A method for secured receipt and usage of payment credentials using a commercial-off-the-shelf, COTS, device, comprising: storing, in a memory of the COTS device, a secure application program and one or more cryptographic keys, where the cryptographic keys are accessible using the secure application program and inaccessible by any other application program or component in the COTS device; establishing, by the secure application program in the COTS device, a secure communication channel with a back-end system, where the secure communication channel is inaccessible by any other application program or component in the COTS device, wherein an attestation of the COTS device is performed by the back-end system upon establishing the secure communication channel; exchanging, by the secure application program in the COTS device, attestation data with the back-end system using the communication channel; receiving, by a near field communication interface of the COTS device, payment credentials from a payment card positioned within a predetermined distance of the COTS device, wherein an executed instance of the secure application program is immediately terminated and any data generated during operation of the instance or received by the near field communication interface is immediately deleted without any opportunity for access by other application programs or components of the computing device if the attestation of the COTS device fails; transmitting, by the near field communication interface of the COTS device, the payment credentials to the secure application program; enciphering, by the secure application program of the COTS device, the payment credentials, wherein the payment credentials are enciphered using the one or more cryptographic keys; and transmitting, by the secure application program of the COTS device, the enciphered payment credentials to the back-end system using the secure communication channel. storing, in a memory of the COTS device, a secure application program and one or more cryptographic keys, where the cryptographic keys are accessible using the secure application program and inaccessible by any other application program or component in the COTS device; establishing, by the secure application program in the COTS device, a secure communication channel with a back-end system, where the secure communication channel is inaccessible by any other application program or component in the COTS device, wherein an attestation of the COTS device is performed by the back-end system upon establishing the secure communication channel; exchanging, by the secure application program in the COTS device, attestation data with the back-end system using the communication channel; receiving, by a near field communication interface of the COTS device, payment credentials from a payment card positioned within a predetermined distance of the COTS device, wherein an executed instance of the secure application program is immediately terminated and any data generated during operation of the instance or received by the near field communication interface is immediately deleted without any opportunity for access by other application programs or components of the computing device if the attestation of the COTS device fails; transmitting, by the near field communication interface of the COTS device, the payment credentials to the secure application program; enciphering, by the secure application program of the COTS device, the payment credentials, wherein the payment credentials are enciphered using the one or more cryptographic keys; and transmitting, by the secure application program of the COTS device, the enciphered payment credentials to the back-end system using the secure communication channel.