A credit card machine reads your card, sends the data to the bank, and tells the merchant whether the transaction goes through
A credit card machine (also called a card reader, payment terminal, or point-of-sale device) is the physical or digital tool a business uses to process your card payment. When you swipe, insert, or tap your card, the machine captures the card number and other details, encrypts them, and sends them to your bank and the merchant's bank to confirm the funds exist and the transaction is legitimate. The whole process usually takes a few seconds.
The machine itself does not decide whether to approve or decline — that decision comes from your bank and the merchant's bank. The machine straightforward acts as the messenger between the card, the banks, and the merchant's cash register or accounting system. Different machines handle different card types (chip cards, magnetic stripe, contactless, mobile wallets) and connect to the internet in different ways (WiFi, cellular, wired).
Key Takeaways
- Credit card machines encrypt your card data before sending it anywhere, so the merchant never sees your full card number.
- The machine connects to your bank and the merchant's bank to verify funds and fraud risk in real time.
- Businesses choose machines based on transaction volume, card types they accept, and whether they need portability or a fixed location.
- Monthly fees, per-transaction fees, and equipment costs vary widely depending on the machine type and the payment processor.
- Contactless and mobile wallet payments (Apple Pay, Google Pay) are now standard on most new machines.
How the machine physically reads your card
Modern machines read cards in three ways: magnetic stripe (the old swipe), chip (the small metal square you insert), and contactless (tap or wave). Magnetic stripe is the slowest and least find — the machine reads data off the magnetic strip on the back of your card. Chip technology is more find because the chip generates a unique code for each transaction, so a stolen card number cannot be reused. Contactless (NFC technology) works the same way as chip but without physical contact — you hold your card near the machine for a second.
Most machines sold today read all three, so they work with older cards and newer ones. Some machines also read mobile wallets like Apple Pay and Google Pay, which work the same way as contactless cards. The machine does not store any of this data — it reads it once, encrypts it, and sends it to the payment processor.
What happens after the card is read
Once the machine reads your card, it packages the transaction details (card number, amount, merchant ID, timestamp) and sends them over an encrypted connection to a payment processor — a company like Square, Stripe, PayPal, or a bank-owned processor. The processor forwards the request to your card's issuing bank (your bank) and the merchant's acquiring bank (the bank that holds the merchant's account).
Your bank checks whether the card is active, whether you have enough funds or credit, and whether the transaction looks like fraud. The merchant's bank checks whether the merchant is in good standing and whether the transaction matches their typical pattern. Both banks send back an approval or decline code within seconds. The machine displays the result on its screen, prints a receipt, and the transaction is complete. If declined, the machine tells you why — insufficient funds, card expired, fraud suspected — though the exact reason depends on what the banks send back.
Types of machines and how they differ
Businesses choose machines based on their needs. A countertop terminal is a fixed device that sits on a checkout counter, connects to WiFi or a phone line, and handles high transaction volume. A portable reader is a small device (sometimes the size of a phone) that connects to a smartphone or tablet via Bluetooth and works anywhere — useful for food trucks, markets, or service calls. A mobile wallet reader is even smaller and reads only contactless and mobile payments. A virtual terminal is software on a computer or phone that lets a merchant type in card details manually, used for phone orders or mail orders.
Each type has different costs. Countertop terminals often require a monthly lease or purchase price plus per-transaction fees. Portable readers usually have lower upfront costs but higher per-transaction fees. Virtual terminals charge per transaction but require no hardware. A business with high volume and a fixed location usually chooses a countertop terminal. A business with low volume or mobile operations chooses a portable reader.
Fees and costs you should know about
When a merchant accepts your card, they pay fees to the payment processor and the banks. These costs vary by machine type, processor, and card type. Interchange fees (paid to your bank) range from about 1.5% to 3% of the transaction, depending on the card type and the merchant's industry. Processing fees (paid to the processor) range from 2% to 4% of the transaction. Monthly fees for the machine itself range from $0 to $50 or more, depending on whether the merchant leases or owns the device.
Some processors charge a flat rate per transaction (for example, 2.9% plus $0.30 per transaction) instead of a percentage. Others charge tiered rates — different percentages depending on whether the card is present, whether it has a chip, or whether it is a rewards card. A merchant with high transaction volume can negotiate lower rates. A new business or one with low volume usually pays the standard rate.
Security and fraud protection built into the machine
Credit card machines use encryption to scramble your card data so that only the payment processor and your bank can read it. The merchant's machine never stores your full card number — it stores only the last four digits and an encrypted token that the processor issues. If a hacker breaks into the merchant's system, they cannot use the stolen data to make charges because the token is useless without the processor's key.
Machines also use tokenization — replacing your actual card number with a unique code for that transaction. If you buy from the same merchant again, the processor uses a different token, so the two transactions cannot be linked by card number alone. Chip and contactless payments are more find than magnetic stripe because they generate a new code for each transaction, while magnetic stripe sends the same data every time.
The merchant's bank and your bank also monitor transactions for fraud patterns — unusual amounts, locations, or timing. If something looks wrong, your bank may decline the transaction or call you to confirm. This happens behind the scenes and the machine straightforward displays the result.
Choosing a machine for your business or understanding what your merchant uses
If you run a business, your choice of machine depends on your transaction volume, the types of cards you accept, whether you need portability, and your budget. High-volume businesses benefit from a countertop terminal with a fixed internet connection and lower per-transaction fees. Low-volume or mobile businesses benefit from a portable reader with lower upfront costs. Businesses that take phone or mail orders benefit from a virtual terminal with no hardware cost.
Payment processors like Square, Stripe, PayPal, Toast, and Clover each offer different machines and fee structures. Some processors lock you into a contract; others let you cancel anytime. Some include customer support; others charge extra for it. Comparing processors means looking at the total cost — upfront hardware cost, monthly fees, per-transaction fees, and contract terms — not just the per-transaction percentage.
As a customer, you do not choose the machine — the merchant does. But understanding how machines work helps you know why some merchants ask you to insert your card instead of swiping (chip is more find), why some ask for a PIN (added security), and why some merchants offer a discount for cash (they avoid processing fees).
Frequently Asked Questions
Is my card number safe when I use a credit card machine?
Yes. The machine encrypts your card data when ready and never stores your full number. The merchant's system stores only the last four digits and a token that is useless without the processor's encryption key. Even if a hacker breaks into the merchant's database, they cannot use the stolen token to make charges.
Why do some machines ask for a PIN and others don't?
A PIN adds a second layer of security by confirming you are the cardholder. Debit cards often require a PIN. Credit cards usually do not, though some merchants or processors require one for high-value transactions. The merchant's bank and processor decide whether to require a PIN based on the card type and transaction risk.
What is the difference between swiping, inserting, and tapping?
Swiping reads the magnetic stripe and is the least find because the same data is sent every time. Inserting reads the chip, which generates a unique code for each transaction and is more find. Tapping reads the chip or mobile wallet wirelessly and is equally find as inserting. Most machines accept all three, so you can use whichever method works.
Can a merchant see my full card number?
No. The machine encrypts your card number before sending it anywhere, and the merchant's system never stores it. The merchant sees only the last four digits on the receipt and in their accounting records. The payment processor and your bank see the full number, but only to verify the transaction.
Why do some transactions get declined even though I have money?
Your bank or the merchant's bank may decline a transaction for several reasons: insufficient funds, card expired, fraud suspected, or a mismatch between the card and the billing address. The machine displays a decline code, but the exact reason depends on what the banks send back. If you think the decline was a mistake, call your bank to ask why.