April 7, 2015

Which EMV Device Is Right for You?

Which EMV Device Is Right for You?

Many of our merchant customers are looking into purchasing new payment devices to begin accepting EMV chip cards. In this article, we highlight the payment devices we support for processing EMV and a few of their features that may help you determine which one(s) will work best for your business.

Secure, High-Performing EMV-Capable Devices
Shift4 has carefully selected the following devices for EMV certification due to their strong performance, security, and durability, complete with tamper-resistant and tamper-responsive designs. Each of these devices accepts EMV chip cards, magnetic stripe credit and debit, and contactless payments from mobile wallets like Apple Pay™. They are all SRED compliant and support Shift4’s True P2PE™ (point-to-point encryption), which features encryption at the first point of interaction with a terminal, and combines with TrueTokenization® to provide a significant PCI scope reduction and advanced protection against breaches.

    • Ingenico iPP320 and iPP350
      The iPP320 and the iPP350 are great EMV-capable options if you process high-volume but primarily low-ticket-value transactions at single-lane terminals and an electronic signature capture is not required. The compact, lightweight design of these devices will save you space on your countertop. Plus, they’re “plug and play,” allowing for simple installation and integration to your POS system.

The iPP320 and iPP350 are both PCI PTS V3.0 certified. The only difference between them is that the iPP320 has a white backlit LCD monochrome display and the iPP350 has a slightly larger TFT color display.

    • Ingenico iSC Touch 250 and Verifone MX 915
      For high-volume, multi-lane merchants who sell high-ticket-value items where an electronic signature capture is required, both Ingenico and Verifone have devices that offer the interactivity and rich performance you need. Each of these devices offers an option to electronically sign for payments with a pen-like stylus or using the touch screen.

The iSC Touch 250 is a relatively compact solution with a 4.3” color touchscreen to enable merchants to give their customers multimedia experiences to support promotions with images, video, and sound. The device also includes business applications to support electronic signatures not just for payments, but also for contracts, warranty programs, and enrollments. Featuring a large, backlit keypad that is ADA-compliant, the iSC Touch 250 also allows for readability in low-light environments and is produced using an eco-friendly manufacturing model, complete with ISO 14001 certification. This device is among the first POS devices available in the U.S. to meet the latest PCI PTS V4.0 security standards and is SRED V2.0 approved (in non-contactless mode).

Verifone’s MX 915 has a 4.3” color display that offers a feature-rich experience and supports vibrant video to engage customers with sales, brand, and seasonal promotions. The Linux-based operating system provides flexibility to merchants who desire a simple application development environment. This device is PCI PTS V4.0 certified.

    • Ingenico iSC Touch 480 and Verifone MX 925
      For an impressive visual display with vibrant video on a large multimedia touchscreen device, allowing for rich promotional experiences, merchants with multi-lane environments may want to select the Ingenico iSC Touch 480 or the Verifone MX 925. Both of these devices offer an option to electronically sign for payments with a pen-like stylus or using the touch screen.

The Ingenico iSC Touch 480 features a colorful 7” multimedia touchscreen with a powerful hardware video decoder. Similar to the iSC Touch 250, the backlit keypad is ADA-compliant, and with LED lights to guide card insertion or contactless tap, the device is also effective in low-light environments. Business applications included with the device allow for signatures for contracts, warranty programs, and enrollments in addition to payments. This device is ISO 14001 certified for ECO manufacturing and is PCI PTS V4.0 certified.

As for the Verifone MX 925, the high-resolution 7” WVGA color display, graphic processor, and extensive memory will give your customers a vivid look at your current brand and product promotions. Like the MX 915, the device also features a Linux-based operating system with simple development options. The MX 925 is also PCI PTS V4.0 approved.

  • Ingenico iCMP and iSMP Companion
    Add EMV-capable mobile point of sale (mPOS) solutions to your enterprise with Ingenico’s iCMP or iSMP Companion. Both of these devices are portable and secure. Bluetooth connectivity and authentication allows you to connect virtually with any iOS, Android, or Windows-based smartphone or tablet, making it easy to accept any form of electronic payment, including EMV cards, NFC/mobile wallets, and traditional magnetic stripe cards. The iCMP features a lightweight design with a compact form, making it easy to fit into a shirt pocket or holster. The iSMP Companion conveniently integrates a barcode reader and an extended charge-life battery for full-day usage. Both of these devices are PCI PTS V3.0 approved.
  • Ingenico iWL250
    The iWL250 offers wireless mobility with a variety of wireless options, including GPRS, 3G, WiFi, and Bluetooth Class 1. It offers a lightweight and compact design, fast built-in printer, extended battery life, and a backlit color screen for readability indoors and outdoors. The device is PCI PTS V3.0 approved.

Don’t forget that if you are purchasing new devices, you will need to work with one of our authorized vendors in order to ensure you have the correct configuration, including Shift4’s True P2PE encryption keys. You can get more information about selecting terminal devices and contact information for our authorized vendors by visiting www.shift4.com/thirdpartydevices or reaching out to our Customer Support team at [email protected] or 702.597.2480 (option 2).

More on the EMV Liability Shift
Finally, it’s important to note that while some of you will want to meet the EMV liability shift requirements as quickly as possible, not all of you face the same level of liability risk for card-present fraud, and therefore it may not be cost effective for you to spend thousands – or tens of thousands – of dollars to upgrade equipment just yet. EMV is specifically designed to prevent fraud from the use of counterfeit, skimmed, and lost or stolen credit or debit cards in card-present environments. Some merchant types are far more susceptible to these kinds of fraud than others, namely retailers and high-ticket merchants. As a result, these merchant types will most likely want to get EMV ready as soon as they can. You can look at your current chargeback and fraud rate to determine how the liability shift may affect you.

We also want to underscore that – contrary to what you may have been told – EMV capability by the liability shift date is not required for PCI compliance. The credit card brands – who are recommending the migration to EMV in the U.S. and who set the fraud liability shift deadline – are trying to encourage merchants to become EMV-compliant by not requiring PCI assessments if a merchant can prove that more than 75% of their transactions are processed via EMV. However, processors may still require the assessment and the credit card brands and EMVCo, the organization that maintains EMV chip specifications, do not have the authority to eliminate PCI assessments as those are mandated by the PCI Security Standards Council.

For more support selecting EMV-capable devices, contact information for our authorized device vendors, and to learn when your POS/PMS vendor and processor are expected to be ready for EMV, contact our 24/7/365 Las Vegas-based Customer Support team at [email protected] or 702.597.2480 (option 2).