View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Software
May 26, 2014

Card companies push for faster US adoption of chip technology

Visa, MasterCard rally support as data breaches increase.

By Vinod

Visa and MasterCard are urging speedier adoption of microchip technology into credit and debit cards in the US on lines of Europe, in the wake of recent high-profile data breaches.

Canada, Mexico and most of Western Europe is already using the microchip technology, which is said to be somewhat safer than the current black magnetic strip technology on the backs of credit cards.

Card processing companies claim that the chip technology, though not foolproof, will eliminate most of the credit card fraud in the US as it has an additional barrier, as compared to magnetic strips that are prone to easy replication by hackers.

Proponents of chip card technology vouch for its safety as unlike magnetic strip cards that transfer a credit card number when they are swiped at a point-of-sale terminal, chip cards use a one-time code that moves between the chip and the retailer’s register. This code, they say, is useless to anyone even if hacked.

The chip technology has not been adopted in the US on a large scale due to cost factors and disputes over network ownership.

Retailers are not willing to invest in new cash registers and back office systems to handle the new cards, and are also in frequent dispute with card issuers over access rights and choice between a signature-based system or personal identification number system.

But a string of high-profile data breaches in the past, including Target and Neiman Marcus last year, has led to a change in stance for retailers. Recently, there were reports of hackers stealing consumer data from eBay’s computer systems.

Content from our partners
Scan and deliver
GenAI cybersecurity: "A super-human analyst, with a brain the size of a planet."
Cloud, AI, and cyber security – highlights from DTX Manchester

Target is accelerating its $100m plan to roll out chip-based credit card technology in its nearly 1,800 stores, and announced partnership with MasterCard to issue branded Target payment cards equipped with chip technology early in 2015.

Though the jury is still out on the ‘supposedly’ better protection offered by chip technology, its opponents argue that chips don’t prevent fraud in online transactions, where consumers often enter credit card numbers into online forms. Other technologies, such as point-to-point encryption, have been suggested as better long-term solutions.

Ken Stasiak, founder and CEO of SecureState, a Cleveland-based information security firm that investigates data breaches, said, "Chip and pin is just another security component. What matters is how companies like Target use consumer information, how they protect it."

But the credit card companies like Visa and MasterCard also have a stake in the whole process as if data breaches continue to occur with increasing frequency, it will drive away consumers who will look for safer options to make payments.

As per a new liability shift set to occur in October 2015, the costs resulting from the theft of debit and credit card numbers will largely fall to the party involved with the least advanced and most vulnerable technology.

So in case, if a card issuer or bank has upgraded to chip technology, but the retailer involved hasn’t, the retailer will be liable for the costs.

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.