Handheld POS Terminal DCA-H50

The Certification Stack Is the Product

Two handheld terminals can have identical screens, identical CPUs and identical printers, and one can process a card payment while the other cannot. The difference is not hardware capability — both read the chip and the contactless card fine. The difference is certification, and it is the single largest cost and the longest lead time in building a payment terminal.

The DCA-H50 carries the certification stack: EMV Level 1 and Level 2, PCI PTS 6.x, and the contactless scheme approvals (PayPass, payWave, Amex, CUP qUICS, D-PAS, J/Speedy, Pure). It also includes a fingerprint reader certified to the FBI’s standard, and an optional fiscal module for the Russian market.

EMV Level 1 and Level 2: What They Actually Cover

These two levels are routinely quoted together and they test entirely different things.

Level 1 is the physical and electrical interface. It tests whether the card reader can talk to a chip card correctly: the contact protocol, the signal timing, the electrical characteristics of the contacts, and the behaviour when a card is inserted at an angle or withdrawn mid-transaction. A terminal that fails Level 1 has a reader problem — intermittent “card error” messages, transactions that abort, cards that are read on the second attempt.

Level 2 is the application layer. It tests the transaction kernel: whether the terminal implements the EMV command sequences and the payment scheme rules correctly, handling the card’s decisions about offline approval, floor limits, PIN versus signature, and the cryptogram that proves the transaction is genuine.

Both matter, and they fail in different ways. Level 1 failures look like hardware unreliability; Level 2 failures look like declined transactions and chargebacks. A vendor quoting “EMV certified” without naming the levels is telling you half a story.

PCI PTS 6.x: The One That Protects the PIN

PCI PTS (PIN Transaction Security) is the standard for the device itself: tamper resistance, key management, physical and logical protection of the PIN entry process. Version 6.x is the current generation of that standard, and it is the certification that a payment acquirer will ask for before approving a deployment.

What it means physically is that the terminal is built to resist tampering: it detects opening, it zeroises keys rather than revealing them, and it is designed so that an attacker cannot extract the PIN pad without evidence. That is a manufacturing and firmware property, not a software add-on — which is why it cannot be retrofitted to an uncertified device.

The practical instruction for a buyer: if a payment scheme, an acquirer or a merchant’s bank will be involved, ask for the certification documents at quotation stage. A terminal without them may work in a pilot and fail at the compliance review.

The Fingerprint Reader: Crossmatch, FBI Certified

The reader is a semiconductor capacitive sensor with an 18 × 12.8 mm imaging area and a 256 × 360 pixel array, based on Crossmatch technology and certified to the FBI’s standard for biometric capture.

That certification matters if the biometric is used for anything that has to stand up to scrutiny — attendance records, identity verification for a regulated service, agent authentication in a banking correspondent deployment, or a signature substitute on a receipt. A consumer-grade fingerprint sensor verifies a finger against a template; a certified one captures an image to a quality standard that a third party will accept.

Two practical uses beyond payments:

• Agent and staff authentication. The terminal will not open a session or process a transaction without a verified finger, which removes shared PINs — the most common control weakness in field agent networks.
• Customer verification in markets where a biometric is the accepted proof of identity for a cash-out or a SIM registration.

Payment Interfaces: Chip, Contactless, Magstripe — and PSAM

The terminal reads smart cards to ISO 7816, contactless cards to ISO 14443 A/B, and magnetic stripes on all three tracks bidirectionally (ISO 7811/7812/7813).

Two PSAM slots are fitted, conforming to ISO 7816. A PSAM is a secure access module — a small card that holds the keys for a payment scheme or a closed-loop system. Two slots means the terminal can support two schemes, or a scheme plus a proprietary application such as a transit card or a loyalty system, without a second device. In markets where the acquirer supplies a SAM rather than provisioning keys over the network, this is a requirement rather than a feature.

The Rest of the Device

A 6.0-inch IPS LCD at 1440 × 720, capacitive and specified to work with gloves and wet fingers; a 2.0 GHz quad-core ARM Cortex-A53 with 2 GB RAM and 16 GB storage; Android 11 under a GMS-certified Safedroid build.

A 58 mm thermal printer with a 40 mm roll, a 5 MP autofocus rear camera with flash, Wi-Fi dual-band (2.4 and 5 GHz), BT 5.0, and 4G in a European default band set (FDD-LTE B1/B3/B7/B8/B20/B28, TDD B38/B40/B41). A 7.6 V / 2,600 mAh battery, charged over USB-C at 5 V / 2 A. Weight is 410 g including the battery; operating range −10 to 50 °C.

Certification covers CE, RoHS and FCC for the device, in addition to the payment certifications above.

Where the DCA-H50 Fits

• Card-present mobile payments. Chip, contactless and magstripe with the full EMV and PCI PTS stack.
• Field agent networks. Biometric agent authentication removes shared PINs.
• Markets requiring a fiscal module. The Russian-format module is available as an option.
• Closed-loop and transit schemes. Two PSAM slots.
• Not where no card payment is involved. The DCA-H30 is the same platform without the certification stack, at lower cost.
• Not for data collection only. 410 g with a printer — the DCA-H20 is 300 g without one.

The Handheld Range

• DCA-H50 — this unit. EMV L1&L2, PCI PTS 6.x, scheme approvals, FBI-certified fingerprint, 2 PSAM.
• DCA-H30 — same 6-inch platform, 58 mm printer, no payment certification.
• DCA-H20 — 5.7-inch PDA, 300 g, no printer.
• DCA-H80 — 8-inch tablet-class mobile POS with 58 or 80 mm printer.

Frequently Asked Questions

Is it EMV certified?

Yes — EMV Level 1 and Level 2, plus PCI PTS 6.x and contactless scheme approvals including PayPass, payWave, Amex, CUP qUICS, D-PAS, J/Speedy and Pure. Ask for the certificates at quotation stage if your acquirer requires them.

What is the difference between L1 and L2?

Level 1 tests the card reader’s physical and electrical interface; Level 2 tests the transaction kernel and scheme rules. A terminal needs both.

Can the fingerprint be used for identity verification?

Yes. The sensor is Crossmatch-based with an FBI-certified capture standard, so the image quality is acceptable to third parties rather than only good enough for a local template match.

Does it print receipts?

Yes, a 58 mm thermal printer with a 40 mm roll.

Can I add a 2D barcode scanner?

Yes — a Symbol 4710 2D image engine is available as an option, supporting 1D and 2D symbologies.

What is the warranty?

12 months minimum. OEM branding, pre-installed payment applets, fiscal module and MDM provisioning are available — ask at quotation stage.

Next step: tell us the market, the acquirer or scheme involved, and whether a fiscal module or biometric verification is required — we will confirm the certification set and quote factory-direct. Email sales@dcapos.com or contact us.

Related: DCA-H62 handheld POS · POS systems · DCA-H30 handheld POS · DCA-H80 8-inch mobile POS · POS peripherals