---
title: "Unattended Terminal"
url: "https://mahouse.world/glossary/unattended-terminal"
type: "glossary term"
topic: "Point of sale"
author: "Ihor Vlasov"
reviewed: "2026-09-20"
published: "2026-08-10"
---

# Unattended Terminal

An unattended terminal is a card acceptance device operated by the customer alone — a fuel pump, a vending machine, a parking meter, a ticket machine, an EV charger, a self-checkout — with no staff present to check anything. The schemes give it its own categories and rules: contactless and PIN limits, estimate authorisations with completion advice, stricter physical security, because that is where skimmers and stolen cards go first.

**Also known as:** Unattended payment terminal, Self-service terminal, Kiosk payment

## Key facts

- **Used at:** fuel (the largest category), vending, parking, transport ticketing, laundrettes, car washes, EV charging (the fastest-growing), self-checkout in retail
- **Binding:** scheme rules for unattended and "cardholder-activated" terminals — merchant category codes, contactless-without-PIN limits, PIN requirements above thresholds (with regional differences), rules on pre-authorisation estimates and completion messages (fuel dispensers must send the final amount promptly); PCI PTS certification for the PIN pad; EMV liability shift applied to unattended fuel in the US only from 2021
- **Typical mechanics:** the terminal authorises an estimate (€100 at a fuel pump, a maximum at a charger) before the service, then sends a completion for the actual amount and a reversal for the difference; or authorises a small amount to verify the card and captures the actual later
- **Typical risks:** skimming devices fitted to the reader (fuel and ATMs), card testing by bots on unattended e-commerce-like kiosks, stolen cards used where no one checks, and holds that anger customers when the reversal is slow
- **Parties:** the merchant operating the machine, the terminal vendor and the integrator, the acquirer, the schemes, and the customer alone with the machine

## How an unattended terminal works in practice

A driver inserts or taps a card at a fuel pump. The pump authorises €100 — an estimate, because it does not know how much fuel will be dispensed; the issuer places a €100 hold. The driver fills €42 of fuel. The pump sends a completion advice for €42 within minutes and a reversal for €58; the issuer converts €42 to a charge and releases €58 — or, if the pump's software predates the rule, sends nothing and the €100 hold sits for days on a debit card, which was the customer complaint that drove the schemes' completion mandates. An EV charger does the same with a larger estimate and a longer session; a parking meter authorises the maximum and captures the actual.

The rules exist because nobody is watching. The schemes cap contactless without PIN at unattended terminals and require PIN or other verification above it in most regions; they mandate the completion-advice flows that keep holds short; and they treat fuel and vending as high-risk categories in fraud monitoring. The physical threat is the reader itself — skimmers fitted overnight to pumps, cameras over PIN pads — which drove the US fuel industry's EMV migration (delayed to 2021 for outdoor pumps) and the chip readers that finally made skimming pointless. Card testing arrives too: an unattended terminal that accepts a €1 authorisation is a validation service for stolen numbers.

For payments M&A the unattended market is a terminal and integration business — specialist vendors, EV-charging payment platforms — with regulatory tailwinds in EV (the EU's AFIR requires card acceptance at new public chargers).

## Example

A fuel retailer with 300 sites runs pumps that authorise €120 and send completion advices in the overnight batch. Holds sit on customers' cards for one to three days; 4,000 complaints a year; and a consumer regulator's letter. The pumps are updated to send completion and partial reversal within two minutes of the nozzle returning; holds release the same hour at most issuers; complaints fall by 90%. The retailer's next project is the EMV migration of its outdoor pumps before the US liability shift date, at $8,000 a pump — $2.4m for the 300 sites' fleet — which its counterfeit-fraud losses of $600,000 a year and the skimmers found on eleven pumps make an easy case.

## Common mistakes

- Estimate authorisations with no prompt completion, and holds that outlast the customer's patience.
- Contactless limits or PIN rules configured for attended terminals.
- Accepting tiny authorisations on kiosks with no velocity checks, and becoming a card-testing service.
- Delaying EMV at outdoor terminals past the liability shift.
- No physical inspection routine for readers, so the skimmer is found by the acquirer's fraud team.

## Related terms

- [Point of Sale](https://mahouse.world/glossary/point-of-sale.md)
- [Contactless Payment](https://mahouse.world/glossary/contactless-payment.md)
- [EMV](https://mahouse.world/glossary/emv.md)
- [Card-Present Transaction](https://mahouse.world/glossary/card-present-transaction.md)
- [Authorisation Hold](https://mahouse.world/glossary/authorisation-hold.md)
- [Reversal](https://mahouse.world/glossary/reversal.md)

— Ihor Vlasov, M&A FinTech Expert. Last reviewed 2026-09-20. https://mahouse.world/authors/ihor-vlasov