Jan 16, 2017, 6:55 am
Last edit by: storewanderer
Older (archived) threads: 2014-16
- - - - - -
- What is EMV contactless?
EMV contactless is a form of contactless/NFC that uses the same security and encryption that is used when inserting a chip card into an EMV-enabled terminal. Other than not having to sign/enter a PIN for smaller transactions, the security is effectively the same as chip and PIN/chip and signature.
In contrast, MSD contactless is an older version that is designed just and only for the United States. This effectively uses much the same flow as a swiped card transaction with the same rules.
- What is CDCVM?
CDCVM stands for Consumer Device Cardholder Verification Method. It's a method of telling the terminal that the customer verified their identity using their mobile device. Terminals that support it will waive the signature/PIN requirement typically in place for larger transactions, potentially saving time at checkout.
More info: https://support.apple.com/en-us/HT202527
- Does EMV contactless need to be supported to support CDCVM?
Typically, yes. (However, there are some exceptions below.)
- Why can't I tap my foreign-issued contactless card at most places in the US?
This is likely because the store does not support EMV contactless. Foreign issued contactless cards typically do not support MSD contactless since other markets have had EMV for quite some time. In contrast, most stores in the US have yet to get the necessary certifications/software for EMV contactless so they are typically MSD-only--if contactless is enabled at all. (See below for a list of stores where your card will likely work.)
- I paid for a purchase with Apple/Android/Samsung Pay and still had to sign for it.
Most likely, the store in question does not have EMV contactless enabled (see above question). However, there are instances where CDCVM does not work even with EMV contactless enabled. Restaurants that allow tip adjust, for example--where the tip amount is written on a paper receipt and entered by the staff later--cannot support CDCVM. It may simply be a matter of the merchant's processor or the POS software in use not supporting it too.
Another common reason is if you used a US-issued AmEx card with a mobile wallet. AmEx currently does not allow EMV contactless support in mobile wallets for these cards, so they always run as MSD contactless. Because of this, CDCVM is not supported (with very few exceptions, as noted below).
Note: if you used Samsung Pay, you may have paid with MST instead of NFC. Since MST emulates the magnetic pulses that the terminal receives when swiping a regular card, the normal magstripe rules apply.
- How can I tell whether EMV contactless was used?
An easy way to tell if you have Apple Pay is to pay with a Visa or MC while in airplane mode. Wallet will then show a transaction amount next to "Payment" for the card that was used. Alternatively, EMV-related information will typically print on the receipt (AID, etc.) if EMV contactless was used.
(Non-exhaustive) list of EMV contactless supporting merchants in the US:
- 7-Eleven
- 99 Ranch
- Albertsons (Safeway, Vons, Pak N Save, Jewel, Acme, Shaws, Star, Carrs, Randalls, Tom Thumb, Haggen, Eagle, Lucky UT/SoCal)
- Apple Store*†
- Athleta
- Auntie Anne’s Pretzels
- Banana Republic
- Costco Wholesale
- CVS
- DuaneReade*
- El Pollo Loco
- EG Group US (Quik Stop, Kwik Shop, Tom Thumb, Turkey Hill) Note: cashier must press "Electronic Payment" to activate NFC
- Five Below*
- Five Guys
- GAP
- Grocery Outlet*
- Harmon's Grocery
- H&M*
- Jolibee
- Kohl's*
- Lush Cosmetics*
- Maverik
- McDonald's*
- Meijer
- Old Navy
- Panera Bread
- PetSmart
- Ray's Food Place
- Round Table Pizza
- Royal Farms
- Red Ribbon Bakeshop
- Sheetz
- Sherm's Thunderbird Discount Markets Inc.*
- Sprouts
- Staples*
- Starbucks*
- Subway
- Walgreens*
- Weis Markets
- All businesses that use Square and support contactless*
- All businesses that use Clover and support EMV†**
- All businesses that use First Data standalone terminals (e.g. FD100+FD35, FD130) with EMV enabled**
* CDCVM support confirmed
** CDCVM support depends on store/restaurant
† CDCVM supported in MSD mode
USA contactless credit/debit/transit (2017 - 2021)
Oct 9, 2017, 6:15 pm
#2206
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,508
I briefly looked and I couldn't find an existing thread but there very well could already be one. Then again, maybe it's too early since it's mainly rumors right now.
Oct 9, 2017, 11:27 pm
#2209
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,508
You can even mark them as confirmed. https://twitter.com/safeway/status/916741642392018944
Oct 10, 2017, 12:42 am
#2210
Join Date: Oct 2014
Programs: Skymiles
Posts: 3,251
Erin was ecstatic!! We always do our chip card walks. Hopefully they’ll fix the UI soon, and show the international contactless symbol, or at the very least, the word tap. The Albertsons and other brands updated too which is awesome- though I mentioned that already. Now if they can speed up EMV, that’d be great as well.
Oct 10, 2017, 8:59 am
#2212
FlyerTalk Evangelist
Join Date: Aug 2001
Location: RSW
Programs: Delta - Silver; UA - Silver; HHonors - Diamond; IHG - Spire Ambassador; Marriott Bonvoy - Titanium
Posts: 14,185
I don't give Safeway to much props for this, as entering their loyalty information is still like watching paint dry for it to register.
Oct 10, 2017, 9:13 am
#2213
Join Date: Sep 2008
Location: Long Island, NY
Programs: Marriott Titanium Elite/Lifetime Titanium, Delta Platinum Medallion, Hertz #1 Gold
Posts: 722
Big news!
I was doing some testing in Cardpeek the other day the other day and it now seems that US Visa cards in Apple Pay are now starting to be enabled for fDDA (Offline Data Authentication) across the board. (To replicate this, You need to set Byte 1, Bit 1 of the TTQ to 1 - ODA for Online Authorisations. This will cause the card to respond with an AIP of 2040 and issuer and card certificates. Previously, US cards would still respond with an AIP of 0040 in this scenario. If this bit is set to 0, the card will continue to respond with AIP 0040. This behaviour is different from Canadian cards which always respond with AIP 2040).
I am in London right now and just used the Tube successfully with a Chase Sapphire Reserve. Did not work 5 months ago.
If you are travelling to London soon, I would recommend making sure your device is on the latest iOS and deleting and re-provisioning your card to ensure it has the latest profile. Also, not sure if this is issuer dependant or not.
I was doing some testing in Cardpeek the other day the other day and it now seems that US Visa cards in Apple Pay are now starting to be enabled for fDDA (Offline Data Authentication) across the board. (To replicate this, You need to set Byte 1, Bit 1 of the TTQ to 1 - ODA for Online Authorisations. This will cause the card to respond with an AIP of 2040 and issuer and card certificates. Previously, US cards would still respond with an AIP of 0040 in this scenario. If this bit is set to 0, the card will continue to respond with AIP 0040. This behaviour is different from Canadian cards which always respond with AIP 2040).
I am in London right now and just used the Tube successfully with a Chase Sapphire Reserve. Did not work 5 months ago.
If you are travelling to London soon, I would recommend making sure your device is on the latest iOS and deleting and re-provisioning your card to ensure it has the latest profile. Also, not sure if this is issuer dependant or not.
Oct 10, 2017, 10:03 am
#2214
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,508
Oct 10, 2017, 10:57 am
#2216
FlyerTalk Evangelist
Join Date: Aug 2001
Location: RSW
Programs: Delta - Silver; UA - Silver; HHonors - Diamond; IHG - Spire Ambassador; Marriott Bonvoy - Titanium
Posts: 14,185
I have my Safeway card registered in Samsung Pay, but not sure it'd make any difference; I do get your point.
Oct 10, 2017, 1:00 pm
#2217
Join Date: Jan 2010
Location: SFO
Programs: *G^2, Bonvoyed, NEXUS
Posts: 3,516
Oct 10, 2017, 1:39 pm
#2218
Join Date: Nov 2012
Posts: 3,537
They did it incorrectly (and yes, it's fair of me to call it outright wrong, as Visa requires MSD mode not be deployed) by running MSD mode. Due to this, while they could roll out quickly, it will generate lots of declines and be vulnerable to pre-play fraud.