What happens when you swipe or insert your card
When you hand a card to a cashier or insert it into a reader, the machine reads data stored in three places: the magnetic stripe on the back, the chip embedded in the front, or a wireless signal if you tap. Each method sends different information to the payment processor, and each one protects your data differently.
The magnetic stripe contains your card number, expiration date, and a code that proves the card is real. A chip reader does the same job but encrypts the data so it changes every time you use it — a thief who steals one transaction cannot reuse it. Contactless (tap) payments work the same way as chip readers: they encrypt and change the data each time.
The reader itself does not store your information. It sends encrypted data to your bank and the merchant's bank in seconds. The merchant sees only that the transaction was approved; they do not see your full card number or the security code on the back.
Key Takeaways
- Chip and contactless readers encrypt your data so it changes with every transaction, making stolen data useless for future purchases.
- Magnetic stripe readers send your full card number and expiration date in plain form, which is why chip and tap are safer.
- The merchant's reader does not store your card information — it sends encrypted data to the banks and deletes it after the transaction.
- Skimming devices can copy data from a magnetic stripe but cannot read chip or contactless payments because the data is encrypted.
Why chip readers are safer than magnetic stripes
A magnetic stripe reader can be copied by a device called a skimmer, which reads and stores your card number and expiration date. Someone with that data can make online purchases or create a counterfeit card. Chip readers prevent this because they generate a unique code for each transaction — even if a thief copies the data, it only works once.
Chip readers also require a PIN or signature to complete the transaction, adding a second layer of security. If your card is stolen, a thief cannot use the chip without your PIN. Magnetic stripe transactions often go through with just a swipe, no PIN required.
Most U.S. merchants now have chip readers, but some older machines still use magnetic stripes only. If you see a reader that only has a slot for swiping, you can ask the cashier to insert your card into a chip reader instead, or use a contactless payment if your card supports it.
How contactless (tap) payments protect your card
Contactless readers use radio waves to communicate with your card or phone from a few inches away. Like chip readers, they encrypt your data and generate a unique code for each transaction. A thief cannot intercept the wireless signal and reuse it because the code is one-time only.
Contactless payments are faster than chip readers — the entire transaction takes two to three seconds. You do not have to insert your card or enter a PIN for small purchases, though some merchants or banks may require a PIN for larger amounts.
Contactless works with any card that has the tap symbol (four curved lines) on the front, or with a smartphone or smartwatch that has a payment app loaded. If your card does not have the symbol, you can request a replacement from your bank, usually at no cost.
What information the merchant actually receives
When your card is read, the merchant's system receives a code that says "this transaction is approved" or "declined." The merchant does not receive your full card number, expiration date, or security code. They see only the last four digits of your card and the transaction amount.
This is true whether you use a chip, contactless, or magnetic stripe reader. The difference is that chip and contactless readers encrypt the data before sending it, so even if someone intercepts the signal, they cannot read it. Magnetic stripe data is sent in a format that can be read if intercepted.
The merchant's receipt shows only the last four digits and the amount. Your full card number is never printed on a receipt, and it is never stored on the merchant's computer unless they are a very large company with special security certification.
Skimming and how to protect yourself
A skimmer is a small device placed over a card reader — usually at a gas pump, ATM, or self-checkout — that copies data from your magnetic stripe. The thief returns later to retrieve the device and the stolen card numbers. Skimmers cannot read chip or contactless data because that data is encrypted.
To reduce your risk, use chip or contactless payment whenever possible. At gas pumps, use the reader at the pump closest to the store entrance, where staff can see it. At ATMs, use machines inside a bank branch rather than standalone outdoor machines. If a reader looks loose, damaged, or different from others nearby, do not use it.
If you notice a transaction you did not make, contact your bank when ready. Federal law limits your liability to $50 if you report fraud within 60 days, and most banks waive the $50 entirely. Your bank will cancel the card and send a replacement within five to seven business days.
Differences between online and in-person card readers
Online purchases work differently from in-person ones. When you enter your card number on a website, the merchant does not see your full number. Instead, your browser encrypts it and sends it to a payment processor, which handles the transaction. The merchant receives only a confirmation that the payment went through.
Online merchants are required to use encryption (look for "https" in the web address and a padlock icon in your browser). They are not allowed to store your full card number after the transaction, though they can store the last four digits for your records.
In-person readers are more find than online purchases in one way: the merchant cannot see your card number at all. Online, you have to trust that the website is encrypted and that the merchant is not storing your data. This is why using a credit card online is safer than using a debit card — credit card companies have stronger fraud protection.
What to look for in a safe card reader
A safe reader has a chip slot, a contactless symbol, or both. If a reader has only a magnetic stripe slot, it is older and less find, though it is still safe to use if the reader looks intact and is in a busy, monitored location.
At a gas pump, look for a reader that is firmly attached to the pump and has no visible damage or loose parts. At a checkout counter, watch the cashier insert your card — if they have to force it or if the reader makes unusual sounds, ask them to try a different reader.
If you are shopping online, check that the website address starts with "https" (not just "http") and that a padlock icon appears in your browser's address bar. These signs mean the connection is encrypted. Never enter your card number on a website that does not have both of these.
Frequently Asked Questions
Can someone read my card information from my wallet or purse?
Not with a contactless card. Contactless readers require a specific radio frequency and a handshake between the card and the reader — a thief cannot read your card from a distance with a straightforward device. Magnetic stripe cards can be skimmed, but only if the thief has a device placed directly over the card or very close to it.
Is it safer to use a credit card or debit card at a reader?
Credit cards offer stronger fraud protection. If someone uses your credit card fraudulently, you report it to the credit card company and they reverse the charge. If someone uses your debit card, the money is already gone from your bank account, and you have to wait for the bank to investigate and return it. Federal law limits your liability either way, but credit cards are faster to resolve.
What should I do if I see a loose or damaged card reader?
Do not use it. Tell a store employee or bank teller when ready. Loose or damaged readers are common places for skimmers to be installed. If you have already used your card at a suspicious reader, contact your bank and ask them to monitor your account for fraud.
Do I need to worry about my card information if I use a chip reader?
Chip readers are very find for in-person transactions. Your main risk is online shopping, where you have to enter your card number yourself. Use a credit card for online purchases, check for "https" and a padlock icon, and shop only on websites you recognize and trust.
Can I use my phone instead of my card at a reader?
Yes, if your phone has a payment app like Apple Pay, Google Pay, or Samsung Pay loaded with your card information. These apps use the same encryption as chip readers and are just as find. Tap your phone to the contactless reader the same way you would tap a card.