The New ATM PCI Compliance Deadline is Fast Approaching

The Payment Card Industry (PCI) has set a deadline for all retail ATM operators to upgrade their machines to be compliant with the PCI Enhanced PIN Security (EPP) standard by January 1, 2025. This mandate requires that ALL retail ATMs must have a compliant EPP device installed, which enhances the security of PIN entry and protects against skimming and other types of fraud.

The PCI Security Standards Council (PCI SSC) is an organization that was formed by major credit card companies such as Visa, Mastercard, and American Express, to establish and maintain security standards for card payment systems. The PCI Data Security Standard (PCI DSS) is a set of guidelines that must be followed by all merchants and service providers that accept payment cards. The PCI EPP standard is an extension of the PCI DSS, which addresses the specific security requirements of retail ATM systems.

The deadline for compliance with the PCI EPP standard was originally set for 2020, but it was later extended to January 1, 2025 due to the impact of the COVID-19 pandemic on the ability of merchants and service providers to upgrade their systems.

The PCI EPP standard applies to all retail ATM operators, regardless of the number of ATMs they operate. This includes banks, credit unions, independent ATM deployers (IADs), and other organizations that operate retail ATMs. If an ATM operator does not upgrade their machines to be compliant with the PCI EPP standard by the deadline, their ATMs will not be able to process transactions.

The cost of upgrading ATMs to be compliant with the PCI EPP standard will vary depending on the type of ATM and the number of machines that need to be upgraded. Generally, the cost will be higher for older machines that require more extensive upgrades. Operators with large numbers of ATMs may also face additional costs for logistics, installation, and testing.

Given the enormous scope of this mandate, ATM operators are strongly urged to start the upgrade process as soon as possible. Waiting until the last minute may mean not meeting the deadline and going dark, or paying a higher price for an upgrade due to manufacturer price increases the closer we get to the deadline.

It is also important to work with a reputable vendor who can provide guidance and support throughout the upgrade process. Many vendors offer upgrade kits and financing options for operators with large numbers of ATMs. Ocean ATM offers 8000R keypads and 8000R upgrade kits at really competitive pricing. We also have all accessories (mounting brackets, spacers and adapter cable) in stock currently, which is very important because they are sold out at most of the other suppliers right now.

The PCI EPP mandate is a necessary step to enhance the security of retail ATM systems and protect against skimming and other types of fraud. All retail ATM operators must upgrade their machines to be compliant with the PCI EPP standard by January 1, 2025. With the deadline approaching, it is important for ATM operators to start the upgrade process as soon as possible and take advantage of the resources and support available to them. If we can answer any questions, or provide any recommendations, just give us a call at 877-538-2860.