mPOS FAQs
  1. What is an mPOS solution?
  2. Where do I find information about mPOS on the EMVCo main site?
  3. What are possible mPOS solution architectures?
  4. Can all payment form factors be supported by mPOS?
  5. Are there any mPOS specific requirements in the EMVCo specifications?
  6. What steps need to be taken to get an mPOS solution approved?
  7. Where do I find more about EMVCo Terminal Type Approval for mPOS solutions?
  8. How do I indicate that an mPOS solution accepts contactless payments?
  9. What are the requirements for placement of the contactless symbol?
  10. What Cardholder Verification Methods (CVM) can be supported for mPOS?
  11. Can the touchscreen of the merchant’s consumer grade mobile device be used for cardholder PIN entry?
  12. What is Consumer Device CVM (CDCVM)?
  13. Can the touchscreen of the merchant’s consumer grade mobile device be used for electronic signature capture?
  14. Is an mPOS solution required to deliver a receipt to the cardholder?
  15. Is there any mPOS indicator in authorisation and clearing messages?
  16. Are there any User Interface requirements for an mPOS solution?
  17. Could the NFC antenna in a consumer grade mobile device be used as a contactless card reader as part of an mPOS solution?
  18. Could a consumer grade mobile device be used for both Card Emulation and as a contactless card reader?
  19. Do I need to reapprove my mPOS solution if the operating system of the consumer grade mobile device is upgraded?


 



mPOS FAQs

  1. What is an mPOS solution?

    A mobile Point of Sale (mPOS) is a consumer grade handheld device (e.g. a smart phone or tablet) with wireless connectivity that is used for the acceptance of payment cards. An mPOS solution typically comprises:

    • A mobile device – consumer grade mobile phone or tablet device with wireless connectivity
    • Card Reading functionality (contact, contactless or both)
    • Applications supporting the payment functionality, the EMV kernel and user interface
    • Server-side software
    • CVM capture capability (e.g. PIN entry, signature capture)

    For further details please refer to the Initial Considerations document produced by the EMVCo mPOS Task Force here.
     
  2. Where do I find information about mPOS on the EMVCo main site?

    mPOS FAQ can be found on EMVCo website here

  3. What are possible mPOS solution architectures?

    The Initial Considerations document considers the general architecture of an mPOS solution, and includes relevant examples in Sections 3 and 4 of the document here.

  4. Can all payment form factors be supported by mPOS?

    Yes, mPOS Solutions support all current form factors (depending on implementation configuration) . EMVCo specifications here cover acceptance of contact and contactless using card or mobile technologies (including host card emulation and secure element based solutions). mPOS solutions may also accept magnetic stripe technology.

  5. Are there any mPOS specific requirements in the EMVCo specifications?

    No. At this time there are no mPOS specific EMVCo requirements.

  6. What steps need to be taken to get an mPOS solution approved?

    Depending on the architecture of the mPOS solution, different approvals may be required. A typical list for guidance is as follows:

    • EMVCo currently follows the same process for mPOS solutions as for all other terminals. Please refer to Terminal Type Approval FAQs here for more information.
    PCI security approvals which may be relevant for the mPOS solution. Further information can be found here.
  7. Where do I find more about EMVCo Terminal Type Approval for mPOS solutions?

    At this time there are no mPOS specific EMVCo requirements. EMVCo’s website has a section on Terminal Type Approval here.

  8. How do I indicate that an mPOS solution accepts contactless payments?

    The EMVCo contactless symbol is used to identify support for contactless payments. A Best Practice guide has been developed by EMVCo here.

  9. What are the requirements for placement of the contactless symbol?

    Requirements for placement of the contactless symbol are described in the Contactless Symbol Reproduction Requirements found here.

  10. What Cardholder Verification Methods (CVM) can be supported for mPOS?

    All CVMs as currently defined in EMVCo specifications can be supported, including:

    • Online PIN
    • Plaintext and enciphered offline PIN
    • Consumer Device CVM (contactless only)
    • Signature
    • Combinations of above
    No CVM
     
  11. Can the touchscreen of the merchant’s consumer grade mobile device be used for cardholder PIN entry?

    This may be possible, but payment systems may require solutions to meet the security requirements of PCISSC (e.g. PCI PTS security requirements - here)

  12. What is Consumer Device CVM (CDCVM)?

    CDCVM is a CVM (e.g. passcode, biometric) that is captured and verified on the cardholder’s consumer grade mobile device.

    The results of the CDCVM verification are presented to the mPOS solution an outcome “Confirmation Code Verified” (as described in Book A here, Section 5.5.8)
     
  13. Can the touchscreen of the merchant’s consumer grade mobile device be used for electronic signature capture?

    Yes, electronic signature capture is supported in the EMVCo specifications.

  14. Is an mPOS solution required to deliver a receipt to the cardholder?

    An mPOS solution must support delivery of a receipt to the cardholder. EMVCo specifications support the provision of paper and electronic receipts.

  15. Is there any mPOS indicator in authorisation and clearing messages?

    EMVCo does not currently define a specific terminal type or other indication for mPOS. Individual payment systems may have requirements for identification of mPOS transactions.

  16. Are there any User Interface requirements for an mPOS solution?

    EMVCo Contactless Book A here Section 9 provides User Interface recommendations for contactless solutions.

    EMV Book 4 here Section 11 provides requirements for the Cardholder and Attendant Interface for contact solutions.
     
  17. Could the NFC antenna in a consumer grade mobile device be used as a contactless card reader as part of an mPOS solution?

    Yes, provided the consumer grade mobile device meets EMVCo Level 1 requirements for contactless here along with all other Terminal Type Approval requirements here.

    Please review the EMVCo mPOS Initial Considerations document here for more information on such architectures.
     
  18. Could a consumer grade mobile device be used for both Card Emulation and as a contactless card reader?

    Yes, provided the consumer grade mobile device meets individual payment systems requirements.

  19. Do I need to reapprove my mPOS solution if the operating system of the consumer grade mobile device is upgraded?

    EMVCo released a Type Approval bulletin in February 2014 detailing Major and Minor Changes Definition which can be found here. The next release of the bulletin, by end of 2015, is planned to cover mobile operating system upgrade.