As previously communicated via Phillips 66 Gateway in October 2024, Phillips 66 was made aware of a condition in some versions of the Verifone Commander software in which threat actors were executing a fraud scheme impacting contactless payment credit card transactions.  

As a safeguard to mitigate this fraud impact, contactless EMV functionality was disabled at affected stations. Sites that have not upgraded and are still running v53.40.00, may be processing inside contactless transactions as mag stripe contactless. Due to a Visa mandate, all Visa contactless mag stripe transactions will now be disabled on 02/13/2025. Sites that wish to continue processing contactless EMV transactions must upgrade to the latest software version or install a software patch.  Only sites running 53.40.00 should install an available patch (53.40.48) or upgrade to 54.02.01. Sites can verify the version they are running via the Verifone register “CSR Functions – Help – About” screen, or in configuration manager.   

The patch (53.40.48) can be staged, and can be applied immediately, or will auto-apply after 24 hours. The site will be down for roughly 30 minutes. The full version upgrade (54.02.01) can be staged and applied immediately at site discretion, or will auto-apply after 7 days. The site will be down for roughly 1-2 hours.  

These software updates can be remotely installed by Verifone using the VRSD service, or by contacting your local service technician. Use this link for Verifone email support to request the software patch: Support by E-mail. 

Please note, Verifone C-Site onboarding is now required for any new install on v54.02.01. Failure to onboard a 54.02.01 site with C-site will lock the site out of sales after 90 days. You can learn more here. 

For questions regarding the software installation process or for general questions, please contact the Verifone Help Desk at 800-837-4366. 

Note: For all Verifone, Gilbarco, and NCR terminals; software updates are the responsibility of the customer and should be kept up to date with the latest version.  Sites should maintain their software by periodically contacting your vendor to check for any available updates.