Overview

Allowlisting is a security feature that enables pre-approved card data to be returned in plain text via the NMI Payment Device SDK. This feature is ideal for collecting non-payment card data via magnetic stripe, supporting applications like loyalty card programs.

Note: Allowlisting is currently supported only via the magnetic stripe reader and is not available for chip or contactless transactions.

Submitting an Allowlist for Approval

To enable allowlisting on a payment device, you’ll need to follow strict security guidelines. Please contact NMI support at [email protected] with the following information:

• BIN Range: Provide a BIN (Bank Identification Number) range for the allowlist. Ensure that this range is not associated with payment cards, as such requests will be denied.
  • Example: 123456 0000 0000 (start) - 123456 9999 9999 (end)
• Card Number Length: Typically between 12–16 digits.
• Payment Device: Confirm that your device supports allowlisting by referencing the supported devices list above.
• NMI Payment Device SDK: Specify the platform (e.g., Android, iOS, or Windows).
• Application Scope: Indicate whether the allowlist applies to an entire device estate or to specific merchants.

Important: The allowlisting process may take several days, as it requires secure approval to maintain data integrity. For questions, please contact our support team for assistance.