20. DEBIT PROCESSING UPDATES

Attention Debit Processing Merchants!

To ease consumer concerns about fraud and lost or stolen credit cards, Visa instituted the Cardholder Information Security Program (CISP) in 2001, which was a set of mandates for processing card and debit card transactions. In 2004, Visa collaborated with MasterCard and created the PCI DSS (Payment Card Industry Data Security Standards) in an effort to standardize industry security requirements.

New updates from Visa and MasterCard have affected the type of terminal or PINpad a merchant can use to securely process transactions. One of these updates will soon affect all Debit-processing merchants, and the type of PINpad they are able to use.

Effective July 1st, 2010, all Debit transactions must be processed with a PINpad that is TDES (Tripe Data Encryption Standard)-encrypted, according to the PCI DSS. If your equipment is not TDES-encrypted, it will need to be replaced or re-encrypted (if possible) by this deadline in order for you to continue processing Debit. Once that deadline arrives, EMG will be obligated by the PCI DSS to deactivate your Debit card processing unless the PINpad has been replaced by a TDES-encrypted PINpad. You will still be able to process credit transactions.

To determine if your equipment is TDES-encrypted, look for a sticker on the back of your PINpad or terminal for the encryption type. If you received your debit processing equipment from EMG after January 1, 2008, it is highly likely your equipment is TDES-encrypted. Just look for a sticker with TDES or 3DES on it. If it has a sticker that simply reads, “FAPS Paymentech or FAPS Fifth Third,” your equipment is not TDES-encrypted and will need to be upgraded or replaced. If you’re not able to determine your encryption type, please contact your sales representative - they can contact our deployment department to check the encryption type of your equipment.

In January of 2009, EMG will begin sending letters informing you of upgrade opportunities and who you can contact to get your new PINpad. If you would like to make the change now to ensure your customers the highest level of security, EMG has TDES-encrypted PINpads and terminals available, and will aid you in upgrading your equipment to a higher security standard.

If you are currently only processing credit transactions but would like to add Debit as a money-saving benefit, EMG can supply you with a TDES-encrypted PINpad. If you don’t have your local office’s contact information, please Click Here.

If you have any questions regarding TDES encryption or processing Debit through EMG, please Click Here, call your local office, or our 24-hour customer service line at (800) 789-8897, option 2.