Chip-and-PIN (EMV) Credit Card Liability Shift is Oct. 1: Are You Ready?
October 1 is right around the corner. Merchants, retailers, hotels and restaurants: are you ready for what’s in your customers’ wallets?
Starting next month, the payment card industry’s transition to chip-and-PIN (also known as EMV) payment cards will take effect. As part of this transition, merchants, retailers, and all other businesses that accept payment cards for in-store transactions are expected to be EMV-compliant – including replacing their old magnetic stripe-only point-of-sale (POS) devices with EMV-enabled terminals that are capable of authenticating the payment card with its integrated chip – by October 1. Businesses that are not certified as EMV-compliant by the October 1 deadline face a shift in liability and may be required to bear the costs for all card-present counterfeit fraud losses in their stores. In addition, some payment card issuers may shift liability to businesses on October 1 for purchases made with lost or stolen chip-and-PIN cards where the POS terminal does not support PIN verification.
Though the payment card industry has been preparing for the shift since 2011, two recent reports indicate a significant percentage of affected businesses may miss the October 1 deadline. If your business accepts payment cards, now is the time to confirm whether your payment system will be EMV-compliant by October 1.
As payment card transactions have supplanted cash and check-made purchases, POS devices have become a necessity for vendors in nearly every industry: from big-box retailers to hotels, from small cafés or trendy bistros. But according to a July report from Randstad Technologies, 42% of businesses surveyed had either not taken any measures to transition to EMV, or were unaware of any steps that they may have taken. Survey respondents indicated that a lack of time and technological expertise represented the greatest obstacles towards meeting the EMV transition deadline. Similarly, a March report from the Congressional Research Service that was updated in September listed the high cost of replacing old POS devices – between $100 to $600 per machine – was another significant factor hampering the transition.
Fortunately for businesses, the liability shift applies primarily to card-present counterfeit fraud and lost or stolen payment card fraud, and not to payments made online. Additionally, ATMs and automated fuel dispensers (i.e. pay-at-the-pump devices) are exempted from the current liability shift, as the major payment card providers have scheduled EMV liability shifts for those devices to take place over the next one-to-two years. Yet the October 1 liability shift represents a potentially significant financial burden for those businesses that depend on in-store payment transactions but who have not upgraded to EMV-compliant POS systems.
Businesses that are unsure whether they will meet the October 1 EMV transition deadline should talk with counsel knowledgeable in payment card industry compliance about how to comply with the new EMV standards and mitigate the potential liabilities associated with this shift.