Payments NZ is reminding merchants to check the age of their EFTPOS terminals as a key deadline to upgrade older models approaches.
Devices running the PCI 3.x standard will no longer be compliant and will be disconnected from New Zealand payment networks after June 30, 2024.
Payments NZ chief executive Steve Wiggins says the hardware will be phased out as more modern and secure technology becomes available.
“The payments industry is working hard to ensure New Zealanders’ sensitive card data is protected from financial crime,” Mr Wiggins said.
Wiggins says ensuring EFTPOS devices operate to the latest standards can help keep the risk of card fraud low.
“We are encouraged to hear from banks and device vendors who have communicated the changes directly to merchants that the vast majority have already replaced their older devices,” Wiggins said.
“However, there may still be merchants who have not yet made these important upgrades.
“We have just over two months left until the old 3.x model is no longer needed. Starting at the end of June, this hardware will be powered off and no longer available to process transactions.
“We strongly encourage sellers who are still using 3.x devices or who have questions to contact their device provider as soon as possible.”
Wiggins said the sunset date has been extended twice due to equipment supply chain issues caused by COVID-19.
“We would like to thank the sellers who proactively upgraded their devices in time for earlier dates.
“The hardware used to process card transactions in New Zealand is extremely secure thanks to the device lifecycle we have in place. Thank you to all the organizations that help maintain that high standard. doing.”
FAQ
What is a PCI 3.x device?
A 3.x device is an EFTPOS terminal that uses hardware that complies with the 3.x standard published by the Payment Card Industry International (PCI) Security Standards Council. Devices are manufactured by various manufacturers and distributed across the country by various sellers and resellers.
How do sellers know the standards for their devices?
If you are unsure whether you have a PCI 3.x device, check with your hardware provider.
Why do I need to replace my 3.x device?
Payments NZ sets device lifecycle dates based on the Device Lifecycle Framework. This framework is in place to ensure that EFTPOS devices use secure technology, ensuring that sensitive card data is continuously protected from unauthorized use.
How do I set the device lifecycle date?
Aotearoa New Zealand complies with international standards set by the Payment Card Industry (PCI) Security Standards Council. These standards are not intended to eliminate the possibility of fraud, but rather address security requirements using risk mitigation methodologies intended to reduce the likelihood of fraud occurring and reduce its impact. Defined.
What should sellers do if they are still using a 3.x device or are unsure?
If you are still using a 3.x device or are unsure, you will need to contact your hardware provider. You need to do this now instead of waiting until sunset approaches.
Learn more about Payment NZ’s Device Lifecycle Framework. Website.
