EMV - Knowledge

2033:, Pakistan. United States National Counterintelligence Executive Joel Brenner said, "Previously only a nation state's intelligence agency would have been capable of pulling off this type of operation. It's scary." Stolen data was typically used a couple of months after the card transactions to make it harder for investigators to pin down the vulnerability. After the fraud was discovered it was found that tampered-with terminals could be identified as the additional circuitry increased their weight by about 100 grams. Tens of millions of pounds are believed to have been stolen. This vulnerability spurred efforts to implement better control of POS devices over their entire lifecycle, a practice endorsed by electronic payment security standards like those being developed by the Secure POS Vendor Alliance (SPVA). 2086:

picked up by banks' security systems. A member of the research team said, "Even small-scale criminal systems have better equipment than we have. The amount of technical sophistication needed to carry out this attack is really quite low." The announcement of the vulnerability said, "The expertise that is required is not high (undergraduate level electronics). We dispute the assertion by the banking industry that criminals are not sophisticated enough, because they have already demonstrated a far higher level of skill than is necessary for this attack in their miniaturized PIN entry device skimmers." It was not known if this vulnerability had been exploited, but it could explain unresolved cases of claimed fraud.

2183: 2007:

then the attacker may be able to recover both the track-two data and the PIN, allowing construction of a magnetic stripe card, which, while not usable in a Chip and PIN terminal, can be used, for example, in terminal devices that permit fallback to magstripe processing for foreign customers without chip cards, and defective cards. This attack is possible only where (a) the offline PIN is presented in plaintext by the PIN entry device to the card, where (b) magstripe fallback is permitted by the card issuer and (c) where geographic and behavioural checking may not be carried out by the card issuer.

1787:(TVR), and are used in the terminal's decision whether to accept, decline or go on-line for a payment transaction. The TAC is set by the card acquirer; in practice card schemes advise the TAC settings that should be used for a particular terminal type depending on its capabilities. The IAC is set by the card issuer; some card issuers may decide that expired cards should be rejected, by setting the appropriate bit in the Denial IAC. Other issuers may want the transaction to proceed on-line so that they can in some cases allow these transactions to be carried out. 1878: 2195: 2366: 343:

restaurant, for example) the clerk or waiter had to take the card away from the customer and to the card machine. It was easily possible at any time for a dishonest employee to swipe the card surreptitiously through a cheap machine that instantly recorded the information on the card and stripe; in fact, even at the terminal, a thief could bend down in front of the customer and swipe the card on a hidden reader. This made illegal cloning of cards relatively easy and a more common occurrence than before.

1934: 335:

regularly-updated list of stolen or otherwise invalid credit card numbers. This list was commonly printed in booklet form on newsprint, in numerical order, much like a slender phone book, yet without any data aside from the list of invalid numbers. Checkout cashiers were expected to thumb through this booklet each and every time a credit card was presented for payment of any amount, prior to approving the transaction, which incurred a short delay.

323:

time. The supposed increased protection from fraud has allowed banks and credit card issuers to push through a "liability shift", such that merchants are now liable (as of 1 January 2005 in the EU region and 1 October 2015 in the US) for any fraud that results from transactions on systems that are not EMV-capable. The majority of implementations of EMV cards and terminals confirm the identity of the cardholder by requiring the entry of a

2058:, the UK payments association, disagreed with the majority of the report, saying "The types of attack on PIN entry devices detailed in this report are difficult to undertake and not currently economically viable for a fraudster to carry out." They also said that changes to the protocol (specifying different card verification values between the chip and magnetic stripe – the iCVV) would make this attack ineffective from January 2008. 40: 2090:

the attack is minimal while the risk of a declined transaction or exposure of the fraudster is significant. The Cambridge team disagrees: they carried it out without the banks noticing, with off-the-shelf equipment with some non-sophisticated additions. Less bulky versions could easily be made. The ones producing such equipment for the attack need not put themselves at risk, but can sell it to anybody via the Internet.

1754:

transaction amount against an offline ceiling limit (above which transactions should be processed on-line). It is also possible to have a 1 in an online counter, and a check against a hot card list (which is only necessary for off-line transactions). If the result of any of these tests is positive, the terminal sets the appropriate bit in the

2561:, and other major retailers, Visa, Mastercard and Discover in March 2012 – and American Express in June 2012 – announced their EMV migration plans for the United States. Since the announcement, multiple banks and card issuers have announced cards with EMV chip-and-signature technology, including American Express, Bank of America, Citibank, 2013:, representing the UK payment industry, claimed that changes specified to the protocol (where card verification values differ between the magnetic stripe and the chip – the iCVV) rendered this attack ineffective and that such measures would be in place from January 2008. Tests on cards in February 2008 indicated this may have been delayed. 1791:

Online-only devices do not need to perform IAC-default processing. An online-only device such as an ATM always attempts to go on-line with the authorization request, unless declined off-line due to IAC-Denial settings. During IAC-Denial and TAC-Denial processing, for an online only device, the only relevant

2385:

on 14 February 2006 with advertisements in the press and national television touting the "Safety in Numbers" slogan. During the first stages of deployment, if a fraudulent magnetic swipe card transaction was deemed to have occurred, the retailer was refunded by the issuing bank, as was the case prior

2255:

In many countries of the world, debit card and/or credit card payment networks have implemented liability shifts. Normally, the card issuer is liable for fraudulent transactions. However, after a liability shift is implemented, if the ATM or merchant's point of sale terminal does not support EMV, the

1836:

of the transaction details, which the card issuer can check in real time. This provides a strong cryptographic check that the card is genuine. The issuer responds to an authorization request with a response code (accepting or declining the transaction), an authorisation response cryptogram (ARPC) and

1729:

The terminal uses a CVM list read from the card to determine the type of verification to perform. The CVM list establishes a priority of CVMs to use relative to the capabilities of the terminal. Different terminals support different CVMs. ATMs generally support online PIN. POS terminals vary in their

354:

technology becoming inexpensive and widespread. In addition to mobile-phone-based magnetic readers, merchant personnel can now bring wireless PIN pads to the customer, so the card is never out of the cardholder's sight. Thus, both chip and PIN and wireless technologies can be used to reduce the risks

342:

electronically contacted the card issuer, using information from the magnetic stripe to verify the card and authorize the transaction. This was much faster than before, but required the transaction to occur in a fixed location. Consequently, if the transaction did not take place near a terminal (in a

2393:

New cards featuring both magnetic strips and chips are now issued by all major banks. The replacement of pre-Chip and PIN cards was a major issue, as banks simply stated that consumers would receive their new cards "when their old card expires" — despite many people having had cards with expiry

2296:

Visa's liability shift for points of sale took place on 1 October 2010. For ATMs, the liability shift date took place on 1 October 2015, except in China, India, Japan, and Thailand, where the liability shift was on 1 October 2017. Domestic ATM transactions in China are not currently not subject to a

2259:

Chip and PIN systems can cause problems for travellers from countries that do not issue Chip and PIN cards as some retailers may refuse to accept their chipless cards. While most terminals still accept a magnetic strip card, and the major credit card brands require vendors to accept them, some staff

1688:

To verify the authenticity of payment cards, EMV certificates are used. The EMV Certificate Authority issues digital certificates to payment card issuers. When requested, the payment card chip provides the card issuer's public key certificate and SSAD to the terminal. The terminal retrieves the CA's

296:

There are two major benefits to moving to smart-card-based credit card payment systems: improved security (with associated fraud reduction), and the possibility for finer control of "offline" credit-card transaction approvals. One of the original goals of EMV was to provide for multiple applications

2409:

The Chip and PIN implementation was criticised as designed to reduce the liability of banks in cases of claimed card fraud by requiring the customer to prove that they had acted "with reasonable care" to protect their PIN and card, rather than on the bank having to prove that the signature matched.

2138:

contactless cards: lack of cryptographic protection of critical data sent by the card to the terminal during an EMV transaction. The data in question determines the cardholder verification method (such as PIN verification) to be used for the transaction. The team demonstrated that it is possible to

2085:

programme visited a Cambridge University cafeteria (with permission) with the system, and were able to pay using their own cards (a thief would use stolen cards) connected to the circuit, inserting a fake card and typing in "0000" as the PIN. The transactions were registered as normal, and were not

2028:

In October 2008, it was reported that hundreds of EMV card readers intended for use in Britain, Ireland, the Netherlands, Denmark, and Belgium had been tampered with in China during or shortly after manufacture. For nine months, details and PINs of credit and debit cards were sent over mobile phone

1992:

The first EMV standard came into view in 1995 as EMV 2.0. This was upgraded to EMV 3.0 in 1996 (sometimes referred to as EMV '96) with later amendments to EMV 3.1.1 in 1998. This was further amended to version 4.0 in December 2000 (sometimes referred to as EMV 2000). Version 4.0 became effective in

1852:

CDOL2 (Card data object list) contains a list of tags that the card wanted to be sent after online transaction authorisation (response code, ARPC, etc.). Even if for any reason the terminal could not go online (e.g., communication failure), the terminal should send this data to the card again using

600:

and EMV. However, EMV developers implemented application selection as a way of identifying the type of product, so that all product issuers (Visa, Mastercard, etc.) must have their own application. The way application selection is prescribed in EMV is a frequent source of interoperability problems

334:

to make an imprint. They did not communicate electronically with the card issuer, and the card never left the customer's sight. The merchant had to verify transactions over a certain currency limit by telephoning the card issuer. During the 1970s in the United States, many merchants subscribed to a

301:

application or an e-purse. New issue debit cards in the US contain two applications — a card association (Visa, Mastercard etc.) application, and a common debit application. The common debit application ID is somewhat of a misnomer as each "common" debit application actually uses the resident

2089:

EMVCo disagreed and published a response saying that, while such an attack might be theoretically possible, it would be extremely difficult and expensive to carry out successfully, that current compensating controls are likely to detect or limit the fraud, and that the possible financial gain from

2073:

On 11 February 2010 Murdoch and Drimer's team at Cambridge University announced that they had found "a flaw in chip and PIN so serious they think it shows that the whole system needs a re-write" that was "so simple that it shocked them". A stolen card is connected to an electronic circuit and to a

1807:

stage is CDOL1 (Card Data object List). This object is a list of tags that the card wants to be sent to it to make a decision on whether to approve or decline a transaction (including transaction amount, but many other data objects too). The terminal sends this data and requests a cryptogram using

2596:

As of April 2016, 70% of U.S. consumers had EMV cards and as of December 2016 roughly 50% of merchants were EMV compliant. However, deployment has been slow and inconsistent across vendors. Even merchants with EMV hardware may not be able to process chip transactions due to software or compliance

2051:

and Saar Drimer demonstrated one example attack, to illustrate that Chip and PIN is not secure enough to justify passing the liability to prove fraud from banks onto customers. The Cambridge University exploit allowed the experimenters to obtain both card data to create a magnetic stripe and the

2006:

In addition to the track-two data on the magnetic stripe, EMV cards generally have identical data encoded on the chip, which is read as part of the normal EMV transaction process. If an EMV reader is compromised to the extent that the conversation between the card and the terminal is intercepted,

171:

who then passes the card through a magnetic reader or makes an imprint from the raised text of the card. In the former case, the system verifies account details and prints a slip for the customer to sign. In the case of a mechanical imprint, the transaction details are filled in, a list of stolen

2108:

Originally, bank customers had to prove that they had not been negligent with their PIN before getting redress, but UK regulations in force from 1 November 2009 placed the onus on banks to prove that a customer has been negligent in any dispute, with the customer given 13 months to make a claim.

1753:

Terminal risk management is only performed in devices where there is a decision to be made whether a transaction should be authorised on-line or offline. If transactions are always carried out on-line (e.g., ATMs) or always off-line, this step can be skipped. Terminal risk management checks the

370:

As of 2015, chip and signature cards are more common in the US, Mexico, parts of South America (such as Argentina and Peru) and some Asian countries (such as Taiwan, Hong Kong, Thailand, South Korea, Singapore, and Indonesia), whereas chip and PIN cards are more common in most European countries

322:

provide authentication of the card to the processing terminal and the card issuer's host system. The processing time is comparable to online transactions, in which communications delay accounts for the majority of the time, while cryptographic operations at the terminal take comparatively little

1861:

If a card issuer wants to update a card post issuance it can send commands to the card using issuer script processing. Issuer scripts are meaningless to the terminal and can be encrypted between the card and the issuer to provide additional security. Issuer script can be used to block cards, or

2441:

Visa's liability shift for points of sale took place on 1 October 2012, for any countries in this region that had not already implemented a liability shift. For ATMs, the liability shift took place on 1 October 2014, for any countries in this region that had not already implemented a liability

1919:

After passing common EMVCo tests, the software must be certified by payment brands to comply with proprietary EMV implementations such as Visa VSDC, American Express AEIPS, Mastercard MChip, JCB JSmart, or EMV-compliant implementations of non-EMVCo members such as LINK in the UK, or Interac in

1689:

public key from local storage and uses it to confirm trust for the CA and, if trusted, to verify the card issuer's public key was signed by the CA. If the card issuer's public key is valid, the terminal uses the card issuer's public key to verify the card's SSAD was signed by the card issuer.

1643:(TVR), the components of which form the basis of an accept/decline decision later in the transaction flow. This feature lets, for example, card issuers permit cardholders to keep using expired cards after their expiry date, but for all transactions with an expired card to be performed on-line. 2104:

The attack uses the fact that the choice of authentication method is unauthenticated, which allows the man in the middle. The terminal asks for a PIN, gets it and gets the transaction confirmed by the card – which thinks it is doing a card-and-signature transaction, which could indeed succeed

175:

Using the signature on the card as a verification method has a number of security flaws, the most obvious being the relative ease with which cards may go missing before their legitimate owners can sign them. Another involves the erasure and replacement of legitimate signature, and yet another

1790:

When an online-only device performs IAC-Online and TAC-Online processing the only relevant TVR bit is "Transaction value exceeds the floor limit". Because the floor limit is set to zero, the transaction should always go online and all other values in TAC-Online or IAC-Online are irrelevant.

363:

Chip and PIN is one of the two verification methods that EMV enabled cards can employ. Rather than physically signing a receipt for identification purposes, the user enters a personal identification number (PIN), typically of four to six digits in length. This number must correspond to the

2117:

At the CanSecWest conference in March 2011, Andrea Barisani and Daniele Bianco presented research uncovering a vulnerability in EMV that would allow arbitrary PIN harvesting despite the cardholder verification configuration of the card, even when the supported CVMs data is signed.

443:

explained that it's a matter of perception: While the chip method requires that the chip stay in the machine until the transaction and the authorization process is completed, the phone swipe method does the authorization in the background; a receipt starts coming out right away.

2260:

may refuse to take the card, under the belief that they are held liable for any fraud if the card cannot verify a PIN. Non-chip-and-PIN cards may also not work in some unattended vending machines at, for example, train stations, or self-service check-out tills at supermarkets.

260:

EMVCo accepts public comment on its draft standards and processes, but also allows other organizations to become "Associates" and "Subscribers" for deeper collaboration. JCB joined the consortium in February 2009, China UnionPay in May 2013, and Discover in September 2013.

1831:

Transactions go online when an ARQC has been requested. The ARQC is sent in the authorisation message. The card generates the ARQC. Its format depends on the card application. EMV does not specify the contents of the ARQC. The ARQC created by the card application is a

1635:

is to see if the card should be used. Three data elements read in the previous step are checked: Application version number, Application usage control (this shows whether the card is only for domestic use, etc.), Application effective/expiration dates checking.

1822:

This step gives the card the opportunity to accept the terminal's action analysis or to decline a transaction or force a transaction on-line. The card cannot return a TC when an ARQC has been asked for, but can return an ARQC when a TC has been asked for.

346:

Since the introduction of payment card chip and PIN, cloning of the chip is not feasible; only the magnetic stripe can be copied, and a copied card cannot be used by itself on a terminal requiring a PIN. The introduction of chip and PIN coincided with

2109:

Murdoch said that " should look back at previous transactions where the customer said their PIN had not been used and the bank record showed it has, and consider refunding these customers because it could be they are victim of this type of fraud."

395:

or CNP transactions. CNP transactions made up at least 50% of all credit card fraud. Because of physical distance, it is not possible for the merchant to present a keypad to the customer in these cases, so alternatives have been devised, including

1782:

with the IAC, to give the transaction acquirer a level of control over the transaction outcome. Both types of action code take the values Denial, Online, and Default. Each action code contains a series of bits which correspond to the bits in the

1615:

store data in files. The AFL contains the files that contain EMV data. These all must be read using the read record command. EMV does not specify which files data is stored in, so all the files must be read. Data in these files is stored in

364:

information stored on the chip or PIN at Host. Chip and PIN technology makes it much harder for fraudsters to use a found card, inasmuch as if someone steals a card, they are unable to make fraudulent purchases unless they know the PIN.

616:(PIX), which enables the application provider to differentiate among the different applications offered. The AID is printed on all EMV cardholder receipts. Card issuers can alter the application name from the name of the card network. 2525:(Canada's debit card network) stopped processing non-EMV transactions at ATMs on 31 December 2012, and mandated EMV transactions at point-of-sale terminals on 30 September 2016, with a liability shift taking place on 31 December 2015. 2390:(PoS) systems, and most major high-street chains upgraded on time for the EMV deadline. Many smaller businesses were initially reluctant to upgrade their equipment, as it required a completely new PoS system—a significant investment. 1678:

to assure card validity. Support of CDA in devices may be needed, as this process has been implemented in specific markets. This process is not mandatory in terminals and can only be carried out where both card and terminal support

2628:

Mastercard implemented liability shift for point of sale terminals on 1 October 2015. For pay at the pump, at gas stations, the liability shift formally was on 1 October 2020. For ATMs, the liability shift date was on 1 October

2252:(CAP) for secure e-commerce. Its implementation is known as EMV-CAP and supports a number of modes. Visa has the Dynamic Passcode Authentication (DPA) scheme, which is their implementation of CAP using different default values. 2418:. There were many reports that banks refused to reimburse victims of fraudulent card use, claiming that their systems could not fail under the circumstances reported, despite several documented successful large-scale attacks. 2292:

Mastercard's liability shift among countries within this region took place on 1 January 2006. By 1 October 2010, a liability shift had occurred for all point of sale transactions, except for domestic transactions in China and

1915:

EMV Compliance testing has two levels: EMV Level 1, which covers physical, electrical and transport level interfaces, and EMV Level 2, which covers payment application selection and credit financial transaction processing.

2632:

Visa implemented liability shift for point of sale terminals on 1 October 2015. For pay at the pump, at gas stations, the liability shift formally was on 1 October 2020. For ATMs, the liability shift date was on 1 October

4100: 2614:

American Express implemented liability shift for point of sale terminals on 1 October 2015. For pay at the pump, at gas stations, the liability shift was 16 April 2021. This was extended from 1 October 2020 due to the

2528:

Mastercard implemented domestic transaction liability shift on 31 March 2011, and international liability shift on 15 April 2011. For pay at the pump at gas stations, the liability shift was implemented 31 December

2101:, Chip and PIN has helped to bring down instances of card crime, but many cases remain unexplained. "What we do know is that we do have cases that are brought forward from individuals which seem quite persuasive." 166:

transactions involved the use of a magnetic stripe or mechanical imprint to read and record account data, and a signature for purposes of identity verification. The customer hands their card to the cashier at the

2121:

The PIN harvesting can be performed with a chip skimmer. In essence, a CVM list that has been modified to downgrade the CVM to Offline PIN is still honoured by POS terminals, despite its signature being invalid.

2532:

Visa implemented domestic transaction liability shift on 31 March 2011, and international liability shift on 31 October 2010. For pay at the pump at gas stations, the liability shift was implemented 31 December

2429:(FSA) said "It is for the bank, building society or credit card company to show that the transaction was made by you, and there was no breakdown in procedures or technical difficulty" before refusing liability. 1737:

command. For the online PIN method, the cleartext PIN block is encrypted by the terminal using its point-to-point encryption key before sending it to the acquirer processor in the authorization request message.

2588:

in New York would become the first EMV card issuer in the United States, offering an EMV Visa credit card to its customers. JPMorgan was the first major bank to introduce a card with EMV technology, namely its

3650: 3456: 3675: 3585: 3325: 2609:

have both implemented standards to speed up chip transactions with a goal of reducing the time for these to be under three seconds. These systems are labelled as Visa Quick Chip and Mastercard M/Chip Fast.

3725: 305:

EMV chip card transactions improve security against fraud compared to magnetic stripe card transactions that rely on the holder's signature and visual inspection of the card to check for features such as

2989: 172:

numbers is consulted, and the customer signs the imprinted slip. In both cases the cashier must verify that the customer's signature matches that on the back of the card to authenticate the transaction.

1766:

The results of previous processing steps are used to determine whether a transaction should be approved offline, sent online for authorization, or declined offline. This is done using a combination of

237:

in Germany also predates EMV. EMV was designed to allow cards and terminals to be backwardly compatible with these standards. France has since migrated all its card and terminal infrastructure to EMV.

3700: 2330:

Mastercard required all point of sale terminals to be EMV compliant by 1 July 2011. For ATMs, the liability shift took place in April 2012. ATMs are required to be EMV compliant by the end of 2015.

2139:

modify this data to trick the terminal into believing that no PIN is required because the cardholder was verified using their device (e.g. smartphone). The researchers developed a proof-of-concept

400:

Software approaches for online transactions that involve interaction with the card-issuing bank or network's website, such as Verified by Visa and Mastercard SecureCode (implementations of Visa's

1697:

Cardholder verification is used to evaluate whether the person presenting the card is the legitimate cardholder. There are many cardholder verification methods (CVMs) supported in EMV. They are

3483: 2170:

cards are also vulnerable to a PIN bypass attack. They showed that criminals can trick a terminal into transacting with a Mastercard contactless card while believing it to be a Visa card. This

2601:

machines which can take several months to release and deploy software out. Industry experts, however, expect more standardization in the United States for software deployment and standards.

5023: 2422: 2307:

Mastercard required that all point of sale terminals be EMV capable by April 2013. For ATMs, the liability shift took place in April 2012. ATMs must be EMV compliant by the end of 2015.

1964:

As of 2011, since version 4.0, the official EMV standard documents which define all the components in an EMV payment system are published as four "books" and some additional documents:

5078: 3922: 3398: 4878: 1912:

Recognition of compliance with the EMV standard (i.e., device certification) is issued by EMVCo following submission of results of testing performed by an accredited testing house.

2386:

to the introduction of Chip and PIN. On January 1, 2005, the liability for such transactions was shifted to the retailer; this acted as an incentive for retailers to upgrade their

1808:

the generate application cryptogram command. Depending on the terminal's decision (offline, online, decline), the terminal requests one of the following cryptograms from the card:

4108: 2498:

Mastercard's liability shift among countries within this region took place on 1 January 2006. By 1 October 2010, a liability shift had occurred for all point of sale transactions.

2269:

Mastercard's liability shift among countries within this region took place on 1 January 2006. By 1 October 2010, a liability shift had occurred for all point of sale transactions.

3750: 1885:

The first version of EMV standard was published in 1995. Now the standard is defined and managed by the privately owned corporation EMVCo LLC. The current members of EMVCo are

4690: 2414:

and had to reimburse the customer. Until 1 November 2009 there was no such law protecting consumers from fraudulent use of their Chip and PIN transactions, only the voluntary

371:(e.g., the UK, Ireland, France, Portugal, Finland and the Netherlands) as well as in Iran, Brazil, Colombia, Venezuela, India, Sri Lanka, Canada, Australia and New Zealand. 3037: 5136: 4761: 4494: 3499: 2650:

cleared by Mastercard NetsUnion, a.k.a. Mastercard NetsUnion Information Technology (Beijing) Co., Ltd., a joint venture of Mastercard and the Chinese banking network

2065:

security researchers showed how credit card thieves can rewrite the code of a magnetic strip to make it appear like a chipless card, which allows for counterfeiting.

3216: 2974: 327:(PIN) rather than signing a paper receipt. Whether or not PIN authentication takes place depends upon the capabilities of the terminal and programming of the card. 2519:

Discover implemented a liability shift on 1 October 2015 for all transactions except pay-at-the-pump at gas stations; those transactions shifted on 1 October 2017.

4787: 4630: 3589: 2753: 4458: 2993: 2025:

terminals in May 2006, when they were forced to disable all EMV authentication in their petrol stations after more than £1 million was stolen from customers.

4371: 3125: 433:. Since 2008, Visa has been running pilot projects using the Emue card where the generated number replaces the code printed on the back of standard cards. 2720: 4910: 1853:

the generate authorisation cryptogram command. This lets the card know the issuer's response. The card application may then reset offline usage limits.

596:

defines a process for application selection. The intent of application selection was to let cards contain completely different applications—for example

3077: 3480: 4572: 3146: 4476: 4268: 1733:

For offline enciphered PIN methods, the terminal encrypts the cleartext PIN block with the card's public key before sending it to the card with the

409: 4855: 4219: 4019: 2093:

When approached for comment, several banks (Co-operative Bank, Barclays and HSBC) each said that this was an industry-wide issue, and referred the

5027: 4412: 4164: 5104: 5082: 4433: 2536:

Over a five-year period post-EMV migration, domestic card-card present fraudulent transactions significantly reduced in Canada. According to

1993:

June 2004. Version 4.1 became effective in June 2007. Version 4.2 is in effect since June 2008. Version 4.3 is in effect since November 2011.

3926: 3405: 1865:

Issuer script processing is not available in contact transactions processed with Visa Quick Chip for EMV and Mastercard M/Chip Fast, and for

4708: 4888: 1662:(SDA) ensures data read from the card has been signed by the card issuer. This prevents modification of data, but does not prevent cloning. 2953: 2425:

came into force on 1 November 2009 and shifted the onus onto the banks to prove, rather than assume, that the cardholder is at fault. The

659: 2475:

Discover implemented a liability shift on 1 October 2015. For pay at the pump at gas stations, the liability shift was on 1 October 2017.

2320:

Malaysia is the first country in the world to completely migrate to EMV-compliant smart cards two years after its implementation in 2005.

3273: 2174:

has critical consequences since it can be used in combination with the PIN bypass for Visa to also bypass the PIN for Mastercard cards.

502:

Commands followed by "7816-4" are defined in ISO/IEC 7816-4 and are interindustry commands used for many chip card applications such as

4957: 2155:-enabled smartphones, one held near the physical card and the second held near the payment terminal. The attack might affect cards by 461:(APDUs). This comprises sending a command to a card, the card processing it, and sending a response. EMV uses the following commands: 2622:

Discover implemented liability shift on 1 October 2015. For pay at the pump, at gas stations, the liability shift was 1 October 2020.

1909:

Each of these organizations owns an equal share of EMVCo and has representatives in the EMVCo organization and EMVCo working groups.

457: 4694: 2568:

In 2010, a number of companies began issuing pre-paid debit cards that incorporate Chip and PIN and allow Americans to load cash as

367:

Chip and signature, on the other hand, differentiates itself from chip and PIN by verifying a consumer's identity with a signature.

4020:"Response from EMVCo to the Cambridge University Report on Chip and PIN vulnerabilities ('Chip and PIN is Broken' – February 2010)" 2537: 2501:

Visa's liability shift for points of sale took place on 1 January 2006. For ATMs, the liability shift took place on 1 January 2008.

2346:

Visa's liability shift for points of sale took place on 1 January 2006. For ATMs, the liability shift took place on 1 January 2008.

2272:

Visa's liability shift for points of sale took place on 1 January 2006. For ATMs, the liability shift took place on 1 January 2008.

1840:

ARPC processing is not performed in contact transactions processed with Visa Quick Chip for EMV and Mastercard M/Chip Fast, and in

1588:

command to the card. When issuing this command, the terminal supplies the card with any data elements requested by the card in the

608:(AID) is used to address an application in the card or Host Card Emulation (HCE) if delivered without a card. An AID consists of a 4131: 3048: 2478:

Visa's liability shift for points of sale took place on 1 April 2011. For ATMs, the liability shift took place on 1 October 2012.

2455:

Visa's liability shift for points of sale took place on 1 April 2011. For ATMs, the liability shift took place on 1 October 2012.

5210: 4052: 3994: 3611: 330:

When credit cards were first introduced, merchants used mechanical rather than magnetic portable card imprinters that required

223: 5143: 3361: 3775: 240:

EMV stands for Europay, Mastercard, and Visa, the three companies that created the standard. The standard is now managed by

4936: 4765: 4498: 4462: 3506: 379:

While EMV technology has helped reduce crime at the point of sale, fraudulent transactions have shifted to more vulnerable

5008: 3864: 2884: 601:

between cards and terminals. Book 1 of the EMV standard devotes 15 pages to describing the application selection process.

5400: 4817: 2585: 2577: 1592:(PDOL). The PDOL (a list of tags and lengths of data elements) is optionally provided by the card to the terminal during 4634: 5052: 3878: 965: 230: 4250: 2868: 2787: 1234: 4341: 3190: 5410: 4191: 1256: 4987: 3941: 3430: 1639:

If any of these checks fails, the card is not necessarily declined. The terminal sets the appropriate bit in the

4378: 3104: 3015: 233:

B0M4 from Bull-CP8 deployed in France in 1986, followed by the B4B0' (compatible with the M4) deployed in 1989.

202:. The earliest smart cards were introduced as calling cards in the 1970s, before later being adapted for use as 5846: 4547: 2597:

deficiencies. Bloomberg has also cited issues with software deployment, including changes to audio prompts for

455:-3 defines the transmission protocol between chip cards and readers. Using this protocol, data is exchanged in 405: 324: 113: 4734: 4084:

It's no surprise to us or bankers that this attack works offline the real shocker is that it works online too

1438:(Eight West African countries: Benin, Burkina Faso, Côte d'Ivoire, Guinea Bissau, Mali, Niger, Senegal, Togo) 4914: 1792: 1784: 1755: 1640: 3531: 1745:. In 2017, EMVCo added support for biometric verification methods in version 4.3 of the EMV specifications. 5683: 5567: 5365: 5308: 4833:"United Nations Federal Credit Union Selects Gemalto for First U.S. Issued Globally Compliant Payment Card" 3254: 2426: 2245: 392: 17: 4669: 5913: 5719: 5355: 4276: 4079: 2775: 2580:

was the first United States issuer to offer Chip and PIN credit cards. In May 2010, a press release from

2249: 796: 612:(RID) of five bytes, which is issued by the ISO/IEC 7816-5 registration authority. This is followed by a 423: 4026: 2625:

Maestro implemented liability shift of 19 April 2013, for international cards used in the United States.

5908: 5903: 5740: 5203: 2140: 782: 506: 4603: 2931: 5750: 5693: 5466: 5435: 5390: 5343: 4416: 4168: 3568: 2832: 2682: 1894: 1620: 245: 5111: 2910: 5826: 5806: 5755: 3109: 2590: 2152: 2075: 724: 101: 62: 5491: 4712: 4709:"American Express Announces U.S. EMV Roadmap to Advance Contact, Contactless and Mobile Payments" 2659:

cleared by American Express' joint venture Express (Hangzhou) Technology Services Company Limited

1652: 4648: 1600:(AIP), a list of functions to perform in processing the transaction. The card also provides the 5851: 5360: 2540:'s reports, card-present domestic debit card fraud reduced 89.49% and credit card fraud 68.37%. 2221:, a consortium of financial companies. Additional widely known chips of the EMV standard are: 2182: 1866: 1841: 1121: 207: 97: 93: 4459:"MasterCard Announces Five Year Plan to Change the Face of the Payments Industry in Australia" 3896: 3801: 2858: 1844:

across schemes because the card is removed from the reader after the ARQC has been generated.

129: 5816: 5790: 5698: 5486: 5196: 4213: 2438:

Mastercard's liability shift among countries within this region took place on 1 January 2005.

2206: 2187: 1058: 319: 273: 96:. These include cards that must be physically inserted or "dipped" into a reader, as well as 66: 4576: 4434:"Visa Expands U.S. Roadmap for EMV Chip Adoption to Include ATM and a Common Debit Solution" 4299: 2779: 2244:

Visa and Mastercard have also developed standards for using EMV cards in devices to support

5836: 5649: 5481: 5456: 5395: 5256: 3964: 1353: 813: 769: 117: 89: 84:, also called chip cards, integrated circuit cards, or IC cards, which store their data on 31: 3551: 2097:

team to the banking trade association for further comment. According to Phil Jones of the

2021:

Conversation capturing is a form of attack which was reported to have taken place against

8: 5811: 5592: 5557: 5536: 5526: 5496: 3838: 3816: 3176: 2803: 2677: 2672: 2395: 1779: 1276: 996: 819: 1947:

Please help update this article to reflect recent events or newly available information.

5775: 5501: 5425: 5370: 5328: 5137:"Visa Announces U.S. Participation in Global Point-of-Sale Counterfeit Liability Shift" 4199: 4138: 3278: 3082: 2725: 2554: 2156: 1890: 1877: 1617: 439: 415:

Creating a one-time virtual card linked to a physical card with a given maximum amount.

315: 285: 257: 187: 85: 4788:"Travelex Offers America's First Chip & PIN Enabled Prepaid Foreign Currency Card" 199: 195: 112:

cards, depending on the authentication methods employed by the card issuer, such as a

5831: 5785: 5667: 5662: 5582: 5521: 5318: 3357: 3163: 2864: 2783: 2768: 2616: 2022: 1833: 574:(only carried out if required by the result of the previous steps; mandatory in ATMs) 430: 419: 351: 339: 4814:"UNFCU to be first issuer in the US to offer credit cards with a high security chip" 4670:"EMV Reduces Card-Present Fraud in Canada (Infographic) - The Official Helcim™ Blog" 3236: 1655:. There are three different processes that can be undertaken depending on the card: 5841: 5780: 5621: 5577: 5562: 5531: 5516: 5511: 5251: 5241: 4129: 3586:"M/Chip Fast from MasterCard Speeds EMV Transactions and Shoppers Through Checkout" 1886: 847: 249: 58: 4520: 2194: 1604:(AFL), a list of files and records that the terminal needs to read from the card. 5714: 5597: 5587: 5188: 3779: 3487: 2411: 2217:", the three companies that created the standard. The standard is now managed by 2151:) to perform PIN-free, high-value purchases. The attack is carried out using two 2062: 4832: 4251:"US credit cards outdated, less useful abroad, as 'Chip and PIN' cards catch on" 2990:"Visa and MasterCard Support Common Solutions to Enable U.S. Chip Debit Routing" 2747: 2143:

app that effectively turns a physical Visa card into a mobile payment app (e.g.

1651:

Offline data authentication is a cryptographic check to validate the card using

5877: 5609: 4162: 3300: 2888: 2573: 2550: 2382: 2048: 1902: 1742: 1296: 253: 4573:"[ARCHIVED CONTENT] UK Government Web Archive – The National Archives" 3962: 104:

technology. Payment cards which comply with the EMV standard are often called

5892: 5338: 5298: 5273: 3882: 3629: 3377: 2406:, as they were not ready to issue the new cards as early as the bank wanted. 2387: 2148: 2068: 1548: 1161: 1082: 698: 203: 168: 125: 5179: 4813: 3105:"Why You're Still Not Safe From Fraud If You Have a Credit Card With a Chip" 5898: 5872: 5657: 5629: 5572: 5380: 4883: 2415: 2001: 1881:

Contact pad for the electrical interface on the front side of a credit card

1837:

optionally an issuer script (a string of commands to be sent to the card).

593: 452: 348: 331: 281: 215: 149: 121: 54: 2410:

Before Chip and PIN, if a customer's signature was forged, the banks were

5724: 5471: 5223: 5219: 4711:(Press release). New York: American Express. 29 June 2012. Archived from 2770:

Java Card Technology for Smart Cards: Architecture and Programmer's Guide

2562: 2374: 2353: 1767: 1078: 159: 81: 3326:"Book 1: Application Independent ICC to Terminal Interface Requirements" 2352:

has cut card fraud by more than 80% since its introduction in 1992 (see

5856: 5688: 5634: 5440: 5268: 5246: 5227: 3433:. EMV Certificate Authority Worldwide. 20 November 2010. Archived from 3351: 2606: 2558: 2210: 2167: 2131: 2105:

offline. It also works online, perhaps because of insufficient checks.

1898: 1612: 756: 737: 401: 388: 311: 307: 298: 211: 191: 163: 153: 137: 70: 51: 3434: 2163:

but this was not demonstrated in practice, in contrast to Visa cards.

1968:

Book 1: Application Independent ICC to Terminal Interface Requirements

5323: 5303: 5278: 5263: 3814: 2602: 2403: 2214: 2144: 2135: 2043: 1906: 1623:

format. EMV defines tag values for all data used in card processing.

945: 679: 380: 234: 74: 5105:"EMV For U.S. Acquirers: Seven Guiding Principles for EMV Readiness" 3956: 3701:"Book 4: Cardholder, Attendant, and Acquirer Interface Requirements" 5639: 5604: 5476: 5461: 5430: 5385: 5375: 4738: 4204: 2598: 2199: 2160: 2112: 1668:(DDA) provides protection against modification of data and cloning. 1243: 1181: 1101: 384: 4130:

Andrea Barisani; Daniele Bianco; Adam Laurie; Zac Franken (2011).

2516:

American Express implemented a liability shift on 31 October 2012.

2130:

In 2020, researchers David Basin, Ralf Sasse, and Jorge Toro from

1977:

Book 4: Cardholder, Attendant, and Acquirer Interface Requirements

244:, a consortium with control split equally among Visa, Mastercard, 5745: 5333: 5313: 4937:"Retailers have chip card readers -- why aren't they using them?" 4856:"Chip-and-Pin and Chip-and-Signature Credit Card Primer for 2013" 2808: 2687: 2581: 2522: 2378: 2098: 2078:"). Any four digits can be typed in and accepted as a valid PIN. 1384: 1141: 1016: 925: 277: 184: 177: 133: 4189: 2381:

from May 2003, and as a result was rolled out nationwide in the

2256:

ATM owner or merchant is liable for the fraudulent transaction.

190:

chip in 1959 led to the idea of incorporating it onto a plastic

5506: 5415: 5350: 5024:"MasterCard Brings EMV Chip-Card Liability Policy to U.S. ATMs" 3221: 2349: 2030: 1404: 269: 265: 219: 5079:"MasterCard Extends U.S. EMV Migration Roadmap to ATM Channel" 4407: 4405: 4403: 4401: 4399: 4397: 4395: 4393: 4391: 4053:"New flaws in chip and pin system revealed (11 February 2010)" 3552:"Visa technology partner: Terminal Action Code (VISA Minimum)" 2976:

Top 7 Vendors in the Global EMV Cards Market from 2016 to 2020

418:

Additional hardware with keypad and screen that can produce a

39: 5541: 5420: 5405: 4691:"Discover Implements EMV Mandate for U.S., Canada and Mexico" 4236: 2365: 2218: 2055: 2010: 1511: 1316: 711: 429:

Keypad and screen integrated into complex cards to produce a

374: 241: 4879:"Is the rocky road to EMV retail adoption getting smoother?" 4847: 3776:"Integrated Circuit Card Specifications for Payment Systems" 3126:"U.S. Bank and Chase Add to E.M.V. Chip Cards for Travelers" 1815:

Authorization Request Cryptogram (ARQC)—online authorization

358: 5081:(Press release). Purchase, N.Y.: Mastercard. Archived from 4436:(Press release). Foster City, Calif.: Visa. 4 February 2013 4388: 4163:

Adam Laurie; Zac Franken; Andrea Barisani; Daniele Bianco.

2954:"Discover Joins EMVCo to Help Advance Global EMV Standards" 2569: 2399: 1818:

Application Authentication Cryptogram (AAC)—offline decline

158:

Until the introduction of chip & PIN, all face-to-face

3963:

Steven J. Murdoch; Saar Drimer; Ross Anderson; Mike Bond.

3865:"Organized crime tampers with European card swipe devices" 3580: 3578: 3237:"BBC NEWS – Technology – Credit card code to combat fraud" 2721:"Coming Soon to Checkouts: Microchip-Card Payment Systems" 2465:

Mastercard's liability shift took place on 1 October 2008.

2343:

Mastercard's liability shift took place on 1 January 2005.

2282:

Mastercard's liability shift took place on 1 January 2005.

2248:(CNP) over the telephone and Internet. Mastercard has the 2069:

2010: Hidden hardware disables PIN checking on stolen card

5172: 4428: 4426: 3301:"How EMV (Chip & PIN) Works – Transaction Flow Chart" 597: 503: 3274:"Why Apple Pay and Other Mobile Wallets Beat Chip Cards" 3217:"How To Reduce Chargebacks Without Killing Online Sales" 3030: 2565:, JPMorgan Chase, U.S. Bank, and several credit unions. 2452:

Mastercard's liability shift took place on 1 March 2008.

2310:

Visa's liability shift for ATMs took place 1 April 2013.

2002:

Opportunities to harvest PINs and clone magnetic stripes

310:. The use of a PIN and cryptographic algorithms such as 4625: 4623: 4621: 3575: 3481:

Contact Chip – General Frequently Asked Questions (FAQ)

3078:"Preparing for Chip-and-PIN Cards in the United States" 2553:

due to weak security in the point-of-sale terminals at

2488:

Mastercard's liability shift took place on 1 July 2009.

5047: 5045: 4477:"Malaysia first to complete chip-based card migration" 4423: 3879:"Technical Working Groups, Secure POS Vendor Alliance" 1923: 541: 276:

and Safran Identity & Security (Morpho) in 2017),

50:

is a payment method based on a technical standard for

4981: 4979: 4366: 4364: 4362: 571: 5142:(Press release). Visa. 9 August 2011. Archived from 5053:"EMV Fuel Liability Delay Pumps Card Fraud Concerns" 5009:"Amex joins Visa in postponing US gas EMV migration" 4988:"EMV Migration – Driven by Payment Brand Milestones" 4618: 4606:(Press release). Finextra Research. 12 November 2012 4545: 3038:"Understanding the 2015 U.S. Fraud Liability Shifts" 2036: 1646: 526: 5042: 4762:"Wells Fargo Introduces New EMV Card for Consumers" 4336: 4334: 4332: 4330: 4328: 4326: 4324: 4322: 4320: 3378:"MasterCard Product & Services - Documentation" 1826: 1674:(CDA) combines DDA with the generation of a card's 229:The first standard for smart payment cards was the 5218: 4976: 4958:"The Plan to Make Chip Credit Cards Less Annoying" 4497:. The Rakyat Post. 14 October 2015. Archived from 4359: 2767: 2432: 1803:One of the data objects read from the card in the 1579: 77:", the three companies that created the standard. 5733: 4604:"Discover to enforce EMV liability shift by 2015" 4453: 4451: 3191:"EMV Update: Discussion with the Federal Reserve" 2749:Important smart card industry standards. ISO 7816 2333:Visa's liability shift for ATMs was 1 April 2013. 5890: 4317: 4196:2021 IEEE Symposium on Security and Privacy (SP) 4167:. Aperture Labs and Inverse Path. Archived from 4101:"Card fraud: banks now have to prove your guilt" 3457:"Book 2: Security and Key Management (PDF). 4.3" 3016:"Shift of liability for fraudulent transactions" 2113:2011: CVM downgrade allows arbitrary PIN harvest 2074:fake card which is inserted into the terminal (" 577: 4764:. Bank Systems & Technology. Archived from 4598: 4596: 4594: 3815:Saar Drimer; Steven J. Murdoch; Ross Anderson. 3500:"ContactlessSpecifications for Payment Systems" 3071: 3069: 2934:(Press release). Finextra Research. 20 May 2013 566: 404:protocol). 3-D Secure is now being replaced by 5076: 4448: 3967:. Computer Laboratory, University of Cambridge 2833:"The Detailed History of Credit Card Machines" 2286: 1847: 5204: 4830: 4098: 4094: 4092: 4077: 3819:. University of Cambridge Computer Laboratory 3621: 3563: 3561: 3271: 2804:"A short review of smart cards (2019 update)" 2714: 2712: 2710: 2708: 2706: 2704: 2702: 1812:Transaction certificate (TC)—offline approval 1798: 582: 561: 556: 100:that can be read over a short distance using 4985: 4853: 4591: 4218:: CS1 maint: multiple names: authors list ( 3988: 3986: 3984: 3982: 3965:"EMV PIN verification "wedge" vulnerability" 3255:"Visa tests cards with built-in PIN machine" 3066: 2718: 2584:(a global EMV card producer) indicated that 2166:In early 2021, the same team disclosed that 1672:Combined DDA/generate application cryptogram 614:proprietary application identifier extension 551: 536: 517:An EMV transaction has the following steps: 264:The top vendors of EMV cards and chips are: 4165:"EMV – Chip & Pin CVM Downgrade Attack" 3995:"New flaws in chip and pin system revealed" 3992: 3939: 3139: 2047:programme Cambridge University researchers 1856: 1761: 1748: 1730:CVM support depending on type and country. 836:Mastercard (China, debit and credit cards) 291: 194:in the late 1960s by two German engineers, 5211: 5197: 5021: 4089: 3558: 3546: 3544: 3542: 3123: 3117: 3075: 2699: 1804: 1692: 1626: 1593: 880:U.S. Debit (all interbank networks) (USA) 610:registered application provider identifier 531: 521: 410:European Second Payment Services Directive 375:Online, phone, and mail order transactions 355:of unauthorized swiping and card cloning. 4495:"US learns from Malaysia, 10 years later" 4300:"For Americans, Plastic Buys Less Abroad" 4203: 4190:D. Basin, R. Sasse, J. Toro-Pozo (2020). 3979: 3751:"EMV® Card Personalization Specification" 3265: 2978:, Technavio press release, 24 August 2016 2956:. Discover Network News. 3 September 2013 2856: 2234:D-PAS: Discover/Diners Club International 1872: 359:Chip and PIN vis-à-vis chip and signature 3942:"Paper clip attack skewers Chip and PIN" 3817:"PIN Entry Device (PED) vulnerabilities" 3726:"SB CPA Specification v1 Plus Bulletins" 3449: 3353:Payments: from cowrie shells to bitcoins 3320: 3318: 2860:Nanometer CMOS ICs: From Basics to ASICs 2830: 2364: 2193: 2190:on the side opposite to its contact pads 2181: 1980:Common Payment Application Specification 1876: 1607: 588: 38: 4876: 4835:(Press release). Austin, Texas: Gemalto 4347:. MasterCard Worldwide. 3 November 2010 4298:Higgins, Michelle (29 September 2009). 4297: 3539: 3349: 2394:dates as late as 2007. The card issuer 1743:vulnerable to man-in-the-middle attacks 65:which can accept them. EMV stands for " 14: 5891: 4570: 4461:. Mastercard Australia. Archived from 4237:"The EMV Standard: Break, Fix, Verify" 4192:"The EMV Standard: Break, Fix, Verify" 3404:. EMVCo. November 2014. Archived from 3214: 1983:EMV Card Personalisation Specification 1778:(IACs) read from the card. The TAC is 391:transactions—known in the industry as 268:(American Bank Corp), CPI Card Group, 224:erasable programmable read-only memory 5192: 4759: 4231: 4229: 4132:"Chip & PIN is definitely broken" 3651:"Book 2: Security and Key Management" 3423: 3350:Warming, Jan Bigum (21 August 2022). 3315: 3215:Carlin, Patricia (15 February 2017). 3047:. EMV Migration Forum. Archived from 2016: 546: 5077:Beth Kitchener (10 September 2012). 4377:. Visa International. Archived from 3533:TAC Definition: Terminal Action Code 2765: 2134:reported a security issue affecting 1927: 1713:Offline enciphered PIN and signature 1590:processing options data objects list 869:AMEX CHINA (debit and credit cards) 4818:United Nations Federal Credit Union 3839:"Petrol firm suspends chip-and-pin" 3676:"Book 3: Application Specification" 3148:Chip-and-PIN vs. Chip-and-Signature 2759: 2586:United Nations Federal Credit Union 2578:United Nations Federal Credit Union 1971:Book 2: Security and Key Management 1924:List of EMV documents and standards 1710:Offline plaintext PIN and signature 1683: 512: 24: 5366:European Payments Initiative (EPI) 4521:"Anti-fraud credit cards on trial" 4226: 4078:Ross Anderson (11 February 2010). 3804:. BBC Newsnight. 26 February 2008. 3627: 2719:Stacy Cowley (23 September 2015). 1996: 124:, for contact cards, and based on 25: 5925: 5356:Electronic Payment Services (EPS) 5164: 4877:Goldman, Sharon (20 March 2017). 4760:Camhi, Jonathan (3 August 2012). 4737:. Protean Payment. Archived from 4099:Richard Evans (15 October 2009). 4050: 3925:. 6 February 2007. Archived from 2423:Payment Services Regulations 2009 2360: 2177: 2037:PIN harvesting and stripe cloning 1974:Book 3: Application Specification 1647:Offline data authentication (ODA) 1342:Dinube Payment Initiation (PSD2) 5129: 5022:David Heun (10 September 2012). 4735:"EMV's Uncertain Fate in the US" 4633:. globalpayments. Archived from 3993:Susan Watts (11 February 2010). 3940:John Leyden (27 February 2008). 3897:"Is Chip and Pin really secure?" 3867:. The Register. 10 October 2008. 3399:"A Guide to EMV Chip Technology" 2831:Sorensen, Emily (26 July 2019). 2544: 2505: 1932: 1827:Online transaction authorization 1774:(TACs) held in the terminal and 572:Online transaction authorization 5097: 5070: 5015: 5001: 4950: 4929: 4903: 4870: 4824: 4806: 4780: 4753: 4727: 4701: 4683: 4662: 4641: 4564: 4539: 4513: 4487: 4469: 4291: 4261: 4243: 4183: 4156: 4137:. Aperture Labs. Archived from 4123: 4071: 4044: 4012: 3933: 3915: 3889: 3871: 3857: 3831: 3808: 3794: 3768: 3743: 3718: 3693: 3668: 3643: 3604: 3524: 3492: 3474: 3391: 3370: 3343: 3293: 3247: 3229: 3208: 3183: 3097: 3008: 2982: 2968: 2946: 2857:Veendrick, Harry J. M. (2017). 2653: 2644: 2433:Latin America and the Caribbean 2276: 1598:application interchange profile 1580:Initiate application processing 928:Credit Card (store card) (USA) 527:Initiate application processing 477:generate application cryptogram 458:application protocol data units 288:and Versatile Card Technology. 5847:Personal identification number 3706:. 4.3. EMVCo. 27 November 2011 3681:. 4.3. EMVCo. 28 November 2011 3656:. 4.3. EMVCo. 29 November 2011 3331:. 4.3. EMVCo. 30 November 2011 3076:Mark Scott (2 December 2014). 2924: 2903: 2877: 2850: 2824: 2796: 2740: 2492: 2324: 1795:bit is "Service not allowed". 625:Card scheme / payment network 486:internal authenticate (7816-4) 474:external authenticate (7816-4) 406:Strong Customer Authentication 325:personal identification number 302:card association application. 206:. Smart cards have since used 114:personal identification number 13: 1: 5026:. SourceMedia. Archived from 4854:Paul Riegler (25 July 2013). 4831:Ray Wizbowski (13 May 2010). 4571:Foundation, Internet Memory. 4413:"The Journey To Dynamic Data" 3802:"How secure is Chip and PIN?" 3151:, CardHub.com (now wallethub) 2693: 2373:Chip and PIN was trialled in 2246:card not present transactions 2125: 1793:Terminal verification results 1785:Terminal verification results 1756:terminal verification results 1734: 1641:terminal verification results 1596:. The card responds with the 5684:Card not present transaction 5568:Credit card balance transfer 4858:. Frequent Business Traveler 3272:Brian X. Chen (4 May 2016). 2992:. Mastercard. Archived from 2932:"China UnionPay joins EMVCo" 2482: 2427:Financial Services Authority 2301: 297:on a card: for a credit and 120:. Standards exist, based on 7: 3356:. Independently published. 3124:Ann Carrns (20 June 2011). 2776:Addison-Wesley Professional 2666: 2459: 2398:lost a major contract with 2314: 2287:Asian and Pacific countries 2250:Chip Authentication Program 1987: 1848:Second card action analysis 1666:Dynamic data authentication 1500:Porte Monnaie Electronique 797:Chip Authentication Program 578:Second card action analysis 542:Offline data authentication 447: 424:Chip Authentication Program 27:Smart payment card standard 10: 5930: 4986:Cathy Medich (July 2012). 4546:The UK Cards Association. 3018:. The UK Cards Association 1799:First card action analysis 1660:Static data authentication 1489:Prepaye Possibile Offline 745:Mastercard credit or debit 567:First card action analysis 180:of the correct signature. 147: 143: 29: 5865: 5799: 5768: 5707: 5694:Controlled payment number 5676: 5648: 5620: 5550: 5449: 5289: 5234: 5182:What's inside a bank card 4649:"Interac - For Merchants" 3462:. EMVCo. 29 November 2011 2863:. Springer. p. 315. 2683:Two-factor authentication 2510: 2469: 2446: 2337: 2297:liability shift deadline. 2263: 2029:networks to criminals in 1941:This section needs to be 1552: 1547: 1441: 1434: 1409: 1403: 1358: 1352: 1186: 1180: 1021: 1015: 974:CB (credit or debit card) 970: 964: 879: 846: 741: 736: 683: 678: 63:automated teller machines 5827:Hardware security module 5807:Automated teller machine 5593:Current/checking account 4548:"The chip and PIN guide" 4080:"Chip and PIN is broken" 2637: 2076:man-in-the-middle attack 1867:contactless transactions 1862:change card parameters. 1857:Issuer script processing 1842:contactless transactions 1762:Terminal action analysis 1749:Terminal risk management 1741:All offline methods are 1602:application file locator 1299:ATM network (Canada/USA) 900:Mastercard-branded card 583:Issuer script processing 562:Terminal action analysis 557:Terminal risk management 437:As for which is faster, 292:Differences and benefits 102:near-field communication 4911:"EMV Credit Cards Poll" 4372:"Operating Regulations" 4025:. EMVCo. Archived from 3778:. EMVCo. Archived from 3505:. EMVCo. Archived from 2887:. EMVCo. Archived from 2225:AEIPS: American Express 2041:In a February 2008 BBC 1693:Cardholder verification 1653:public-key cryptography 1633:processing restrictions 1627:Processing restrictions 1584:The terminal sends the 552:Cardholder verification 537:Processing restrictions 286:Giesecke & Devrient 128:for contactless cards ( 5852:Secure cryptoprocessor 4631:"Chip Liability Shift" 4415:. Visa. Archived from 3881:. 2009. Archived from 3045:www.emv-connection.com 2370: 2202: 2191: 2099:Consumers' Association 2081:A team from the BBC's 1882: 1873:EMV chip specification 1707:Offline enciphered PIN 1676:application cryptogram 1586:get processing options 914:Discover-branded card 619:List of applications: 606:application identifier 483:get processing options 208:MOS integrated circuit 130:Mastercard Contactless 94:backward compatibility 88:chips, in addition to 44: 5817:Credit card imprinter 5791:Credit card hijacking 3731:. EMVCo. 1 March 2008 2911:"Ways to Participate" 2766:Chen, Zhiqun (2000). 2754:Cardwerk Technologies 2368: 2228:UICS: China Union Pay 2197: 2188:semiconductor package 2185: 1880: 1805:Read application data 1772:terminal action codes 1704:Offline plaintext PIN 1608:Read application data 1594:application selection 1556:MOT Electronic Purse 1413:Savings (debit card) 1251:A0000003591010028001 1067:Bancomat/PagoBancomat 589:Application selection 532:Read application data 522:Application selection 274:Oberthur Technologies 214:technologies such as 183:The invention of the 42: 5837:Magnetic stripe card 4741:on 29 September 2013 4279:on 22 September 2013 3756:. EMVCo. 1 July 2007 3486:15 June 2021 at the 3054:on 19 September 2015 2369:Chip and PIN UK logo 2198:View of the chip, a 1567:MOT Electronic Cash 1424:Cheque (debit card) 1297:The Exchange Network 1090:Diners Club/Discover 985:CB (Debit card only) 687:Visa credit or debit 492:read record (7816-4) 489:PIN change / unblock 272:(from the merger of 118:electronic signature 32:EMV (disambiguation) 30:For other uses, see 5812:Contactless payment 5558:Payment card number 5030:on 22 February 2014 4579:on 12 November 2008 4465:on 28 January 2013. 3411:on 16 February 2021 3261:. 11 November 2008. 2891:on 15 February 2016 2678:Supply chain attack 2673:Contactless payment 1776:issuer action codes 1725:Fail CVM processing 1722:Consumer Device CVM 1631:The purpose of the 1271:A00000035910100380 1110:Banricompras Debito 1005:Japan Credit Bureau 642:FBF-1886 (Denmark) 468:application unblock 136:, American Express 5914:1986 introductions 5776:Card security code 5734:Interbank networks 5371:Forbrugsforeningen 5057:Credit Union Times 4342:"Chargeback Guide" 4304:The New York Times 4171:on 19 October 2015 4144:on 19 October 2015 4111:on 21 October 2009 3903:. 26 February 2008 3592:on 28 October 2020 3279:The New York Times 3083:The New York Times 2837:Mobile Transaction 2726:The New York Times 2371: 2203: 2192: 2017:Successful attacks 1891:Discover Financial 1883: 1059:Consorzio Bancomat 1047:Dankort (J/speedy) 886:Visa-branded card 440:The New York Times 408:as defined in the 210:chips, along with 188:integrated circuit 110:chip and signature 86:integrated circuit 45: 43:An EMV credit card 5909:French inventions 5904:German inventions 5886: 5885: 5832:Interbank network 5786:Credit card fraud 5764: 5763: 5668:Universal default 5663:Introductory rate 5583:Revolving account 4794:. 1 December 2010 4525:BBC Business News 3885:on 15 April 2010. 3363:979-8-8405-4325-2 2617:COVID-19 pandemic 2549:After widespread 1962: 1961: 1895:JCB International 1834:digital signature 1577: 1576: 1573:A000000632010106 1562:A000000632010105 1526:A000000732100123 1506:A000000337601001 1495:A000000337102001 1484:A000000337101001 1473:A000000337102000 1462:A000000337101000 1451:A000000337301000 1393:Ticket Restaurant 1229:A000000333010106 1218:A000000333010103 1207:A000000333010102 1196:A000000333010101 940:A000000817002001 480:get data (7816-4) 465:application block 431:one-time password 420:one-time password 352:data transmission 280:(acquired by the 98:contactless cards 59:payment terminals 16:(Redirected from 5921: 5842:Payment terminal 5781:Chargeback fraud 5731: 5730: 5578:Installment loan 5563:Card association 5512:Rail Travel Card 5242:American Express 5213: 5206: 5199: 5190: 5189: 5176: 5175: 5173:Official website 5159: 5158: 5156: 5154: 5148: 5141: 5133: 5127: 5126: 5124: 5122: 5116: 5110:. Archived from 5109: 5101: 5095: 5094: 5092: 5090: 5074: 5068: 5067: 5065: 5063: 5049: 5040: 5039: 5037: 5035: 5019: 5013: 5012: 5005: 4999: 4998: 4996: 4994: 4983: 4974: 4973: 4971: 4969: 4954: 4948: 4947: 4945: 4943: 4933: 4927: 4926: 4924: 4922: 4917:on 27 March 2017 4913:. Archived from 4907: 4901: 4900: 4898: 4896: 4891:on 27 March 2017 4887:. Archived from 4874: 4868: 4867: 4865: 4863: 4851: 4845: 4844: 4842: 4840: 4828: 4822: 4821: 4810: 4804: 4803: 4801: 4799: 4784: 4778: 4777: 4775: 4773: 4757: 4751: 4750: 4748: 4746: 4731: 4725: 4724: 4722: 4720: 4705: 4699: 4698: 4693:. Archived from 4687: 4681: 4680: 4678: 4676: 4666: 4660: 4659: 4657: 4655: 4645: 4639: 4638: 4637:on 30 July 2013. 4627: 4616: 4615: 4613: 4611: 4600: 4589: 4588: 4586: 4584: 4575:. Archived from 4568: 4562: 4561: 4559: 4557: 4552: 4543: 4537: 4536: 4534: 4532: 4517: 4511: 4510: 4508: 4506: 4501:on 20 March 2019 4491: 4485: 4484: 4473: 4467: 4466: 4455: 4446: 4445: 4443: 4441: 4430: 4421: 4420: 4419:on 28 June 2021. 4409: 4386: 4385: 4384:on 3 March 2013. 4383: 4376: 4368: 4357: 4356: 4354: 4352: 4346: 4338: 4315: 4314: 4312: 4310: 4295: 4289: 4288: 4286: 4284: 4275:. Archived from 4269:"Visa Australia" 4265: 4259: 4258: 4247: 4241: 4240: 4233: 4224: 4223: 4217: 4209: 4207: 4187: 4181: 4180: 4178: 4176: 4160: 4154: 4153: 4151: 4149: 4143: 4136: 4127: 4121: 4120: 4118: 4116: 4107:. Archived from 4096: 4087: 4086: 4075: 4069: 4068: 4066: 4064: 4048: 4042: 4041: 4039: 4037: 4031: 4024: 4016: 4010: 4009: 4007: 4005: 3990: 3977: 3976: 3974: 3972: 3960: 3954: 3953: 3951: 3949: 3937: 3931: 3930: 3919: 3913: 3912: 3910: 3908: 3893: 3887: 3886: 3875: 3869: 3868: 3861: 3855: 3854: 3852: 3850: 3835: 3829: 3828: 3826: 3824: 3812: 3806: 3805: 3798: 3792: 3791: 3789: 3787: 3772: 3766: 3765: 3763: 3761: 3755: 3747: 3741: 3740: 3738: 3736: 3730: 3722: 3716: 3715: 3713: 3711: 3705: 3697: 3691: 3690: 3688: 3686: 3680: 3672: 3666: 3665: 3663: 3661: 3655: 3647: 3641: 3640: 3638: 3636: 3625: 3619: 3618: 3616: 3608: 3602: 3601: 3599: 3597: 3588:. Archived from 3582: 3573: 3572: 3565: 3556: 3555: 3548: 3537: 3536: 3528: 3522: 3521: 3519: 3517: 3511: 3504: 3496: 3490: 3478: 3472: 3471: 3469: 3467: 3461: 3453: 3447: 3446: 3444: 3442: 3427: 3421: 3420: 3418: 3416: 3410: 3403: 3395: 3389: 3388: 3386: 3384: 3374: 3368: 3367: 3347: 3341: 3340: 3338: 3336: 3330: 3322: 3313: 3312: 3310: 3308: 3303:. Creditcall Ltd 3297: 3291: 3290: 3288: 3286: 3269: 3263: 3262: 3251: 3245: 3244: 3233: 3227: 3226: 3212: 3206: 3205: 3203: 3201: 3195: 3187: 3181: 3180: 3174: 3169: 3167: 3159: 3158: 3156: 3143: 3137: 3136: 3134: 3132: 3121: 3115: 3114: 3101: 3095: 3094: 3092: 3090: 3073: 3064: 3063: 3061: 3059: 3053: 3042: 3034: 3028: 3027: 3025: 3023: 3012: 3006: 3005: 3003: 3001: 2986: 2980: 2972: 2966: 2965: 2963: 2961: 2950: 2944: 2943: 2941: 2939: 2928: 2922: 2921: 2919: 2917: 2907: 2901: 2900: 2898: 2896: 2881: 2875: 2874: 2854: 2848: 2847: 2845: 2843: 2828: 2822: 2821: 2819: 2817: 2812:. 7 October 2019 2800: 2794: 2793: 2773: 2763: 2757: 2756: 2744: 2738: 2737: 2735: 2733: 2716: 2660: 2657: 2651: 2648: 2205:EMV stands for " 2172:card brand mixup 2061:In August 2016, 1957: 1954: 1948: 1936: 1935: 1928: 1887:American Express 1869:across schemes. 1684:EMV certificates 1259:Bancomat (Italy) 948:ATM network (UK) 855:American Express 848:American Express 622: 621: 513:Transaction flow 498:verify (7816-4). 393:card-not-present 250:American Express 90:magnetic stripes 21: 5929: 5928: 5924: 5923: 5922: 5920: 5919: 5918: 5889: 5888: 5887: 5882: 5861: 5795: 5760: 5729: 5703: 5672: 5644: 5616: 5598:Savings account 5588:Deposit account 5546: 5517:Revolution Card 5445: 5292:specialty cards 5291: 5285: 5230: 5217: 5185:, November 2022 5171: 5170: 5167: 5162: 5152: 5150: 5146: 5139: 5135: 5134: 5130: 5120: 5118: 5114: 5107: 5103: 5102: 5098: 5088: 5086: 5075: 5071: 5061: 5059: 5051: 5050: 5043: 5033: 5031: 5020: 5016: 5007: 5006: 5002: 4992: 4990: 4984: 4977: 4967: 4965: 4956: 4955: 4951: 4941: 4939: 4935: 4934: 4930: 4920: 4918: 4909: 4908: 4904: 4894: 4892: 4875: 4871: 4861: 4859: 4852: 4848: 4838: 4836: 4829: 4825: 4812: 4811: 4807: 4797: 4795: 4786: 4785: 4781: 4771: 4769: 4758: 4754: 4744: 4742: 4733: 4732: 4728: 4718: 4716: 4707: 4706: 4702: 4697:on 10 May 2012. 4689: 4688: 4684: 4674: 4672: 4668: 4667: 4663: 4653: 4651: 4647: 4646: 4642: 4629: 4628: 4619: 4609: 4607: 4602: 4601: 4592: 4582: 4580: 4569: 4565: 4555: 4553: 4550: 4544: 4540: 4530: 4528: 4527:. 11 April 2003 4519: 4518: 4514: 4504: 4502: 4493: 4492: 4488: 4481:The Star Online 4475: 4474: 4470: 4457: 4456: 4449: 4439: 4437: 4432: 4431: 4424: 4411: 4410: 4389: 4381: 4374: 4370: 4369: 4360: 4350: 4348: 4344: 4340: 4339: 4318: 4308: 4306: 4296: 4292: 4282: 4280: 4267: 4266: 4262: 4255:creditcards.com 4249: 4248: 4244: 4235: 4234: 4227: 4211: 4210: 4188: 4184: 4174: 4172: 4161: 4157: 4147: 4145: 4141: 4134: 4128: 4124: 4114: 4112: 4097: 4090: 4076: 4072: 4062: 4060: 4049: 4045: 4035: 4033: 4029: 4022: 4018: 4017: 4013: 4003: 4001: 3991: 3980: 3970: 3968: 3961: 3957: 3947: 3945: 3938: 3934: 3929:on 5 July 2007. 3921: 3920: 3916: 3906: 3904: 3895: 3894: 3890: 3877: 3876: 3872: 3863: 3862: 3858: 3848: 3846: 3837: 3836: 3832: 3822: 3820: 3813: 3809: 3800: 3799: 3795: 3785: 3783: 3782:on 2 April 2012 3774: 3773: 3769: 3759: 3757: 3753: 3749: 3748: 3744: 3734: 3732: 3728: 3724: 3723: 3719: 3709: 3707: 3703: 3699: 3698: 3694: 3684: 3682: 3678: 3674: 3673: 3669: 3659: 3657: 3653: 3649: 3648: 3644: 3634: 3632: 3630:"EMVCo Members" 3626: 3622: 3614: 3610: 3609: 3605: 3595: 3593: 3584: 3583: 3576: 3567: 3566: 3559: 3550: 3549: 3540: 3530: 3529: 3525: 3515: 3513: 3512:on 15 June 2021 3509: 3502: 3498: 3497: 3493: 3488:Wayback Machine 3479: 3475: 3465: 3463: 3459: 3455: 3454: 3450: 3440: 3438: 3429: 3428: 3424: 3414: 3412: 3408: 3401: 3397: 3396: 3392: 3382: 3380: 3376: 3375: 3371: 3364: 3348: 3344: 3334: 3332: 3328: 3324: 3323: 3316: 3306: 3304: 3299: 3298: 3294: 3284: 3282: 3270: 3266: 3253: 3252: 3248: 3235: 3234: 3230: 3213: 3209: 3199: 3197: 3193: 3189: 3188: 3184: 3172: 3170: 3161: 3160: 3154: 3152: 3145: 3144: 3140: 3130: 3128: 3122: 3118: 3103: 3102: 3098: 3088: 3086: 3074: 3067: 3057: 3055: 3051: 3040: 3036: 3035: 3031: 3021: 3019: 3014: 3013: 3009: 2999: 2997: 2996:on 14 June 2021 2988: 2987: 2983: 2973: 2969: 2959: 2957: 2952: 2951: 2947: 2937: 2935: 2930: 2929: 2925: 2915: 2913: 2909: 2908: 2904: 2894: 2892: 2885:"EMVCo Members" 2883: 2882: 2878: 2871: 2855: 2851: 2841: 2839: 2829: 2825: 2815: 2813: 2802: 2801: 2797: 2790: 2764: 2760: 2746: 2745: 2741: 2731: 2729: 2717: 2700: 2696: 2669: 2664: 2663: 2658: 2654: 2649: 2645: 2640: 2593:, in mid-2012. 2547: 2513: 2508: 2495: 2485: 2472: 2462: 2449: 2435: 2363: 2340: 2327: 2317: 2304: 2289: 2279: 2266: 2180: 2128: 2115: 2071: 2063:NCR Corporation 2039: 2019: 2004: 1999: 1997:Vulnerabilities 1990: 1958: 1952: 1949: 1946: 1937: 1933: 1926: 1875: 1859: 1850: 1829: 1801: 1764: 1751: 1719:No CVM required 1695: 1686: 1649: 1629: 1610: 1582: 1543:A0000005291010 1478:Prepaye Online 1437: 1399:A0000004360100 1379:A0000006581010 1368:A0000006582010 1348:A0000006300101 1336:Dinube (Spain) 1331:A0000005241010 1311:A0000004391010 1291:A0000003710001 1223:Electronic cash 1176:A0000003241010 1156:A0000002771010 1136:A0000002281010 1116:A0000001544442 1096:A0000001523010 1073:A0000001410001 1053:A0000001214712 1042:A0000001214711 1031:A0000001211010 1011:A0000000651010 991:A0000000422010 980:A0000000421010 960:A0000000291010 920:A0000001524010 906:A0000000042203 892:A0000000980840 842:A0000000108888 828:A0000000050001 817: 805:A0000000048002 791:A0000000046000 777:A0000000043060 764:A0000000049999 751:A0000000041010 732:A0000000038010 719:A0000000032020 706:A0000000032010 693:A0000000031010 674:A0000000011010 654:A0000000010001 591: 515: 495:select (7816-4) 450: 377: 361: 294: 200:Jürgen Dethloff 196:Helmut Gröttrup 156: 146: 35: 28: 23: 22: 15: 12: 11: 5: 5927: 5917: 5916: 5911: 5906: 5901: 5884: 5883: 5881: 5880: 5878:Acquiring bank 5875: 5869: 5867: 5863: 5862: 5860: 5859: 5854: 5849: 5844: 5839: 5834: 5829: 5824: 5819: 5814: 5809: 5803: 5801: 5797: 5796: 5794: 5793: 5788: 5783: 5778: 5772: 5770: 5766: 5765: 5762: 5761: 5759: 5758: 5753: 5748: 5743: 5737: 5735: 5728: 5727: 5722: 5717: 5711: 5709: 5705: 5704: 5702: 5701: 5696: 5691: 5686: 5680: 5678: 5674: 5673: 5671: 5670: 5665: 5660: 5654: 5652: 5646: 5645: 5643: 5642: 5637: 5632: 5626: 5624: 5618: 5617: 5615: 5614: 5613: 5612: 5602: 5601: 5600: 5595: 5585: 5580: 5575: 5570: 5565: 5560: 5554: 5552: 5548: 5547: 5545: 5544: 5539: 5534: 5529: 5524: 5519: 5514: 5509: 5504: 5499: 5494: 5489: 5484: 5479: 5474: 5469: 5464: 5459: 5453: 5451: 5447: 5446: 5444: 5443: 5438: 5433: 5428: 5423: 5418: 5413: 5408: 5403: 5398: 5393: 5388: 5383: 5378: 5373: 5368: 5363: 5358: 5353: 5348: 5347: 5346: 5336: 5331: 5326: 5321: 5316: 5311: 5306: 5301: 5295: 5293: 5287: 5286: 5284: 5283: 5282: 5281: 5276: 5271: 5261: 5260: 5259: 5254: 5244: 5238: 5236: 5232: 5231: 5216: 5215: 5208: 5201: 5193: 5187: 5186: 5177: 5166: 5165:External links 5163: 5161: 5160: 5149:on 23 May 2015 5128: 5117:on 5 July 2016 5096: 5069: 5041: 5014: 5000: 4975: 4964:. 17 July 2017 4949: 4928: 4902: 4869: 4846: 4823: 4805: 4779: 4768:on 5 June 2014 4752: 4726: 4715:on 10 May 2015 4700: 4682: 4661: 4640: 4617: 4590: 4563: 4538: 4512: 4486: 4468: 4447: 4422: 4387: 4358: 4316: 4290: 4260: 4242: 4225: 4182: 4155: 4122: 4088: 4070: 4051:Susan, Watts. 4043: 4011: 3978: 3955: 3932: 3923:"Chip and pin" 3914: 3888: 3870: 3856: 3830: 3807: 3793: 3767: 3742: 3717: 3692: 3667: 3642: 3620: 3612:"Terms of Use" 3603: 3574: 3557: 3538: 3523: 3491: 3473: 3448: 3437:on 4 July 2020 3422: 3390: 3369: 3362: 3342: 3314: 3292: 3264: 3246: 3228: 3207: 3182: 3138: 3116: 3096: 3065: 3029: 3007: 2981: 2967: 2945: 2923: 2902: 2876: 2869: 2849: 2823: 2795: 2788: 2758: 2739: 2697: 2695: 2692: 2691: 2690: 2685: 2680: 2675: 2668: 2665: 2662: 2661: 2652: 2642: 2641: 2639: 2636: 2635: 2634: 2630: 2626: 2623: 2620: 2591:Palladium card 2574:pound sterling 2551:identity theft 2546: 2543: 2542: 2541: 2534: 2530: 2526: 2520: 2517: 2512: 2509: 2507: 2504: 2503: 2502: 2499: 2494: 2491: 2490: 2489: 2484: 2481: 2480: 2479: 2476: 2471: 2468: 2467: 2466: 2461: 2458: 2457: 2456: 2453: 2448: 2445: 2444: 2443: 2439: 2434: 2431: 2412:legally liable 2383:United Kingdom 2362: 2361:United Kingdom 2359: 2358: 2357: 2347: 2344: 2339: 2336: 2335: 2334: 2331: 2326: 2323: 2322: 2321: 2316: 2313: 2312: 2311: 2308: 2303: 2300: 2299: 2298: 2294: 2288: 2285: 2284: 2283: 2278: 2275: 2274: 2273: 2270: 2265: 2262: 2242: 2241: 2238: 2235: 2232: 2229: 2226: 2179: 2178:Implementation 2176: 2127: 2124: 2114: 2111: 2070: 2067: 2049:Steven Murdoch 2038: 2035: 2018: 2015: 2003: 2000: 1998: 1995: 1989: 1986: 1985: 1984: 1981: 1978: 1975: 1972: 1969: 1960: 1959: 1940: 1938: 1931: 1925: 1922: 1903:China UnionPay 1874: 1871: 1858: 1855: 1849: 1846: 1828: 1825: 1820: 1819: 1816: 1813: 1800: 1797: 1780:logically OR'd 1763: 1760: 1750: 1747: 1727: 1726: 1723: 1720: 1717: 1714: 1711: 1708: 1705: 1702: 1694: 1691: 1685: 1682: 1681: 1680: 1669: 1663: 1648: 1645: 1628: 1625: 1609: 1606: 1581: 1578: 1575: 1574: 1571: 1568: 1564: 1563: 1560: 1557: 1554: 1551: 1545: 1544: 1541: 1538: 1535: 1532: 1528: 1527: 1524: 1521: 1518: 1515: 1508: 1507: 1504: 1501: 1497: 1496: 1493: 1490: 1486: 1485: 1482: 1479: 1475: 1474: 1471: 1468: 1464: 1463: 1460: 1457: 1453: 1452: 1449: 1446: 1443: 1440: 1432: 1431: 1428: 1425: 1421: 1420: 1417: 1414: 1411: 1408: 1401: 1400: 1397: 1394: 1391: 1388: 1381: 1380: 1377: 1374: 1370: 1369: 1366: 1363: 1360: 1357: 1350: 1349: 1346: 1343: 1340: 1337: 1333: 1332: 1329: 1326: 1323: 1320: 1313: 1312: 1309: 1306: 1303: 1300: 1293: 1292: 1289: 1286: 1283: 1280: 1273: 1272: 1269: 1266: 1263: 1260: 1253: 1252: 1249: 1246: 1241: 1238: 1231: 1230: 1227: 1224: 1220: 1219: 1216: 1213: 1209: 1208: 1205: 1202: 1198: 1197: 1194: 1191: 1188: 1185: 1178: 1177: 1174: 1171: 1168: 1165: 1158: 1157: 1154: 1151: 1148: 1145: 1138: 1137: 1134: 1131: 1128: 1125: 1124:(Saudi Arabia) 1118: 1117: 1114: 1111: 1108: 1105: 1098: 1097: 1094: 1091: 1088: 1085: 1075: 1074: 1071: 1068: 1065: 1062: 1055: 1054: 1051: 1048: 1044: 1043: 1040: 1037: 1033: 1032: 1029: 1026: 1023: 1020: 1013: 1012: 1009: 1006: 1003: 1000: 993: 992: 989: 986: 982: 981: 978: 975: 972: 969: 962: 961: 958: 955: 952: 949: 942: 941: 938: 935: 932: 929: 922: 921: 918: 915: 912: 908: 907: 904: 901: 898: 894: 893: 890: 887: 884: 881: 877: 876: 873: 870: 867: 863: 862: 859: 856: 853: 850: 844: 843: 840: 837: 834: 830: 829: 826: 823: 811: 807: 806: 803: 800: 793: 792: 789: 786: 779: 778: 775: 772: 766: 765: 762: 759: 753: 752: 749: 746: 743: 740: 734: 733: 730: 727: 721: 720: 717: 714: 708: 707: 704: 701: 695: 694: 691: 688: 685: 682: 676: 675: 672: 669: 666: 663: 656: 655: 652: 649: 646: 643: 639: 638: 635: 632: 629: 626: 590: 587: 586: 585: 580: 575: 569: 564: 559: 554: 549: 544: 539: 534: 529: 524: 514: 511: 500: 499: 496: 493: 490: 487: 484: 481: 478: 475: 472: 469: 466: 449: 446: 435: 434: 427: 422:, such as the 416: 413: 376: 373: 360: 357: 293: 290: 254:China UnionPay 231:Carte Bancaire 222:(electrically 145: 142: 80:EMV cards are 26: 9: 6: 4: 3: 2: 5926: 5915: 5912: 5910: 5907: 5905: 5902: 5900: 5897: 5896: 5894: 5879: 5876: 5874: 5871: 5870: 5868: 5864: 5858: 5855: 5853: 5850: 5848: 5845: 5843: 5840: 5838: 5835: 5833: 5830: 5828: 5825: 5823: 5820: 5818: 5815: 5813: 5810: 5808: 5805: 5804: 5802: 5798: 5792: 5789: 5787: 5784: 5782: 5779: 5777: 5774: 5773: 5771: 5767: 5757: 5754: 5752: 5749: 5747: 5744: 5742: 5739: 5738: 5736: 5732: 5726: 5723: 5721: 5718: 5716: 5713: 5712: 5710: 5706: 5700: 5697: 5695: 5692: 5690: 5687: 5685: 5682: 5681: 5679: 5675: 5669: 5666: 5664: 5661: 5659: 5656: 5655: 5653: 5651: 5647: 5641: 5638: 5636: 5633: 5631: 5628: 5627: 5625: 5623: 5619: 5611: 5608: 5607: 5606: 5603: 5599: 5596: 5594: 5591: 5590: 5589: 5586: 5584: 5581: 5579: 5576: 5574: 5571: 5569: 5566: 5564: 5561: 5559: 5556: 5555: 5553: 5549: 5543: 5540: 5538: 5535: 5533: 5530: 5528: 5525: 5523: 5520: 5518: 5515: 5513: 5510: 5508: 5505: 5503: 5500: 5498: 5495: 5493: 5490: 5488: 5485: 5483: 5480: 5478: 5475: 5473: 5470: 5468: 5467:Carte Blanche 5465: 5463: 5460: 5458: 5455: 5454: 5452: 5450:Defunct cards 5448: 5442: 5439: 5437: 5434: 5432: 5429: 5427: 5424: 5422: 5419: 5417: 5414: 5412: 5409: 5407: 5404: 5402: 5399: 5397: 5394: 5392: 5389: 5387: 5384: 5382: 5379: 5377: 5374: 5372: 5369: 5367: 5364: 5362: 5359: 5357: 5354: 5352: 5349: 5345: 5342: 5341: 5340: 5337: 5335: 5332: 5330: 5327: 5325: 5322: 5320: 5317: 5315: 5312: 5310: 5307: 5305: 5302: 5300: 5297: 5296: 5294: 5288: 5280: 5277: 5275: 5272: 5270: 5267: 5266: 5265: 5262: 5258: 5255: 5253: 5250: 5249: 5248: 5245: 5243: 5240: 5239: 5237: 5233: 5229: 5225: 5221: 5214: 5209: 5207: 5202: 5200: 5195: 5194: 5191: 5184: 5183: 5178: 5174: 5169: 5168: 5145: 5138: 5132: 5113: 5106: 5100: 5085:on 8 May 2015 5084: 5080: 5073: 5058: 5054: 5048: 5046: 5029: 5025: 5018: 5011:. 5 May 2020. 5010: 5004: 4989: 4982: 4980: 4963: 4962:Bloomberg.com 4959: 4953: 4938: 4932: 4916: 4912: 4906: 4890: 4886: 4885: 4880: 4873: 4857: 4850: 4834: 4827: 4819: 4815: 4809: 4793: 4792:Business Wire 4789: 4783: 4767: 4763: 4756: 4740: 4736: 4730: 4714: 4710: 4704: 4696: 4692: 4686: 4671: 4665: 4650: 4644: 4636: 4632: 4626: 4624: 4622: 4605: 4599: 4597: 4595: 4578: 4574: 4567: 4549: 4542: 4526: 4522: 4516: 4500: 4496: 4490: 4482: 4478: 4472: 4464: 4460: 4454: 4452: 4435: 4429: 4427: 4418: 4414: 4408: 4406: 4404: 4402: 4400: 4398: 4396: 4394: 4392: 4380: 4373: 4367: 4365: 4363: 4343: 4337: 4335: 4333: 4331: 4329: 4327: 4325: 4323: 4321: 4305: 4301: 4294: 4278: 4274: 4273:visa-asia.com 4270: 4264: 4256: 4252: 4246: 4238: 4232: 4230: 4221: 4215: 4206: 4201: 4198:: 1766–1781. 4197: 4193: 4186: 4170: 4166: 4159: 4140: 4133: 4126: 4110: 4106: 4105:The Telegraph 4102: 4095: 4093: 4085: 4081: 4074: 4058: 4054: 4047: 4032:on 8 May 2010 4028: 4021: 4015: 4000: 3996: 3989: 3987: 3985: 3983: 3966: 3959: 3944:. The Channel 3943: 3936: 3928: 3924: 3918: 3902: 3898: 3892: 3884: 3880: 3874: 3866: 3860: 3844: 3840: 3834: 3818: 3811: 3803: 3797: 3781: 3777: 3771: 3752: 3746: 3727: 3721: 3702: 3696: 3677: 3671: 3652: 3646: 3631: 3624: 3613: 3607: 3591: 3587: 3581: 3579: 3570: 3564: 3562: 3553: 3547: 3545: 3543: 3535: 3534: 3527: 3508: 3501: 3495: 3489: 3485: 3482: 3477: 3458: 3452: 3436: 3432: 3426: 3407: 3400: 3394: 3379: 3373: 3365: 3359: 3355: 3354: 3346: 3327: 3321: 3319: 3302: 3296: 3281: 3280: 3275: 3268: 3260: 3256: 3250: 3242: 3238: 3232: 3224: 3223: 3218: 3211: 3192: 3186: 3178: 3165: 3150: 3149: 3142: 3127: 3120: 3112: 3111: 3106: 3100: 3085: 3084: 3079: 3072: 3070: 3050: 3046: 3039: 3033: 3017: 3011: 2995: 2991: 2985: 2979: 2977: 2971: 2955: 2949: 2933: 2927: 2912: 2906: 2890: 2886: 2880: 2872: 2870:9783319475974 2866: 2862: 2861: 2853: 2838: 2834: 2827: 2811: 2810: 2805: 2799: 2791: 2789:9780201703290 2785: 2781: 2777: 2772: 2771: 2762: 2755: 2751: 2750: 2743: 2728: 2727: 2722: 2715: 2713: 2711: 2709: 2707: 2705: 2703: 2698: 2689: 2686: 2684: 2681: 2679: 2676: 2674: 2671: 2670: 2656: 2647: 2643: 2631: 2627: 2624: 2621: 2618: 2613: 2612: 2611: 2608: 2604: 2600: 2594: 2592: 2587: 2583: 2579: 2575: 2571: 2566: 2564: 2560: 2556: 2552: 2545:United States 2539: 2535: 2531: 2527: 2524: 2521: 2518: 2515: 2514: 2506:North America 2500: 2497: 2496: 2487: 2486: 2477: 2474: 2473: 2464: 2463: 2454: 2451: 2450: 2440: 2437: 2436: 2430: 2428: 2424: 2419: 2417: 2413: 2407: 2405: 2401: 2397: 2391: 2389: 2388:point of sale 2384: 2380: 2376: 2367: 2355: 2351: 2348: 2345: 2342: 2341: 2332: 2329: 2328: 2319: 2318: 2309: 2306: 2305: 2295: 2291: 2290: 2281: 2280: 2271: 2268: 2267: 2261: 2257: 2253: 2251: 2247: 2239: 2236: 2233: 2230: 2227: 2224: 2223: 2222: 2220: 2216: 2212: 2208: 2201: 2196: 2189: 2184: 2175: 2173: 2169: 2164: 2162: 2158: 2154: 2150: 2146: 2142: 2137: 2133: 2123: 2119: 2110: 2106: 2102: 2100: 2096: 2091: 2087: 2084: 2079: 2077: 2066: 2064: 2059: 2057: 2053: 2050: 2046: 2045: 2034: 2032: 2026: 2024: 2014: 2012: 2008: 1994: 1982: 1979: 1976: 1973: 1970: 1967: 1966: 1965: 1956: 1944: 1939: 1930: 1929: 1921: 1917: 1913: 1910: 1908: 1904: 1900: 1896: 1892: 1888: 1879: 1870: 1868: 1863: 1854: 1845: 1843: 1838: 1835: 1824: 1817: 1814: 1811: 1810: 1809: 1806: 1796: 1794: 1788: 1786: 1781: 1777: 1773: 1769: 1759: 1757: 1746: 1744: 1739: 1736: 1731: 1724: 1721: 1718: 1715: 1712: 1709: 1706: 1703: 1700: 1699: 1698: 1690: 1677: 1673: 1670: 1667: 1664: 1661: 1658: 1657: 1656: 1654: 1644: 1642: 1637: 1634: 1624: 1622: 1619: 1614: 1605: 1603: 1599: 1595: 1591: 1587: 1572: 1569: 1566: 1565: 1561: 1558: 1555: 1550: 1549:China T-Union 1546: 1542: 1539: 1536: 1533: 1531:Mercury (UAE) 1530: 1529: 1525: 1522: 1519: 1516: 1513: 1510: 1509: 1505: 1502: 1499: 1498: 1494: 1491: 1488: 1487: 1483: 1480: 1477: 1476: 1472: 1469: 1466: 1465: 1461: 1458: 1455: 1454: 1450: 1447: 1444: 1439: 1433: 1430:A00000038420 1429: 1426: 1423: 1422: 1419:A00000038410 1418: 1415: 1412: 1406: 1402: 1398: 1395: 1392: 1389: 1386: 1383: 1382: 1378: 1375: 1372: 1371: 1367: 1364: 1361: 1355: 1351: 1347: 1344: 1341: 1338: 1335: 1334: 1330: 1327: 1324: 1321: 1318: 1315: 1314: 1310: 1307: 1304: 1301: 1298: 1295: 1294: 1290: 1287: 1284: 1281: 1278: 1275: 1274: 1270: 1267: 1264: 1261: 1258: 1255: 1254: 1250: 1247: 1245: 1242: 1239: 1236: 1233: 1232: 1228: 1225: 1222: 1221: 1217: 1214: 1211: 1210: 1206: 1203: 1200: 1199: 1195: 1192: 1189: 1183: 1179: 1175: 1172: 1169: 1166: 1163: 1160: 1159: 1155: 1152: 1149: 1146: 1143: 1140: 1139: 1135: 1132: 1129: 1126: 1123: 1120: 1119: 1115: 1112: 1109: 1106: 1103: 1100: 1099: 1095: 1092: 1089: 1086: 1084: 1080: 1077: 1076: 1072: 1069: 1066: 1063: 1060: 1057: 1056: 1052: 1049: 1046: 1045: 1041: 1038: 1035: 1034: 1030: 1027: 1024: 1018: 1014: 1010: 1007: 1004: 1001: 998: 995: 994: 990: 987: 984: 983: 979: 976: 973: 967: 963: 959: 956: 953: 950: 947: 944: 943: 939: 936: 933: 930: 927: 924: 923: 919: 916: 913: 910: 909: 905: 902: 899: 896: 895: 891: 888: 885: 882: 878: 875:A00000079001 874: 871: 868: 865: 864: 861:A00000002501 860: 857: 854: 851: 849: 845: 841: 838: 835: 832: 831: 827: 824: 821: 815: 812: 809: 808: 804: 801: 798: 795: 794: 790: 787: 785:ATM card only 784: 781: 780: 776: 773: 771: 768: 767: 763: 760: 758: 755: 754: 750: 747: 744: 739: 735: 731: 728: 726: 723: 722: 718: 715: 713: 710: 709: 705: 702: 700: 699:Visa Electron 697: 696: 692: 689: 686: 681: 677: 673: 670: 667: 664: 661: 658: 657: 653: 650: 648:Loyalty card 647: 644: 641: 640: 636: 633: 630: 627: 624: 623: 620: 617: 615: 611: 607: 602: 599: 595: 584: 581: 579: 576: 573: 570: 568: 565: 563: 560: 558: 555: 553: 550: 548: 545: 543: 540: 538: 535: 533: 530: 528: 525: 523: 520: 519: 518: 510: 508: 505: 497: 494: 491: 488: 485: 482: 479: 476: 473: 470: 467: 464: 463: 462: 460: 459: 454: 445: 442: 441: 432: 428: 425: 421: 417: 414: 411: 407: 403: 399: 398: 397: 394: 390: 386: 382: 372: 368: 365: 356: 353: 350: 344: 341: 336: 333: 328: 326: 321: 317: 313: 309: 303: 300: 289: 287: 283: 279: 275: 271: 267: 262: 259: 255: 251: 247: 243: 238: 236: 232: 227: 225: 221: 217: 213: 209: 205: 204:payment cards 201: 197: 193: 189: 186: 181: 179: 176:involves the 173: 170: 169:point of sale 165: 161: 155: 151: 141: 139: 135: 131: 127: 126:ISO/IEC 14443 123: 119: 115: 111: 107: 103: 99: 95: 91: 87: 83: 78: 76: 72: 68: 64: 60: 56: 55:payment cards 53: 49: 41: 37: 33: 19: 5873:Issuing bank 5821: 5658:Grace period 5630:Cash advance 5573:Credit limit 5381:Hyundai Card 5290:Regional and 5181: 5151:. Retrieved 5144:the original 5131: 5119:. Retrieved 5112:the original 5099: 5087:. Retrieved 5083:the original 5072: 5060:. Retrieved 5056: 5032:. Retrieved 5028:the original 5017: 5003: 4991:. Retrieved 4966:. Retrieved 4961: 4952: 4940:. Retrieved 4931: 4919:. Retrieved 4915:the original 4905: 4893:. Retrieved 4889:the original 4884:CIO magazine 4882: 4872: 4860:. Retrieved 4849: 4837:. Retrieved 4826: 4808: 4796:. Retrieved 4791: 4782: 4770:. Retrieved 4766:the original 4755: 4745:22 September 4743:. Retrieved 4739:the original 4729: 4717:. Retrieved 4713:the original 4703: 4695:the original 4685: 4673:. Retrieved 4664: 4652:. Retrieved 4643: 4635:the original 4608:. Retrieved 4581:. Retrieved 4577:the original 4566: 4554:. Retrieved 4541: 4529:. Retrieved 4524: 4515: 4503:. Retrieved 4499:the original 4489: 4480: 4471: 4463:the original 4438:. Retrieved 4417:the original 4379:the original 4349:. Retrieved 4307:. Retrieved 4303: 4293: 4281:. Retrieved 4277:the original 4272: 4263: 4254: 4245: 4214:cite journal 4195: 4185: 4173:. Retrieved 4169:the original 4158: 4146:. Retrieved 4139:the original 4125: 4113:. Retrieved 4109:the original 4104: 4083: 4073: 4061:. Retrieved 4056: 4046: 4034:. Retrieved 4027:the original 4014: 4002:. Retrieved 3998: 3969:. Retrieved 3958: 3946:. Retrieved 3935: 3927:the original 3917: 3905:. Retrieved 3900: 3891: 3883:the original 3873: 3859: 3847:. Retrieved 3845:. 6 May 2006 3842: 3833: 3821:. Retrieved 3810: 3796: 3784:. Retrieved 3780:the original 3770: 3760:20 September 3758:. Retrieved 3745: 3735:20 September 3733:. Retrieved 3720: 3710:20 September 3708:. Retrieved 3695: 3685:20 September 3683:. Retrieved 3670: 3660:20 September 3658:. Retrieved 3645: 3633:. Retrieved 3623: 3606: 3594:. Retrieved 3590:the original 3569:"Quick Chip" 3532: 3526: 3514:. Retrieved 3507:the original 3494: 3476: 3466:20 September 3464:. Retrieved 3451: 3439:. Retrieved 3435:the original 3425: 3413:. Retrieved 3406:the original 3393: 3381:. Retrieved 3372: 3352: 3345: 3335:20 September 3333:. Retrieved 3305:. Retrieved 3295: 3283:. Retrieved 3277: 3267: 3258: 3249: 3240: 3231: 3220: 3210: 3198:. Retrieved 3185: 3153:, retrieved 3147: 3141: 3129:. Retrieved 3119: 3108: 3099: 3087:. Retrieved 3081: 3056:. Retrieved 3049:the original 3044: 3032: 3020:. Retrieved 3010: 2998:. Retrieved 2994:the original 2984: 2975: 2970: 2958:. Retrieved 2948: 2936:. Retrieved 2926: 2914:. Retrieved 2905: 2893:. Retrieved 2889:the original 2879: 2859: 2852: 2840:. Retrieved 2836: 2826: 2814:. Retrieved 2807: 2798: 2769: 2761: 2748: 2742: 2730:. Retrieved 2724: 2655: 2646: 2595: 2567: 2548: 2420: 2416:Banking Code 2408: 2392: 2372: 2277:South Africa 2258: 2254: 2243: 2231:J Smart: JCB 2204: 2186:An EMV chip 2171: 2165: 2159:and China's 2129: 2120: 2116: 2107: 2103: 2094: 2092: 2088: 2082: 2080: 2072: 2060: 2054: 2042: 2040: 2027: 2020: 2009: 2005: 1991: 1963: 1950: 1942: 1918: 1914: 1911: 1884: 1864: 1860: 1851: 1839: 1830: 1821: 1802: 1789: 1775: 1771: 1768:data objects 1765: 1752: 1740: 1732: 1728: 1696: 1687: 1675: 1671: 1665: 1659: 1650: 1638: 1632: 1630: 1611: 1601: 1597: 1589: 1585: 1583: 1537:Mercury Card 1436: 1407:(Australia) 1265:PagoBancomat 1212:Quasi-credit 1036:VisaDankort 618: 613: 609: 605: 603: 594:ISO/IEC 7816 592: 547:Certificates 516: 501: 456: 453:ISO/IEC 7816 451: 438: 436: 378: 369: 366: 362: 345: 337: 332:carbon paper 329: 304: 295: 282:Thales Group 263: 239: 228: 216:flash memory 182: 174: 157: 150:Payment card 122:ISO/IEC 7816 109: 106:chip and PIN 105: 79: 47: 46: 36: 18:Chip and PIN 5725:Card scheme 5708:Interchange 5472:Carte Bleue 5344:Diners Club 5235:Major cards 5228:debit cards 4942:22 November 4505:30 December 4004:12 February 3971:12 February 3596:30 November 3058:15 November 2778:. pp. 2563:Wells Fargo 2493:Middle East 2375:Northampton 2354:Carte Bleue 2325:New Zealand 2237:Rupay: NPCI 1613:Smart cards 1553:A000000632 1442:A000000337 1410:A000000384 1339:A000000630 1079:Diners Club 934:Store card 931:A000000817 911:A000000152 897:A000000004 883:A000000098 833:A000000010 645:A000000001 82:smart cards 5893:Categories 5857:Smart card 5800:Technology 5689:Chargeback 5635:Charge-off 5497:Everything 5247:Mastercard 5062:4 December 4798:6 February 4205:2006.08249 4063:9 December 3173:|url= 2916:31 January 2842:27 October 2816:27 October 2694:References 2607:Mastercard 2559:Home Depot 2211:Mastercard 2168:Mastercard 2149:Google Pay 2132:ETH Zurich 2126:PIN bypass 1953:March 2020 1899:Mastercard 1716:Online PIN 1534:A000000529 1520:meeza Card 1517:A000000732 1503:01 000006 1492:01 000005 1481:01 000004 1470:01 000003 1459:01 000002 1448:01 000001 1435:GIM-UEMOA 1390:A000000436 1373:MIR Credit 1359:A000000658 1322:A000000524 1302:A000000439 1282:A000000371 1262:A000000359 1248:1010028001 1240:A000000359 1187:A000000333 1167:A000000324 1150:Debit card 1147:A000000277 1127:A000000228 1107:A000000154 1087:A000000152 1064:A000000141 1022:A000000121 1002:A000000065 971:A000000042 951:A000000029 866:A000000790 852:A000000025 818:(formerly 810:A000000005 799:Securecode 757:Mastercard 742:A000000004 738:Mastercard 684:A000000003 665:A000000001 471:card block 402:3-D Secure 389:mail order 312:Triple DES 299:debit card 212:MOS memory 192:smart card 164:debit card 154:Smart card 148:See also: 138:ExpressPay 71:Mastercard 5720:Surcharge 5324:Cabcharge 5304:AzeriCard 4057:Newsnight 3516:7 October 3415:7 October 3241:bbc.co.uk 3200:2 January 3000:7 October 2483:Venezuela 2302:Australia 2145:Apple Pay 2095:Newsnight 2083:Newsnight 2044:Newsnight 1907:Visa Inc. 1770:known as 1701:Signature 1456:Standard 1387:(Belgium) 1362:MIR Debit 1279:(Nigeria) 1237:(Germany) 1019:(Denmark) 668:Cash card 662:(Denmark) 381:telephone 340:equipment 284:in 2019) 258:Discover. 235:Geldkarte 116:(PIN) or 5769:Security 5650:Interest 5640:Debt-lag 5605:ATM card 5551:Accounts 5492:Eurocard 5477:Chipknip 5462:Bankcard 5431:UnionPay 5386:Isracard 5376:Girocard 5339:Discover 5319:BCA Card 5309:Bancomat 5274:Electron 5121:17 April 4968:5 August 4921:26 March 4895:17 April 4675:17 April 4654:17 April 4583:17 April 4309:17 April 4036:26 March 3999:BBC News 3901:BBC News 3849:13 March 3843:BBC News 3786:26 March 3635:1 August 3484:Archived 3441:20 March 3431:"EMV CA" 3383:17 April 3164:citation 3110:ABC News 2667:See also 2599:Verifone 2460:Colombia 2315:Malaysia 2200:die shot 2161:UnionPay 2157:Discover 1988:Versions 1920:Canada. 1467:Classic 1445:Retrait 1356:(Russia) 1305:ATM card 1268:10100380 1244:Girocard 1182:UnionPay 1162:Discover 1144:(Canada) 1104:(Brazil) 1102:Banrisul 1083:Discover 968:(France) 954:ATM card 631:Product 448:Commands 385:Internet 349:wireless 338:Later , 308:hologram 57:and for 5866:Banking 5746:Interac 5699:Dispute 5677:Payment 5487:enRoute 5334:Dankort 5314:BC Card 5257:Maestro 4283:29 June 3628:EMVCo. 3285:31 July 3175:value ( 3155:31 July 3131:31 July 3089:31 July 2809:Gemalto 2732:31 July 2688:MM code 2582:Gemalto 2523:Interac 2379:England 2207:Europay 2141:Android 1943:updated 1758:(TVR). 1570:010106 1559:010105 1514:(Egypt) 1385:Edenred 1319:(India) 1184:(China) 1142:Interac 1061:(Italy) 1025:Dankort 1017:Dankort 999:(Japan) 937:002001 926:Menards 814:Maestro 770:Maestro 660:Danmønt 509:cards. 278:Gemalto 185:silicon 178:forgery 144:History 134:PayWave 132:, Visa 67:Europay 5741:Cirrus 5537:Proton 5527:Switch 5507:Mondex 5482:Choice 5457:Access 5416:PayPak 5351:EFTPOS 5224:charge 5220:Credit 5153:10 May 5089:10 May 5034:10 May 4993:10 May 4862:10 May 4839:10 May 4772:10 May 4719:10 May 4610:10 May 4556:27 May 4531:27 May 4440:10 May 4351:10 May 4175:10 May 4148:10 May 4115:10 May 3948:10 May 3823:10 May 3360: 3307:10 May 3259:IT PRO 3222:Forbes 3196:. Visa 3171:Check 3022:10 May 2960:10 May 2938:10 May 2895:10 May 2867: 2786: 2555:Target 2538:Helcim 2511:Canada 2470:Mexico 2447:Brazil 2442:shift. 2396:Switch 2350:France 2338:Europe 2293:Japan. 2264:Africa 2213:, and 2031:Lahore 1905:, and 1735:Verify 1523:100123 1405:eftpos 1226:010106 1215:010103 1204:010102 1201:Credit 1193:010101 820:Switch 783:Cirrus 387:, and 270:IDEMIA 266:ABnote 256:, and 220:EEPROM 160:credit 73:, and 5751:Pulse 5542:V Pay 5502:Laser 5441:Verve 5421:RuPay 5406:Meeza 5269:Debit 5252:Debit 5180:BBC: 5147:(PDF) 5140:(PDF) 5115:(PDF) 5108:(PDF) 4551:(PDF) 4382:(PDF) 4375:(PDF) 4345:(PDF) 4200:arXiv 4142:(PDF) 4135:(PDF) 4059:. BBC 4030:(PDF) 4023:(PDF) 3907:2 May 3754:(PDF) 3729:(PDF) 3704:(PDF) 3679:(PDF) 3654:(PDF) 3615:(PDF) 3510:(PDF) 3503:(PDF) 3460:(PDF) 3409:(PDF) 3402:(PDF) 3329:(PDF) 3194:(PDF) 3052:(PDF) 3041:(PDF) 2638:Notes 2633:2017. 2629:2016. 2570:euros 2533:2012. 2529:2012. 2240:Verve 2219:EMVCo 2056:APACS 2052:PIN. 2023:Shell 2011:APACS 1512:meeza 1345:0101 1325:RuPay 1317:RuPay 1285:Verve 1277:Verve 1190:Debit 1164:(USA) 1122:SPAN2 1039:4711 917:4010 903:2203 889:0840 839:8888 712:V Pay 651:0001 242:EMVCo 52:smart 5756:Plus 5622:Debt 5610:Fees 5522:Solo 5436:UATP 5426:Troy 5411:NETS 5401:MEPS 5299:ArCa 5279:Cash 5264:Visa 5226:and 5155:2015 5123:2017 5091:2015 5064:2016 5036:2015 4995:2015 4970:2017 4944:2017 4923:2017 4897:2017 4864:2015 4841:2015 4800:2014 4774:2015 4747:2012 4721:2015 4677:2017 4656:2017 4612:2015 4585:2017 4558:2015 4533:2015 4507:2016 4442:2015 4353:2015 4311:2017 4285:2015 4220:link 4177:2015 4150:2015 4117:2015 4065:2015 4038:2010 4006:2010 3973:2010 3950:2015 3909:2010 3851:2015 3825:2015 3788:2012 3762:2018 3737:2018 3712:2018 3687:2018 3662:2018 3637:2020 3598:2020 3518:2020 3468:2018 3443:2020 3417:2020 3385:2017 3358:ISBN 3337:2018 3309:2015 3287:2022 3202:2017 3177:help 3157:2012 3133:2022 3091:2022 3060:2015 3024:2015 3002:2020 2962:2015 2940:2015 2918:2023 2897:2015 2865:ISBN 2844:2019 2818:2019 2784:ISBN 2782:-4. 2734:2022 2605:and 2603:Visa 2421:The 2404:Visa 2400:HBOS 2215:Visa 2136:Visa 1540:1010 1396:0100 1376:1010 1365:2010 1328:1010 1308:1010 1288:0001 1257:EAPS 1173:1010 1153:1010 1133:1010 1130:SPAN 1113:4442 1093:3010 1070:0001 1050:4712 1028:1010 1008:1010 988:2010 977:1010 957:1010 946:LINK 825:0001 802:8002 788:6000 774:3060 761:9999 748:1010 729:8010 725:Plus 716:2020 703:2010 690:1010 680:Visa 671:1010 637:AID 634:PIX 628:RID 318:and 218:and 198:and 152:and 92:for 75:Visa 61:and 5899:EMV 5822:EMV 5715:Fee 5532:PIN 5396:Mir 5391:JCB 5361:Elo 2572:or 2402:to 2153:NFC 1679:it. 1621:TLV 1618:BER 1427:20 1416:10 1354:MIR 1170:ZIP 997:JCB 604:An 598:GSM 507:SIM 504:GSM 320:SHA 316:RSA 246:JCB 226:). 162:or 140:). 108:or 48:EMV 5895:: 5329:CB 5222:, 5055:. 5044:^ 4978:^ 4960:. 4881:. 4816:. 4790:. 4620:^ 4593:^ 4523:. 4479:. 4450:^ 4425:^ 4390:^ 4361:^ 4319:^ 4302:. 4271:. 4253:. 4228:^ 4216:}} 4212:{{ 4194:. 4103:. 4091:^ 4082:. 4055:. 3997:. 3981:^ 3899:. 3841:. 3577:^ 3560:^ 3541:^ 3317:^ 3276:. 3257:. 3239:. 3219:. 3168:: 3166:}} 3162:{{ 3107:. 3080:. 3068:^ 3043:. 2835:. 2806:. 2774:. 2752:, 2723:. 2701:^ 2576:. 2557:, 2377:, 2356:). 2209:, 2147:, 1901:, 1897:, 1893:, 1889:, 1235:DK 966:CB 872:01 858:01 816:UK 383:, 314:, 252:, 248:, 69:, 5212:e 5205:t 5198:v 5157:. 5125:. 5093:. 5066:. 5038:. 4997:. 4972:. 4946:. 4925:. 4899:. 4866:. 4843:. 4820:. 4802:. 4776:. 4749:. 4723:. 4679:. 4658:. 4614:. 4587:. 4560:. 4535:. 4509:. 4483:. 4444:. 4355:. 4313:. 4287:. 4257:. 4239:. 4222:) 4208:. 4202:: 4179:. 4152:. 4119:. 4067:. 4040:. 4008:. 3975:. 3952:. 3911:. 3853:. 3827:. 3790:. 3764:. 3739:. 3714:. 3689:. 3664:. 3639:. 3617:. 3600:. 3571:. 3554:. 3520:. 3470:. 3445:. 3419:. 3387:. 3366:. 3339:. 3311:. 3289:. 3243:. 3225:. 3204:. 3179:) 3135:. 3113:. 3093:. 3062:. 3026:. 3004:. 2964:. 2942:. 2920:. 2899:. 2873:. 2846:. 2820:. 2792:. 2780:3 2736:. 2619:. 1955:) 1951:( 1945:. 1081:/ 822:) 426:. 412:. 34:. 20:)

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.

Index