Secure PIN entry is the protected process of entering a payment card PIN on a certified terminal so the PIN cannot be observed, intercepted, or extracted. It relies on tamper-resistant hardware, encrypted PIN handling, and compliance controls to protect the PIN from the keypad to the payment processor.
In EV charging, secure PIN entry is relevant when a charging site supports chip-and-PIN transactions or other PIN-based payment flows (more common in some regions and certain terminal configurations).
Why Secure PIN Entry Matters in EV Charging
PIN security protects both the customer and the operator by reducing fraud risk and protecting sensitive data.
– Reduces fraud on card-present transactions where PIN verification is used
– Protects customers from PIN theft via skimming devices or compromised terminals
– Supports compliance requirements for payment terminals and acquiring banks
– Builds trust in public charging locations using on-site payment terminals
– Helps limit chargebacks and disputes linked to unauthorized use
For CPOs, secure PIN entry is part of offering reliable, secure payment processing at unattended public chargers.
How Secure PIN Entry Works
Secure PIN entry depends on certified terminal hardware and encrypted PIN handling.
– Customer enters PIN on a tamper-resistant keypad (or secure touchscreen)
– The PIN is encrypted immediately inside the terminal using secure cryptographic keys
– The encrypted PIN block is transmitted through the payment network to the issuer for verification
– The charger or backend receives only the authorization result, not the PIN
– If tampering is detected, the terminal can disable itself and erase sensitive keys
This design prevents the PIN from being exposed to the charger controller, local network, or operator systems.
Key Security Controls and Requirements
Secure PIN entry is typically supported by:
– Certified payment devices (PIN entry device / unattended payment terminal certification)
– Tamper detection and tamper response (key zeroization on attack)
– Encrypted PIN handling and secure key management (key injection, rotation)
– Physical protections to reduce overlay attacks (anti-skimming, secure mounting)
– Regular inspections and monitoring for terminal tamper alerts
– Controlled maintenance access and service procedures
Common EV Charging Use Cases
– Unattended chargers with integrated payment terminals supporting chip-and-PIN
– Charging hubs where card payments need stronger verification
– Sites with higher fraud risk or where local payment norms favor PIN verification
– Mixed transactions: contactless for low-value, PIN for higher-value thresholds
In many deployments, contactless payments dominate, but secure PIN remains important for fallback and certain transaction types.
Key Benefits of Secure PIN Entry
– Strong protection for PIN data and reduced fraud exposure
– Better payment acceptance coverage (supports a broader set of card-present scenarios)
– Improves customer trust in unattended payment terminals
– Helps meet bank and scheme requirements for PIN-enabled payments
Limitations to Consider
– Adds hardware and certification complexity versus contactless-only setups
– Can increase maintenance needs and vandalism exposure in public environments
– Requires robust operational processes for inspections and tamper response
– User experience can be slower compared to contactless tap-to-pay
Related Glossary Terms
Secure payment processing
Payment terminals
PCI DSS
Tokenization
Secure key injection
Payment gateway integration
Pay-as-you-go charging
Chargeback management
Payment terminal compliance
POS integration