EMV Chip
Payment card microprocessor chip generating a unique cryptogram for each transaction, preventing card fraud.
FAQs
What is the EMV liability shift and how does it affect merchants?
The EMV liability shift (October 2015 in the U.S.) transferred responsibility for certain types of counterfeit card fraud from card issuers to merchants. Before the shift, issuers absorbed most counterfeit fraud losses. After, if a merchant processes a chip card transaction at a non-chip-capable terminal (using the magnetic stripe instead), and the transaction turns out to be fraudulent, the merchant is liable for the losses—not the issuer. This 'follow the technology' rule incentivized merchant investment in chip-capable terminals by making the cost of inaction (fraud liability) exceed the cost of upgrading payment infrastructure.
Why doesn't EMV chip prevent online credit card fraud?
EMV chip prevents counterfeit card fraud at physical points of sale because the chip generates a unique cryptogram requiring physical card interaction with a chip reader terminal. Online transactions are card-not-present (CNP) transactions—the cardholder types in card details without physical card interaction. No chip cryptogram is generated or verified in CNP transactions. Stolen card numbers, expiration dates, and CVV codes (obtained through data breaches, phishing, or skimming) are sufficient to conduct online fraud regardless of whether the physical card has an EMV chip. CNP fraud prevention relies instead on 3D Secure authentication, fraud scoring models, and behavioral analytics.
What is contactless EMV and how does it differ from standard chip contact transactions?
Contactless EMV (also called tap-to-pay or Near Field Communication/NFC payments) uses the same EMV cryptographic technology as contact chip transactions but transmits data wirelessly via NFC radio frequency when the card is tapped or waved near a contactless-enabled terminal. The security model is equivalent—a unique cryptogram is generated for each transaction—but the transaction is faster (under 1 second vs. several seconds for contact chip). Contactless EMV transactions have a lower floor limit for PIN verification in some countries, and merchant terminals must be certified for contactless as a separate capability from contact chip acceptance.
Related Terms
Tokenization
Replacing sensitive payment data with a non-sensitive substitute token that has no exploitable value.
Contactless Payment
Payment via tap, NFC, or QR code without requiring physical card insertion or swiping.
Digital Wallet
Software application storing payment credentials and enabling transactions without physical cards.
Payment Facilitator
Entity that aggregates merchant payment acceptance under a master account, enabling sub-merchant onboarding.