PayWavez PayWavez
Apply Now

Fraud & Risk

The EMV Chip Liability Shift, Explained for Small Business Owners

If a fraudulent transaction happens on a card that has a chip, and your business only swiped the magnetic stripe instead of reading the chip, your business -- not the card issuer -- can end up eating the loss. That's the liability shift, and it's a bigger deal than most merchants realize.

The EMV Chip Liability Shift, Explained for Small Business Owners
Payment terminal reading an EMV chip card

What the liability shift actually changed

Before the EMV liability shift, card issuers generally absorbed the cost of most in-person fraud. The shift moved that liability to whichever party -- the merchant or the issuer -- used the less secure technology in a given transaction. If a card has a chip and the merchant's terminal only swiped the stripe, the merchant can be liable for a resulting fraud loss that would otherwise have been the issuer's.

Chip vs. stripe
Liability generally falls on whichever party used the less secure method
Contactless/tap
Also covered under EMV chip protections when supported by the terminal
Modern terminals
Most current smart terminals support chip and contactless by default

Why this matters day to day

Most small businesses never think about liability shift until a chargeback happens and they discover their terminal setup put them on the losing side of it. A few practical points:

  • Always insert or tap a chip-enabled card rather than swiping, even if swiping still technically works on your terminal
  • Confirm your terminal software is current -- older configurations sometimes default to swipe prompts unnecessarily
  • Contactless (tap) payments carry the same chip-level protection as inserting the card, so tap is not a lesser option
  • Train staff to never manually key in a card number when a chip or contactless option is available, since keyed transactions carry the highest liability exposure
Customer tapping a contactless card on a handheld terminal
Tap and chip both carry the same liability protection -- swiping and keying do not.
"The safest transaction for a merchant is the one where the customer taps or inserts -- not the one where a card gets swiped or keyed in because it was faster."EMV liability best practice

What to check on your own setup

If your terminal is more than a few years old, or if staff commonly swipe out of habit even when a chip is present, it's worth confirming your hardware and settings are actually using chip-read as the default rather than falling back to swipe. A modern smart terminal removes most of this risk automatically.

Wondering if your terminal is protecting you?

See what a modern, fully EMV-compliant terminal setup looks like.

Apply Now

Make sure your setup protects you

See what a fully EMV-compliant terminal setup looks like for your business.

Apply Now Apply Now
What is the EMV chip liability shift?
It's the shift in who absorbs fraud losses on in-person card transactions -- generally, whichever party (merchant or card issuer) used the less secure transaction method becomes liable.
Does tapping a contactless card carry the same protection as inserting a chip?
Yes, contactless/tap transactions carry the same EMV chip-level liability protection as inserting the card, since both read the chip rather than the magnetic stripe.
Is swiping a card ever still necessary?
Only as a fallback when a chip is damaged or unreadable -- otherwise inserting or tapping should always be used, since swiping when a chip is present shifts fraud liability toward the merchant.