The same question lands in the inbox every few weeks. Someone needs a PIN pad that fits NCR, Wincor, Diebold and Hyosung, and wants to know which one to buy.
Nobody sells that pad, and no supplier can invent one. What you can buy is the right pad for one specific machine, in the right version, from a channel that knows why the version matters. Below is how the four brands actually differ, what the industry's migration deadline changed, and how to order a pad without paying twice for the wrong one.
Why an EPP is not like anything else in the cabinet
Cassettes cross-shop, and so do rollers. Even whole modules sometimes move between models inside one brand. The encrypting PIN pad sits outside all of that, because it is not really a mechanical part at all. It is a certified security device, and it carries several jobs stacked on top of each other.
Mount is the first constraint, and it covers fascia, cutout and screw pattern. Then the connector, since generations do not share harnesses. Every platform also speaks its own host protocol. Behind all of it sits the approval generation, plus a key path your processor will accept.
None of that shows up in a photo of the front face. Which is why "it fits, I checked the photo" may be the most expensive sentence in this category.
There is a fifth thing, and it bites people who forget it. A pad is built to die on purpose. Trip the tamper circuit, whether by intrusion, by drilling, or by the internal battery finally giving out, and the pad zeroises its keys and locks itself. There is no repair procedure and no reset. You replace it and re-inject keys. Every field guide we have published says the same thing, because it is the one rule in ATM parts that never has an exception.
The version map, brand by brand
What follows is what runs in the field today, together with the part numbers you will see quoted for each generation. Read it as a map rather than a menu. The label on the machine still decides what fits.
NCR. Pads carry distinct designations, and here the label on the module decides which one you have. The 66xx-era cabinets run the EPP-3 modules, with 445-0744349 among the numbers quoted for them. The 445-0735509 keyboard (group 009-0028973) is the same EPP-3 generation, inside NCR's 5815 keyboard class. Listings that market it as an EPP-V5 are borrowing Wincor-DN's V-series naming, not an NCR designation. The later EPP-4s builds come in as 445-0782009 and 445-0783508, both international and both carrying a PCI PTS POI 5.x approval. None of these families migrates into another.
Wincor / Diebold Nixdorf. This is the V-line: V5, V6, V7. A V6 pad is not a single part but a family. 01750159341 is the international build, and the same generation ships under separate part numbers for individual markets, among them French (01750159594) and Russian (01750159454, also quoted as 1750159454). V7 is the newer generation and sits on newer software rails, with the INT ASIA build 01750255914 as one widely traded example.
Hyosung. Older cabinets still carry the 6000-series pads. Then came the EPP-8000R (7130020100), the PCI 3.0-era workhorse that covered most of the NH, MX and HALO families, and the current pad is the EPP-X1 (7151130100), a PCI 5.0 device. Moving an older cabinet onto an X1 is not just a plug change. The kit involves mounting brackets, a spacer and an adapter cable, and the machine needs firmware v06.01.39 or higher.
Diebold. Pads run under EPP designations, with the EPP5 family (49-216680-740E and its market variants) on the Opteva generation and EPP7 on the current line. The same logic applies as everywhere else in this map: designation, region, build, and the label as the final word.
What the compliance clock changed
If you wonder why the used market is full of cheap 3.0-era pads, the calendar explains most of it.
EPPs live inside PCI's PTS program, and every approved device carries an approval generation. When a generation ages out, the rules tighten, and fleet-level replacement pressure follows.
For ATMs, the big cutoff has already happened. Under the industry's migration mandate, every upgradable ATM had to be fitted with a current-generation EPP, PCI PTS 5.x or later, by 31 December 2024. Machines that could not take a new pad were retired instead. So current-generation pads became the only serious long-term purchase. It is also where the used stock keeps appearing from, since every retired machine and cleared shelf pushed older pads into the secondary market.
The clock has moved again since. No new 5.x approvals are being issued, PCI has extended the 5.x hard stop for new deployments to 30 April 2027, and from that date newly installed ATMs must carry PCI PTS 6.x pads or later. For an estate that has to stay compliant into the late 2020s, the question is no longer only which generation a pad is, but when its approval runs out.
There is a second compliance layer that catches even careful buyers, and that one is key management. Under the PCI PIN security requirements and the card networks' ATM mandates, key exchange moved to modern key block formats and remote key loading (TR-31 blocks, TR-34 loading), with the TR-31 deadline landing on 1 January 2025. A pad that predates those schemes can still fit physically and still be the wrong answer.
Pad makers rate key mechanisms in the millions of presses, which sounds generous until you look at the field. Wear is rarely what retires a pad there. Compliance retires it first.
How to tell which generation is in your machine
Three places to look, in this order.
Start with the pad label. Part number first, then any region or build code, and photograph it when you open the machine. Every good order starts with that photo.
Then the firmware field. Pads report their firmware version during service and audits, and fleet tools record model, serial number and firmware per ATM, which is exactly what PCI audits ask for. If you maintain more than a handful of machines, keep that table current.
Last, the connector. Generations do not share harnesses. If the plug does not match, stop reading and go back to the label.
What actually interchanges
Within a brand, coverage can be wide. One pad family often serves a whole fleet. The X1 list alone covers the NH 1800 and 2700 cabinets, the HALO and HALO II terminals, and the MX 4000W, MX 5000, MX 5200 and MX 7600T families, and the 8000R before it covered much of the same ground.
Coverage that wide is easy to misread, so three things are worth holding on to.
Generation comes before model. The generation decides the interface, the approval and the key path, while the model decides the mount.
Region build is a version in its own right. French, Russian, international and other market builds are different part numbers for a reason, covering key legends, language and local certification. They do not interchange, even when the photos look identical.
And nothing crosses a brand line. Not NCR to Wincor, not Wincor to Diebold, not Hyosung to anybody. A pad that claims four brands at once is a return shipment waiting to happen.
The ordering checklist
Label first. Read the label on the pad you are replacing, not the machine model. Exact part number, market build, and firmware version if it is printed. Photograph it.
Match the build. A V6 international pad and a V6 French pad are different spares for a reason.
Confirm the approval. Check the generation your processor or acquirer requires. Current fleets live at PCI PTS 5.x and up.
Line up key injection before the pad ships. Pads arrive un-keyed, and keys come from the bank or processor side, through a key loading device or remote key loading. A pad you cannot key is downtime in a box.
Ask about tamper history. Treat it the way you would treat a damaged chassis on a used car. If a pad has been opened, flipped into a tamper state, or comes with no history at all, pass.
Sourcing a pad without guessing
A few habits keep EPP orders boring, which is what you want them to be.
Keep the generation in your asset register, per machine: model, serial, firmware and part number. When something fails at 2am, that row decides what you order.
Hold one known-good spare for every pad family you run. EPP downtime is a compliance problem rather than a parts problem, since no pad means no PIN entry and no transactions. The math on a second pad on the shelf is easy.
Finally, buy from a channel that asks for the label photo first. If the opening question is what part number is on the pad, you are in the right place. If it is the machine model first, slow down.
FAQ
Q1. Can one EPP work across NCR, Wincor, Diebold and Hyosung machines?
No. There is no pad that crosses those brands, because each platform differs in mount, harness, host protocol, approval, and key scheme. Treat any "fits everything" listing as a red flag.
Q2. Will the same pad fit different models within one brand?
Often, inside one pad family. The Hyosung X1 is a good example: it covers a long list of NH, MX and HALO models. Verify the exact part number and region build against your machine before ordering.
Q3. What is the difference between EPP V6 and V7?
They are generations of the Wincor / Diebold Nixdorf pad line. V7 is the newer generation built for modern approval and key-management requirements. The generations do not interchange at the part level. Check what your machine and your processor require.
Q4. What do the "PCI 3.0" or "PCI 5.0" numbers on a listing mean?
They track the pad's approval generation under PCI's PTS program. The 2024 migration moved fleets onto PCI PTS 5.x or later, and 5.x is now on a hard stop of its own: no new 5.x approvals are being issued, and new deployments must be PCI PTS 6.x or later from 30 April 2027. 3.0-era pads are legacy parts.
Q5. What happens when a pad's tamper circuit trips?
The pad zeroises its keys and locks itself. There is no repair and no reset; it is replaced, and keys are re-injected. This is by design, not a defect.
Q6. Are used or refurbished pads ever a good buy?
Only through a certified channel, with a clean tamper history and the correct generation and market build. Anything sold "as is" with no history belongs in recycling, not in a live fleet.
Q7. Why do different suppliers quote different numbers for the same pad?
Market builds and revision suffixes. Two pads from one generation can carry different numbers because they were built for different regions. The label on your machine is the tiebreaker every time.
Copyright Owned by Guangzhou MicroLinkpro Technology Co., Ltd.
Website: microlinkpro.com
Email: linda.zhou@microlinkpro.com
WhatsApp: +852 93572135
Author: MicroLinkpro Technician Team | Reviewed by: Max Liu, CTO (23 years ATM engineering) | Date: 2026-09-23 | Last updated: 2026-09-23
