What Is EMV? Chip Cards and the Liability Shift Explained

On this page 7 sections

1. What Is EMV? What the Letters and the Chip Mean
2. How an EMV Chip Stops Counterfeit Fraud
3. The EMV Liability Shift Explained
4. Example: A Swiped Chip Card Turns Into a Chargeback
5. EMV for Unattended Terminals and Fuel Pumps
6. EMV Compliance Checklist: Making Sure Your Chip Card Reader Is Ready
7. Next Steps

Key takeaways

• EMV chip transactions create a one-time code for each sale, which makes stolen card data far less useful to counterfeiters.
• Under the EMV liability shift, a merchant who swipes a chip card on equipment that is not chip-enabled can be held responsible for counterfeit fraud chargebacks.
• A chip slot alone is not enough. EMV must be enabled and certified with your processor, and staff should swipe only when the terminal prompts them to.
• Unattended terminals such as kiosks, self-checkout lanes and fuel pumps carry the same counterfeit risk and need the same attention.

What is EMV? It is the global standard behind the chip on credit and debit cards, and the technology inside the chip card reader at your counter. EMV matters to U.S. merchants for two reasons. It makes counterfeit card fraud much harder, and it decides who pays when that fraud gets through. This guide explains how chip transactions work and how the EMV liability shift moves counterfeit losses onto merchants who still swipe. It also walks through a swiped-chip chargeback and shows how to confirm your terminals are set up correctly.

What Is EMV? What the Letters and the Chip Mean

EMV stands for Europay, Mastercard and Visa, the companies that created the original specification. EMVCo, an industry body owned by the major card networks, now manages the standard. "EMV," "chip card" and "chip-and-PIN" are often used to mean roughly the same thing.

The chip is a small microprocessor. It holds data and runs a short security routine each time a cardholder inserts or taps the card. A magnetic stripe works differently. It is a passive strip of static data that reads the same way every time it is swiped.

That difference matters most in businesses that handle cards in person all day:

• Retail stores process a steady stream of card-present sales at the counter.
• Restaurants and bars handle tabs, pay-at-table and busy closing rushes.
• Grocery markets run several lanes plus self-checkout, often with PIN debit.
• Liquor stores sell high-value bottles that are easy to resell, which makes them a target for counterfeit cards.

How an EMV Chip Stops Counterfeit Fraud

The magnetic stripe's weakness is that its data never changes. A criminal can capture it with a skimmer, a compromised terminal or a data breach, then write it onto a blank card. That clone will swipe like the real thing.

A chip transaction adds a step the clone cannot fake:

1. The cardholder inserts or taps the card.
2. The chip generates a cryptogram, a one-time code built from the card's keys and the details of that specific transaction.
3. The terminal sends the cryptogram to the issuer along with the authorization request.
4. The issuer checks the code. If it is valid, the transaction moves forward. A code copied from an earlier sale will not pass.

A thief who steals the card number and expiration date still cannot easily make a working chip. The thief can, however, copy the magnetic stripe data. That is why the stripe remains the weak point.

Contactless "tap" payments on EMV cards and mobile wallets also generate one-time codes, so they get similar protection. Our guide to contactless payments for small business covers setup and costs.

EMV vs. Swipe at a Glance

EMV has one important limit. It protects card-present transactions only. It does nothing for online or phone orders, where the card is never inserted. For that side of your business, see our explainer on card-present vs. card-not-present fees, fraud and rules.

The EMV Liability Shift Explained

Before the U.S. moved to chip cards, issuers generally absorbed most losses from counterfeit fraud at the point of sale. The EMV liability shift, adopted by the major card networks, changed that. The basic principle is simple:

When counterfeit fraud happens, liability generally falls on the party that used the less secure technology.

Here is how that plays out in common scenarios. Exact rules vary by network and transaction type.

A few points tend to surprise merchants:

• The liability shift is not a law or a fine. You will not be penalized for having a swipe-only terminal. You simply carry the counterfeit fraud risk on any chip card you swipe on it.
• EMV compliance means your setup actually reads chips. A terminal with a chip slot that has not been enabled and certified with your processor counts as swipe-only in a dispute.
• It covers counterfeit fraud, not all fraud. Lost-and-stolen card fraud and friendly fraud follow different rules. Some networks have tied lost-and-stolen liability to PIN support, so ask your processor how this applies to your account.
• EMV does not replace PCI DSS. Chip acceptance lowers your risk, but you still need to meet PCI DSS security requirements.

Example: A Swiped Chip Card Turns Into a Chargeback

The following scenario is illustrative. The amounts and details are hypothetical.

A neighborhood liquor store is busy on a Friday evening. The main register has a chip-enabled terminal. Lane two still runs an older countertop device. It has a chip slot, but EMV was never enabled or certified with the processor, so it can only read the magnetic stripe. The store opens lane two for the rush, and the cashier there swipes every card.

At lane two, a customer buys three bottles of premium spirits totaling $480. The card swipes, the sale is approved, and the customer leaves.

The card was a counterfeit. Its stripe carried data skimmed from a real cardholder's chip card. Here is what happens next:

1. Weeks later, the real cardholder spots the charge and reports it as fraud.
2. The issuer reviews the transaction. The authorization data shows that a chip card was swiped on a terminal that was not chip-enabled.
3. The issuer files a chargeback under a counterfeit-fraud reason code. The liability shift puts the loss on the less secure party, which in this case is the merchant.
4. The store's processor debits $480 from the merchant account. Depending on the merchant agreement, it may also add a chargeback fee.
5. The merchant responds, but has little to argue. Store video and a signed receipt do not change the central fact: a chip card was swiped on a terminal that was not chip-enabled. The dispute is lost.

The store is out the bottles, the $480 and any chargeback fee. If this kept happening, a rising fraud and chargeback ratio could also draw scrutiny from its processor.

The outcome would have been different with a chip-enabled terminal. Swiping the clone would have triggered a prompt to insert the chip, because the stripe's service code identifies a chip card. The clone had no working chip, so the sale would most likely have failed, or the issuer would have kept the liability.

A note on fallback: Suppose the lane-two terminal had been chip-enabled, and the cashier had swiped only after a genuine chip-read failure. The result would then depend on each network's fallback rules. Ask your processor how fallback transactions are treated on your account.

For the full dispute process, read how chargebacks work, step by step. For disputes you can win, our chargeback rebuttal letter template covers the evidence that works.

The Same Risk in Other Businesses

• Restaurants and bars: A server carries a card to a back-office terminal that only reads the stripe and swipes it to close a tab quickly. A chip-enabled handheld reader at the table avoids this and keeps the card in the guest's sight. See our guide to bar tab preauthorization for opening tabs safely.
• Grocery markets: One lane has an older PIN pad that can only swipe. During a rush, that lane is the one fraudsters look for.
• Retail stores: Counterfeiters favor gift card and electronics purchases because those items resell easily. Any register still running a swipe-only device is exposed.

EMV for Unattended Terminals and Fuel Pumps

Unattended payment points have no cashier to notice a suspicious card, so chip acceptance matters even more there. These include:

• Self-checkout lanes in grocery and big-box retail
• Ordering kiosks in quick-service restaurants
• Vending machines, parking pay stations and EV chargers
• Automated fuel dispensers at gas stations and convenience stores

Retrofitting pumps is expensive, so the card networks gave automated fuel dispensers a later liability shift deadline than in-store terminals. That extra time has since run out for the major networks. Fuel retailers with swipe-only pumps can now face the same counterfeit liability as in-store merchants. Confirm the current rules for your equipment with your processor.

Unattended terminals also attract skimmers and shimmers. A shimmer is a thin device slipped inside the chip slot. To reduce that risk:

• Use tamper-evident seals and check them at every shift change.
• Inspect card slots for loose parts, extra layers or misaligned bezels.
• Choose terminals that support contactless, which reduces how often cards enter the slot.
• Confirm with your processor that any self-service kiosk you deploy is EMV-certified for unattended use, not just for countertop use.

EMV Compliance Checklist: Making Sure Your Chip Card Reader Is Ready

Use this checklist to make sure your setup will hold up in a dispute:

1. Check the hardware. Every lane, handheld and kiosk should have a working chip reader and contactless support. Replace or repair any device that forces staff to swipe.
2. Confirm EMV is enabled and certified. A chip slot alone does not prove the terminal reads chips. Ask your processor directly whether each terminal is certified for EMV on your account. This matters most if your POS software is integrated with a separate card reader.
3. Train staff on one rule. Insert or tap first. Swipe only when the terminal prompts for it, and never just "to save time."
4. Handle chip failures carefully. Repeated fallback to swipe on the same card is a warning sign. Ask the customer for another card or payment method. Liability on fallback transactions depends on network rules.
5. Review your reports. Many processors and POS systems show the entry mode for each sale. Look for swiped chip cards by lane or employee.
6. Keep firmware and software updated. Network rules and security requirements change, and outdated terminals can fall out of certification.
7. Inspect devices regularly for tampering, especially unattended ones.

If your equipment is aging, compare options such as smart terminals with chip and tap built in, countertop PIN pads for multi-lane checkout and full POS systems. Our article on smart payment terminals vs. traditional card machines explains the trade-offs.

Next Steps

EMV is not a new fee or a legal requirement. It decides who pays when a counterfeit card gets through. Every chip card you swipe on equipment that is not chip-enabled is fraud liability your business carries. Fixing that usually takes three things: working hardware, confirmed certification and a clear rule for staff.

MannyPay offers Clover, Valor, Dejavoo, PAX and other card terminals, along with in-person retail payment processing for counter, lane and unattended setups. To have a specialist review your current equipment, request a free quote. A MannyPay specialist responds to quote requests within one business day.

This article is general information about card network practices, not legal advice. Network rules change, so confirm current liability terms with your processor.

ME

About the author

MannyPay Editorial Team

Beyond the Swipe's editorial desk researches the publication's guides and news and cites its sources in every article. Articles reviewed by a named MannyPay editor carry that editor's byline.

This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.