Card blacklist
Automatic fail and success counters per card. A card that fails repeatedly, or is used suspiciously often inside a window, is blocked before it reaches the pump.
Platform
Unattended does not mean unwatched
An unstaffed forecourt has to be harder to abuse than a staffed one, not easier. OPFCC Manager checks the card, the device and — if you want it — the customer’s physical position before a pump is ever authorised.
Card data
You never hold a card number
Card details are tokenised in the customer’s browser by the payment gateway. They do not pass through, and are not stored on, the station’s server.
That is the accurate description of how it works. We do not claim certifications the platform does not hold, and you should be sceptical of anyone selling you a forecourt system who does.
Three checks, then fuel
Each one runs before the controller is ever asked to authorise a dispenser.
Device risk scoring
Every customer session is scored and routed to allow, challenge or block — so a suspect device meets friction and a regular customer does not.
Geofencing
Optionally require the customer’s phone to physically be on the forecourt before a pump can be authorised. Switch it on per site.
What happens when something goes wrong
Payment
- A declined payment aborts the pump reservation automatically.
- The attempt is recorded against the card and feeds the blacklist counters.
- A decline can never leave a pump live.
Fleet accounts
- Hot-card list checked before an account sale is accepted.
- Odometer captured at the pump for the account record.
- Account sales sit in the same audit trail as card sales.
Access
- Password plus two-factor code by email for the back office.
- Short-lived sessions with rotating refresh tokens.
- Login rate-limiting with lockout, and a second passcode on site-breaking settings.
Paperwork that stands up
GST-correct receipts
GST, service fee and card surcharge itemised separately on every receipt, with your trading name and ABN on every document.
Retained history
Full transaction history kept per site for reconciliation, with the raw record behind every summarised row.
Reconcilable refunds
Every automatic refund is part of the transaction record, not a separate event you have to match up later.
On station-owned hardware
Standard
- Containerised deployment.
- Automated nightly database backup.
- Alerting on the parts that matter.
Sealed appliance
- Encrypted disk.
- No local logins.
- Remote support access only.
Isolation
- Each site has its own database.
- Each site has its own scoped credentials.
- Nothing at one site can read another.
Bring it to your forecourt
A walkthrough starts with your site: what controller you run, how the pumps are laid out, which hours you are closed and what that is costing. We come back with what unattended trading looks like on your forecourt, and what it takes to get there.
- Site survey confirms controller compatibility before anything is quoted.
- Your existing dispensers stay where they are.
- You keep control of prices, fees and screen content from day one.
Book a site walkthrough
Tell us about the forecourt and we will come back with what an unattended setup looks like on it — what connects to your controller, what stays as it is, and what it costs.