Standard for Card Present Payment Processing

February 4, 2025
Categories: Resources, Standards and Governance Tags: Merchant Services

Purpose

The purpose of this document is to establish requirements for UNC Charlotte employees and other authorized users regarding the acceptance of payment (credit/debit) cards for Card Present (CP) in-person payments. Adherence to this standard will help ensure that the University remains compliant with all University, State and Payment Card Industry (PCI) requirements.

Scope

This standard applies to all university employees, affiliates or authorized users who will be accepting electronic payments or interacting with payment card data, functions or systems (e.g., credit and debit cards) as part of their job duties.

Contacts

Direct any general questions about this standard to the Office of the Bursar – Merchant Services at ecommerce@charlotte.edu.

Standard

Approved Processing Platforms

All card processing equipment must be compatible with the processing platform(s) of the University’s merchant services provider (e.g., Fiserv). The University’s merchant services provider is determined by the University in accordance with the North Carolina Office of State Controller (NC OSC) Merchant Card Master Service Agreement (MSA).

Approved Equipment

All CP payment card transactions should be processed through a PCI-listed Point-to-Point Encryption (P2PE) solution from the Payment Card Industry Security Standards Council (PCI SSC), obtained through or approved by Office of the Bursar’s Merchant Services in conjunction with NC OSC.

  • Desktop or laptop computers, tablets or other electronic devices must not be used for entry of CHD by staff or customers. If a merchant processes card transactions online and does not have an approved device to accept card transactions at an event (in a face to face environment), they must either not accept payment at the event or accept cash or checks. 
  • Complete the EC : POS Terminal Order Form to request the rental of an approved POS device to accept CP transactions at an event.

Data Security

All customer receipts must truncate the PAN so that only the last four digits are printed on the merchant and the customer copy of the receipts. The receipts must not display the card expiration date or SAD.

Related Resources

Revision History

  • Initially approved by the AVC for Finance on November 25, 2024