Payments NZ confirmed that all EFTPOS terminals using the PCI 4.x security standard had to be replaced by 30 April 2026. That deadline has now passed. From 1 May, these devices are non-compliant and subject to disconnection from the payment network. The sunset date was first set in 2017, giving businesses and providers significant time to prepare.
How the EFTPOS Device Lifecycle Works
Payments NZ uses a device lifecycle framework to manage payment terminal security and network safety. It works in three stages:
No new registrations – they stop accepting new models based on older standards
No new connections – they prevent any new devices of that model from joining the network.
Sunset date – existing devices are phased out and must be removed
For PCI 4.x terminals in New Zealand:
No new connections allowed from 30 April 2024
Mandatory disconnection (sunset) by 30 April 2026
1. Security and reliability
Older technology is more vulnerable to fraud. If your business is still running a PCI 4.x terminal, you're operating outside current network security standards.
2. Avoiding disruption
The sunset date has passed. Any remaining PCI 4.x devices are now subject to disconnection. Businesses affected may lose card payment capability until a replacement is in place.
3. Act now
If you haven't yet upgraded, contact your provider immediately. Payments NZ has confirmed there are no extensions.
If you're still using a PCI 4.x terminal, act now:
Good news for Eftpos NZ customers: if you're with us on a subscription, your device is already compliant.
If you need to switch providers, get in touch — we'll work to get you up and running as quickly as possible.
Read our FAQs about the 2026 EFTPOS upgrade here.