Created in 1992 by Australian banks, the APCA is the self-regulatory body for Australia’s payments industry.

The Australian Payments Clearing Association (APCA) manages and develops regulations, procedures, policies, and standards governing payments clearing and settlement within Australia. In this core role, APCA oversees five clearing systems covering cheques, direct debits and direct credits, aspects of EFTPOS and ATM transactions, high-value payments, and bulk cash exchanges between financial institutions. 

Who needs APCA compliance?

Supplemental to PCI PTS device approval, the APCA requires that any device that handles unencrypted PINs or associated cryptographic keys must undergo an evaluation to the Issuers and Acquirers Community (IAC) device security standards. APCA's device evaluation and approval process provide strong protection for cardholders' PINs by ensuring that all PIN entry devices used for IAC transactions in Australia meet best practice security standards.These devices include the following product types:

  • Automatic Teller Machines (ATMs)
  • Point of Sale (POS) Devices
  • Encrypting PIN Pads (EPPs)
  • Security Control Modules (SCMs)
  • Unattended Payment Terminals (UPTs)
  • Key Loading and Transfer Devices

What can UL do for me?

UL is an approved IAC evaluation facility and can perform device security evaluations and guide you through the evaluation path to get your device certified. Furthermore, UL’s laboratory in California (previously known as Infogard) is the only APCA IAC Approved Evaluation Facility in the United States. Our experienced staff of APCA evaluators supports our clients through every phase of the process, from compliance consulting to approval coordination with APCA.

Get in touch