Point of Sale Pin Entry Device (PED) Triple DES 2010 update

To clarify the 2010 Debit Pin Entry Device standard merchants are expected to comply with by July 2010, not all merchants will need to change their pinpads. If you deployed a POS PED by December 31, 2007 AND it was on the 2004-2007 Visa PCI lab approved list, you have until December 31, 2014 to replace it.

If you do not meet that requirement, then you’ll need to replace your PED by July 1, 2010 with a unit that meets the new Triple Data Encryption Standard (TDES) standard. Look carefully. There are companies that will sell you units that do not comply with the new standard.

POS- Point Of Sale

PED – Pin Entry Device

POS PED- a device in a merchant location where the customer is present at the time of the transaction.

Pinpad – pin pad- another name for PED

Triple DES- Triple Data Encryption Standard

3DES – same as above

OVERVIEW OF THE 2010 PCI COMPLIANCE RULE FOR DEBIT PIN ENTRY DEVICES:

The new standard is to improve the security of customer debit cards. The technology has been widely implemented over a number of years in ATM’s and such, and merchant pinpads are the last piece to complete.

DEADLINES:

July 1, 2010 If your unit was deployed after 12/31/2007 and it does not have Triple DES encryption, then you need to replace it. Any unit deployed prior to 2004 needs to be replaced.

12/31/2014 If you deployed a POS PED by December 31, 2007 AND  it was on the 2004-2007 Visa PCI lab approved list, then you must replace with a PCI SSC POS PED by this date.

When you deployed your PED is a matter of record with your current service provider. Where is a copy of the 2004-2007 Visa PCI lab approved list? https://partnernetwork.visa.com/vpn/global/category.do?userRegion=1&categoryId=19&documentId=33

HOW DO I VERIFY IF I HAVE A PCI COMPLIANT PED?

The PCI Data Security Standards Council has an updated list for all merchant providers. List of PCI compliant PEDs

WHICH NEW PIN ENTRY DEVICE DO YOU RECOMMEND?

First, make sure the unit has Triple Data Encryption Standard (TDES) certification. Just because someone is selling it, doesn’t mean it’s TDES. The PED must be matched to your terminal and the merchant services provider. You can’t just pick any unit and attach it. A hugely popular unit is the

First Data FD-10 debit pin pad fd 10 debit ped pinpad

because First Data is one of the largest payment processors in the country. Many merchant providers utilize the First Data system, therefore can use the unit. Additionally, it works with many different desktop terminals.

If you need to upgrade, now is the time to look at your entire system. Do you need a PED or would you be better off with a signature capture terminal that has an integrated PED? You can get a wireless, desktop or, or even a device that connects to a host based system like CenPOS that provides incredible benefits for organizations processing $1 million per month and up.  Take a look at the Ingenico i6580, a top of the line unit.

signature capture terminal ingenico i6580 i6550

In summary, I like units that have in integrated Debit PED over a separate device that attaches. Oh, and this is another area that you have to be very careful reading product description text. Some product technical descriptions say they accept debit cards but they are not referring to accepting pin debit transactions! As if merchants don’t have enough to get confused about.

All debit PED’s must be encrypted. This is done via a process called an injection. There are a limited number of facilities in the USA that can perform the injection. That means you should not wait until the last minute because a lot of other people will.

3D Merchant Services is an authorized reseller for current equipment ONLY for major brands including Verifone, Hypercom, and Ingenico. We also offer Nurit, Way and other brands. Because of our high volume, we have wholesale prices compared to others. We’re independent- you can use our credit card processing or not. We don’t give free equipment- you’ll get a better deal on your processing and your equipment if you keep the transactions separate. Equipment is never really free.

Related article:

Which Verifone pin entry devices are pci compliant?

First Data FD-30 PIN Pad

FD-30 PIN pad discount sale $185. The FD30 combines contactless reader technology, a traditional magnetic-stripe reader and a PIN pad in one compact unit. 2010 PED compliant, it’s the newest device from First Data. The device is able to accept PIN-secured and signature debit cards, credit cards, EBT cards plus a variety of contactless cards, key fobs and mobile payment supported devices.

If you’re investing in new pin pads now, you might as well get this one if you are on First Data, because contactless payment methods are expected to explode in the next 12 months. MasterCard has already issued over 50 million contactless cards and devices. Pin debit reduces merchant risk since there are no chargebacks, plus reduces costs in most cases.

In summary, the main differences between this and other pin pad devices are:
– Interactive payment process with lights and audio cue. This keeps lines moving fast and you are more likely to convert transactions to pin debit vs signature debit.
– Accepts all credit, debit and gift contactless cards, key fobs and other form factors including POS-enabled mobile devices.
Field-upgradable to accept new payment types and enhancements as they become available.

If you process under $1,000,000 per month, this is a fine solution if you are on the First Data network, one of the three largest in the USA.
If you process over $1,000,000 per month, you’ll want to explore a more robust CenPOS solution to increase pin debit usage.

CALL 954-942-0483 TO ORDER.

FD-30 Pin pad brochure

Why am I offering this great price? Do I want to sell lots of equipment? No. I hope that you’ll give me the opportunity to help you control your credit card processing costs through a managed service.

Do you know the difference between costs you can control and costs that you cannot?

Do you know what interchange costs are?

Do you know how you can influence which levels of interchange you qualify for?

How are you managing interchange qualification now?

If you qualify, we have several programs to help you PERMANENTLY control payment processing costs. Keep your payment processor or change your payment processor. We have different plans for different circumstances including pay upfront, or pay nothing. Here’s more info to get for a merchant account analysis.

What are debit card payment processing costs?

What does it cost to process a debit transaction? A pin debit transaction? Why should you care? There are many complexities to answer the question and the chart below provides a simple way to help you compare costs. This chart can help you make decisions about which merchant terminal to choose because you can see the impact of using different payment processing types.

If you’re not familiar with the different types of debit transactions, listen to my podcast how to increase pin debit for merchants. It contains an overview before delving into specifics about increasing pin debit penetration. A  pin debit transaction occurs when the customer is present and enters their pin number. Merchants need a PED or Pin Entry Device to accept pin debit transactions, and by July 2010, all PED devices must be Triple DES certified.

Fee schedules for debit are varied and just like interchange for credit cards, it’s getting more complex all the time. The most basic interchange and debit network fees are in the chart below:

% per transaction
interchange per transaction
cost per $100k
retail debit (Visa card swiped)
1.03%
$0.15
$1,330.00
key entered- card present- user must get an imprint of the card and sign
1.60%
$0.15
$1,900.00
pin entry debit
0-.75%
$.25 and up
$1,700.00
ecommerce or card not present
1.80%
$0.10
$2,000.00
amount
$100,000
avg per transaction
$50
# trans/100k
2000
pin debit avg*
$0.85
* for this example

See also the related article  Compare wireless payment solutions for silent auctions, January 2010 and podcast how to increase pin debit for merchants.

By understanding the basic differences in pin debit costs, a business can analyze their situation to assist in decision making for:

  • human resources- who needs more training?
  • comparing hardware ROI
  • software and related POS decisions
  • payment processing analysis and changes needed
  • balancing risk

With pin debit transaction costs now on the rise, it’s also important to understand other values of pin debit, namely that there is no risk of future chargeback.

3D Merchant provides detailed pin debit analysis for customers processing $1 million per month and up. For these merchants, the analysis will identify specific opportunities to improve interchange qualification, convert debit to pin debit, and deliver an ROI for CenPOS. CenPOS is a payment processing platform with a multitude of essential PCI Compliance, cost reduction, and fraud prevention tools larger businesses need.