Payments.iQ NG 1.15: a new level of security and efficiency of self-service banking

In July 2026, Payments.iQ NG 1.15, a modern platform for managing self-service banking devices, was released. Let’s look at the main updates.

Release Summary

Security has been strengthened in accordance with international standards: OWASP recommendations for the protection of web applications and PCI DSS requirements for payment card data. Password and session control, protection against password guessing and data leakage have been introduced, which simplifies audits and certification.

Improved usability of device network management: Smart Clipboard saves selection during transitions, added denomination selection in QR CashOut and Maintenance mode.

Working with reporting has become more convenient thanks to direct access to the functionality of DS Center from the interface of Payments.iQ NG system.

Currency exchange (FCX) has been optimized: the schedule works according to the ATM time zone, rates can be assigned to virtual groups, the “Unissued change” column has been added to the clearing files, and operations with communication failures are correctly updated.

Improved stability and data quality: fixed timestamps in the log and the ServerTimeout error, improved reports, notifications, device administration, interface and infrastructure (PostgreSQL launch, resource limits, data storage with Grafana monitoring).

Security: Implementing OWASP Requirements

Version 1.15 implements the full set of OWASP (Open Worldwide Application Security Project) requirements for login and password management:

• Change your password when you log in for the first The default password issued when you created your account can no longer be left unchanged.
• Automatic logout when the administrator password is changed. If an administrator changes a user’s password, that user is automatically logged out. Previously, they could continue to work with the old session.
• Correct termination of the session. The session (the user’s active session) now ends correctly both after logging out and after changing the password.

A vulnerability that allowed bypassing password brute force protection has been eliminated separately. Previously, an attacker could send many login requests at the same time and thus bypass the limit on the number of attempts (brute-force). Now such a bypass is impossible.

In addition, the username is no longer shown in the login error message. All these updates reduce the risk of account compromise and help with security audits and PCI DSS certification.

Easy to use: fewer clicks and switches

The Smart Clipboard now could select multiple devices. Selected devices are now saved when the operator navigates between pages, searches for devices, or changes filters in the “Groups and Devices” section. Previously, the selection was reset on any transition, and the operator had to select devices again, which was especially difficult when working with large lists.

Reports in Payments.iQ NG are now generated using the functionality of the DS Center.iQ solution. The module is enabled in the administration settings and opens from the top menu of the portal, without logging into a separate system.

In the QR CashOut scenario (cash withdrawal by QR code), the ability to choose which banknotes to issue the amount has been added. In device management, the unique number of the Terminal ID terminal has become case-insensitive, which eliminates the accidental appearance of duplicates.

Convenience of currency exchange on self-service devices

In the new version of the currency exchange module, FCX.iQ schedule works according to the time zone of the ATM itself, and not according to the server time (UTC, Coordinated Universal Time). This eliminates discrepancies when the network of devices operates in different time zones. Exchange rates can now be assigned to virtual groups of devices, which simplifies the management of tariffs in large networks.

A new column “Unissued change” has been added to the clearing files. In addition, operations with the “disconnect failure” status are now correctly updated in these files after the connection is restored, previously such operations could “hang” in the wrong status.

Data stability and quality

Fixed timestamps when uploading the transaction log: they used to be rounded to 2-5 seconds. This is important for banks that reconcile transactions with other systems by exact time. Fixed a ServerTimeout bug that could cause the timer to terminate a session on host-controlled screens.

In reports, the rounding of profits in the “Totals by currency” report has been corrected, extra currencies have been removed when selecting one currency, and the name of the report file has been corrected for languages with a non-Latin alphabet (for example, for the Russian language).

At the infrastructure level, fixed the launch of the PostgreSQL database when upgrading from 1.14 to 1.15, set resource limits for all services, and configured data retention periods for log storage systems with the Grafana dashboard to control the size of the database. All this reduces the risk of slowing down the system over time.

Key updates Payments.iQ NG v1.15

A detailed list of updates Payments.iQ NG v1.15 can be found on the product website .

The value of the release for the bank

The update will bring a measurable effect to banks with high security requirements and organizations with a large network of self-service devices, including in different time zones.

• Easier to pass security checks. Version 1.15 implements the requirements of OWASP checks. You do not need to modify anything yourself and spend your budget on individual improvements: protection against brute force and proper login management are already built into the system.
• Employees spend less time on routine. If you have a lot of devices, including those in different time zones, improvements in currency exchange (FCX.iQ) and the Smart Clipboard remove unnecessary repetitive actions: device selection is not reset, and rates and schedules work according to the local time of the ATM. As a result, there is less manual work and fewer errors.
• More accurate data and more stable performance. Fixes to timestamps, reporting, and infrastructure improve the accuracy of transaction reconciliation and reduce the risk of the system slowing down over time.

The BS/2 team is ready to demonstrate the new version of the Payments.iQ NG 1.15 platform and answer questions about the integration of the solution. Leave a request for a demonstration of the solution to agree on a convenient time.