EMV Chip Card Processing

For decades, a card's magnetic stripe carried the same static data every time it was swiped. Copy it once and a criminal could print a counterfeit card that worked anywhere. EMV chips were created to end that, and the card networks backed the change with a financial nudge aimed at merchants.

If you accept cards in person, EMV affects your equipment, your liability and your daily habits at the counter. This page explains how chip processing works and what to check in your own setup.

What the chip actually does

EMV stands for Europay, Mastercard and Visa, the companies that developed the standard. The chip is a tiny computer. When a card is inserted into a reader, the chip and terminal exchange messages, and the chip produces a unique cryptogram for that transaction. A copied cryptogram is useless for any other purchase.

That is the reason counterfeit fraud drops where chip cards are used properly. A criminal who copies the stripe data cannot reproduce the chip's secret, so cloned cards fail at chip-enabled terminals or are pushed down to less secure fallback methods.

The liability shift in plain English

Under card network rules, when a counterfeit card is used in a face-to-face transaction, liability generally falls on whichever party has the weaker technology. If the card has a chip and the merchant has no chip reader, the merchant can be held responsible for the loss. If both are chip-capable, the loss typically goes back to the issuer.

Say a counterfeit card is used for a $900 purchase at a shop with only a stripe reader. A chargeback for counterfeit fraud could land on the merchant for the full amount, plus a dispute fee. With a chip reader, the same fraud would not usually come back to you. Rules are specific to each network and fraud type, so confirm details with your processor.

Rules differ by network, by card type and by kind of fraud, and they have changed over time, so treat this as a general picture. The practical lesson is simple: equipment that reads chips keeps counterfeit losses off your books in most cases, and a terminal that cannot is an exposure you are choosing to carry.

Chip and PIN, chip and signature, and contactless

Chip cards can verify the cardholder in different ways. Chip and PIN requires the customer to type a code, which is the strongest option. Chip and signature relies on a signature or, increasingly, no verification for lower amounts. No-CVM options are common for small purchases.

Contactless uses the same chip but communicates by radio instead of contact. The experience is faster, and the security model is similar: a unique code per transaction. Most modern terminals support all three modes in one device.

• Insert the chip and enter a PIN for debit or PIN-preferring cards
• Insert and sign, or confirm without signature, where permitted
• Tap a card or device for contactless payment
• Swipe only as a fallback when the chip fails

Day-to-day habits at the counter

Train staff to keep the card in the reader until the terminal tells them to remove it. Pulling a card early is the most common reason for read errors and declined chip transactions. Customers often do it out of habit from swiping, so a visible sign helps.

Define a policy for fallback swipes. If a chip fails and the terminal offers a swipe, it may be acceptable, but you may carry more liability for those transactions. Try cleaning the reader and re-inserting the card first, and ask for another payment method if the card is damaged.

Signage helps customers too. A small sticker reading 'insert chip, leave card in until prompted' reduces repeat attempts and keeps the line moving. Remember that some customers still reach for the stripe out of habit, so staff should gently redirect rather than comply with a swipe that the terminal could have read as a chip.

Equipment checks

Confirm that your terminal reads chip cards, accepts contactless and supports PIN entry. Check that software is up to date, because older firmware may not meet current requirements. Make sure your POS passes chip data correctly, since misconfigured integrations can force transactions to be treated as keyed.

Many existing terminals can be reprogrammed for a new processor, and MCCPS often keeps re-programmable terminals merchants already own. If a model predates chip technology, replacement is likely worth the cost.

Test every terminal after any software update or move. Insert a chip card, tap a card and a phone, and run a PIN debit sale, then refund the test. A five-minute check beats discovering a dead contactless antenna with a line of customers waiting. Keep a log of which terminal is where, since a unit that fails often is a candidate for replacement.

What EMV does not cover

EMV protects card-present transactions. It does nothing for online, phone and mail orders, where fraud often shifts after chip adoption. If you sell in both settings, you need separate controls for card-not-present sales, such as AVS, CVV, 3-D Secure and velocity limits.

Chip also does not remove the need for PCI compliance. Encryption of card data and secure handling remain part of your responsibility.

Getting chip-ready with MCCPS

MCCPS supports EMV and contactless acceptance and integrates with almost any POS, smartphone or terminal. A specialist can review your current equipment, tell you what can be reprogrammed and recommend replacements only where they make sense. Free 24/7 technical support covers setup questions.

To see how your current processing compares, request the free statement analysis. Savings depend on that review, and no result is promised in advance.

This article is general information, not legal, tax or compliance advice. Card-network and state rules change — confirm current requirements before acting. Savings depend on your individual statement analysis.