Before setting up or using a terminal, merchants must inspect it for possible manipulations.
Merchants must not use a terminal if they suspect that it has been manipulated or replaced. They must notify their provider immediately, so that the terminal can be deactivated.
Merchants must keep their terminals out of reach for unauthorized third parties and lock their terminals away at a secure place (e.g. locked cabinet or room), when they are not in use (e.g. outside of business hours).
Merchants must keep written records of all their card terminals and need to regularly compare it to the terminals in their inventory (at least every 6 months). Discrepancies need to be raised with the provider.
Merchants must notify their providers immediately about all lost, stolen or manipulated terminals, so that they can be deactivated.
Merchants must not modify, manipulate or operate their terminals in any unauthorized manner.