trending
The UK government is preparing to introduce mandatory software standards for electronic and mobile point-of-sale systems as part of a wider effort to tackle electronic sales suppression, a form of tax fraud involving the manipulation or concealment of retail transaction records.
UK Moves to Mandate POS Software Standards
HM Revenue & Customs confirmed the policy direction following a consultation launched in June, with detailed technical proposals expected in a further consultation in summer 2027.
The measures will apply to EPOS and MPOS systems and are intended to make it significantly harder for businesses to alter or delete sales records without detection.
Tamper-Proof Transaction Records Move Up the Agenda
Industry feedback was broadly supportive of tougher controls, although respondents stressed that the final framework should remain proportionate, technologically neutral and compatible with existing retail processes.
Potential measures include digital signatures, hashing and cryptographic transaction chaining to protect sales records from undetected manipulation.
HMRC is also considering standardised data export requirements, potentially using formats such as the Standard Audit File for Tax, although no final technical model has yet been selected.
The government has also examined certification and registration models for POS software, ranging from manufacturer self-certification to independent assessment.
Implementation Costs Remain a Key Concern
One of the main concerns raised during the consultation was the potential cost of compliance, particularly for smaller software vendors and merchants.
Respondents argued that existing POS systems should, where possible, be upgraded rather than replaced entirely.
Questions also remain over how the standards should treat unfinished transactions, refunds, cancellations and voids, as well as whether receipts should include standardised references or QR codes.
The Payments Association welcomed the direction of travel, arguing that electronic sales suppression distorts legitimate competition and that tamper-proof, immutable transaction logging could strengthen trust across the retail ecosystem.
Retailers and Payment Providers Face a New Compliance Layer
No mandatory implementation date has yet been set, and businesses are not currently required to change their systems.
The immediate task for POS providers, payment companies and retailers is therefore preparation.
Software vendors will need to assess transaction-recording, audit-trail, security and data-export capabilities, while merchants should consider whether existing systems can support future compliance upgrades.
The government intends to legislate through a future Finance Bill once the technical framework has been developed.
The shift is significant because it moves UK policy away from relying mainly on investigations after fraud has occurred and towards preventive controls embedded directly into retail payment software. For the payments industry, that means compliance is increasingly becoming part of the product architecture itself.
Comments