Request for Comments: New Mobile Payments on COTS (MPoC) Standard

From 24 January to 22 February 2022, Mobile Task Force members and PCI-Recognized Laboratories are invited to review and provide feedback on the new Mobile Payments on COTS (MPoC) Standard during a 30-day request for comments (RFC) period.

The RFC will be available through the PCI SSC portal, including instructions on how to access the documents and submit feedback. Eligible stakeholders will also receive instructions via email. As a reminder, participants are required to accept a Non-Disclosure Agreement (NDA) to download the document. Please review the RFC Process Guide for more information.  

Please note that PCI SSC can only accept comments that are submitted via the PCI SSC portal and received within the defined RFC period.

Background on the New Mobile Payments on COTS (MPoC) Standard
The Council is currently developing a new mobile standard that will be designed to support the future evolution of mobile payments. The new standard builds on the existing PCI Software-based PIN Entry on COTS (SPoC) and PCI Contactless Payments on COTS (CPoC) Standards. The working title of this new standard is Mobile Payments on COTS (MPoC).

The purpose of MPoC is to provide a modular, objective-based, security standard that will support various types of payment acceptance channels and consumer verification methods on commercial off-the-shelf (COTS) devices. The goal is to create a flexible mobile standard and program for payment solution development, allowing for both PIN entry and contactless payments through the COTS-native interfaces.

This is the first RFC for this new standard, which is planned for release towards the end of 2022. This initial RFC is open to Mobile Task Force members and PCI-Recognized Laboratories. All Participating Organizations will be eligible to participate in a second RFC scheduled for later this year.

Also on the blog: The Future of PCI SSC Mobile Standards