Contactless payment card

Contactless payment card
Name	Contactless payment card
Type	Payment card
Introduced	1990s
Technology	RFID, NFC, EMV
Used for	Retail payments, transit, access control

Contents

Contactless payment card

Introduction

Contactless payment cards are bank, debit, credit, or prepaid cards that use short-range wireless technologies to transmit payment credentials without physical contact. Widely adopted by financial institutions such as Visa Inc., Mastercard, American Express, and Discover Financial Services, these cards accelerated retail innovation in markets like United Kingdom, Japan, Australia, and Canada. Major merchants including Walmart, Tesco, Starbucks, and McDonald's integrated contactless terminals alongside networks operated by EMVCo, Europay, and national schemes like FeliCa and Oyster card systems.

Contactless cards implement radio technologies such as Radio-frequency identification, Near Field Communication, and ISO/IEC 14443 protocols together with cryptographic frameworks defined by EMVCo and specifications from organizations like NFC Forum and International Organization for Standardization. Card chips are produced by semiconductor firms including NXP Semiconductors, Infineon Technologies, and Samsung Electronics and often embed secure elements certified by labs accredited through Common Criteria and standards from Payment Card Industry Security Standards Council. Terminals from vendors such as Ingenico Group, Verifone, and PAX Technology communicate via point-of-sale networks operated by VisaNet, Mastercard Network, and regional systems like EFTPOS and Interac.

Security relies on tokenization schemes promoted by Apple Inc.'s Apple Pay, Google LLC's Google Pay, and issuer token services created by card networks, combined with EMV cryptograms and dynamic authentication derived from protocols described by RSA Security and cryptographers influenced by Whitfield Diffie and Martin Hellman. Privacy debates involve regulators such as European Commission, Federal Trade Commission, and national data authorities in Germany and United Kingdom with concerns highlighted by incidents involving vendors like Target Corporation and breaches analyzed in reports influenced by Brian Krebs and firms like Kroll. Contactless limits (floor limits) and fraud prevention measures are enforced by banks including JPMorgan Chase, HSBC Holdings, and Barclays.

Adoption accelerated after large-scale deployments by transport authorities such as Transport for London, transit cards like Octopus card in Hong Kong, and retail rollouts by Costco Wholesale Corporation and Carrefour. Governments and central banks—for example Bank of England, Bank of Japan, and Reserve Bank of Australia—monitored uptake alongside payment associations like European Payments Council and industry consortia such as Worldpay. Consumer behavior studies by institutions like Nielsen Holdings and McKinsey & Company documented shifts from cash towards contactless in events including the COVID-19 pandemic and retail disruptions involving Amazon.com and Alibaba Group.

Limitations include transaction caps enforced by networks like Visa Inc. and Mastercard and interoperability hurdles across schemes such as FeliCa versus MIFARE, while risks involve card skimming, relay attacks studied by researchers from MIT, University of Cambridge, and University of Oxford, and supply-chain vulnerabilities tied to manufacturers like Gemalto and Giesecke+Devrient. Legal and reputational consequences have involved courts such as European Court of Justice and regulators like Financial Conduct Authority and Office of the Privacy Commissioner of Canada in disputes over liability and consumer protection.

Variants include wearable payment devices promoted by Apple Inc. and Samsung Electronics, virtual cards used by fintechs like Revolut and Square, Inc., closed-loop cards for retailers such as IKEA and Nike, Inc., and transit-focused smartcards like Navigo and OPUS card. Related technologies encompass mobile wallets from PayPal Holdings, Inc., contactless-enabled smartphones from Google LLC and Huawei Technologies, card emulation modes standardized by NFC Forum, and IoT payment integrations showcased by vendors like Cisco Systems and Siemens.

Regulatory frameworks involve bodies including European Central Bank, Bank for International Settlements, Financial Stability Board, and national regulators such as Office of the Comptroller of the Currency and Australian Prudential Regulation Authority, which address standards interoperability, anti-money laundering rules tied to Financial Action Task Force, and consumer rights codified in directives like the Payment Services Directive and laws enforced by the U.S. Securities and Exchange Commission in related fintech contexts. Interoperability projects engage organizations such as EMVCo, ISO, NFC Forum, and industry groups like PCI SSC to harmonize specifications across issuers, networks, and terminal providers.

Category:Payment cards