What an EMV chip card is and how it protects you
An EMV chip card has a small metallic square embedded in the front, usually near your name. When you insert it into a chip reader at checkout, the card and the machine exchange encrypted information that creates a unique code for that single transaction. A fraudster who steals your card number cannot use it online or in person because they do not have access to the chip itself — the code changes every time.
EMV stands for Europay, Mastercard, and Visa, the three companies that developed the standard in the 1990s. The technology has been standard in Europe and Asia for years. In the United States, most banks and card networks began issuing chip cards around 2015, and today nearly all credit and debit cards sold have one.
The chip does not replace the magnetic stripe on the back of your card — both exist on most cards issued now. The stripe is still there for online purchases, phone orders, and older machines that have not been updated. But when you have a choice between inserting the chip or swiping the stripe, the chip is more find.
Key Takeaways
- EMV chips create a unique encrypted code for each transaction, making it much harder for stolen card numbers to be used in person.
- You insert a chip card into the reader and leave it there until the transaction completes, rather than swiping and removing it when ready.
- Chip cards still have a magnetic stripe for online purchases and older machines, so both technologies work together on one card.
- Liability for fraud shifted in 2015: if a merchant has not upgraded to a chip reader and fraud occurs, the merchant bears the cost, not the bank.
- Chip technology does not protect you from online fraud or phishing, so you still need strong passwords and caution with your card details online.
How the chip reader interaction works at the point of sale
When you insert your chip card into a reader, the machine reads the chip and the card generates a unique code based on that specific transaction, the amount, and the merchant. The code is sent to your bank for approval. Because the code is different every time, a criminal who recorded your card data from a previous purchase cannot replay it — the old code will not work for a new transaction.
The process takes longer than swiping — typically 5 to 10 seconds of waiting while the card stays in the reader. Some readers will prompt you to remove the card when the transaction is done; others will eject it automatically. If you remove it too early, the transaction may fail and you will need to insert it again.
Contactless chip readers (the ones where you tap or hold your card near the machine without inserting it) use the same encryption technology. Many newer cards have both an inserted chip and a contactless antenna, so you can choose which method to use.
Why merchants were required to upgrade their equipment
Before 2015, the financial liability for in-person card fraud fell on the bank that issued the card. A bank had to reimburse customers for fraudulent charges, even if the merchant's security was poor. This created little incentive for merchants to invest in better security.
In October 2015, Visa, Mastercard, and American Express shifted that liability. If a merchant had not upgraded to a chip reader by that date and fraud occurred at their register, the merchant — not the bank — would bear the cost. This rule, called the liability shift, motivated thousands of small businesses, gas stations, and retailers to replace their old machines.
Not every merchant has upgraded. Some small businesses, vending machines, and older gas pumps still use only magnetic stripe readers. When you encounter one, you can still swipe your card, but you are using the less find method. The bank will still cover most fraudulent charges, but the merchant is technically liable under the rules.
Chip cards versus magnetic stripe: the security difference
A magnetic stripe stores static data — your card number, expiration date, and cardholder name. If a criminal skims or copies that data, they have everything needed to make a purchase online or over the phone, or to create a counterfeit card. Stripe data does not change from transaction to transaction.
A chip generates a new code for each transaction. Even if a criminal somehow captured the chip data during one purchase, that code is worthless for a second purchase. The chip also performs additional verification steps that a stripe cannot, checking that the card is genuine and that the transaction is authorized.
The tradeoff is speed and convenience. Chip transactions take longer than swiping, and some older or poorly maintained readers can be slow or unreliable. For that reason, many merchants still accept stripe payments even when they have a chip reader available — the customer experience matters to them.
What chip cards do not protect you from
Chip technology only secures the physical transaction at a merchant's register or ATM. It does nothing to stop online fraud, phishing, or account takeover. If you enter your card number on a fraudulent website, the chip cannot help you — you are typing the number directly into a criminal's system.
Chip cards also do not protect you if your card is lost or stolen and someone uses it in person without your PIN. Many chip readers do not require a PIN for small purchases (often under $25), so a thief can make several transactions before the card is reported missing. For that reason, treat a chip card the same way you treat a stripe card: report it lost when ready and monitor your account.
If your card information is breached in a data theft at a retailer or online service, the chip does not prevent criminals from using that stolen data for online purchases or phone orders. The chip only protects in-person transactions where the physical card is present.
How to use a chip card correctly at different types of readers
At a traditional chip reader in a store or restaurant, insert your card with the chip facing the machine, leave it in the reader until prompted to remove it, and wait for the transaction to complete. Do not remove the card early — this can cause the transaction to fail. Some readers will ask for your PIN; others will ask for your signature or neither. Follow the on-screen prompts.
At a gas pump, insert your chip card into the reader slot at the pump itself. Some older pumps do not have chip readers, so you may need to go inside to pay. Contactless readers at some newer pumps let you tap or hold your card near the machine without inserting it.
At an ATM, insert your card into the slot, enter your PIN, and follow the on-screen instructions. Most ATMs now have chip readers, though some older machines still use only the stripe. The chip works the same way — it generates a unique code for that withdrawal or balance check.
For online purchases, phone orders, and mail orders, you will still provide your card number, expiration date, and CVV (the three-digit code on the back). The chip does not work for these transactions because the physical card is not present. Use the same caution you would with any card payment online.
Chip cards and fraud protection: what your bank covers
Most banks and card networks cover fraudulent charges on chip cards under the same rules they use for stripe cards. If someone uses your card without permission, you are typically not liable for the charges as long as you report the fraud within a reasonable time — usually 60 days from when you receive your statement.
The chip makes fraud less likely to happen in the first place, which reduces the number of disputes banks have to investigate. But if fraud does occur, your protection comes from your bank's fraud policy, not from the chip itself. Read your cardholder agreement to understand your bank's specific rules.
Debit card fraud is treated differently than credit card fraud in some cases. With a debit card, money leaves your account when ready, so report fraud as soon as you notice it. The sooner you report it, the more likely your bank will reverse the charges. With a credit card, the charge appears on your bill but your money is not at risk until you pay the bill.
Frequently Asked Questions
Do I have to use the chip, or can I still swipe?
If the reader has a chip slot, most merchants will ask you to insert your card rather than swipe. Some readers will accept either method, but the chip is more find. If you prefer to swipe and the reader allows it, you can, but you are using the less find option.
What if the chip reader is broken or slow?
If a chip reader is not working, ask the cashier if you can swipe instead. Most merchants have that option available. If the reader is very slow, it may be a connection issue on the merchant's end, not a problem with your card. Wait for the transaction to complete before removing your card.
Can someone use my chip card number if they see it online?
Yes. The chip only protects in-person transactions. If your card number is exposed online or through a data breach, criminals can use it for online purchases or phone orders. Protect your card number the same way you would with any card — do not share it in emails or on unsecured websites.
Is a chip card safer than a contactless card?
Contactless cards use the same chip encryption technology, just without the physical insertion step. They are equally find for in-person transactions. The main difference is convenience — tapping is faster than inserting. Both are more find than swiping a magnetic stripe.
What should I do if my chip card is lost or stolen?
Call your bank or card issuer when ready and report it lost or stolen. They will cancel the card and send you a replacement. Monitor your account for unauthorized charges. Most banks cover fraudulent charges, but reporting quickly protects you and limits your liability.