1. Introduction

SoftPOS has left the lab. What begana few years ago as a promising but experimental way to accept contactlesspayments on ordinary smartphones has become a certified and rapidly scalingsegment of the payment acceptance market. SoftPOS is not a curiosity making theheadlines anymore, but a live product category with advanced payment features,and its own solution and challenger hardware vendors competing head-on withincumbent terminal manufacturers.

Yet the category carries a namingproblem that has quietly shaped how the market talks about it. “SoftPOS” isoften shorthand for “no dedicated hardware required”, as if the technology'sentire value proposition were the absence of a device. It isn't. SoftPOS is,first and foremost, a shift in where security lives: in the application and theback end rather than in a certified, tamper-resistant payment module. What deviceyou then choose to run that application on is a separate, and just asimportant, decision.

This distinction matters becauseSoftPOS is genuinely a driver of affordable digital payment acceptance — thatpart of the story is true. But it is equally, and far less often discussed, anenabler of innovation, agility, and user experience. Treating it purely as acost play equals missing opportunities.

This paper does not add another SoftPOS growth predictionto the pile. Instead, it looks at the structural drivers behind SoftPOSadoption, dismantles the “no hardware” myth with nuance, and lays out apractical framework for matching device choices to actual business needs.

2. A brief refresher: what is actually a SoftPOS?

At its core, SoftPOS means accepting contactless payments without a traditional, purpose-built payment device (an EFTPOS or SmartPOS terminal). The card-present transaction is enabled through the NFC controller of a Commercial Off-The-Shelf (COTS) device — typically a smartphone or tablet — running a certified SoftPOS payment App.

2.1 A different security model

Traditional SmartPOS terminals build security into the hardware: a tamper-resistant secure element, physical intrusion detection, and closed, proprietary firmware. SoftPOS moves that responsibility into software: application-level protections (white-box cryptography, code obfuscation, anti-tampering), continuous back-end attestation and runtime integrity monitoring, a secure communication channel, and a controlled onboarding process for every device and merchant.

To use a common analogy from the world of security architectures, an EFTPOS follows the fortress model: a heavily protected environment with a clearly defined security perimeter, virtually impenetrable walls, limited access and strict controls at every entry point.

A SoftPOS deployment, by contrast, is more like an airport. People with different backgrounds move freely through much of the facility, yet security is enforced through distributed, layered and continuous controls. Sensitive areas—such as the tarmac and the aircraft themselves—remain subject to the highest levels of protection. Similarly, in a SoftPOS architecture, critical operations like the protected PIN pad rendering are isolated within a highly secure enclave such as a Trusted Execution Environment (TEE) on Android, while the rest of the device remains accessible for general-purpose use.

2.2 A dedicated certification framework

This is where discussions get technical, and where comparisons between SoftPOS and EFTPOS can create some confusion.

From a security perspective,

• PCI MPoC (Mobile Payments on COTS) certifies the SoftPOS software architecture — the application, the SDK, the secure channel, the back-end services.

• PCI PTS certifies the SmartPOS physical device.

These are not competing standards; they certify two entirely different security objects.

A softPOS solution can run on an infinite variety of hardware precisely because the security and the certifications travel with the software, not with the box.

By combining the previously independent CPoC (Contactless Payments on COTS) and SPoC (Secure PIN on COTS) standards, MPoC provides a unified framework that covers trusted PIN authentication.

EMV focuses on the interoperability between the payment method — a physical or tokenized card — and the acceptance solution. SoftPOS certification currently covers NFC acceptance only — chip-and-PIN via contact or magnetic stripe are out of scope by design. The EMV Level 2 kernel that processes the contactless transaction runs inside the SoftPOS App itself, rather than in a firmware embedded in the device. Nevertheless, EMVCo released a new test process for SoftPOS hardware in September 2024 — the “Reduced Range (RR) Level 1 Type Approval” — to confirm the performance of the device’s NFC platform.

2.3 Why SoftPOS changes the game

3. SoftPOS at a turning point: why now is the time to take a closer look

SoftPOS has moved from the early bank-led pilots counted in tens of smartphones to street-level scale. Today, consumers can encounter COTS-based payment acceptance in their everyday lives – at farmers' markets, in taxis, with delivery riders, pop-up retail and more.

At the same time, a new generation of professional devices specifically designed for SoftPOS is emerging, enabling innovative Fintechs and payment providers to deploy more flexible and scalable acceptance solutions.

Several forces converged to get there.

• Contactless-only is now enough for most transactions: post-COVID pandemic consumer behavior has established contactless as the dominant experience in-store. Transaction speeds are significantly faster than chip-and-PIN (roughly 60% quicker), cards are near-universally contactless-ready, online PIN verification covers the cases that still require step-up authentication, and payment schemes continue to actively promote and expand NFC adoption.

• A maturing certification framework: after long awaited standards and clarifications, the earlier CPoC and SPoC standards have been consolidated into the single, modular, PCI MPoC framework. Schemes are phasing out their own proprietary programs, and EMV Contactless Level 1 RR certifications 1 & 2 ensure contactless performance on approved devices.

• A proven track record: beyond the now-established PCI security standard, years of SoftPOS activations and growing transaction volumes have validated both the security model and payment processing performance. The question is no longer whether SoftPOS can scale.

• Mainstream endorsement: Visa and Mastercard have been at the forefront of SoftPOS adoption, actively promoting the technology as a way to expand payment digitization and financial inclusion. Progressively, leading digital commerce, Fintech and software players — including Adyen, Square, SumUp, Revolut, Mollie, Shopify — have naturally extended their payments narrative into SoftPOS.

• Platform diversification: Apple's expansion of Tap to Pay on iPhone — initially launched in 2022 and accelerated by the broader NFC opening in 2024 — became a major catalyst for SoftPOS adoption. Besides, the increasing availability of SoftPOS applications on Windows and alternative operating systems such as KaiOS, is expanding the competitive field well beyond Android and to new form factors.

• Use-case diversity: in-person payment, peer-to-peer transfer, account top-up, digital commerce (Tap to add card, Tap to confirm transaction, Tap to activate on file) all now run on the same underlying SoftPOS technology.

• Paperless or no receipts: The growing shift away from mandatory printed invoices in many countries and consumers’ preference for digital alternatives strengthens the case for SoftPOS.

• Functional catch-up with EFTPOS: the complete payment cycle – authorization, refund, cancel, tipping - are now standard SoftPOS features while offline transaction handling is increasingly supported by SoftPOS solution providers.

• Compelling economics: SoftPOS on a personal phone or entry-level device comes at low-cost. Even for high-end setups, SoftPOS TCO (Total Cost of Ownership), including professional-grade devices, activation, recurring or per-transaction fees, now rival traditional EFTPOS.

• More purpose-built SoftPOS devices: hardware engineered from the ground up to run SoftPOS software, rather than repurposed consumer electronics — the focus of the next two sections.  

4. Myth vs. Reality: SoftPOS doesn’t eliminate dedicated hardware

The name is misleading. “SoftPOS” suggests that hardware doesn't matter, when the more accurate interpretation of the MPoC framework is the possibility of accepting payments on COTS devices. This is an indication about the applicable certification path, not a statement that no thought should go into the device.

4.1 A spectrum of implementations, not a binary choice

Real-world POS deployments are rarely a simple trade-off between SoftPOS and traditional EFTPOS. In practice, the two often coexist, serving complementary use cases within the same merchant environment.

Likewise, it’s not simply between SoftPOS on COTS vs. dedicated hardware. SoftPOS now spans a broad spectrum of setups: from personal phones with no accessory, used occasionally or to support financial-inclusion; to dedicated entry-level devices for developing markets; a variety of ruggedized mobile smart terminals running a secured Android operating system for small merchants, independent workers and food & beverage businesses; and to an expanding set of alternative OS options enabling new checkout experiences like stands, self-service kiosks, and other embedded payment acceptance solutions embraced by innovative hospitality and retail brands.

Large-scale SoftPOS rollouts are gaining momentum among leading fashion and restaurant chains, as well as postal and logistics organizations. These deployments require not only payment acceptance but also enterprise-grade capabilities such as remote provisioning, Mobile Device Management (MDM), application management, security updates, and lifecycle management, while optimizing costs.

4.2 Where personal devices fall short

When the underlying device is someone's personal phone, several limits show up quickly, and none of them are exotic:

• Battery life is shared with personal use — a low-battery warning mid-shift is not a payment terminal's finest moment.

• Ergonomics were never designed for payment: the NFC antenna sits wherever the manufacturer put it (often the back, not the front), screens crack, transaction processing is slow and performance degrades with age.

• Calls and notifications interrupt payments at the worst possible time.

The security picture is more serious. A personal smartphone runs arbitrary third-party Apps, may be rooted or jailbroken, carries an unpredictable OS patch level, and doubles as a browsing and sideloading device — all of which widen the attack surface that the SoftPOS application's runtime attestation has to detect and defend against.

This is precisely the rationale for a dedicated, professional-grade device: a secure, kept-current OS, a controlled patch cadence, dedicated security tooling, an App allowlist restricted to what the business actually needs and approved by the acquirer, and MDM across the fleet. The payoff is not just security — it is durability and robustness under daily commercial use, which a personal phone was never built for.

Framed the right way, this analysis is an opportunity rather than a cost center: moving the acceptance and compliance conversation onto “what experience and service quality does this give the merchants and their customers”.

5. ‍Matching Hardware to the Use Case

SoftPOS is not one setup with one hardware answer. It addresses different merchants’ realities.

5.1 Consumer-grade COTS devices

• Strength: instant deployment at no additional upfront hardware cost — the SoftPOS App is the entire incremental cost.

• Fit: micro-merchants, occasional sellers, and highly mobile, low-volume use cases where a dedicated device would sit idle most of the time.

• Not a fit for: anything beyond that. Treating a personal phone as a permanent, all-day commercial terminal may work, until customers’ perception and availability become business issues.

5.2 Entry-level dedicated terminals

• Strength: limited cost, kept fully separate from personal use (and with no resale “street value” to attract theft), a form factor actually designed for payment, with better durability and battery autonomy than a shared personal device.

• Limitations: limited processing power, a restricted App ecosystem, and slower update cycles compared with high-performance terminals.

• Fit: financial inclusion programs and blended mobile-money x EMV deployments in developing markets, where reliability matters more than sophistication.

5.3 High-performance professional POS

At the top of the range, the difference between a high-end SoftPOS terminal design and a PTS-certified SmartPOS has become genuinely difficult to discern. The device selection here is deliberate, not driven by cost alone: freed from the mechanical requirement to support contact and magnetic-stripe interfaces, and from the drawn-out, expensive PCI PTS hardware certification cycle, manufacturers can pour their engineering resources into optimized UX, usability, accessibility, and design ergonomics instead.

Here are some of the critical business needs next-generation SoftPOS terminals can help address.

• Streamlined checkout: handheld mobile device built for in-aisle and at-the-table payment, where speed and a good tap experience are the entire point.

• Reliability at scale: designed for intensive use, with meaningful IP ratings and drop-test resilience, delivering a seamless NFC experience through EMV Contactless Level 1 RR certification and high-speed transaction processing.

• Battery built for work: long-running autonomy dedicated to professional, all-shift payment & business use — not shared with anything else.

• Connectivity redundancy: multiple network paths for service continuity when one connection drops.

• A controlled software lifecycle: managed security updates and fleet management through MDM and EMM — an IT discipline, not an afterthought. Android remains the leading OS for dedicated SoftPOS terminals, notably offering turnkey Zero-touch device enrollment and management capabilities whilst continuously upgrading their Enterprise ecosystem.

• An agile hardware lifecycle: faster innovation and upgrade cycles that can match a payment service provider's brand values and the in-store look and feel it wants to deliver — the terminal becomes part of the brand experience.

• Easier deployment of non-payment business Apps: the software-based security framework makes it faster to get additional acquirer-approved Apps onto the device than the comparatively long validation process typical with PTS terminals.

Terminals designed to meet those common requirements are best suited to high-volume retail, hospitality, transport and logistics, delivery and events, and other outdoor or demanding environments.

6. Looking ahead: SoftPOS won’t kill hardware. It sets it free.

SoftPOS has moved beyond the Proof-Of-Concept stage. Large-scale deployments have demonstrated that, when implemented with a proven application and the right hardware, it can flawlessly support mission-critical payment acceptance across challenging merchant environments. The next phase of market development will therefore be less about proving the technology and more about identifying where it creates the greatest value.  

This requires moving away from the perception of SoftPOS as a low-cost or degraded alternative to traditional EFTPOS. Instead, SoftPOS should increasingly be viewed as a complement to existing setups and a simplified payment architecture that reduces hardware complexity, provided that the smartphone or the professional device on which it runs meets the required security and performance requirements. SoftPOS opens new paths for innovation in user experience, form factors, and deployment models.  

As a result, the range of use cases for which SoftPOS is the most appropriate solution is expected to keep expanding. Market evolution will though remain highly segmented: emerging economies will continue to prioritize affordability and rapid digital payment adoption, while mature markets will increasingly focus on premium user experiences, operational efficiency, and innovative flagship deployments built around purpose-designed SoftPOS hardware.

In parallel, Bluetooth-connected mobile POS solutions clumsily paired with smartphones are likely to continue losing relevance, alongside a gradual shift from traditional SmartPOS terminals, although the pace of this transition will vary across sectors and geographies. As SoftPOS adoption accelerates, new market indicators — including application deployment statistics, the installed base of non-PTS payment devices — will become increasingly valuable for analyzing the mix between legacy payment terminals to software-based payment acceptance.

Looking ahead, on-device AI and embedded analytics are also set to play an increasingly important role, enabling smarter merchant experiences, predictive device management, and context-aware payment applications.

Final thoughts

SoftPOS earned its reputation as an affordable, fast way into digital payment acceptance, and that claim is deserved. But affordability was never the whole story. Success is about selecting the platform that best matches the operational requirements of each merchant and use case.

The technology's real promise is choice: the freedom to match hardware precisely to volume, environment, security needs, brand, and expected lifespan, instead of being locked into one certified box for the life of the deployment. Read that way, SoftPOS is not the end of dedicated payment devices. It broadens the range of hardware options available. Organizations that understand this distinction will be best positioned to capture the next wave of innovation in payment acceptance.