronic money | Conclusion | Author biography | ||||||||||
| 1. Introduction | ||||||||||
|
The
primary function of money is to serve as a medium of exchange in order
to avoid the time and effort that would otherwise have to be expended
in the process of exchanging goods and services directly.1
To serve as a medium of exchange, a commodity or entity must be one that
is generally accepted when offered in payment for goods and services.
Commodities
with intrinsic value, such as cattle or precious metals, were historically
accepted as payment for goods and services as they were in general demand
because of their usefulness or scarcity value. The 20th century has seen
the movement away from these forms of commodity money with intrinsic value
to paper money, which derives its acceptability as
money in the market place solely from the fact that it has the backing
of the law, which decrees that it must be accepted as legal tender when
offered in payment of a debt.2
In the
modern economy paper money has largely given way to bank money, i.e. deposits
held with deposit-taking institutions which can be used to pay for goods
or services drawn on or issued against these deposits.3
The ever-increasing volume of paperwork incidental to banking operations
involving bank money necessitated the development of electronic
payment systems to facilitate the expansion and speeding up of customers
access to their accounts and the making of electronic payments.4
Freeing the transfer of monetary value from physical constraints led the way for the evolution of a number of payment systems that make use of electronic techniques, and in particular the Internet, as a means of transferring monetary value.5 The rapid expansion of the Internet, and the associated growth electronic commerce has experienced in recent years, led to the development of electronic payment systems to support the growing commercial activities on the Internet.6 227
Understanding these payment systems begins with an understanding of the basics of money, in particular how money can be represented and transferred.7 Money, as a general medium of exchange, can broadly be represented either by way of token or notationally.8 A token is a physical object that has no significant intrinsic value and is used to represent money, such as paper (banknotes) or metal (coins).9 Money can also be represented notationally, namely as a number or entry in a record. The notational transfer of funds means that banks can reconcile the funds exchanged between them by electronic means, instead of physically transferring the large sums of money that pass between them each day.10 |
||||||||||
| 2. Overview of South African online payment infrastructure | ||||||||||
|
Online payment systems
are in most instances applications of existing payment systems that function
within the boundaries of the traditional banking environment, but use
novel methods to initiate payment instructions and ultimately the transfer
of value. While the Internet may therefore serve as a means of issuing
these payment instructions, actual payment in most instances is made through
existing payment infrastructures. Even the limited
number of payment systems that have the ability to function outside the
confines of the normal banking system may at some stage enter it, for
instance where the holder of such value elects to deposit it at a financial
institution.
The term payment system refers to a set of arrangements designated for the transfer of value.13 Payment systems may vary from those that facilitate small-value fund transfers used by businesses and consumers, to large-value interbank fund transfers that underpin national and international money and capital markets.14
278 The National Payment System (NPS) is the collective of all payment systems that operate in South Africa, thereby encompassing the total payment process, including all the systems, mechanisms, institutions, agreements, procedures, rules, laws, etc. that come into play from the moment an end-user issues an instruction to pay another person or a business, through to the final settlement between banks at the SA Reserve Bank.15 The main function of the national payment system is thus to enable transacting parties to effect payment through the transfer of monetary value.
The transfer of monetary value in the national payment system generally occurs through the issuing of a payment instruction to a financial institution, instructing it to transfer funds or make a payment.16 Once the financial institution has received and accepted the payment instruction issued to it through a particular system, the exchange of payment instructions between the banks occur, a process known as clearing.17 Unless the paying and beneficiary banks are the same, interbank settlement must take place.18 Interbank settlement occurs when the participating banks post entries to their respective accounts held at the South African Reserve Bank, resulting in a final and irrevocable settlement of the account involved.19 In the South African
context the main purpose of the National Payment
System Act20 is to provide for the management,
administration, operation, regulation and supervision of payment, clearing
and settlement systems in South Africa.21
The South African Reserve Bank is assigned a supervisory role in this
regard, with particular reference to the regulation of the activities
of participants to the payment system and other role-players within
the payment systems in general, as well as the clearing and settlement
system.22 This is in accordance with
the statutory responsibilities laid down by section 10(1)(c)(i) of the
South African Reserve Bank Act.23 These
responsibilities include the taking of action to limit systemic or other
risks which may threaten the stability or confidence in the national
payment system, to provide consumers with adequate protection from unfair
practices, fraud and financial loss, to ensure the ability to conduct
monetary policy and to assist law enforcement authorities in the prevention
of criminal activities.
279 The Society for World-wide Interbank Financial Telecommunications (SWIFT) connects national payment systems to an international network, enabling interbank payments and ultimately electronic funds transfers between customers accounts in different countries. The SWIFT system comprises a computerised telecommunications network that operates a global data processing system for transmitting financial messages over dedicated lines, providing a secure message service through the use of encryption.24 SWIFT therefore provides a secure communication system for the conveyance of payment orders and other messages among member banks.25 When international payment instructions are issued, payment instructions are routed via SWIFT to the beneficiary bank. |
||||||||||
| 3. The law of payment | ||||||||||
|
The discharge of
monetary obligations can be effected by means of payment. Innes CJ stated
in Harrismith Board of Executors v Odendaal that:26
Payment
in the legal sense therefore means any act offered and accepted in performance
of a monetary obligation.27 As such, payment
concerns a bilateral act requiring in most instances the co-operation
of both the debtor and creditor,28 having
the effect of releasing the debtor from the obligation.29
|
||||||||||
| 3.1 The proper law of contract | ||||||||||
|
The law of contract
in different jurisdictions can impact significantly on the question of
the discharge and interpretation of obligations. In the context of international
payments, often facilitated by online payment systems, it is therefore
of paramount importance to be able to determine the applicable system
of law governing a contract, referred to as the
proper law of contract.30
Courts have held on numerous occasions that the parties to a contract can decide either expressly or tacitly which system of law is to govern the legal relationship between them, such a term being valid and enforceable.31 In the absence of any express or tacit agreement, the court will take account of the surrounding circumstances to ascertain whether a choice of law can be inferred, in the absence of which the court will assign a proper system of law.32 The rule generally followed by the courts in assigning the proper law is that the law of the place of the contract (the lex loci contractus) governs the nature, obligations and the interpretation of the contract, except where performance is to take place elsewhere, in which instance the law of the latter place is generally considered applicable.33 Where performance must therefore take place in a country other than that in which the contract was entered into, the law of the country where performance is to take place will generally regulate the manner in which performance is to be made.34 280 Despite the above-mentioned
principle, the intricacies of private international
law may have a significant impact on the interpretation of a particular
contract as a whole, especially on the determination of the rights and
duties of the parties with regard to the substance of the obligations.35
|
||||||||||
| 3.2 The manner of payment | ||||||||||
|
Payment must generally
be in the form of legal tender. Section 17 of the
South African Reserve Bank Act 90 of 1989 defines the concept of legal
tender, the significance of which is that an offer for payment made in
legal tender in the absence of anything to the contrary must be accepted.
Consequently, if something other than legal tender is offered as payment
in discharge of a debt, the creditor can strictly speaking refuse to accept
the payment and insist on payment in legal tender.
The law however
recognises that valid payment of a debt sounding
in money can be effected by means other than payment in legal tender,
notably through the transfer of credit. So widespread are credit transfer
payment practices that it has become almost a fiction to base payment
by credit transfer on the implied agreement or waiver of the right to
insist on legal tender.36 In this regard
courts have regarded the insistence by a creditor to be paid large amounts
in legal tender as vexatious.37 The courts
will readily accept that parties agreed by implication to payment by means
other than legal tender. This was illustrated in Esterhuyse v Selection
Cartage (Pty) Ltd38 in the context
of payment by way of a cheque where Trollip J summarised
the relevant principles as follows:
281 In an ordinary
commercial contract, in the absence of anything to the contrary, only
some slight indication or evidence indicating that payment could be made
by means of cheque would suffice, because of the fact that it is such
a commonly used medium of payment in such transactions.39
It is submitted that the above can be made applicable equally to other
methods of payment.
|
||||||||||
| 3.3 The moment of payment | ||||||||||
|
National legal systems
can differ fundamentally on the question as to when payment is considered
to be final. The moment of payment in the current context becomes relevant
in a limited number of circumstances, for example where death, winding-up,
liquidation or bankruptcy of the customer terminates the banks authority
to pay.40 No judgments have been reported
on this issue in South African law and many foreign jurisdictions also
experience uncertainty in this regard.41
The effect of the
UNCITRAL Legal Guide is to make the finality of
a funds transfer dependent on a number of factors. Different aspects of
the electronic funds transfer may become final at different points in
time.42 Determining the finality of payment
with reference to different aspects of the electronic funds transfer can
lead to uncertainty, particularly if payment can be regarded as complete
at so many stages.43
It is submitted
that the conclusion of Lawack in this regard is correct, namely that the
common denominator of all theories endeavouring to determine the moment
of payment in an electronic funds transfer is the moment when payment
becomes irrevocable, making payment effective on the rendering
of that final act required in the discharge of a monetary obligation.44
|
||||||||||
| 3.4 Conclusion | ||||||||||
|
Legal systems may differ significantly on the principles of payment, in particular relating to the discharge and interpretation of obligations. The parties to a contract must therefore inform themselves of the implications of the law applicable to their contract and where possible stipulate how payment is to take place and which system of law should govern the contract. 282 |
||||||||||
| 4. Online payment systems based on electronic funds transfer principles | ||||||||||
|
The notational transfer
of money and the associated movement of funds from one account to another
by means of electronically communicated payment instructions is referred
to as electronic funds transfer (EFT).45
The electronic transfer of funds can be effected by electronic payment
systems, which encompass both payments by way of systems making use solely
of electronic techniques (pure electronic funds transfers)
and those instances where electronic payment systems
have an influence in paper-based payment systems. The legal rules relating
to electronic fund transfers determine the particular legal implications
of payment, such as when payment is made, the time and proof of payment.46
The precise definition of an electronic fund transfer is problematic, as different jurisdictions tend to use different definitions of the term.47 Electronic funds transfers are however generally defined as any transfer of funds in which electronic techniques replace one or more of the steps in the process that were previously done by paper-based systems.48 The following basic steps are usually present when payment by means of an electronic funds transfer is made:49
The relationship between the financial institution and customer in an electronic funds transfer is generally founded on mandate.50 The naturalia of a contract may however be amended through the agreement of the parties to a contract or by way of legislation.51 The naturalia of the contract of mandate provides that the financial institution (the mandatory) must exercise reasonable care and be honest, diligent and bona fide in the fulfilment of its responsibilities in terms of the contract. The requirement to exercise reasonable care however also extends to the customer (the mandator), who must avoid actions detrimental to the operation of the contract, particularly in the current context to avoid unauthorised payments where possible.52 283 The absence of
legislation specifically pertaining to electronic fund transfers has led
to some uncertainty as to the legal relationship between parties to such
a contract. Various foreign jurisdictions have enacted legislation in
this regard to address some of the thorny issues associated with these
contracts, in particular with regard to the allocation
of risk in electronic payment systems.
In the United States
of America the Uniform Commercial Code (UCC) was enacted to provide a
uniform code of law for commercial purposes. Article 4A of the UCC regulates
the transfer of credit. The article draws a distinction between erroneous
order and erroneous execution. In first instance the risk lies with the
customer, in the second instance the financial institution bears risk
of liability, unless it can prove an objective inability to foresee and
unless error is reported by the customer within reasonable time.53
The
Electronic Fund Transfers Act (EFTA) was enacted to protect parties to
an electronic funds transfer. Paragraph 909 of the Act imposes liability
on the customer for unauthorised use of an EFT card in certain circumstances.
The amount to which the customer can be held liable for the unauthorised
transfer is dependent on when notice of the unauthorised transfer was
given to the financial institution.54
Under English law
section 83 of the Consumer Credit Act 1974 imposes no liability against
the customer by the bank except in the case of misuse, for example in
the case where the customer fails to keep his/her PIN secure. Section
84 also limits the liability of the customer for unauthorised use, again
dependent on notice being given to the bank.55
The
Unfair Contract Terms Act of 1977 further serves to limit the extent to
which parties to an electronic funds transfer can unfairly and unreasonably
regulate the question of liability by way of contract.
The legislative
liability structures discussed above serve to regulate the legal position
between the parties to an electronic funds transfer and their functions
are often complementary to the naturalia of the contract
of mandate.56 South Africa has no similar
legislative liability structures in place, but these issues will become
relevant in international electronic funds transfers involving jurisdictions
that have these structures in place.
|
||||||||||
| 4.1 Payment cards | ||||||||||
|
The institutional framework already established by payment cards, and the fact that many of the larger card issuers are internationally recognised, make payment cards particularly well suited for international trading on the Internet.57 284 Three broad categories
of payment cards can be distinguished for purposes of online payment,
namely credit, debit and charge cards.
Payment by credit card entails the buyer instructing its bank via a payment order to transfer funds to the sellers bank for the credit of the seller.58 The debit on the account of the seller is paid in accordance with the terms of the contract with the issuer of the card. Two types of credit cards can be distinguished, namely bilateral and tripartite credit cards. Bilateral credit cards are issued by retailers and may only be used by the clients of the particular retailer up to an agreed limit.59 Tripartite credit cards by contrast are issued by institutions specialising in the issuing of such credit cards and may be used to make payment to all registered merchants of the particular issuing institution.60 In the context of online payments the most frequently used method of payment is by way of credit card. The legal relationship governing the tripartite credit card is examined in more detail below. 285 When
payment is made by debit card, the seller instructs its bank via a payment
order to collect funds for it by debiting the buyers bank account
at the buyers bank.61 The issuer
then proceeds to reimburse itself by debiting the account against which
the card was issued. The legal relationships to a debit card are much
the same as to a credit card, the major difference being that the debit
cardholder must keep an account that is linked to the card in credit.
Payment by way
of a charge card means that the outstanding balance
of purchases must be paid after the statement date, either in full or
in accordance with the terms of the contract. The function of this card
is to facilitate payment and no revolving credit is generally granted.62
Payment for goods
or services over the Internet can readily be accomplished by submitting
the details of a payment card to the merchant, who in turn forwards the
payment information to the issuer of the particular card to receive payment.
The tripartite
contractual framework within which credit card payments take place is
established by agreements entered into between the card issuer, the merchant
and the cardholder.
First, the issuer and the merchant enter into a franchise agreement. In terms of this agreement the issuer undertakes to make payment to the merchant when the issuers card is presented for the payment of goods or services. The merchant thus agrees to accept payment by way of the issuers credit card and furthermore to pay a commission to the issuer on each transaction. Second, the issuer
and the cardholder proceed to enter into a bearer agreement. The
purpose of this agreement is to regulate the cardholders use of
the card and in particular the cardholders obligation to repay the
issuer for purchases made and to address the issue of finance charges.
The bearer agreement further provides that the issuer is entitled to debit
the cardholders account with the amount of those payments it is
validly instructed to make.63 The underlying
principle is that the issuer may only debit the account of the cardholder
with legitimate transactions.
It is generally an express term of the bearer agreement that the cardholder is responsible for the safekeeping and proper use of the card and the associated personal identification number (PIN). Loss or damage resulting from unauthorised payments through the cardholders failure to comply with this term of the contract, will have the effect that the cardholder will be liable for any such loss or damage. 286 In circumstances
where it cannot be said that the actions of the cardholder were intentional
or negligent in the disclosure of the PIN, the cardholder cannot be held
liable. This is in accordance with the naturalia of the contract
of mandate as stated above. Smith states in this regard that the bank
would not be in a position to debit such an account even in circumstances
where the forgery or fault was undetectable or even where there was no
negligence on the part of the issuer.64
The third contract
is entered into between the cardholder and the
merchant every time the card is used in payment for goods or service.
Payment by way
of payment card over the Internet involves the exchange of sensitive information
over a network that is in essence open. The potential risk of fraudsters
intercepting messages containing payment information is therefore high
where unprotected data is sent.
In the context
of online payments by way of credit card, the unprotected transmission
of credit card details over the Internet may constitute a contravention
of the provision of the bearer agreement that the cardholder is responsible
for the safekeeping and proper use of the card. It is submitted that the
wording of the relevant clause of the contract would determine whether
such actions would indeed be in contravention of this term of the contract.65
Where
a merchant receives fraudulent payment innocently, the validity of the
payment will probably depend on the exact terms of the franchise agreement
and whether the retailer observed all authentication procedures required
under the particular system.66
4.1.4
Security
Payment messages transmitted over the Internet can be protected through the use of encryption technology and digital signatures.67 These security mechanisms do however not address all the risks associated with making online payment by way of payment card, in particular relating to the possibility of fraudulent use of the card information by the merchant or its employees. Where payment is effected through a payment instruction, the risk that the message could have been sent fraudulently or amended to replace the intended beneficiary with someone else also remains present.68 287 The institution
of central registries to facilitate online credit card payment attempts
to remove the need for sensitive information to be sent online. Instead
the system operator issues an identification number to each registered
user which is connected to the users card information. When payment
is made, no sensitive information is sent over the Internet and the need
for protection is greatly reduced.69
Although registry credit card payment is effective in minimising security risks, the procedures for verification and confirmation of payment messages by the third party constitute serious disadvantages, in particular relating to the period of time needed to complete the transfer.72 To address this issue and the other difficulties alluded to above, a protocol was developed for conducting secure online transactions, named Secure Electronic Transactions (SET), currently in a pilot phase. SET is a joint initiative by the large card-issuing companies to develop a system whereby the integrity of payment messages can be verified through the use of digital signatures.73 288 In essence SET
involves special software on the cardholders personal computer and
the retailers network, enabling the transfer of the cardholders
card details to the relevant card association in encrypted format, through
the use of public key cryptography without the retailer being able to
decrypt it. The identities of cardholders and retailers are verified by
way of digital certificates, issued by the relevant card organisation.74
The effect of a transaction concluded through SET is that the cardholder
deals with a merchant that is SET-registered and the merchant knows that
it is dealing with a valid cardholder, although it cannot establish the
card number.
4.1.5
Evaluation
The unrivalled
international acceptance of payment cards as a method of online payment
and the imminent full-scale implementation of SET will probably see credit
cards as the leading online payment method for some time to come.
Payment cards are
however not considered the ideal online payment system. The main disadvantage
of payment cards relates to the requirement for central processing of
the payment instruction. In particular this requirement makes payment
by way of payment cards unsuitable for low value transactions due to fixed
transaction costs and because it prohibits person to person transfers.
A further disadvantage
relating to the requirement for central processing is the fact that an
audit trail is created by each transaction, thereby
allowing all payments to be traced. Civil libertarians have commented
that the lack of anonymity in this regard could constitute a serious privacy
issue if the data collected is used to the detriment of cardholders.
The fact that only
approximately 10% of people qualify for credit cards, furthermore constitutes
a disadvantage, having the effect of barring a substantial number of persons
from making online payments in this manner.
When payment is made by payment card on the Internet, it is advisable to read all clauses and small print before submitting credit card details. Many unsuspecting Internet browsers have found themselves to be contractually bound to online contracts they were unaware of. Monthly transaction statements must also be carefully checked to verify the correctness of all payments. 289 |
||||||||||
| 4.2 Electronic data interchange | ||||||||||
|
Electronic data
interchange (EDI) is the computer to computer transmission of business
data in a standard format by way of remote data processing, enabling commercial
communication and the conclusion of contracts without human intervention.75
The standardised format in which the data is sent is referred to as a
transaction set, which contains all the relevant information a traditional
paper-based order or invoice contains. Typically an EDI transaction is
executed when the computer managing a buyers stock automatically
generates an order for goods when it detects stock to be low, with the
sellers computer automatically accepting the order and instructing
its processing.
Although the open
network architecture of the Internet was initially not thought to be a
suitable method of communication for EDI applications, smaller businesses
started to use the Internet as a medium of communication for conducting
EDI with success.76 This in turn led to
the development of central network providers called Value Added Network
Services (VANS) specifically tailored to facilitate EDI communications
over the Internet. The transnationality of the Internet proved to be an
ideal communication network for conducting EDI both nationally and across
international boundaries.
The online application
of EDI coupled with an associated electronic transfer of funds is referred
to as financial EDI.77
Financial EDI consists of electronically communicated payment orders with
associated remittance information and typically involves two components,
namely the payment of funds and the delivery of remittance information
associated with the payment.78 In the instance
given above, the sellers computer would therefore proceed to effect
a transfer of funds by way of payment instruction for the goods bought.
Recent advances in encryption technology have meant that the authenticity
and integrity of information communicated in a financial EDI transaction
can be effectively protected, thus making both the technology and the
legal enforceability of such transactions possible.79
VANS have the added
advantage of providing automatic acknowledgements of receipt, that the
message was in proper format or messages regarding the formation of the
contract (for example an acceptance or counteroffer).80
4.2.2 The
legal relationship between the parties to financial EDI 290 Parties
intent on making use of EDI first enter into a trading partner agreement
(TPA) that provides the structure for the conclusion
of contracts by way of EDI.82 The most
important issues to be addressed by the TPA are the terms of communication
and trade. The contract will usually require the parties to the contract
to conform to all the technical procedures the network provider may prescribe.83
The network provider and the users of the EDI network thereafter enter
into an agreement that regulates their legal position.
Many legal
uncertainties pertaining to EDI can be avoided if the parties to the contract
expressly address these issues. When dealing with the terms and conditions
for communications, the parties must therefore deal specifically with
the interpretation of the concepts of writing and signing,
as these are bound to come to bear in the conclusion of the contract by
way of EDI. Due to the possibility of price fluctuations and changes in
exchange rates, the parties to a TPA must further determine precisely
when a contract will become effective.84
For both evidentiary and tax purposes EDI systems need to be adequately
controlled to ensure accurate record keeping and retention.85
To ensure the enforceability
of EDI contracts, various organisations have drafted standard form agreements,
such as the Uniform Rules of Conduct for the Interchange of Trade Data
by Teletransmission by the International Chamber of Commerce, the Model
Interchange Agreement adopted by the European Commission and the model
EDI Trading Partner Agreement by the American Bar Association.86
While these standard form agreements were not drafted with Internet application in mind, it is submitted that they would be capable of adaptation with relative ease, as in most instances they were drafted with international EDI in mind.87 The terms of EDI contracts should clearly set out the legal position of the parties to such an agreement; consequently the following issues should be addressed:88 291
The legal obligations
of third parties should also be clearly stipulated in accordance with
the above, including to ensure the conveyance of messages in the correct
format and protocol, safeguarding against corruption of messages, ensuring
that messages are conveyed to the recipient and preserving the confidentiality
and security of messages.89
It follows that
any formalities prescribed by law, in particular relating to the requirement
for writing, must be complied with and may in certain circumstances
prevent the use of EDI. When contracting by way of international EDI,
the possibility of such requirements and their implications in foreign
jurisdictions must be borne in mind.
4.2.3
Evaluation
Paperless exchange
of purchase orders and payments holds the distinct advantage of quicker
delivery times and response to market demand.90
EDI thus has the potential to be a powerful business tool.
World-wide message standards for EDI are currently under development and are constantly expanded, allowing more flexibility in EDI communications.91 In spite of this, wide use and acceptance of EDI in South Africa is still some way off.
292 |
||||||||||
| 4.3 Internet banking | ||||||||||
|
Internet banking
offers users the possibility of making electronic payments via the Internet.
Almost all major commercial banks nowadays offer their customers the facility
to conduct banking transactions via the Internet, including the accessing
of account and balance information, the effecting of fund transfers between
accounts and the setting up of stop orders.
Various legal issues
are relevant to Internet banking, including the problem of authentication,
electronic formation of contracts and issues related to the creation and
protection of content on the financial institutions web site.92
Payment is effected
by way of a payment instruction issued by the customer to the financial
institution through the system. The authentication of the user in the
majority of systems is by way of encrypted passwords.93
In most instances Internet banking is conducted through an encryption
protocol named Secure Socket Layer (SSL), offering 128-bit encryption
that protects data travelling between the user and the financial institution.94
Internet banking
and the risks involved are extensively regulated by the terms and conditions
of the contract that is entered into between the financial institution
and the customer in terms of which the facility is offered.95
The contract generally
provides for the authorisation and security methods to be used to verify
the identity of the customer. The use of a personal identification number
(PIN) is common practice, but other supplementary
methods of authentication may be stipulated in the contract. The customer
has a duty to keep his/her PIN secret and the financial institution will
not accept liability for any loss or damage if the customer is negligent
in this regard. Loss or damage on the part of the customer resultant from
culpable mistake or internal fraud on the part of the financial institution
is generally excluded from the operation of this clause. As such, the
customer must take all reasonable precautions to prevent the unauthorised
use of the facility or access to his/her account.
In the final instance the contract usually contains a clause stipulating that the facility is used at the customers own risk and that the financial institution is not liable for any damage, loss or consequential damage that the customer may suffer as a result of a malfunction in the system or any circumstances not reasonably within the banks control. The bank is indemnified from any claim by the customer as a result of the use of the facility, in particular resulting from any wrong, unauthorised or wrongful instructions. It is apparent from the foregoing that the risk for any loss or damage would in most instances, depending on the specific wording of the contract, fall on the customer making use of the facility. 293 4.3.2
Evaluation
It is
apparent from the above that in most instances the risk for unauthorised
payment will lie with the customer. It is however submitted that the flexibility
offered by Internet banking, particularly the ability to conduct banking
business at any time and through any Internet connection, coupled with
relatively low transaction costs, probably outweighs the risks involved.
This is especially true in light of the fact that the risk of unauthorised
payments can be greatly reduced if PIN numbers
are kept secure.
|
||||||||||
| 5. Electronic money | ||||||||||
|
Electronic money96 is a relatively new form of electronic payment that has been developed to improve the speed of electronic commerce and to provide a more secure and anonymous form of transacting.97 Electronic money in its most basic form consists of a string of numbers identifying it as money in much the same way as banknotes each have a unique identifying number, thereby constituting a token that resembles value. 294 The
term electronic money is often used to refer to various electronic
payment systems that operate in fundamentally different ways. While some
of these systems are based on new and innovative principles both in technology
and law, others are merely technological advances in existing payment
systems.
|
||||||||||
| 5.1 Electronic money technology | ||||||||||
|
Electronic money systems can be broadly divided into software- and hardware-based systems. Software-based systems generally operate by means of computer networks and in particular the Internet, providing a mechanism for remote payments. Hardware-based systems in turn are mostly used for small value transfers from person to person through the use of physical forms of storage.98
|
||||||||||
| 5.2 Software-based systems | ||||||||||
|
Software-based
systems require users to be host-connected to complete a transfer and
do not involve any physical form of storage on the part of the user, consequently
these systems are also referred to as online systems.
As purely
software-based systems do not boast the advantages in security that smart
cards offer, they are generally dependent upon cryptography to protect
the value within the system. Public key cryptography is generally used
in these systems to protect the value within the system from tampering
or counterfeiting.99
Almost
all the software-based systems currently in operation use the Internet
as a means of communication with the user. Different systems generally
require users to gain access to the Internet through specific means. By
relying on e-mail, the lowest common denominator of Internet connectivity,
some systems manage to be almost universal in application. Other systems
require a real-time connection to the Internet in order to verify identity
and maintain security.100
While software-based systems generally tend to allow only trusted third party and notational fund transfers, some do in fact have the capability to transfer stored value, for example systems using smart cards combined with computer hardware as a means to store value along with Internet connectivity.101 295
|
||||||||||
| 5.3 Hardware-based systems | ||||||||||
|
In a hardware-based
system neither of the parties involved in the transfer need to be host-connected
in order to process the transaction, thus removing the requirement for
third party authentication, and functioning as
an offline system.102 Hardware-based
systems generally utilise smart cards and private electronic wallets103
to transfer the electronic money from peer-to-peer (i.e. person-to-person).
A
smart card is a plastic card containing a microprocessor chip with integrated
circuits. The uses of smart cards are almost limitless and it is generally
perceived to be the ultimate interface device for the mobile digital economy,
having the potential for full multifunctionality. Smart cards have computational
power to provide greater security, allowing for the effective verification
of the cardholder. The tamper-resistant features of smart cards, coupled
with periodic changes in cryptographic algorithms and chip design, hold
the advantage that operators of hardware-based systems using smart cards
can minimise security risks to a large extent.104
|
||||||||||
| 5.4 Conclusion | ||||||||||
| As developers and operators of electronic money systems continually seek to widen the application of their systems, the clear distinction between software- and hardware-based systems has in recent years faded, with the result that some systems nowadays offer the functionality of both systems. Many hardware-based systems are therefore extending their functionality by crossing over into the virtual world of the Internet. | ||||||||||
| 5.5 Criteria for distinguishing between electronic money systems | ||||||||||
|
As stated above,
the term electronic money is generic, encompassing a multitude
of systems, some of which function in fundamentally different ways. The
various systems in operation vary from systems providing access to account
balances, at the conventional end of the spectrum, to systems that effect
free and final transfers of value without the intervention of third parties,
at the other end of the spectrum.
The following criteria can be used in order to distinguish between these different systems in operation.105 296
5.5.1 Stored
value and access systems Access systems
on the contrary refer to products or services that access account balances
held at financial institutions. These products or services allow users
to use electronic means of communication to access otherwise conventional
payment systems.
Auditable products
operate within the existing banking infrastructure. As such the full cycle
of the transaction is auditable, identifying the transacting purse and
the issuer, although not necessarily identifying the transacting individual.
The value issued within an auditable system can be redeemed only through
the intermediation of a financial institution and processing occurs within
the national payment system. An auditable system further involves record
keeping of all transactions, which are forwarded to a central point in
order to facilitate reconciliation. This in effect means that the issuer
of a digital currency keeps a record of the units of value issued to a
user and reduces the users balance on receipt of a report from a
merchant that value has been exchanged for services or goods.
As the name suggests,
no records of transactions are kept within a non-auditable system. While
this provides greater privacy for users of the system, critics of these
systems have said that the failure to audit a cardholders expenses
will undermine public confidence in digital cash and reduce the chances
of discovering fraud in the system. In a non-auditable system the issuer
of the electronic money does not attempt to keep record of outstanding
value, at least not for the purposes of adjusting account balances. The
value issued through such a system only enters the national payment system
when holder of such value elects to deposit it at a financial institution.
5.5.3
Voluntary and required redeposit
The distinction between voluntary and required redeposit products or services relates to the distinction between access and stored value products. If a particular system requires users to redeem value by means of a deposit in an account with the issuer directly after the completion of a transaction, the system would merely effect the transfer of sums held on deposit.107 297 This requirement
relates to whether the discharge of monetary obligations is regarded as
final or conditional, i.e. requiring clearance (for example when cheques
are concerned) or prior arrangement (for example when payment is made
by credit card).
In contrast
to many existing single-purpose prepaid card schemes (such as those offered
by telephone companies), electronic money products are intended to be
used as a general, multipurpose means of payment.108
When a prepaid card is usable only for a limited number of transactions
(as in the case of a telephone card), it does not qualify as a general
means of payment.
|
||||||||||
| 5.6 Electronic money operating on EFTPOS principles | ||||||||||
|
At the
conventional end of the spectrum are electronic money systems functioning
on electronic funds transfer at point-of-sale (EFTPOS) or debit/credit
card principles in order to effect online payments.109
EFTPOS
allows retail payments to be effected by the transfer of funds electronically
from the accounts of customers to the accounts of retailers.110
Traditional EFTPOS-based systems have the ability to allow for the transmission
and acceptance of payment instruction while the customer is still at the
payment point.111
The key components of an EFTPOS payment system are the dedicated hardware, magnetic strip or smart cards coupled with a procedure for authentication and an automated message transmission facility.112 In the case of electronic money digital signatures and encryption technology are used in order to verify and authenticate payment messages issued through the system. The merchant is also not required to have dedicated hardware in order to process the payment.113 298 EFTPOS-based electronic
money systems initiate transfers on conventional bank or credit card accounts,
similar to EFTPOS-based systems. The transfer of funds by means of this
method in actual fact amounts to an instruction given to an institution
within the banking system.
EFTPOS-based electronic
money systems generally operate at the conventional end of the spectrum
of electronic money products. As such they provide technological advances
in the issuing of payment instructions and access to account balances.
In the following section the CyberCash and Open Market systems are investigated.
Electronic money systems that operate in the middle of the spectrum display some of the characteristics of true electronic money, but not all of them. The accompanying box examines two of these systems.
|
||||||||||
| 6. True electronic money | ||||||||||
|
True electronic money can be defined as a medium of exchange comprising computer-readable code which represents stored value, the transfer of which constitutes final payment and which is neither subject to central reconciliation nor required redeposit. True electronic money therefore constitutes an electronic mechanism for the transfer of funds without the intervention of a deposit-taking institution or other third party, the process being characterised by the transfer of value itself.129 The consumer purchasing such electronic value does so in much the same way as in the case with other prepaid instruments.130 301
|
||||||||||
| 6.1 Legal implications between issuer and user | ||||||||||
|
Two contracts
are generally entered into when true electronic money is used
to effect payment. In the first instance, the user enters into an agreement
with the issuer of the stored value. The terms of this agreement govern
the use of the stored value as well as the allocation of risk for unauthorised
purchases. As true electronic money systems are currently
operated on a limited scale and as the infrastructure for widespread use
is not yet in place in South Africa, the terms and condition by which
stored value is issued may vary.
It is
however submitted that many of the principles applicable to electronic
fund transfers in general will also be applicable in the current context.
The contract between the issuer of stored value and the user is also based
on mandate, supplemented by the terms and conditions of the contract between
the parties. It follows that due to the absence of the requirement for
central processing the risk for unauthorised payments can be greatly reduced.
When payments are however made via the Internet, an additional element
of risk is always introduced.
|
||||||||||
| 6.2 Unauthorised payments | ||||||||||
|
The majority
of smart cards in operation in electronic money systems require a PIN
to be entered before allowing access to the stored value. While this provides
some protection against unauthorised transactions, the fact that true
electronic money constitutes value itself, has the implication
that when a smart card is stolen or lost the value held by it is also
lost.
Section 2(1) of the Bills of Exchange Act 34 of 1964 defines a bill of exchange as an unconditional order in writing, addressed by one person to another, signed by the person giving it, requiring the person to whom it is addressed to pay on demand, or at a fixed or determinable future time, a sum certain in money to a specified person or his order, or to bearer. From the above it is clear the Act confines bills of exchange to instruments in writing.131 The resultant lack in negotiability of true electronic money may have the effect of leaving the current holder of the value out of pocket if it is discovered that there is a defect in the title somewhere along the chain of ownership.132 302 By similar token,
the holder of electronic money may find that he/she is out of pocket for
the value of the electronic money if the electronic money is in fact found
to be counterfeit. Although operators of electronic money systems claim
their systems to be secure, the possible reward for creating counterfeit
electronic money provides a large incentive for dishonesty.
|
||||||||||
| 6.3 The impact of true electronic money on macroeconomic policy | ||||||||||
|
The purchase of
true electronic money has the effect of removing currency
from circulation and replacing it with an electronic equivalent. Currency
in circulation represents non-interest-bearing liabilities to the central
bank. As such a decline in central bank asset holdings could occur once
electronic money replaces cash to a large enough extent, thereby reducing
the interest earned on these assets.133
This is the result of the issuance of currencies being taken over to an
extent by private minters, and central banks being denied seignorage,134
costing the state a substantial amount of revenue. The large scale purchase
of electronic money and the resulting decrease in the availability of
currencies may potentially have a negative effect on the national economy.
This effect poses a number of questions to central banks world-wide, particularly
in relation to the regulatory and operational requirements necessitated
by the implications electronic money systems hold for macroeconomic policy.135
Many operators
of electronic money systems refer to the position in the United States
during the 19th century, when banks issued private currencies, to motivate
the feasibility of electronic money systems and to justify the feasibility
of private currencies.136 Contrary to
this view, other commentators have stated the economy of the United States
was at that time primitive and often ineffectual and that it would therefore
not be a valid argument in favour of the large scale implementation of
private currencies.137
The issuance of
electronic money implies the creation of liabilities on the balance sheet
of the issuer. These liabilities are generally payable (or redeemable)
at face value to those entities accepting electronic money as payment.138
The problem with any measure not requiring a 1:1 ratio of funds issued
in relation to the float that underwrites the electronic money
in circulation, is that this could amount to credit creation.
In light of the possible impact of the large scale implementation of true electronic money in South Africa, the question can be asked who must be allowed to issue electronic money and how will it be regulated? 303 Deposit
as defined by section 1 of the Banks Act 94 of 1990 makes clear
reference to the repayment of an amount held on balance. This could possibly have implications for the stored value held in the users possession, or the stored value in the possession of the merchant after the completion of a transaction. The reference to an amount held on balance however implies that the deposit-taking institution must keep accurate and up-to-date records of the balances held with the particular institution in order to facilitate such repayment. It is therefore only in circumstances where an obligation to repay (or redeem) is entered into, that the provisions of the Banking Act would apply. Although issuers of true electronic money are continually under an obligation to redeem any value tendered for currency, the system generally makes no use of records for the purpose of determining the balance of stored value held by the users of the system. The operation of different systems may however have a different result. In 1994 the European
Monetary Institute (EMI) recommended that only credit institutions be
allowed to issue multipurpose prepaid cards, in an effort to bring operators
of electronic money schemes under uniform regulation with these institutions.139
The 1997 Annual report by the EMI proceeded to state minimum requirements that must be fulfilled by issuers of electronic money, as guidelines for the development of effective regulation by member states:
304 These requirements are intended to be effective guidelines for regulation of all electronic money systems within the national payment systems of member countries, regardless of the nature of the issuer. The EMI has reiterated that it favours the limitation of the issuance of electronic money to operators of credit institutions as defined in Article 1 of the First Banking Co-ordination Directive. The article requires credit institutions to receive deposits or other repayable funds from the public and grant credit from its own account. In this regard the Bank for International Settlements has stated that:
305 It is apparent from the paragraph quoted that the obvious advantage of this approach would be to introduce electronic money systems to existing payment systems and the regulatory framework already in place. The challenge that electronic money presents to governments world-wide is to effectively regulate it within the national economy. The foremost responsibility of the central banks in this endeavour will be to maintain monetary stability of existing currencies within each monetary unit. The South African Reserve Bank foresees the following instances where regulatory adjustment or intervention may be required:141
The current view
of the South African Reserve Bank on electronic money is indeed consequent
to that of other banks, namely that unnecessary legislation must not be
imposed on these emerging technologies as it may prohibit it from yielding
the tremendous opportunities it is capable of.
|
||||||||||
| 6.4 Evaluation | ||||||||||
|
Electronic money holds a number of advantages over conventional forms of money and other online payment systems. The ease of issuance and circulation of electronic money, coupled with new advances in encryption technology, are among these. This is largely due to the fact that electronic money requires no physical handling in the sense existing currencies do, and having the distinct advantage of being digital in nature, capable of automatic conversion from other international units of value.150 Because of reduced operating costs, this in turn leads to savings for the banking and business sectors.151 307 True
electronic money holds the distinct advantage of being able to operate
in isolation from the national payment system, requiring no clearing or
prior arrangement to effect a transfer. When stored value is therefore
lost or stolen, the consumers only loss is that of the value stored
on the card. In the case of payment cards, compromising card details may
lead to other unauthorised payments being made.
The prepaid
nature of true electronic money products and services results
in a lower risk of refusal than other payment systems that require central
processing of transactions when payment is made.152
The fact that no enquiries as to the creditworthiness of prospective consumers
are conducted, widens the application of electronic money beyond that
of existing payment systems that function by way of credit card.
The question
of anonymity of payment has been the subject of considerable debate between
those advocating privacy and those stressing law-enforcement issues.
The systemic
risk introduced into the national payment system necessitates constant
monitoring of the effects of electronic money on national monetary areas.
It is however submitted that the current impact of electronic money on
the national payment system is negligible and does not constitute any
immediate threat to monetary stability.
Electronic
money is currently in its infancy, enjoying very little acceptance from
a South African perspective. True electronic money, as the
counterpart of its physical ancestor, is however commonly perceived to
have the potential to become the ideal payment system for commerce on
the Internet.
|
||||||||||
| 7. Conclusion | ||||||||||
|
The future
of electronic commerce is inextricably linked to the development of an
online payment mechanism that is reliable, easy to
use and secure. An analysis of existing online payment systems indicates
that there is still some way to go before the ideal online payment system
becomes operational and widely accepted.153
It is likely that payment cards will retain their current dominance as a method of online payment for some time to come. The imminent full-scale implementation of SET may further promote the use of this payment system that up to now has experienced unrivalled international acceptance. The requirement for central processing, the limitation of users and the fixed costs of payment are however serious disadvantages to the system. 308 The advent
of true electronic money has shown its potential to become
the ideal payment system. True electronic money is especially
suited for low value payment and person to person transfer, which constitute
big advantages over systems that require central processing. The success
of any electronic money scheme is likely to depend on the way that it
is implemented.154 In this regard it has
been suggested that electronic money could gain wider acceptance if it
is underwritten by a suitably widely recognised and trusted body.155
It is
apparent that many of the issues addressed in this chapter relate to novel
applications for both technology and law. It is submitted that in the
light of the almost non-existent regulatory framework of South African
law, in which electronic commerce is currently conducted, the development
of electronic commerce is hampered. It is further submitted that the true
potential of electronic commerce will only be realised once the parties
to it can be sure of their legal position.
|
||||||||||
|
309 |
||||||||||
|
||||||||||
|
||||||||||