Before the First Mulled Wine: A 2026 Payment-Point Health Check for Christmas Market Stalls

There is a moment at every Christmas market when the queue is three deep, the mulled wine is steaming, and someone taps a card reader while you are still working out where to put the change. The reader beeps, the green tick appears, and everyone moves on. Lovely. But that little tap is also a small computer processing money in a busy, chilly, slightly chaotic public space. Before you zip the float into the bum bag, it is worth spending five minutes checking that the payment point is actually yours, actually working, and not quietly open to someone else.

This is not about turning a craft stall into a bank vault. It is about closing the obvious gaps before the first customer arrives.

Start with the reader's identity, not the queue

Open your payment app and look at the reader name. Does it match the one in your hand? Is the payout account the right one? If you bought the reader secondhand, borrowed it from a friend, or dug it out of last year's box, do a factory reset and pair it again from scratch. A reader that shows a previous owner's nickname is not automatically a disaster, but it is a question you should be able to answer before you take a single payment.

Check the serial number if your provider shows one. Check that the account email is yours, not an old business address you stopped using in 2023. And check the payout timing — some providers hold the first payment for longer than you expect. That is not fraud, but it is better to know on Friday than to discover it on Sunday evening.

The Bluetooth pairing list is a guest list

Most card readers connect to a phone or tablet over Bluetooth. That pairing list can become a little history of every device that has ever been near it. Delete the old ones. Pair only the device you are using on the stall. If your app lets you forget a device automatically after a period of inactivity, switch that on.

Keep the reader with you rather than leaving it on the table between sales. In a crowded hall, Bluetooth range is not huge, but it is large enough to matter if your reader is sitting unattended near the sausage roll queue. If the reader suddenly stops responding, do not just tap it harder. Check the app, check the pairing, and check that you are still connected to the right reader.

The device behind the till is the till

That phone or tablet is not just a screen. It is the thing that approves refunds, shows transaction history, and may have your business banking app a swipe away. Lock it with a passcode or biometrics. Turn off message previews so a notification from your bank does not appear over the payment screen. Close apps you do not need. If you use a shared tablet, create a separate user profile or guest mode for market days.

Do not hand the device to a customer to 'just check something'. You can show them the reader, or read out the confirmation, but the device stays with you. Keep it charged, keep a power bank in the crate, and keep the charging cable tidy so nobody trips over it while carrying a bag of baubles.

Fake confirmations are theatre, not proof

A customer holds up a phone showing a payment confirmation. It looks convincing. It might even have your business name on it. It is still not your confirmation. Check your own reader or your own app. Wait for the green tick on your side. If the payment has not appeared, say so politely and ask them to try again. The customer's screen is not your receipt.

This matters most with QR codes and bank-transfer payments. If someone says they have paid by scanning your code, check the money in your app before handing over the goods. A screenshot can be edited in seconds. Your own transaction list is harder to fake.

Refunds, 'double charges' and helpful strangers

Be wary of anyone who is unusually keen to help you process a refund. A common trick is to claim they were charged twice and ask for the difference in cash. Use the refund function in your payment app, to the same card, and check the transaction ID first. If your policy is no cash refunds at the stall, say it before the sale and put it on a small sign.

Keep the reader angled away from the queue when someone is entering a PIN. Cover the keypad with your hand if needed. And do not let a customer tap buttons on your device to 'speed things up'. Speed is nice; control is better.

Give shoppers a simple sign that the payment point is genuine

You do not need a security briefing taped to the table. You need a clear, calm signal. A small printed sign saying 'Card and QR payments — please wait for our reader to confirm' helps. If you use a QR code, laminate it and keep it behind the counter rather than sticking it loose on the front of the stall where someone could overlay a different code. Check the code points to your payment page before the market opens.

If your reader has a name, use it. 'Our reader is the blue one on the right' sounds small, but it tells shoppers what to expect. Staff wearing the same apron or lanyard helps too. Scammers rely on confusion; simple visual cues make confusion harder to manufacture.

The morning-of checklist

Charge everything overnight. Test a small payment and refund it. Check the mobile signal where your stall actually is, not just at the car park. Have a backup payment method and a written note of your provider's support number. Keep the float separate from the card reader. If a reader goes missing, unpair it and report it to your provider straight away.

None of this takes long. Five minutes with a checklist is a lot easier than trying to untangle a fake payment while a queue of cold shoppers watches you. Do the boring bit before the first mulled wine. Then you can get on with the good bit — selling the stuff you spent all autumn making.