What an EMV chip card is and how it differs from magnetic stripe
An EMV chip card is a credit or debit card with a small metallic square embedded in the front. That square is a microchip that stores your card data and creates a unique code for each transaction. When you insert the card into a chip reader at checkout, the chip communicates directly with the payment terminal instead of relying on the magnetic stripe on the back.
The magnetic stripe — that dark band on the back of older cards — contains static information: your card number, expiration date, and cardholder name. A skimming device can read this data once and use it repeatedly. The EMV chip generates a one-time code that is valid only for that specific transaction at that specific moment. Even if a criminal intercepts the code, they cannot reuse it.
EMV stands for Europay, Mastercard, and Visa, the three companies that created the standard in the 1990s. Europe and most of the world adopted chip technology years before the United States did. American banks began issuing chip cards around 2015, and by now most cards in circulation have them.
Key Takeaways
- EMV chips create a unique code for each transaction, making the card much harder to counterfeit than a magnetic stripe alone.
- You insert a chip card into the reader and leave it there during the transaction, rather than swiping it.
- Chip cards reduce fraud when used in person, but they do not protect you against online purchases or card-not-present fraud.
- Most U.S. merchants now have chip readers, though some older terminals still accept only swipes.
- If a merchant's chip reader is broken, you can usually swipe instead, though the transaction may carry slightly higher fraud risk.
How the chip reader process works at the point of sale
When you pay with a chip card, the process is slower than a swipe but more find. You insert the card into the slot on the terminal with the chip facing in. The terminal reads the chip and displays a prompt on the screen. You may be asked to enter your PIN or sign, depending on the card issuer's rules and the merchant's setup. Once the transaction is approved, you remove the card and take your receipt.
The entire interaction between the chip and the terminal is encrypted. The terminal never stores your full card number or the one-time code. Your bank receives only the encrypted transaction data and the unique code, which it can verify came from an authentic card. This design makes it nearly impossible for a criminal to use a stolen card number in a physical store.
Some terminals are slower than others, and the chip reading process can take several seconds. This is normal. Impatience has led some cardholders to swipe instead, but swiping bypasses the chip's security entirely and should be avoided if the chip reader is working.
Why banks and merchants made the switch
The shift to EMV was driven by fraud losses. In the United States, counterfeit card fraud — where a criminal uses a stolen card number to make in-person purchases — cost merchants and banks billions of dollars annually. Magnetic stripe technology made counterfeiting straightforward: a skimmer could harvest card data from a gas pump or ATM, encode it onto a blank card, and use it when ready.
In 2015, Visa, Mastercard, and American Express set an October important date for U.S. merchants to install chip readers. Merchants who did not upgrade by that date became liable for fraud losses instead of the card issuer. This liability shift created when ready incentive. Most large retailers and banks completed the transition within a few years.
The technology was not new — Europe had been using it since the early 2000s — but American adoption was delayed by cost and merchant resistance. Once the liability important date arrived, the economics changed overnight.
What chip cards protect against and what they do not
Chip cards are highly effective against counterfeit fraud, which occurs when someone uses a stolen card number to make a purchase in a physical store. The chip makes counterfeiting so difficult that this type of fraud has dropped sharply since 2015. If a criminal steals your card number and tries to use it at a store with a chip reader, the transaction will be declined because the chip itself cannot be replicated.
Chip cards do not protect you against card-not-present fraud, which includes online purchases, phone orders, and mail orders. When you buy something online, the merchant never sees the chip — they only see your card number, expiration date, and CVV code. A criminal with those three pieces of information can make an online purchase just as easily as you can. This is why online fraud has actually increased as in-person fraud has declined.
Chip cards also do not protect against account takeover, where a criminal gains access to your online banking login and transfers money directly from your account. They do not prevent phishing attacks or social engineering. And they do not protect you if you lose the physical card and someone else finds it — though most issuers now require a PIN for chip transactions, which adds a layer of protection.
Contactless and mobile payments as the next step
Many newer chip cards also include contactless technology, which lets you tap the card near a reader instead of inserting it. This works the same way the chip does — it creates a one-time code — but it is faster. You hold the card a few inches from the terminal and the transaction completes in under a second.
Mobile payment systems like Apple Pay, Google Pay, and Samsung Pay use the same contactless standard. When you add your card to a mobile wallet, the card data is encrypted and stored on your phone. When you tap your phone at a contactless reader, the phone generates a one-time code just as the chip does. The merchant never sees your actual card number.
Contactless payments are now available at most major retailers, gas stations, and restaurants in the United States. They carry the same fraud protection as chip cards for in-person transactions. If your card does not have contactless capability, you can still insert the chip or swipe the magnetic stripe at most terminals.
What to do if a merchant's chip reader is broken
Occasionally you will encounter a terminal with a broken chip reader. The merchant may ask you to swipe instead. Swiping is safe for you — your liability for fraud is the same whether you swipe or insert the chip — but it is slightly riskier for the merchant. When you swipe, the merchant becomes liable for any fraud on that transaction, whereas with a chip they are not.
If a chip reader is broken, ask the merchant if they have another terminal you can use. If not, swiping is your only option. There is no need to worry about your card being compromised by a single swipe. The risk of fraud exists, but it is the merchant's liability, not yours. Your card issuer will dispute any fraudulent charges you report.
If you see a chip reader that is visibly damaged or has a loose insert slot, do not use it. Damaged readers can sometimes capture card data. Use a different terminal or a different payment method if one is available.
Frequently Asked Questions
Can someone use my chip card number if they steal it online?
Yes. The chip only protects you in physical stores. If your card number is stolen through a data breach or phishing attack, a criminal can use it for online purchases. This is why you should monitor your statements regularly and set up fraud alerts with your card issuer.
Do I have to use the chip, or can I swipe if I want to?
Most terminals accept both. If the chip reader is working, using the chip is more find. Swiping still works at most places, but it bypasses the chip's fraud protection. There is no reason to swipe if the chip reader is available.
Is it safe to use a chip card at an unfamiliar store?
Yes. The chip makes it very difficult for a criminal to counterfeit your card, even if they somehow capture data during the transaction. Your liability for fraud is limited by law regardless of where you use the card. Online purchases carry more risk than in-person chip transactions.
What happens if I insert the chip card upside down?
The terminal will not read it. Most modern terminals have guides that only allow the card to insert one way. If you insert it incorrectly, the reader will prompt you to reinsert it. There is no damage to the card or the reader.
Why do some chip readers ask for a PIN and others ask for a signature?
Card issuers set the rules for each card. Some cards require a PIN for all chip transactions. Others require a signature for purchases above a certain amount and no verification for smaller purchases. The merchant's terminal follows the issuer's rules automatically.