Card-present transaction is a card payment in which the physical card, or a phone or wearable carrying its credentials, interacts directly with the merchant's terminal, which reads data produced by the card itself. Chip insertion, contactless taps, stripe swipes and key entry with the card on the counter qualify, the last two being weaker. The chip generates a one-time cryptogram covering amount, currency, date and a terminal random number, so copied chip data does not make a working card. Under the EMV liability shift, a merchant swiping a counterfeit card on a non-chip terminal bears the loss. PIN devices need EMVCo and expiring PCI PTS approvals, a capex item for buyers.
What is a card present transaction
Four entry modes qualify: inserting an EMV chip, tapping a contactless card or device, swiping the magnetic stripe, and key-entering the number while the card is on the counter. The last two are weaker. Apple Pay or Google Pay at a till counts too, because the phone produces chip-style data.
How do card present payments work
The terminal reads the card and the chip generates a one-time cryptogram covering the amount, currency, date and a random number from the terminal. The cardholder is verified by PIN, the phone's biometric check, signature, or not at all for low-value taps. The authorization request travels through the acquirer and card network to the issuer, which validates the cryptogram and replies, usually within two seconds. At day end the batch goes to clearing.
Some low-value payments at transit gates, in flight or at car parks are approved by the chip itself through offline authorization, with the issuer seeing them only later.
What is an in store payment
An in-store payment is any payment made in person at a physical location, which makes it a wider category than card-present: cash and many QR payments never touch the card networks.
In store payment methods
- Chip and PIN: the default in Europe and much of Asia.
- Contactless card: capped per transaction in most countries; the UK limit has been £100 since October 2021.
- Mobile wallets: Apple Pay, Google Pay and Samsung Pay tap over NFC using a device token.
- QR code payments: dominant in China through Alipay and WeChat Pay, growing on instant payment rails elsewhere.
- Cash: no scheme fees, but handling and cash-in-transit costs.
How do in store payments work without a card
With a QR payment, the customer's app scans the merchant's code or shows its own, and money moves over a wallet ledger or instant payment rail with no card network involved.
Fraud, liability and pricing at the terminal
Because the cryptogram changes every time, copied chip data does not produce a working card. The remaining weak point is the stripe, which the EMV liability shift targets: if a counterfeit card is swiped at a terminal that cannot read chips, the merchant bears the loss. The US adopted this rule in October 2015, years after Europe.
Under the EU Interchange Fee Regulation, consumer debit interchange is capped at 0.2% and credit at 0.3%, so a €50 sale carries €0.10 or €0.15. Under PSD2, contactless payments up to €50 can skip strong customer authentication until five consecutive taps or €150 in cumulative spend, after which a PIN is required.
Terminal certification behind every tap
Every PIN-accepting device needs EMVCo Level 1 and Level 2 approvals and a PCI PTS certification, and PTS approvals expire. For a buyer of an acquirer or terminal business, the number of devices nearing PTS expiry translates directly into replacement capex.