The EMV liability shift assigns card-present counterfeit fraud to whichever party prevented a chip transaction: the issuer if the card has no chip, or the acquirer (and, typically, you) if a chip card is presented and the terminal does not complete a chip read. Visa states that rule in those terms (Visa, 27 Jul 2018). For U.S. indoor point of sale it has been in force since 1 October 2015. It is a network rule, not a federal mandate (House Small Business Committee, 7 Oct 2015). Swiping a chip card is the failure mode the rule was written for. Tapping is a chip read. Keying the number is a different risk.
What the chip actually does
EMV is a chip specification. The Federal Reserve describes the point: a microchip generates dynamic authentication data so a cloned magnetic stripe is a poor substitute for the plastic in the customer's hand (Federal Reserve Payments Study 2016, last update 16 Feb 2017). Visa's public description is the same mechanic: every in-store chip sale at a chip-activated terminal generates a unique one-time code used to approve that sale (Visa Chip technology).
Most U.S. chip cards still carry a magnetic stripe. The Fed noted that in 2015, and it is still how fallback and "just swipe it" habits work. The stripe is static. The chip is not. If the sale runs on the stripe, the cryptogram never happens, and the liability rule looks at who stopped the chip from running.
A chip terminal that is not enabled, not certified, or trained to swipe first is, for this rule, a path that prevented the chip sale.
The rule, not the slogan
Visa's 27 July 2018 fuel-dispenser notice restates the POS rule without marketing language:
- Issuers assume counterfeit fraud-related liability if a non-chip card is presented at a chip-capable terminal.
- Acquirers assume counterfeit fraud-related liability if a counterfeit chip card is presented at a non-chip-capable terminal.
The party that caused the chip sale not to occur pays the counterfeit loss. When both sides are chip-capable, or neither is, the pre-shift default remains: the issuer typically holds the counterfeit loss. Paul Weston, testifying for community banks on 7 October 2015, described that both-or-neither case to the House Small Business Committee.
Two limits sit on top of that sentence.
Counterfeit, not every fraud. Visa's vice president of risk products told the same hearing that the shift is in-store counterfeit. Lost-or-stolen is a different type. Chip makes a fake card hard. It does not prove the person holding a genuine card is the accountholder.
Acquirer, then you. Networks assign the merchant-side loss to the acquirer. Your merchant agreement is how that loss, plus a processor chargeback fee, lands on the statement. Winning or losing the sale amount is not the same as the fee line.
- Terminal completes a contact insert or contactless tap
- One-time cryptogram rides with the authorization
- If the card and the terminal are both chip-capable, counterfeit liability typically stays with the issuer
- Does not cover keyed, e-commerce, or consumer-reason disputes
- A chip transaction did not occur
- Visa: acquirer can take counterfeit liability when a counterfeit chip card is used without a chip-capable path (27 Jul 2018)
- You can lose the sale, the goods, and the processor chargeback fee
- A swipe-first habit on a chip terminal is the 2015 failure mode, still
Illustrative: a $200 in-store sale on a counterfeit chip card. Dip or tap, and that counterfeit file is usually the issuer's. Swipe, and the $200 reversal can sit with you, plus an illustrative $25 processor chargeback fee, plus the inventory. That is $225 and the goods, on one ticket. Confirm the fee in your agreement. It is markup, not interchange.
Contactless is the same family
Tap is chip, not a loophole. Visa's contactless page says each contactless card carries the same trusted security as a Visa contact chip card, and that the one-time code on a tap is extremely effective in reducing counterfeit fraud (Visa, contactless payments). A payment-enabled phone or wearable at the terminal is the same family: short-range contactless, one-time code, card-present.
If the card or wallet can tap and the terminal can take a tap, a swipe is you choosing the weaker path. How the card is captured still changes interchange and fraud risk. Liability follows the capture, not the sticker on the device.
Keyed is its own risk
The EMV shift does not follow the account number into a virtual terminal, a phone order, or a website. Those sales never read the chip. They are card-not-present. The Fed's 2018 fraud report is the post-shift picture: in-person card fraud fell from $3.68 billion in 2015 to $2.91 billion in 2016, while remote card fraud rose from $3.40 billion to $4.57 billion (Federal Reserve, 18 Oct 2018). Chip-authenticated in-person volume jumped from 3.2 percent of in-person card value in 2015 to 26.4 percent in 2016. Counterfeit got harder in the store. Fraud moved.
That is why 3-D Secure 2 exists as a separate liability tool. It authenticates the cardholder on a remote sale. It does not fix a swipe at the register, and a chip dip does not fix a keyed invoice.
Typing the PAN while the customer stands at the counter is not a chip read. The liability shift does not reclassify it as chip.
Fuel pumps had a later clock
Indoor POS is not every acceptance device. Visa delayed the U.S. domestic automated fuel dispenser (AFD) EMV liability shift to 1 October 2020 because AFD chip solutions were not ready (Visa, 27 Jul 2018). The same notice restates the core rule: the party that caused a chip transaction not to occur is financially responsible for resulting card-present counterfeit losses. If you run pumps, ask the acquirer which date and MCC 5542 treatment actually apply to those MIDs. Do not assume the 2015 indoor date covers the island.
Unattended kiosks and ATMs are their own certifications. If you did not read a current brand bulletin for that device type, do not guess a date.
Why this is still the register problem
The 2015 date is old. The failure mode is not. Chip slots sit on counters that still accept a swipe "to save time." Staff swipe because the magstripe is faster than a dip that waits on a prompt. That habit is exactly the lesser-technology path.
It also did not retire card-present fraud. The Federal Reserve Bank of Kansas City (25 Feb 2026), using the Board's 2023 debit-card report, puts the card-present fraud rate on dual-message non-prepaid debit at 14.2 basis points in 2023, with counterfeit still 8.0 basis points on that rail versus 2.2 basis points on single-message. Card-not-present rates kept climbing. On single-message networks, the merchant's card-not-present fraud loss rate more than doubled, from 5.4 basis points in 2021 to 12.8 basis points in 2023.
Chip at the door is table stakes. It is not a fraud strategy. Signature is not the strategy either. From 14 April 2018, Visa made signature optional for EMV-enabled merchants in the U.S. and Canada (Visa, 14 Apr 2018). Chip is the cryptogram. Signature is a cardholder-verification choice, not the shift.
What to demand of the terminal
Ask the processor, in writing, four things, then watch a live sale.
- The device is enabled for contact chip and contactless, not merely sold with a slot. A dark contactless antenna is a swipe machine with extra plastic.
- Chip-capable cards are not swiped as a default. If the firmware allows a swipe-first flow on a chip card, turn that off.
- Fallback is logged. When a chip cannot be read, you should see why. A silent magstripe is how counterfeit walks in.
- Remote volume has its own control. Keyed and e-commerce need AVS, CVV, and, where the mix warrants it, 3DS. The chip rule will not follow those tickets.
Train the floor once: dip or tap, never swipe a chip card "because the line is long." Then sample a week's batch for POS entry mode. If chip cards are landing as swipe, the 2015 rule still has your name on it.
If the statement does not show how those sales were captured, run it through the analyzer and take the as-billed sheet into the equipment conversation. The shift is still the cheapest control you already paid for, if you use it.
FAQ
What is the EMV liability shift for merchants? It is a card-network rule, in force for U.S. point of sale since 1 October 2015, that assigns card-present counterfeit fraud to the party that prevented a chip transaction. If a chip card is presented and your terminal does not complete a chip read, that party is often you, through your acquirer.
If I swipe a chip card, am I liable for fraud? You can be, for counterfeit fraud on that sale. Visa's rule is that the acquirer assumes counterfeit liability when a counterfeit chip card is used at a non-chip-capable terminal. A swipe of a chip card at a chip-capable device is the same failure: the chip transaction did not occur.
Does tap to pay count as a chip transaction? Yes. Visa treats contactless as the same security family as a contact chip insert: each tap generates a one-time code. A phone or wearable tap at a terminal is card-present chip. Swiping that same card is not.
Does the EMV liability shift cover online or keyed sales? No. Chip and tap authenticate plastic in person. Keyed, mail-order, phone, and e-commerce sales never read the chip. Those stay in the card-not-present family, where 3-D Secure is the separate liability tool.
Does a chip terminal stop all chargebacks? No. The shift is about card-present counterfeit. Goods not received, not as described, cancelled recurring, and credit not processed still sit with you. Lost-or-stolen is a different fraud type and was not the U.S. POS shift.
Was October 1, 2015 a government deadline? No. Visa announced the U.S. POS date in August 2011. Mastercard used the same date. Congress's Small Business Committee treated it as a market rule, not a statute. Fuel dispensers had a later Visa date.
Sources
- Federal Reserve, The Federal Reserve Payments Study 2016, Card Payments (last update 16 Feb 2017)
- Federal Reserve, Changes in U.S. Payments Fraud from 2012 to 2016 (18 Oct 2018)
- U.S. House Committee on Small Business, The EMV Deadline and What It Means for Small Businesses (7 Oct 2015)
- Visa, U.S. Automated Fuel Dispenser EMV Liability Shift Delayed (27 Jul 2018)
- Visa, Chip technology overview
- Visa, Tap to Pay / contactless payments
- Visa, Signature Requirement Will Become Optional For EMV-Enabled Merchants in U.S. and Canada (14 Apr 2018)
- Fumiko Hayashi, Federal Reserve Bank of Kansas City, New Data on Card-Present and Card-Not-Present Fraud Rates in the United States (25 Feb 2026)
Questions about how this applies to your business?
Talk it through