Enable Allowlisting on Your Payment Device

How to enable allowlisting when collecting non-payment card data.

Overview

Allowlisting is a security feature that enables pre-approved card data to be returned in plain text via the NMI Payment Device SDK. This feature is ideal for collecting non-payment card data via magnetic stripe, supporting applications like loyalty card programs.

Note: Allowlisting is currently supported only via the magnetic stripe reader and is not available for chip or contactless transactions.

Supported Devices

Allowlisting is available on the following devices through the Payment Device SDK:

  • For Windows & Linux:
    • Miura M020
    • Lane/3000, Lane/5000, Lane/7000
    • iPP320/350, iSelf LE, iUC285
    • Self/2000, Self/4000, Self/5000, Self/7000, Self/8000
  • For Android & iOS:
    • Miura M020

Submitting an Allowlist for Approval

To enable allowlisting on a payment device, you’ll need to follow strict security guidelines. Please contact NMI support at [email protected] with the following information:

  • BIN Range: Provide a BIN (Bank Identification Number) range for the allowlist. Ensure that this range is not associated with payment cards, as such requests will be denied.
    • Example: 123456 0000 0000 (start) - 123456 9999 9999 (end)
  • Card Number Length: Typically between 12–16 digits.
  • Payment Device: Confirm that your device supports allowlisting by referencing the supported devices list above.
  • NMI Payment Device SDK: Specify the platform (e.g., Android, iOS, or Windows).
  • Application Scope: Indicate whether the allowlist applies to an entire device estate or to specific merchants.

Important: The allowlisting process may take several days, as it requires secure approval to maintain data integrity. For questions, please contact our support team for assistance.