Payment Village is heading back to DEF CON 34, running August 6 to 9, 2026 at the Las Vegas Convention Center. We'll be on site all four days with talks, workshops, competitions and hands on demos exploring the security of payment systems, card readers, ATMs and the technology behind how we pay. Come and find us in the village.
Dates: August 6 to 9, 2026
Location: Las Vegas Convention Center, Las Vegas
Village opens: 10:00 each day
Across the weekend we've got talks, hands on workshops, competitions and interactive demos, including an introduction to our Vulnerable ATM Badge and the Wall of Sheep Challenge. Whether you want to sit in on a talk, get hands on in a workshop, or take on a challenge, there's something for every level.
10:30 — Chris Marcotte, "Village Introduction, what's happening at the Payment Village"
11:00 — Levi Schuck, "A real-time battle with a card-testing adversary" (20 mins)
11:30 — Vincent Sloan "Introduction to the Vulnerable ATM Badge"
12:00 — Aidan Quimby, "Skimmers, Shimmers, and You" (45 mins)
13:00 — Dan Borgogno, "Introduction to the Wall of Sheep Challenge"
14:00 — Kevin Buck, "How to Epically Fail Your PCI Assessment" (45 mins)
15:00 — Efim Boieru - Deepfake Detection Through Adversarial Research (45 mins)
16:00 — Arnold Jared Morales Yepez, "Breaking BIOS in ATMs" (45 mins)
10:30 — Chris Marcotte, "Village Introduction, what's happening at the Payment Village"
11:00 — Ariana Miriam, "Victim as a Service: Engaging with Trust-Based Scams Using AI"
11:30 — Vincent Sloan "Introduction to the Vulnerable ATM Badge"
12:00 — Ken Pyle, "Breaking PBKDF: Adversarial Cryptanalysis and Techniques for Hunting Cryptographic Flaws" (60 mins)
14:00 — Furkan Fatih Demir, "BNPL's Blind Spot: Exploiting Business Logic Flaws in Buy Now Pay Later APIs" (20 mins)
14:30 — Efim Boieru - Deepfake Detection Through Adversarial Research (45 mins)
16:00 — Matt Burch, "Compounding Interest: Exploiting the ATM Supply Chain" (45 mins)
10:30 — Dan Borgogno, "Introduction to the Wall of Sheep Challenge"
12:00 — CAPTURE THE COIN - Announcement of the CTF Winners
10:45 Stage 4 Panel: "The Future of Payments: AI, Agentic Commerce and the Next Wave of Innovation" Featuring Sanjeev Sharma, Jorge Braniff, Monique Garcia, Daniel Cuthbert (45 mins - Moderated by Leigh-Anne Galloway)
13:30 Stage 4 Talk: Chiao-Lin Yu (Steven Meow), "It's a Payment Terminal. It's My Arcade. It's Everywhere. It Cost Me Nine Bucks." (30 mins)
Chiao-Lin Yu (Steven Meow) -Staff Red Team Security Threat Researcher at Trend AI (Trend Micro)
Payment Village is proudly supported by our sponsors, who help make the village, our workshops and our competitions possible each year.
Incode provides AI-powered identity verification and authentication. Their technology lets organizations securely verify users in real time using biometric facial recognition, liveness detection, and document scanning. This helps banks, governments, and retailers prevent fraud, stop deepfakes, and meet compliance regulations.
The platform works by analyzing physical and digital cues to ensure the user is real and their identity is legitimate.
We are a boutique payment security research and advisory practice specialising in payment security. Through original research, offensive security, and adversary-led assessments, we help organisations stay ahead of emerging threats to payment systems and financial services.
Come find us at DEF CON 34, August 6 to 9 in Las Vegas.
Catch a talk, get hands on in a workshop, or take on one of our challenges.