EMV & Magstripe

Also called chip card, EMV liability shift, magstripe, swipe, chip and PIN, EMVCo

EMV is the chip. Magstripe is the black stripe. Since the 2015 liability shift, taking a swipe when a chip was available makes fraud your problem.

What it is

EMV — named for Europay, Mastercard and Visa, and now governed by EMVCo — is the chip-card standard. When a chip is dipped or tapped, the card generates a unique cryptogram for that single transaction. Copying the data doesn't let anyone reproduce a valid transaction, which is why chip effectively killed counterfeit card fraud at the physical point of sale. Magstripe is the older technology: a static magnetic stripe carrying the same unchanging data on every read. Anyone who captures it can clone the card. That's why skimming was an industry-wide problem before EMV and why magstripe is now a fallback rather than a primary method. The commercial mechanism that drove US adoption was the liability shift, effective October 2015. Before it, the issuer generally absorbed counterfeit fraud losses. After it, whichever party has the less secure technology bears the loss — meaning a merchant who swipes a chip card, or whose terminal can't read chips, becomes liable for counterfeit fraud chargebacks that the issuer would previously have eaten. The chip didn't become mandatory. It became expensive not to have.

Why it matters to your business

If your staff swipes cards because it's faster, or because the chip reader is finicky, you are personally absorbing counterfeit fraud losses that would otherwise be the issuer's. That's not a theoretical rule — it's a chargeback you'll lose. And if you still have any terminal that can't read chips, replace it. A device that costs $200 to $300 is protecting you from chargebacks that can run into thousands, and every major platform publishes hardware in that range.

Where it gets contested

The US EMV rollout is a case study in how a security upgrade shifts costs rather than eliminating them. Counterfeit card-present fraud dropped sharply — the standard worked. But fraud didn't disappear; it migrated to card-not-present channels, where merchants were already liable. Online sellers absorbed the displaced fraud that in-store EMV pushed out, and nobody compensated them for it. The second complaint was practical and deeply felt at the time: chip transactions were slow, the rollout was chaotic, terminals shipped with chip slots that weren't enabled for months, and merchants were told they were liable for fraud on technology their processor hadn't turned on. Much of that has been resolved by contactless, which is fast. The remaining live issue is quieter: many small merchants still have magstripe fallback enabled and don't know it, or have terminals that fall back to swipe when a chip read fails. Every one of those swipes is a liability exposure the merchant is carrying without deciding to. The counterargument — that fallback prevents lost sales when a chip is damaged — is legitimate, but it should be a conscious choice with a known cost, not a default nobody examined.

How to check it yourself

Watch your staff take five payments during a rush. If anyone is swiping cards that have chips, retrain immediately — that's uncovered liability on every one. Then ask your processor whether magstripe fallback is enabled on your terminals and what percentage of last month's transactions were swiped.

Receipts

Claims above that are checkable, with where to check them. Published so you do not have to take anyone's word for it.

EMV is governed by EMVCo, the standards body formed by the major card networks
emvco.com ↗
Elavon's agent program markets EMV, NFC/contactless and mobile/tablet/web processing as standard acceptance capabilities
elavon.com ↗
Entry-level card-present hardware is published at $199–$399 across major platforms
squareup.com ↗