Important PCI Compliance Update for Revel Advantage Users with Ingenico 3000 or 3600 Terminals

Dear Revel Systems,

Please forward to support teams...

I have identified a critical issue with Safer Payments that affects Revel Advantage XT, Tri POS or Freedom Pay customers and resellers using Ingenico Lane 3000 and Lane 3600 payment terminals. This may be the solution to a long-standing compliance problem.

For the past two years, many of us have been frustrated by our PCI compliance questionnaires incorrectly resulting in an SAQ Type C classification, rather than the expected SAQ Type B-IP. 

This misclassification forces merchants to conduct quarterly manual IP port scans to avoid a $79 non-compliance fee per location.

This process has been extremely time-consuming, especially for multi-location businesses, as it requires a separate, multi-day attestation process for each site.

After speaking directly with a representative from Safer Payments, I learned the root cause: The device profiles for the Ingenico Lane 3000 and 3600 are flawed within their system. When "Internet" is selected as the connection type, the questionnaire fails to recognize the devices as having end-to-end encryption (E2EE).

The Temporary Solution:
The Safer Payments agent confirmed that the only current way to achieve the correct SAQ B-IP classification and avoid the required scans is to select the option stating the device connects via a "SIM card only," even when it is connected via the internet.

Safer Payments acknowledged that their profiles for these Ingenico devices are configured incorrectly. A permanent fix will require action from Revel and/or Ingenico. 

Until then, this workaround will save clients dozens of hours per year and prevent unnecessary compliance fees.  Which ultimately saves time and frustration.  Reduces unnecessary stress or reasons for customers to shop around.

Thank you for your attention to this matter!