Recently, we were informed by one of our processing partners of possible fraudulent activity involving bad actors downloading a merchant's profile (TPN) into a terminal for the purpose of running refunds on prepaid cards.
To prevent this from happening on Dejavoo terminals, we implemented a security feature that blocks downloads of merchant profiles (TPNs) to different serial numbers. This feature pairs the TPN to the first serial number that pulls the profile.
We understand that in the normal course of business, it's necessary to download an existing TPN to a new serial number. Therefore, it's important to release a TPN only when you're ready to perform a download on a new terminal with a known user.
Please note that only the company that created the TPN will have the ability to release the TPN.