Recent high-profile data breaches, such as those perpetrated against Target and Home Depot, have thrust smart chip credit cards and the term “EMV” into the public consciousness as the banking and retail industries ready themselves for the impending October 2015 liability shift. Visa and MasterCard set that as the deadline for when banks and merchants must have enabled chip-card payments or else incur significant added liability for fraudulent transactions.
But, as the consumer education process continues, the question still remains: How prepared are the country’s largest retailers and credit card issuers? How many cards and point of sale machines will be replaced? And are any banks or retailers opting for added liability rather than overhaul their hardware?
In search of answers, WalletHub contacted the 10 largest U.S. credit card issuers, the 50 largest retailers and five smaller retailers that were recently the victims of infamous data breaches.
Main Findings
- All 10 of the largest credit card issuers are in the process of issuing chip-based credit and debit cards and expect the majority of their portfolios to be updated by the end of 2015.
- All of the major retailers that responded to our survey are on track to meet the October 2015 EMV transition deadlines set by VISA and MasterCard.
- All of the major banks are issuing chip-and-signature cards, with 40% also supporting PIN capabilities. In addition to all major retailers accepting signature-based cards, 65% plan to accept chip-and-PIN cards as well.
- All chip-based cards issued by major banks will continue to have magnetic stripes – enhancing usability while also mitigating certain fraud protection benefits.
- Retailer transparency regarding EMV is surprisingly low given the level of consumer concern about data breaches and financial security. Only 17 of the 55 retailers we contacted provided information about their policies – including only 25% of those that have been victims of breaches.
- Contrary to retailers, credit card issuers displayed exceptional transparency, with all of them providing information about their EMV transition plans.
Detailed Findings
Banks
Issuer | What percentage of your credit cards will be chip-based by October 2015? | Will all customers or just new applicants get them? | Will you offer chip-and-signature or chip-and-pin cards? | Will your cards continue to have a magnetic stripe? | Do you plan to issue EMV debit cards as well? |
---|---|---|---|---|---|
Majority of cards | All customers | U.S. consumers: chip and signature International consumers: chip and PIN | Yes | N/A | |
Majority of cards | All customers | Chip and signature | Yes | Yes | |
65% | All customers | Both | Yes | N/A | |
Majority of cards | All customers | Chip-and-signature, but considering options to enable PINs in the future | Yes | Yes | |
Majority of cards | Existing cardmembers: can request one by phone New cardmembers: will be issued EMV cards | Chip and signature | Yes | Yes | |
Majority of cards | Existing cardmembers: can request one by phone New cardmembers: will be issued EMV cards | Chip and signature | Yes | Yes | |
Majority of cards | All customers | Initial implementation is for chip and signature | Yes | Yes | |
We started issuing EMV credit cards in fall 2014 | N/A | Chip-and-signature | Yes | Yes | |
Majority of cards | All customers | Both | Yes | Yes | |
Does not currently have a date by which all cards will have a chip | All customers | Both | Yes | Yes |
Retailers
Retailers not listed in this table have not provided information regarding their EMV migration plans, and public information regarding this process could not be found.
Retailer | Upcoming changes expected by October 2015 | Will store-branded credit cards feature the EMV technology? | Will all customers get the new EMV cards? | Will the new EMV cards be chip-and-signature or chip-and-PIN? | Will new EMV cards have a magnetic stripe? |
---|---|---|---|---|---|
100% upgrade | No. Internal system enhancements will be pursued | N/A | N/A | N/A | |
100% upgrade | N/A | N/A | N/A | N/A | |
100% upgrade | Yes | All customers | Chip and signature | Yes | |
100% upgrade | N/A | N/A | Chip-and-PIN | Yes | |
100% upgrade | N/A | N/A | N/A | N/A | |
100% upgrade by June | N/A | N/A | N/A | N/A | |
Systems compatible with EMV | N/A | N/A | Chip-and-PIN | N/A | |
Systems compatible with EMV | Yes | All customers | Both | Yes | |
100% upgrade | N/A | N/A | PIN capabilities | N/A | |
Upgraded terminals | N/A | N/A | N/A | N/A | |
100% upgrade | N/A | N/A | PIN capabilities | N/A | |
Customers can use the Softcard App (based on the global EMV standard) | N/A | N/A | N/A | N/A | |
100% upgrade | No Changes Currently Planned | N/A | PIN capabilities | N/A | |
100% upgrade | Yes | All Visa cards | Chip and signature | Yes | |
In process of updating its terminals | N/A | N/A | PIN capabilities | N/A | |
EMV‐ready equipment for domestic and international transaction processing | N/A | N/A | N/A | N/A | |
Adopted Softcard App (which uses the EMV global standard) | N/A | N/A | N/A | N/A | |
100% upgrade | N/A | N/A | PIN capabilities | N/A | |
Launched a mobile ordering and payment app | N/A | N/A | N/A | N/A | |
Chip card readers were installed in September 2014 | Credit and debit cards will be reissued as EMV cards in 2015 | All customers | Chip-and-PIN | Store cards will not have a magnetic stripe, but the MasterCard REDcard will | |
100% upgrade | N/A | N/A | PIN capabilities | N/A | |
All stores accept chip-and-pin cards | N/A | N/A | N/A | N/A | |
100% upgrade in Nov. 2014 | Cards already have EMV chips | EMV chip technology was adopted 8 years ago | Both | Yes |
Ask The Experts
- What are your thoughts on the findings of WalletHub’s report?
- What are the biggest investment opportunities you see as a result of the U.S. migration to the EMV standard?
- What impact do you think EMV technology, especially the brand implemented in the U.S., will have on fraud rates?
Ask the Experts
Director of the EMV Migration Forum, and Executive Director of the Smart Card Alliance
Read More
Director of the EMV Migration Forum, and Executive Director of the Smart Card Alliance
Read More
Senior Director and Fraud Executive Advisor at NICE Actimize
Read More
Managing Director & CTO at SCIL-EMV Academy
Read More
President & CEO of International Smart Card Associations Network
Read More
Director of Marketing for Secure Transactions at Gemalto
Read More
Methodology
In compiling this report, we reached out to the 10 largest U.S. credit card issuers, the 50 largest retailers and five smaller retailers that have been the subject of data breaches in order to better understand and relay information regarding the U.S. transition to the EMV standard. The list of retailers is based on National Retail Federation statistics regarding annual revenue, and it includes both traditional retailers and fast-food chains.
All 10 issuers were readily transparent about their policies, while retailer collaboration was scarce. Only 17 of the 55 retail organizations participated, while the rest either declined or did not answer at all – displaying a worrisome lack of transparency given the retail security climate.
Questions Asked of Credit Card Issuers:
- What percentage of credit cards will be chip-based by October 2015?
-
a. Will all customers or just new applicants get them?
b. Will they offer chip-and-signature or chip-and-pin cards?
c. Will their cards continue to have a magnetic stripe? - Do you plan to issue EMV debit cards as well?
- What is your take on the security tradeoff between chip-and-signature and chip-and-pin technology?
Questions Asked of Retailers:
- What percentage of payment terminals will be equipped to accept chip-based credit and debit cards by October 2015?
- What type of payment terminal upgrades do you expect to make?
- Will a customer with a chip-and-pin credit card be able to enter in his or her PIN in order to complete a transaction?
- Do you plan to reissue store-branded credit cards with EMV computer chips? If yes:
-
a. Will all customers or just new applicants get them?
b. Will they be chip-and-signature or chip-and-PIN?
c. Will they continue to have a magnetic stripe?