EMV Frequently Asked Questions
EMV Frequently Asked Questions
What is EMV?
EMV is an abbreviation for Europay, Mastercard and Visa, the three organizations that developed the initial open-
standard set of specifications for smart card payments and acceptance devices. The EMV specifications were
developed to define a set of requirements to ensure interoperability between chip-based payment cards and
terminals. EMV chip cards contain embedded microprocessors that provide strong transaction security features and
other application capabilities not possible with traditional magnetic stripe cards. Today, EMVCo manages, maintains
and enhances the specifications. EMVCo is owned by American Express, Discover, JCB, MasterCard, UnionPay, and
Visa, and includes other organizations from the payments industry participating as technical and business
associates.
EMV cards store payment information in a secure chip rather than on a magnetic stripe and the personalization of
EMV cards is done using issuer-specific keys. Unlike a magnetic stripe card, it is virtually impossible to create a
counterfeit EMV card that can be used to conduct an EMV payment transaction successfully.
Will the EMV chip replace the magnetic stripe on the card?
Probably, but for the foreseeable future the magnetic stripe format will be a component of both contact-only and
dual-interface cards.
EMV should be deployed as an integral component of a multilayered risk management program that includes a
progressive real-time, proactive and scalable fraud detection and prevention solution. Magnetic stripe transactions
will continue for years and the ability to monitor, score, alert and block both existing and an emerging new threats
to cardholder data and transactional security remains imperative.
Online or offline?
What are the Minimum Chip Requirements Needed For our EMV rollout?
There are many functionalities and features available for smart card processing consideration, and you as the issuer,
are in the best position to answer this question.
All issuers planning to deploy an EMV solution should consult with their terminal vendors, payment networks and
processing partners to determine the best available and EMVCO approved chip configurations meeting their unique
business needs. The evaluation of individual business requirements and desired chip functionality against the
availability, cost and complexity of deployment are key considerations.
Fallback is a high risk transaction often resulting in a decline by the issuer. To proactively address fallback risk
exposure, issuers should implement clear fallback authorization guidelines. Since the payment networks’ U.S.
liability shifts in October 2016, issuers will bear responsibility for any resulting fallback fraud if the merchant had a
working EMV terminal.
As defined by EMVCo and the payment networks, legitimate fallback should only occur when the terminal cannot
read the card’s chip due to technical issues with the chip. Because the issuer holds liability on fallback transactions,
the authorization of fallback transactions, particularly manual keyed entry fallback, is deemed risky by the payments
industry.
Given the extremely low probability that both the chip and the magnetic stripe are faulty at the same time, manual
key entry transactions are especially suspect. EMV hierarchies of risk management should be followed, with the
transaction attempting the next lowest risk transaction. When a chip read fails, the next lowest risk transaction
would be a transaction using a magnetic stripe swipe. Fallback to magnetic stripe is more secure than manual key
entry and provides more information to the issuer to evaluate the transaction for authorization.
Copyright © 2017 CSF International, Inc. All Rights Reserved.