Card-Present Transaction
A card-present transaction is a card payment in which the card — or the phone standing in for it — is physically read by a terminal: inserted for a chip transaction, tapped for contactless, or swiped on a stripe where that still exists. The chip's cryptogram and the PIN or biometric prove the card and the cardholder, so fraud is rare, interchange lower, and the issuer bears the fraud loss if it approves.
- Also known as
- CP transaction, In-person card payment, Face-to-face transaction
- Used at
- shops, restaurants, transport, vending, hotels, fuel, any face-to-face sale; about two-thirds of card volume in developed markets
- Binding
- the schemes' rules on card-present qualification (the card must be read by a certified terminal with the right data captured — chip data, or track data for stripe), on liability (the issuer bears counterfeit fraud on chip transactions; the merchant bears it if it fell back to stripe on a chip card), and on interchange categories for card-present
- Typical costs
- interchange below CNP in the US (by 0.3–0.6 points on credit) and equal to it under the EU's caps, with lower scheme fees and near-zero fraud; chargeback rates a fraction of online's
- Typical controls
- EMV chip and PIN or contactless with cumulative limits, terminal certification, PCI P2PE for the POS environment; fraud controls are the terminal's and the issuer's, not the merchant's
- Parties
- the merchant and its terminal, the acquirer, the network, the issuer, and the cardholder standing at the counter
How a card-present transaction works in practice
A customer taps a card at a shop. The terminal and the chip exchange EMV data, the chip signs a cryptogram, the terminal sends an authorisation with the chip data marked as card-present, and the issuer verifies the cryptogram and approves. The merchant bears no fraud risk: the issuer approved a chip transaction, and if the card was stolen the issuer pays, or the cardholder does if the PIN was compromised. The interchange category is card-present, the cheapest. The whole exchange took a second and the customer left. Compare the same purchase online, where the merchant is trusting digits and bears the loss if they were stolen.
The edge cases are where the money is. A chip card read by a terminal that falls back to the magnetic stripe becomes the merchant's liability under the liability shift; a "card-present" transaction keyed into the terminal by hand is card-not-present in the scheme's eyes and priced and treated as such; a phone tap is card-present with the wallet's biometric as the cardholder verification; a tap on a phone-as-terminal is card-present if the software is certified. Unattended terminals (vending, fuel, parking) are card-present with their own rules on limits and PIN.
For a merchant the channel mix drives the cost base; for a buyer of a merchant business, a "card-present" share that is really keyed transactions is a repricing and a fraud liability waiting in the statement.
Example
A restaurant chain's payments statement shows 92% card-present volume at low interchange and low fraud, and 8% "card-present keyed" — servers typing numbers from cards left at the table, or from phone orders — at CNP rates and with 0.6% fraud. The chain's acquirer flags the keyed share as three times the category norm. The chain introduces pay-at-table terminals and an online ordering checkout with 3-D Secure: keyed transactions fall to 1%; the 7% of volume that moves to true card-present saves 0.4 points of interchange (€60,000 a year on €15m) and eliminates the keyed-transaction fraud; the online orders move to an authenticated CNP flow where they belong. The chain's chargeback ratio, which had been near the scheme's threshold on the keyed volume alone, halves.
Common mistakes
- Keying card numbers into a terminal and calling it card-present; the scheme does not. - Terminals that fall back to stripe on chip cards, which moves fraud liability to the merchant. - Assuming card-present means no PCI obligations; the POS environment is in scope unless P2PE takes it out. - Reading a merchant's blended rate without the CP/CNP split that explains it. - Treating phone-as-terminal taps as second-class; certified, they are card-present.