Compliance
Terminal and PIN Pad Security: What Merchants Are Responsible For
Payment security conversations tend to focus on software and networks, but card network rules also cover the physical handling of terminals and PIN pads, an area merchants sometimes overlook until it becomes a real problem.
Physical tampering is a real, documented attack vector
Skimming devices attached to or swapped in for a legitimate terminal have caused real fraud losses across the industry, which is exactly why card network rules require periodic visual inspection of terminals for signs of tampering, unauthorized attachments, or swapped hardware.
What a basic inspection routine looks like
Checking that the terminal's serial number matches what's on record, looking for any attachment that wasn't there before, and confirming the terminal hasn't been swapped for a different unit are the core of a basic routine. This takes a couple of minutes and is far cheaper than dealing with the fallout of a skimming incident.
A tampered terminal usually looks almost right -- which is exactly why a quick, routine check matters more than it seems like it should.
Employee training matters as much as the hardware
Staff who know what a legitimate terminal is supposed to look like, and who are told to report anything unusual immediately, are a meaningful line of defense -- far more so than relying entirely on the hardware itself to prevent tampering.
Get equipment you can trust
See our current terminal lineup and what's included for setup and support.