Recent Updates RSS
The latest changes across PCI SSC resources and EMVCo specifications.
Spotlight On: Dreamplug Technologies Private Limited (CRED), a New Principal Participating Organization
Welcome Dreamplug Technologies Private Limited, operating under the brand name CRED, a new Principal Participating Organization (PPO) at the PCI Security Standards Council! In this special spotlight edition of our …
TTA Bulletin n°293: Contact Terminal Level 2 Type Approval Contactless Product Type Approval Terminals not able to process transaction dates beyond January 19, 2038
The industry is currently facing a limitation related to legacy 32-bit OS versions that calculate date and time from 1970 resulting in a maximum representable value in January 2038 making transactions impossible after this date. Kernels having this limitation …
If a merchant is using a payment application listed as 'acceptable only for pre-existing deployments', is the merchant allowed to install more copies of the application?
Compliance validation programs are managed by the individual payment brands, not by the PCI Security Standards Council. Payment brand validation programs may include whether certain applications must be PA-DSS validated, …
How do I reduce the scope of a PCI DSS assessment?
Network segmentation of, or isolating (segmenting), the cardholder data environment from the remainder of an entity's network is strongly recommended as a method that may reduce the scope of a …
Which PCI PTS point-of-interaction (POI) devices can be used in a validated P2PE solution?
The PCI P2PE Standard and Program require the use of a PTS-approved (non-expired) point-of-interaction (POI) device, which has been evaluated and approved via the PCI PTS program with SRED (secure …
Do ASV scans in SAQ A apply to merchants with webpages that redirect to TPSPs or include TPSPs’ embedded iframes?
Yes. SAQ A for PCI DSS v4.x includes requirements for external vulnerability scanning by a PCI SSC Approved Scanning Vendor (ASV) for merchant e-commerce webpages, even where payment processing is …
TTA Bulletin n°286: Terminal Level 2 Test Cases 4.4c Update
Based on EMVCo's continued review of EMV® Terminal Type Approval Level 2 Test Cases v4.4c, the following updates are necessary, and shall be applied to any type approval session beginning on, or after, the effective date cited above. Update to EMV® Terminal …
EMV® Level 3 (L3) Participant Systems Guidelines
First version of the document. Second version of the document. Guidelines v1.1 1. 1. 1. 2. 2. 2. 2. 2. 3. 3.1. 3. 3.2. 3. 3. 3. 3.5. 3.5. 3. 3. 3.7.1 3.7.2 3.7.3 3.7. 3. 3. 4. 4. 6. Guidelines v1.1 Page v / v 6. 6.3 emvcard. 6.4 emvcard. 7. 7. Guidelines v1.1 …
PCI SSC Training Venue Hosting
PCI embraces AI, post-quantum cryptography to strengthen payment standards
via bfsi.economictimes.indiatimes.com
Request for Comments: PCI Data Security Standard (PCI DSS) v4.0.1
From 3 June to 20 July, eligible PCI SSC stakeholders are invited to review and provide feedback on the currently published PCI Data Security Standard (PCI DSS) v4.0.1 during a …
EMV® 3-D Secure Protocol and Core Functions Specification - DRAFT 1 - Comment period ends 1 July 2026
DSB n° 330: EMV® 3-D Secure Protocol and Core Functions Specification - DRAFT 1 - Comment period ends 1 July 2026
TTA Bulletin n°285: Book C-8 Test Package Release version 1.1d
This Bulletin applies to the Book C-8 Type Approvals.