What Is a Chip-and-PIN Card?
A chip-and-PIN card is a type of credit card that requires the cardholder to authorize the transaction by entering their personal identification number (PIN), much as they would with a debit card. Chip-and-pin cards are less susceptible to fraud than previous generations of credit cards.
Key Takeaways
- Many credit cards today have embedded microchips, called EMV chips, that contain information about the card and cardholder.
- They may also have magnetic stripes, an older technology containing much the same information but more vulnerable to theft.
- Chip-and-PIN cards require the cardholder to enter a PIN that presumably only they know in order to complete a transaction.
- An alternative type of card, the chip-and-signature card, requires a signature but not a PIN and is considered less secure.
- Compared with chip-and-signature cards, chip-and-PIN cards are not yet in wide use in the United States, although they are in Europe and elsewhere.
How Chip-and-PIN Cards Work
Unlike earlier credit cards, which had a magnetic stripe containing information about the card and cardholder, chip-and-PIN cards have an embedded, square-shaped microchip, called an EMV chip, that not only carries similar information but also generates a unique code for each transaction.
When making a purchase, chip-and-PIN cardholders insert their card into the merchant's point of sale (POS) terminal, or wave it over the terminal, so that the microchip can be read by the machine. The POS terminal then prompts them to enter their PIN, in order to authorize and complete the transaction.
With the older magnetic stripe technology, cardholders swiped their cards through the POS terminal and then signed a receipt. In addition to the fact that information on magnetic stripes is less secure than it is on microchips, this system had several other disadvantages.
For one thing, magnetic stripe cards often required merchants to retain large amounts of paper records, which could easily become lost or faded over time. Moreover, sales clerks often failed to verify that the signature provided by the customer matched the one shown on the back of their card, making it easy for a criminal to produce a fake signature when using someone else's credit card.
Chip-and-PIN cards improved on both of those limitations. Because the POS system can automatically detect whether a correct PIN was provided by the customer (and accept or reject the transaction as a consequence), the merchant doesn't have to retain paper records in case the transaction is later challenged. The use of a PIN also bypasses the need for employees to verify that the signature matches the one shown on the card, a process that can slow down transactions and annoy customers.
Chip cards also benefit cardholders because they are far more difficult to counterfeit than magnetic stripe cards. With the latter, thieves could use a technique called skimming to steal the information on the card. They'd install a device on, for example, an ATM or a gas pump, which would read the credit card information when the unwary customer swiped their card. The thief could then use that information to create a fake card and run up charges on it. With microchip technology, a card generates a new transaction code each time it is used—information that is unusable for additional transactions.
Note
Cardholders' liability for fraudulent transactions is generally limited to $50 and often to $0.
Chip-and-PIN Cards vs. Chip-and-Signature Cards
An alternative to chip-and-PIN cards are chip-and-signature cards. As you might expect, these cards require the customer to sign as part of a transaction rather than enter a PIN. While chip-and-signature cards benefit from the security features of EMV chips, they are considered more vulnerable to fraud than their chip-and-PIN counterparts because a thief might be able to fake a signature but not provide a PIN unless they know what it is. In many situations with these cards, merchants will not even request a signature to speed things along, making them all the more vulnerable.
Chip-and-signature cards are the most common type in the U.S., while chip-and PIN-cards are in wide use elsewhere in the world.
Why Do Some Credit Cards Have Both Magnetic Stripes and Microchips?
Many of today's credit cards have both the old magnetic stripes on the back and the newer embedded EMV chips on the front because not all merchants, particularly in the U.S., have switched over to sales terminals that can read chip cards. However, it is only a matter of time before magnetic stripes will go away on most types of cards. Mastercard, for example, has announced that, "by 2029, no new Mastercard credit or debit cards will be issued with a magnetic stripe."
What Is a Validation Code on a Credit Card?
In addition to magnetic stripes and/or EMV chips, credit and debit cards today carry another security feature: a three- or four-digit number known as a validation code (or CVV, CV2, CVV2, or CID code). This code comes into play for online and phone transactions when the physical credit card isn't present. A thief who has obtained someone's credit card number but not the card itself won't be able to supply the validation code if asked for it, and the transaction can be refused.
How Do Contactless Payments Work?
With contactless payments, the cardholder simply taps their card (or mobile device) on a sales terminal or waves it nearby. Contactless credit cards are chip cards that have been enabled for contactless transactions, which will be indicated on the card by a symbol of four concentric lines much like a wireless symbol. In contactless payments, cardholders are not required to sign or supply a PIN, except possibly on their first use. At sales terminals that are not equipped to handle contactless payments, customers can use their cards in the usual way, by inserting them in the terminal.
The Bottom Line
Chip-and-PIN credit cards are a more secure way of conducting credit card transactions, for merchants and customers alike. While they are not in wide use in the U.S., compared with chip-and-signature cards, they may be soon—unless something even more sophisticated comes along in the meantime.
