How EMV chip cards protect your store

The chip on a payment card isn't decoration. It's a small computer, and it replaced the magnetic stripe because the stripe was one of the easiest things in retail to counterfeit. EMV chip cards protect your store by generating a one-time code for every transaction, which makes a cloned card close to worthless at your counter.

EMV stands for Europay, Mastercard, and Visa, the companies behind the original standard. It's now the global norm for in-person card payments. For a small store it matters for two reasons: it stops most counterfeit card fraud at the register, and it decides who pays when counterfeit fraud happens anyway.

How does a chip stop counterfeit cards?

Start with what the old magnetic stripe did wrong. A stripe holds static data. Every swipe hands over the same information, so a thief with a cheap reader could copy a stripe in a second and write it onto a blank card. That cloned card worked exactly like the real one.

A chip doesn't hand over static data. During a chip transaction, the card and the terminal have a brief conversation, and the chip produces a cryptogram, a one-time code tied to that specific transaction. The code is useless a second time. Copy everything from yesterday's purchase and you still can't build a card that passes today's check. Counterfeiting a stripe is a hobby project. Counterfeiting a working chip is not a realistic one.

That's the whole trick, and it's a good one.

What is the EMV liability shift?

Before EMV arrived in the US, the bank that issued a card generally absorbed the cost of counterfeit fraud. In October 2015 the card networks changed the rule for in-person payments. Since then, when a counterfeit card slips through, the loss generally lands on whichever party was using the older technology.

In practice: a customer presents a counterfeit chip card, and your terminal only supports swipe, so you swipe it. If that transaction turns out to be fraud, the cost can land on you instead of the bank. Same store, same thief, but with a terminal that reads the chip, the loss generally stays off your books.

This is the strongest practical argument for current equipment. The fine print varies by card network and situation, so treat this as the general shape of the rule, not a ruling on any one dispute.

Doesn't the chip slow down my line?

This myth had some truth to it in 2016, when early chip readers made everyone stand there while the terminal thought about it. Those days are gone. Modern readers process a dip quickly, and tap-to-pay, which runs on the same EMV security foundation, is faster than swiping ever was.

Watch your own line closely and you'll usually find the slow part isn't the card. It's the customer digging for the card, or a price check, or a scale item. The chip gave up its slow reputation years ago. It just hasn't given up the rumor.

What should a small store actually do?

Three things, none of them complicated.

Use a chip-capable reader, and let it do its job. If your terminal is old enough that swiping is still the default, the equipment is the problem, not the cards. NRS Pay includes a free card reader with signup, and you can see the current card readers and terminals here.

Break the fallback-swipe habit. When a chip fails to read, some terminals offer a swipe instead. Use that rarely, and pay attention when it happens, because "the chip never works on this card" is also what a person holding a cloned stripe says.

Train whoever runs the register. Staff don't need the theory. They need two sentences: let the machine read the chip or the tap, and ask for another payment method if a card will only ever swipe.

Fraud prevention at a small store is mostly boring: current hardware, sensible habits, no exceptions during the rush. The chip does the clever part for you.