AusPayNet Approved Devices
AusPayNet revised the Device Approval Process, effective January 2025
A device or solution is approved for use by the Issuers and Acquirers Community if it is:
- Listed by an Approved Standards Entity and assessed against an Accepted Standard; or
- Approved and listed by AusPayNet
The AusPayNet list below includes devices which have been approved for use specifically by AusPayNet and which are not listed by an Approved Standards Entity. This list includes the following.
- Non-Standard Technologies approved through the Structured Risk Assessment process
- Devices approved under a previous AusPayNet program and for which no Accepted Standard applies
- Devices which has been approved against an Accepted Standard, but where changes have been made to the hardware, firmware and/or other components. These changes must have been approved by AusPayNet, but may not have been approved by the Approved Standards Entity. Approval expiry date is noted against each device and solution.
All AusPayNet Approved Devices will be moved to the AusPayNet Expired Devices List once their expiry date is reached. Such devices can be used in the IAC subject to any conditions shown on the Expired Devices listing.
| Apple | Tap to Pay on iPhone |
|---|---|
| Standards Body: | Australian Payments Network |
| Standard: | Structured Risk Assessment |
| Version: | 19A55340v |
| OS: | Apple iOS:16.4+ |
| Monitoring Environment: | Monitoring: v1.8.0-18 |
| Monitoring Environment: | Attestation: v1.2.1-3 |
| Approval Class: | COTS with PIN |
| PCI Approval Number: | PCI Approval not available at this time |
| Expiry Date: | 15/04/2028 |
| BBPOS Limited | WisePad 3S |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | WPC30.xxx-xx.A |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30386 |
| Expiry Date: | 30/04/2026 |
| BBPOS Limited | WisePad3 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | WPC30.xxx-xx.A |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30378 |
| Expiry Date: | 30/04/2026 |
| Datecs Ltd. | BluePad-5000 v2, BluePad-5000 v3, BluePad-5000 v4, BluePad-5000 v5 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | 2.5.xx.xx |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30318 |
| Expiry Date: | 30/04/2026 |
| Feig Electronic GmbH | cVEND plug |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | cS02.01.xx-xx.xx-x-x |
| Approval Class: | Secure (encrypting) Card Reader (SCR) |
| PCI Approval Number: | 4-80047 |
| Expiry Date: | 30/04/2026 |
| Gilbarco Inc. | VGD 4.X AFD - SPOT M7, VGD 5.X AFD - SPOT M7 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| Firmware: | SCR (Ux300, Ux301, Ux410) : Vault 12.x.x |
| Firmware: | OP 7.x.x |
| Firmware: | SRED 5.x.x |
| Firmware: | AppManager 6.x.x |
| Hardware: | SCR Ux300: M159-300-xxx-xxx-x Rev Axx |
| Hardware: | SCR Ux300: M159-300-xxx-xxx-x Rev Bxx |
| Hardware: | SCR Ux301: M159-301-xxx-xxx-x Rev Axx |
| Hardware: | SCR Ux301: M159-301-xxx-xxx-x Rev Bxx |
| Hardware: | SCR Ux410: U629-04-02-xxx-xx-A0 |
| Hardware: | LCD 1: LCD 5.7” (AM-320240NS) |
| Hardware: | LCD 2: LCD 10.4” (TX26D14VM2EAA) |
| Hardware: | LCD 3: LCD 15.6” (NL13676BC25-03F) |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-20315 |
| Expiry Date: | 30/04/2026 |
| IBM Corporation | IBM 4768 PCI-e Cryptographic Coprocessor |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Hardware Security Module (HSM) |
| Version: | 3.x |
| Remote Key Management: | Trusted Key Entry V9.2 |
| Approval Class: | Hardware Security Module (HSM) |
| PCI Approval Number: | 4-20333 |
| Expiry Date: | 30/04/2026 |
| IBM Corporation | IBM 4769-001 Cryptographic Coprocessor Security Module |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Hardware Security Module (HSM) |
| Version: | 3.x |
| Remote Key Management: | Trusted Key Entry V9.2 |
| Approval Class: | Hardware Security Module (HSM) |
| PCI Approval Number: | 4-20358 |
| Expiry Date: | 30/04/2026 |
| IBM Corporation | IBM 4770-001 Cryptographic Coprocessor Security Module |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Hardware Security Module (HSM) |
| Version: | 4.x |
| Remote Key Management: | Trusted Key Entry V10.0 and higher |
| Approval Class: | Hardware Security Module (HSM) |
| PCI Approval Number: | 4-20373 |
| Expiry Date: | 30/04/2032 |
| Ingenico | iUR250, iUR250P |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 4.x |
| Firmware: | 820073 V1.xx |
| Approval Class: | Secure (encrypting) Card Reader (SCR) |
| PCI Approval Number: | 4-30250 |
| Expiry Date: | 31/12/2033 |
| Ingenico | Move/5000 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 4.x |
| Hardware: | MOV50BA - Contactless |
| Hardware: | MOV50AC (Non CTLS) |
| Hardware: | MOV50BC (CTLS) |
| Hardware: | MOV50CC (Non CTLS with privacy shield) |
| Hardware: | MOV50DC (CTLS with privacy shield) |
| Hardware: | MOV50JC (CTLS without privacy shield, with desktop case lid) |
| Hardware: | MOV50AQ (Non CTLS) |
| Hardware: | MOV50BQ (CTLS) |
| Hardware: | MOV50CQ (Non CTLS with privacy shield) |
| Hardware: | MOV50DQ (CTLS with privacy shield) |
| Hardware: | MOV50JQ (CTLS without privacy shield, with desktop case lid) |
| Firmware: | 820548v01.xx - Open Protocol |
| Firmware: | 820548v02.xx - Open Protocol |
| Firmware: | 820548V03.xx – Open Protocol |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-20282 |
| Expiry Date: | 31/12/2033 |
| NCR Atleos | ETS2 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 4.x |
| Hardware: | ATM: 3010-xxxx-xxxx |
| Hardware: | EPP: ETS2 |
| Firmware: | ATM: NCR Kalpana Android 01.00.xx.xx with scheme IAC 7/2015 |
| Firmware: | EPP: ETS2_01xxxxxxx with loader EL103xxx and touch fw41xx |
| Approval Class: | Encrypting PIN Pad (EPP) |
| PCI Approval Number: | 4-20284 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | A30 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | 25.00.xxxx APCA Version: 1.2.x |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30407 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | A77 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | 25.01.xxxx APCA Version: 1.0.x |
| FW Version: | 25.01.xxxx APCA Version:1.1.x |
| FW Version: | 25.01.xxxx APCA Version:1.2.x |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-40269 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | A920 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| HW Version: | A920-xxx-xx4-0xxx |
| FW Version: | 24.00.xxxx, 24.01.xxxx |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-40215 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | A920Pro |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | APCA Version:1.0.x |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-40273 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | A930 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 6.x |
| HW Version: | A930-xxx-Rx5-0xxx (w/ CTLS) |
| HW Version: | A930-xxx-0x5-0xxx (w/o CTLS) |
| HW Version: | A930-xxx-Rx5-1xxx (with CTLS) |
| HW Version: | A930-xxx-0x5-1xxx (no CTLS) |
| FW Version: | 25.00.xxxx |
| FW Version: | 25.01.xxxx |
| FW Version: | 25.01.xxxx APCA Version: 1.0.x |
| FW Version: | 25.01.xxxx APCA Version: 1.1.x |
| FW Version: | 25.01.xxxx APCA Version: 1.2.x |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30471 |
| Expiry Date: | 30/04/2030 |
| PAX Computer Technology (Shenzhen) Co Ltd | IM10 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | 15.01.xxxxxx |
| Approval Class: | Secure (encrypting) Card Reader (SCR) |
| PCI Approval Number: | 4-40275 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | IM30 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | 25.00.xxxx APCA Version: 1.0.x |
| FW Version: | 25.00.xxxx APCA Version:1.1.x |
| FW Version: | 25.00.xxxx APCA Version:1.2.x |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30371 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | IM300 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| Firmware: | IM300(EPP): 15.01.xx xxxx |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-40239 |
| Expiry Date: | 30/04/2026 |
| PAX Computer Technology (Shenzhen) Co Ltd | S920, S920 L, S920 F |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | 14.02.xx xxxx |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30159 |
| Expiry Date: | 31/12/2033 |
| Quest Payment Systems | Quest Tap to Phone |
|---|---|
| Standards Body: | Australian Payments Network |
| Standard: | Structured Risk Assessment |
| Version: | 1.xx |
| Mobile OS: | Android: 9.0+ |
| Payment SDK: | Quest Tap to Phone Library v1.x.x |
| Payment Application: | Quest AirPay POS v1.x.x |
| Payment Application: | JB Hi-Fi Payments App v1.0.x |
| Monitoring Backend: | Quest Airshield 1.x.x |
| Payment Application: | Kmart FlexiPOS v2.x.x |
| Payment Application: | Officeworks Pollie v1.0.x |
| Approval Class: | COTS with PIN |
| PCI Approval Number: | PCI Approval not available at this time |
| Expiry Date: | 01/04/2027 |
Deployment Conditions:
- Additional payment applications must be approved before deployment.
- Quest Payment Systems must provide an independent PCI-PIN audit to each Acquirer of the Solution.
- COTS devices must have a hardware-backed key store.
| Quest Payment Systems Pty Ltd | QT720 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 2.x |
| Firmware: | 06.XX.YY |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30043 |
| Expiry Date: | 31/12/2027 |
| Soft Space Sdn Bhd | Fasstap Solution |
|---|---|
| Standards Body: | Australian Payments Network |
| Standard: | Structured Risk Assessment |
| Version: | 1.xx |
| Payment SDK: | Soft Space Fasstap SDK version 3.5.x.x |
| Mobile OS: | Android 9 and above |
| Monitoring Backend: | Soft Space Fassguard version 2.2.x.x |
| Payment Application: | Zeller Tap-to-Pay v1.1.x |
| Payment Application: | WOW MPOS vXXXX.XX.S1 |
| Payment Application: | VenueSmart vXXXX.XX.S1 |
| Payment Application: | Smart Trolley vXXXX.XX.S1 |
| Payment Application: | Paimnt Till V1.0.1.S1 |
| Approval Class: | COTS with PIN |
| PCI Approval Number: | PCI Approval not available at this time |
| Expiry Date: | 25/08/2026 |
Deployment Conditions:
- All payment applications must be approved before deployment.
- Soft Space must provide an independent annual AusPayNet or annual PCI-PIN audit to each Acquirer of the Solution.
- PCI PIN and PCI DSS AoCs must be provided for systems where cardholder data is decrypted and PINs are translated, if these systems are separate from the audited Soft Space systems.
| Stripe | Tap to Pay on Android |
|---|---|
| Standards Body: | Australian Payments Network |
| Standard: | Structured Risk Assessment |
| Version: | 4.x.x |
| OS: | Android 11 and above |
| Monitoring Backend: | Stripe Attestation Service |
| Stripe Integrated Applications: | v2.23.5, MobilePOS, v3.98. v1, 10.0, v10.0.1, v10.3.0, v4.2.1v5.0.53, v44.1.0, v6.0.1, v1.26.2, v2.2.14, v2.13.0, v4.89, v1.044, v1.0.3, v13.9.0, v2.8.4, v2.1, v5.1.0, v7.47.0, v0.1.34, v1.1.65, v14, v1.0.2, v2.1.2, v2.7, v2.25.4, v1.4.9, v1.0.0-ttp, v5.2.1, v1.0.7, 1.1, 1.0, 3.0.8, 3.0.15, 3.5.21, 5.36, 5.3.6, 1.0.7.3, 2.1.3, 2.0.4, 1.1.83, 5.8.0, 25.12.11, 1.112, 6.4.10 |
| Approval Class: | COTS with PIN |
| PCI Approval Number: | PCI Approval not available at this time |
| Expiry Date: | 25/03/2026 |
- Payment Applications embedding the SDK shall be reviewed and provided to AusPayNet for listing before deployment.
- Payment Applications:
- shall be reviewed by the Acquirer, a trusted third party on behalf of the Acquirer, Stripe on behalf of the Acquirer or a PCI recognized laboratory;
- must be shown to have no identifiable vulnerabilities or other security weaknesses; and
- must be reviewed against relevant PCI DSS requirements where Manual PAN entry is supported
| Thales DIS CPL CANADA, Inc. | SafeNet Luna EFT 2.0.0, SafeNet Luna EFT 2.1.0, SafeNet Luna EFT 2.2.0, SafeNet Luna EFT 2.3.0, Safe |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Hardware Security Module (HSM) |
| Version: | 2.x |
| Custom Function: | 2.2.2 WPC 1.4 |
| Approval Class: | Hardware Security Module (HSM) |
| PCI Approval Number: | 4-70020 |
| Expiry Date: | 30/04/2032 |
| Thales DIS CPL USA, Inc. | payShield 10K |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Hardware Security Module (HSM) |
| Version: | 3.x |
| FW Version: | ANZ Custom Function: 1003-0000 |
| FW Version: | Coles Custom Function: 1009-0000 |
| Approval Class: | Hardware Security Module (HSM) |
| PCI Approval Number: | 4-40266 |
| Expiry Date: | 30/04/2026 |
| Verifone, Inc. | V205c, V200t |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| VFSRED: | 7.x.x |
| VFOP: | 1.x.x |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-10227 |
| Expiry Date: | 30/04/2026 |
| Verifone, Inc. | Ux410,UX300,UX301 |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| FW Version: | AppManager: 10.x.x |
| FW Version: | SRED: 7.x.x |
| FW Version: | Vault: 17.x.x, 18.x.x |
| Approval Class: | Secure (encrypting) Card Reader (SCR) |
| PCI Approval Number: | 4-20353 |
| Expiry Date: | 30/04/2026 |
| Windcave Limited | SCR200F-VM |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 5.x |
| Hardware: | SCR - SCR200F-VM |
| Hardware: | PIN Pad - SKP200F |
| Hardware: | SKP200F-A-RM-0x |
| Hardware: | SKP200F-A-FM-0x |
| Firmware: | SCR - SCR200F-VM |
| Firmware: | PIN Pad - SKP200F |
| Firmware: | 1.0.x.xx |
| Approval Class: | Secure (encrypting) Card Reader (SCR) |
| PCI Approval Number: | 4-30422 |
| Expiry Date: | 30/04/2026 |
| Worldline | Tap On Mobile |
|---|---|
| Standards Body: | Australian Payments Network |
| Standard: | Non-Standard Technologies at Point of Interaction |
| Version: | 1.xx |
| Payment Application: | SoftPos TTP main app + SoftPos PIN CVM Version (2.x.x.x + Version 3.x.x.x) |
| Mobile OS: | Android 11+ |
| Monitoring Backend: | Softpos Version 2.1.x.x |
| Approval Class: | NST |
| PCI Approval Number: | PCI Approval not available at this time |
| Expiry Date: | 05/10/2025 |
- All additional payment applications must be approved before deployment.
- Worldline must provide an independent annual AusPayNet or annual PCI-PIN audit of the Solution.
| Worldline SA/NV | YOMANI XR/ML |
|---|---|
| Standards Body: | Payment Card Industry Security Standards Council |
| Standard: | PIN Transaction Security (PTS) Point of Interaction (POI) |
| Version: | 4.x |
| HW Version: | 90700200xx Rev: Ax |
| HW Version: | 90700200xx Rev: Bx |
| FW Version: | Non SRED: 03.03.02 |
| FW Version: | SRED: 03.02.14D |
| FW Version: | SRED: 03.03.02D01 |
| Approval Class: | PIN Entry Device (PED) |
| PCI Approval Number: | 4-30194 |
| Expiry Date: | 31/12/2033 |
