SoftPOS · Tap to Phone · PCI MPoC Certified

Turn any Android NFC device into a certified payment terminal.

Phones, tablets and Android payment devices your merchants already carry, with no dongles, card readers or hardware logistics.

···· ···· 4291 CONTACTLESS Total amount $20.00 Tap to Pay Hold card to back of the phone 60s VISA Approved $20.00 · Mastercard ····4291 Receipt sent by SMS
PCI MPoC · Isolated SDK PIN CVM Manual PAN entry Own EMV L2 kernel
Why CYNTE SoftPOS

Everything a certified Tap to Phone launch needs. Nothing you have to bolt on.

PCI MPoC certified, Isolated SDK

Certified as an Isolated MPoC SDK, so your host app stays outside the core evaluation scope, cutting certification cost and months off your launch timeline.

Broad card acceptance

Accept Mastercard, Visa, Discover and other international and domestic card schemes through CYNTE's own certified contactless EMV Level 2 kernel.

Any NFC Android device

Runs on standard NFC smartphones, tablets and Android payment devices. No dongles, no card readers, no hardware logistics.

White-box cryptography

Cardholder data and PIN blocks are encrypted with CYNTE white-box cryptography before they ever leave the device, with a unique key per transaction.

Attestation & monitoring

Continuous device and app attestation with RASP, code obfuscation and anti-tamper controls detect rooted devices, hooking and reverse-engineering in real time.

Integration-first design

Clean Android SDK with straightforward APIs, ISO 8583 / JSON host flexibility, plus mail and SMS receipts out of the box.

PCI MPoC · Security architecture

Certified where it counts: an Isolated SDK under PCI MPoC.

PCI MPoC (Mobile Payments on COTS) is the security standard for accepting payments, including PIN, on off-the-shelf mobile devices. CYNTE TAP4PAY is certified on the Isolated SDK model: the payment engine is evaluated as a self-contained security component, independent of your application.

  • Isolated SDK keeps your host app out of core MPoC software scope
  • PIN CVM with randomized PIN-on-Glass keypad, online PIN support
  • Manual PAN key entry certified within the same MPoC solution
  • White-box cryptography, unique key per transaction, secure channel to the backend
  • RASP, obfuscation and continuous attestation against tampering and debugging
  • Built under PCI Secure Software Lifecycle (SLC) validated development processes
YOUR HOST APP · OUT OF CORE SCOPE CYNTE Isolated MPoC SDK PCI MPoC CERTIFIED BOUNDARY Contactless EMVLevel 2 Kernel PIN on GlassRandomized keypad Manual PANSecure key entry White-boxCryptography encryptedpayload attestedsession key Attestation & Monitoring Backend ENCRYPTED · UNIQUE KEY PER TRANSACTION
Beyond tap-only

PIN and Manual PAN: the two capabilities most SoftPOS products still can't offer.

Tap-only acceptance caps your merchants at contactless limits. CYNTE's MPoC certification covers full cardholder verification and key-entered transactions, so every sale completes on the same device.

PIN on Glass

Above-limit and PIN-preferring cards are verified directly on screen. The keypad layout is randomized on every entry, PIN blocks are encrypted with white-box cryptography the moment they're captured, and online PIN is fully supported.

Manual PAN entry

Phone orders, damaged cards, mail order fallback: merchants key the card number securely on device. PAN data is captured inside the isolated SDK and encrypted before transmission, keeping key-entered sales inside your certified solution.

Who builds on TAP4PAY

One SDK. Four ways to grow acceptance.

Acquirers & PSPs

Launch a branded Tap to Phone service and onboard long-tail merchants in days instead of shipping hardware.

Banks & FIs

Add SoftPOS to your merchant services portfolio with a certified, monitored solution your risk team can sign off.

ISVs & platforms

Embed in-person payments directly inside your vertical software: bookings, deliveries, ticketing, retail.

Enterprise merchants

Queue busting, line-side checkout, curbside pickup and pop-ups on the Android devices your staff already carry.

Partnership

Take TAP4PAY to market on your terms.

Four ways to work with us, from a straightforward referral through to a fully white-labelled SDK shipping under your own brand. Certification, the EMV kernel and key management stay on our side of the line.

Referral

Introduce merchants, acquirers and PSPs; we handle the build, the certification and the support. Commission on live volume, with no engineering commitment on your side.

Reseller & distributor

Sell TAP4PAY in your market under a commercial licence, with onboarding, pricing and first-line support in your hands and our team behind you.

Technology & ISV

Embed the Isolated SDK inside your platform and keep your own application outside core MPoC evaluation scope, so your release cycle stays yours.

White-label & OEM

Ship the SDK under your own brand and app identity, running on our PCI MPoC certification, our EMV Level 2 kernel and our white-box cryptography.

Integration path

From evaluation kit to production in three steps.

Integrate the SDK

Drop the Isolated MPoC SDK into your Android app. Sample apps, sandbox host and documentation get your first tap approved in days.

Connect your host

Integrate your acquiring host to host using ISO 8583 or modern JSON APIs, and configure schemes, limits and receipts for your markets.

Attest & go live

Devices enroll through attestation and monitoring, your solution listing completes, and merchants start accepting the same week.

TYPICAL PILOT: WEEKS, NOT QUARTERS. THE ISOLATED SDK KEEPS YOUR APP OUT OF CORE MPOC EVALUATION.

Full payment stack, one vendor

Built on technology we engineer ourselves.

Most SoftPOS vendors license their kernel or crypto. CYNTE builds the entire chain in-house, so certification, support and roadmaps stay under one roof.

EMV Level 2 Kernel

CYNTE's certified contactless kernel with modular architecture. It is the engine behind every TAP4PAY transaction.

White-box Cryptography

PIN-on-COTS grade white-box cryptography protecting keys, PIN blocks and PAN data in hostile environments.

Mobile App Shielding

RASP, obfuscation and anti-tamper layers hardening the SDK, and available for your wider mobile estate.

Secure & Compliant

CYNTE follows all necessary certifications, including PCI MPoC on the Isolated SDK model and PCI Secure Software Lifecycle (SLC).

SoftPOS, answered

Frequently asked questions

What is SoftPOS (Tap to Phone)?
SoftPOS, also called Tap to Phone or Tap on Phone, is software that turns a standard NFC-enabled smartphone or tablet into a contactless payment terminal, with no card reader or extra hardware. Customers tap their card, phone or wearable on the merchant's device to pay.
What is PCI MPoC and how is it different from CPoC?
PCI MPoC (Mobile Payments on COTS) is the PCI Security Standards Council standard for payment acceptance on commercial off-the-shelf devices. Unlike the earlier CPoC standard, MPoC allows PIN entry and richer cardholder verification on the same device. This is what lets CYNTE offer PIN on Glass and Manual PAN within one certified solution.
What does "Isolated SDK" mean under MPoC?
An Isolated MPoC SDK is evaluated as a self-contained security component, independent of the host application that embeds it. Your app integrates the SDK without being pulled into the core MPoC software evaluation, shortening time to market and reducing certification cost for acquirers, PSPs and ISVs.
What is PCI SLC and does CYNTE hold it?
PCI Secure Software Lifecycle (SLC) is the PCI Software Security Framework standard that validates how a vendor designs, develops, tests and maintains payment software, rather than assessing one product release. CYNTE develops TAP4PAY under PCI SLC validated processes, which means security is built into our engineering lifecycle and updates can be delivered without a full reassessment each time.
Which cards can merchants accept?
Mastercard, Visa and Discover, plus other international and domestic card schemes, all processed through CYNTE's own certified contactless EMV Level 2 kernel. Additional schemes can be enabled per market.
Is PIN entry on a phone actually secure?
Yes, when done under MPoC. TAP4PAY renders a randomized PIN pad, encrypts the PIN block with white-box cryptography at the moment of capture, uses a unique key per transaction, and runs continuous attestation to detect rooted devices, hooking or tampering before a transaction is allowed.
What do we need to deploy CYNTE SoftPOS?
An Android app (yours or a white-label build), a connection to your acquiring host, and NFC Android devices for merchants. CYNTE provides the certified SDK, attestation and monitoring backend, documentation and integration support.
Get started

See a live tap, PIN and manual entry on your own device.

Request a demo or the TAP4PAY datasheet. Our team typically responds within one business day.