Moving to MPoC
The trade-off has narrowed. The deadline hasn't moved.
- CPoC and SPoC are in sunset.
- New submissions close on 31 October 2026.
Waivers were a bridge. The bridge is closing.
Solutions built on CPoC and older scheme approvals have been kept alive on waivers. That made sense while the performance trade-off was real: MPoC's security stack cost transaction time, and merchants noticed.
That trade-off is what the waiver conversation rested on. It no longer holds.
What MPoC actually costs you in transaction time
Merchant wait time measures how long a user waits for the app to respond. It excludes tapping the card and PIN entry, because that time belongs to the person, not the software. Measured by Mypinpad with the full MPoC stack active, attestation and monitoring included.
Median merchant wait time under MPoC
80% of transactions at or below
Typical total transaction time, including tap and host round trip
Median merchant wait on lower-end devices
What is happening, and when
31 October 2026
New CPoC and SPoC submissions close. The sunset period runs from 1 May to 31 October 2026.
30 April 2027
PCI PTS POI v5 hard stop, extended by one year. After this date, newly deployed devices must meet a later standard. Devices already installed can generally remain in service.
If your acceptance estate depends on a standard in sunset or a terminal generation with an end date, the decision window is now, not when the deadline arrives.
Starting from where you are
Mypinpad routes direct to your existing gateway, so adding MPoC-validated acceptance does not mean replacing your processing, your settlement or your host integrations. Keep what works. Add the acceptance layer.
Direct-to-customer deployments — DTC-GW and D2A-hard — carry a contractual 99.99% service level. Every transaction is pushed to your systems in real time, with a portal your team runs and open APIs behind it.
The shift is already happening
Software-based payment acceptance is a growing segment in payments infrastructure. Active devices have more than doubled since 2024.
Mypinpad has been building for this shift since 2012.
| Year | Revenue (USD) | Source |
|---|---|---|
| 2025 | $440M | Grand View Research; Fortune Business Insights |
| 2026 | $504–534M | Grand View Research; Fortune Business Insights |
| 2033–34 | $1.69–2.46B | Grand View Research; Fortune Business Insights |
Validated where it counts
Mypinpad is listed and validated against PCI MPoC v1.1 across all three sub-programmes: Software, Solution, and Attestation & Monitoring Services. Every listing is checkable on the PCI Security Standards Council's public registry — ours and everyone else's.
Search the PCI SSC MPoC listings for Mypinpad Ltd (opens in a new tab)
Find out what moving actually involves.
Tell us what you're running today and we'll tell you what the move looks like.