Tap to pay is a way of paying in person by holding a contactless card, phone or smartwatch near a terminal, which reads the credential over near field communication in well under a second. Technically it is an EMV contactless transaction: card and reader communicate at 13.56 MHz within about 4 cm, and the chip returns a unique cryptogram the issuer validates, so a copied tap cannot be replayed. Phones present a device-specific network token rather than the card number. Limits apply: £100 per tap in the UK since October 2021, and an EEA exemption up to €50 per tap before a PIN is requested. The term also covers SoftPOS, where a merchant's smartphone becomes the terminal.
What is tap to pay in card scheme terms
Technically it is an EMV contactless transaction. Visa, Mastercard, American Express and others publish contactless kernel specifications, and certified terminals accept any compliant card or wallet. What is contactless payment, then? The wider label for any card or device payment read over short-range radio instead of a chip insert or swipe, still authorized by the issuer through the network. Three form factors carry it: cards with an embedded antenna, phone wallets such as Apple Pay and Google Pay, and wearables.
How does tap to pay work
How do contactless payments work at the till? Card and reader talk over near field communication at 13.56 MHz under ISO/IEC 14443, with a practical range of about 4 cm. The terminal's field powers the chip, which has no battery. The terminal selects the payment application and sends the amount and a random number; the chip returns a cryptogram computed with a secret key, which the issuer validates during authorization. The exchange takes under half a second, and because each cryptogram is unique a copied tap cannot be replayed.
NFC contactless payment technology in phones
Phones never send the real card number. They present a device-specific network token, held in a secure element chip or generated through host card emulation with cloud-issued, limited-use keys. The short range of contactless payment technology limits covert reads; the residual threat is relay attacks, which terminal timing checks are built to catch.
Contactless limits and the PIN prompt
The UK single-tap limit has been £100 since October 2021. In the EEA, an SCA exemption covers card taps up to €50 until five consecutive taps or €150 in cumulative spend. Taps of €18, €42, €35 and €40 reach €135; a fifth tap of €20 would pass €150, so the terminal asks for a PIN. Phone and watch wallets verify the user by fingerprint, face or passcode, which counts as strong authentication, so a €300 tap can pass.
SoftPOS: tap to pay contactless payments on a phone
Apple launched Tap to Pay on iPhone in the US in 2022, and Android SoftPOS is certified under PCI MPoC. For a delivery driver, an app replaces a €50 to €300 card reader. A buyer of a SoftPOS acquirer compares active and onboarded merchants: 20,000 signed up but 6,000 tapping last month is a very different revenue base.
Proximity payment vs contactless payment
What is a proximity payment? Any payment where payer and payee are physically together, including QR codes scanned at the till and Bluetooth schemes. Contactless payment is the NFC subset used by card schemes.
How do proximity payments work under PSD2
A remote payment needs dynamic linking of amount and payee to the authentication; a proximity payment does not, which is why a till tap never asks for a basket-bound code. A certified terminal's capture counts as a card-present transaction, with lower interchange and fraud losses usually on the issuer when the cryptogram validates.