Considering Mobile Payments? These PCI DSS guidelines should help.

[RichardH]

In December, 2012, we published a blog post from Ben on our reseller team titled, “Is Mobile an Opportunity for Developers?” in which he discussed the increase in conversations he is having with our reseller partners about mobile payments. This observation is backed by the ControlScan study he mentioned in the article.

If you are a developer considering expanding into mobile payments, do you have the information you need? Are you ready to confidently build mobile payments solutions for your clients that also maintain compliance?

The Payment Card Industry Security Standards Council (PCI SSC) has released two documents that provide excellent information for developers looking to add mobile payments to their portfolio:

• PCI Mobile Payment Acceptance Security Guidelines for Developers – These guidelines are for software developers and mobile device manufacturers and provide guidance on designing appropriate security controls to accept mobile payments securely.
  https://www.pcisecuritystandards.org/documents/Mobile%20Payment%20Security%20Guidelines%20v1%200.pdf

• PCI Mobile Payment Acceptance Security Guidelines – These guidelines educate merchants on the factors and risks that must be addressed in order to protect card data when using mobile devices, such as smart phones and tablets, to accept payments.
  https://www.pcisecuritystandards.org/documents/Mobile_Payment_Security_Guidelines_Merchants_v1.pdf

We encourage any developer who is interested in building mobile payment solutions to carefully review these guidelines and incorporate the recommendations into their development practices and conversations with their merchant clients.

Are you building mobile payment solutions for your clients? Feel free to comment here, or even contribute your own blog post about your experience and suggestions for other developers.