Privacy Screens at PIN Pads and ATMs: What PCI Requires and What a Filter Actually Does

What PCI actually attaches to

• The device module: PCI PTS (Point of Interaction security) is the device standard for payment terminals and encrypting PIN pads, evaluated by PCI-recognized labs with approved devices publicly listed (PCI SSC PTS/POI; listings overview). Checkable example: the Verifone P400 and Ingenico Lane/3000 appear in PCI SSC validated P2PE device listings (P2PE listing reference).
• PIN handling: the PIN Security Standard governs PIN and key management, including the requirement that monitoring CCTV cannot capture PIN entry (v3.1 requirement 6-3.7) (PIN Security; v3.1 release note). Note what this means for screens: the PIN is never displayed, so there is nothing on the customer display to mask at PIN entry.
• The environment: PCI DSS duties sit with the entity, and assessed terminals are inventoried accordingly (FAQ 1301) (PCI SSC FAQ 1301). PCI SSC has also published dedicated ATM Security Guidelines (ATM guidelines release).
• PAN masking folklore: PCI DSS masking (first 6, last 4 style rules) applies to the primary account number in data handling, not to what a bystander can read on a PIN pad (masking requirements explainer).

Shoulder-surfing: the real exposure, and the mitigation menu

The practical privacy exposure at an ATM, ITM, counter PIN pad, or drive-thru terminal is visual: on-screen amounts, prompts, and the customer’s own behavior are readable by the person behind them in line or in the adjacent car. The mitigation menu, in the order fleets usually consider it:

• Placement: mounting geometry that puts the display and keypad out of the queue’s sightline. Free, but fixed at install time.
• Privacy hoods: plastic shields mounted around PIN pads are a long-standing industry practice and are widely sold (PIN pad hood market example). The folklore check: hoods are practice, not a PCI-mandated accessory.
• Privacy filters: micro-louver film bonded to the screen or to a removable panel. Custom-cut filters for ATM and bank-terminal displays are actively sold (bank-terminal privacy filter example; custom ATM filter example). Market evidence, not endorsements.

What a privacy film actually does, in three numbers

Micro-louver filters embed microscopic parallel blades that pass light straight ahead and block off-angle light. The trade-offs a fleet buyer prices in:

• Viewing cone: published 3M figures fade content starting at the 30-degree side angle and black out outside a 60-degree cone (3M privacy monitors).
• Transmittance cost: standard micro-louver dims the display for the direct viewer too; premium tiers reach up to 85% luminance transmittance (3M privacy screens). Dimmer screens invite higher backlight, which costs battery on handhelds.
• Touch compatibility: per SKU. 3M lists some filters as touch screen compatible (PF190W listing) while other SKUs state touch compatibility is not supported (non-touch SKU example). Verify per product, per device.

Standard-size versus custom-cut

The big-three filter catalogs are built around laptop and monitor diagonals: 3M’s finder covers 40,000-plus device fits (3M product finder), Kensington spans 12 to 34 inches (Kensington range), and Targus spans 9.7 to 27 inches (Targus range). Payment terminals, PIN pads, rugged handhelds, and ATM heads sit outside those diagonals, which is why the custom-cut market exists: cut-to-size specialists such as Photodon (custom cut-to-size) and NuShield (NuShield) serve exactly this long tail, alongside the ATM-focused sellers above. On the device side, the payment OEMs ship no first-party protector SKUs: PAX accessories are cases and mounts (PAX accessories), so the PAX SP30, Verifone P400, and Ingenico Lane/5000 pages in our catalog document the aftermarket paths instead. The Topaz SignatureGem LCD 1x5 is the counter-example of hardened glass as a device fact: the pad ships with a tempered-glass signing surface (Topaz signature pads).

Skimming is a different threat, handled by different disciplines

Card skimming is hardware tampering, not visual disclosure, and the numbers explain why it gets its own program: FICO counted over 231,000 compromised debit cards in 2024 and over 243,000 in 2025, with compromise events up about 90% year over year and roughly 90% of ATM skimming occurring at non-bank machines (FICO 2025 review); the FBI estimates skimming costs over $1B annually (FBI skimming overview). Anti-skimming is an OEM hardware discipline: jitters, tamper detection, and enclosure design, as Diebold Nixdorf describes for its ATM security architecture (Diebold Nixdorf ATM security). A privacy filter does nothing against a skimmer, and a skimmer defense says nothing about who can read the screen. Keep the two budget lines separate.

Sector context: banking and financial, retail, and food service drive-thru lanes. Cleaning chemistry for the same hardware: cleaning and disinfecting.

Frequently asked questions