Before setting up or using a terminal, merchants must inspect
it for possible manipulations.
Merchants must not use a terminal if they suspect that it has
been manipulated or replaced. They must notify their provider
immediately, so that the terminal can be deactivated.
Merchants must keep their terminals out of reach for
unauthorized third parties and lock their terminals away at a
secure place (e.g. locked cabinet or room), when they are not in
use (e.g. outside of business hours).
Merchants must keep written records of all their card terminals
and need to regularly compare it to the terminals in their
inventory (at least every 6 months). Discrepancies need to be
raised with the provider.
Merchants must notify their providers immediately about all
lost, stolen or manipulated terminals, so that they can be
Merchants must not modify, manipulate or operate their
terminals in any unauthorized manner.