PTS POI is a certification framework for payment terminals and other point-of-interaction devices that handle card-present transactions. It evaluates whether a device is built and configured to resist common payment threats, such as tampering, unauthorized access, insecure key handling, and weak software or firmware controls. In practice, it helps ensure a terminal is not just functional, but suitable for use in a payment environment.
This matters because attackers often target the acceptance layer, not the payment network itself. A weak terminal can be replaced, opened, modified, or connected to rogue peripherals to capture card data or alter transactions. Certification supports defenses by steering merchants and vendors toward approved hardware, secure configurations, and controlled updates. It does not eliminate risk, but it raises the bar and gives buyers a technical baseline for comparing devices before deployment.