Last edit by: storewanderer
Older (archived) threads: 2014-16
- - - - - -
FAQ- What is EMV contactless?
EMV contactless is a form of contactless/NFC that uses the same security and encryption that is used when inserting a chip card into an EMV-enabled terminal. Other than not having to sign/enter a PIN for smaller transactions, the security is effectively the same as chip and PIN/chip and signature.
In contrast, MSD contactless is an older version that is designed just and only for the United States. This effectively uses much the same flow as a swiped card transaction with the same rules.
- What is CDCVM?
CDCVM stands for Consumer Device Cardholder Verification Method. It's a method of telling the terminal that the customer verified their identity using their mobile device. Terminals that support it will waive the signature/PIN requirement typically in place for larger transactions, potentially saving time at checkout.
More info: https://support.apple.com/en-us/HT202527
- Does EMV contactless need to be supported to support CDCVM?
Typically, yes. (However, there are some exceptions below.)
- Why can't I tap my foreign-issued contactless card at most places in the US?
This is likely because the store does not support EMV contactless. Foreign issued contactless cards typically do not support MSD contactless since other markets have had EMV for quite some time. In contrast, most stores in the US have yet to get the necessary certifications/software for EMV contactless so they are typically MSD-only--if contactless is enabled at all. (See below for a list of stores where your card will likely work.)
- I paid for a purchase with Apple/Android/Samsung Pay and still had to sign for it.
Most likely, the store in question does not have EMV contactless enabled (see above question). However, there are instances where CDCVM does not work even with EMV contactless enabled. Restaurants that allow tip adjust, for example--where the tip amount is written on a paper receipt and entered by the staff later--cannot support CDCVM. It may simply be a matter of the merchant's processor or the POS software in use not supporting it too.
Another common reason is if you used a US-issued AmEx card with a mobile wallet. AmEx currently does not allow EMV contactless support in mobile wallets for these cards, so they always run as MSD contactless. Because of this, CDCVM is not supported (with very few exceptions, as noted below).
Note: if you used Samsung Pay, you may have paid with MST instead of NFC. Since MST emulates the magnetic pulses that the terminal receives when swiping a regular card, the normal magstripe rules apply.
- How can I tell whether EMV contactless was used?
An easy way to tell if you have Apple Pay is to pay with a Visa or MC while in airplane mode. Wallet will then show a transaction amount next to "Payment" for the card that was used. Alternatively, EMV-related information will typically print on the receipt (AID, etc.) if EMV contactless was used.
(Non-exhaustive) list of EMV contactless supporting merchants in the US:
- 7-Eleven
- 99 Ranch
- Albertsons (Safeway, Vons, Pak N Save, Jewel, Acme, Shaws, Star, Carrs, Randalls, Tom Thumb, Haggen, Eagle, Lucky UT/SoCal)
- Apple Store*†
- Athleta
- Auntie Anne’s Pretzels
- Banana Republic
- Costco Wholesale
- CVS
- DuaneReade*
- El Pollo Loco
- EG Group US (Quik Stop, Kwik Shop, Tom Thumb, Turkey Hill) Note: cashier must press "Electronic Payment" to activate NFC
- Five Below*
- Five Guys
- GAP
- Grocery Outlet*
- Harmon's Grocery
- H&M*
- Jolibee
- Kohl's*
- Lush Cosmetics*
- Maverik
- McDonald's*
- Meijer
- Old Navy
- Panera Bread
- PetSmart
- Ray's Food Place
- Round Table Pizza
- Royal Farms
- Red Ribbon Bakeshop
- Sheetz
- Sherm's Thunderbird Discount Markets Inc.*
- Sprouts
- Staples*
- Starbucks*
- Subway
- Walgreens*
- Weis Markets
- All businesses that use Square and support contactless*
- All businesses that use Clover and support EMV†**
- All businesses that use First Data standalone terminals (e.g. FD100+FD35, FD130) with EMV enabled**
* CDCVM support confirmed
** CDCVM support depends on store/restaurant
† CDCVM supported in MSD mode
USA contactless credit/debit/transit (2017 - 2021)
#8761
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
Went to the mechanic's today and my CFU on Google Pay gave a "Card Not Accepted / Use Chip Reader" on the standalone VX520 + VX820 PIN pad. Tapping the physical card worked fine (albeit with a signature line). Kinda wondering if I need to re-add my card now since this is the second place I've had issues with it.
#8762
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
Props to the McDonald's in Poway, CA for handing the MX915 out the drive-thru window this morning despite me using a physical card and also despite not asking them to do so. Most of the ones around here don't hand the terminal over unless you specifically ask to use Apple Pay (and even then, at least one won't do that either). Hopefully this starts happening more often at McDonald's in general.
BTW, this one didn't seem to have the new mount that was previously reported to be rolling out.
BTW, this one didn't seem to have the new mount that was previously reported to be rolling out.
#8763
Join Date: Oct 2019
Posts: 137
Complain. I contacted corporate about my local one and they said they'd fix it straight away. Took a few weeks, but as of two days ago they now hand out the terminal. I've since gone to other McDonald's and complained about the ones that didn't hand out the terminals as well. I've also complained to PDQ, and they said they would introduce the practice soon. Personally, I care more about increased payment security than avoiding COVID, but unless you mention the disease and how it spreads through contact, they seem to not take the suggestion seriously.
#8764
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
Complain. I contacted corporate about my local one and they said they'd fix it straight away. Took a few weeks, but as of two days ago they now hand out the terminal. I've since gone to other McDonald's and complained about the ones that didn't hand out the terminals as well. I've also complained to PDQ, and they said they would introduce the practice soon. Personally, I care more about increased payment security than avoiding COVID, but unless you mention the disease and how it spreads through contact, they seem to not take the suggestion seriously.
Really, the best long-term solution would be to go away from terminals like the MX915 for the drive-thru in order to make it harder to justify not handing them out the window for non-mobile wallet users. While they were probably a good idea when signature was still required, there's not really much of a need for large form factor terminals if that's the only reason why a restaurant is considering them. Come to think of it, the ones that do hand the terminal out the window for everyone chain-wide (around here: KFC, Taco Bell, Starbucks, In-N-Out, Chick-fil-A that I know of) are way more likely to have terminals like the iPP3xx/Lane3000 or VX8xx/Px00 series than ones like the MX915 or iSC250; the difference becomes less when counting the ones who will do so for mobile wallets, of course.
#8765
Join Date: Mar 2011
Location: Window Seat
Programs: National Executive, HHonors Gold, IHG Platinum, Hyatt Visitor
Posts: 2,495
Props to the McDonald's in Poway, CA for handing the MX915 out the drive-thru window this morning despite me using a physical card and also despite not asking them to do so. Most of the ones around here don't hand the terminal over unless you specifically ask to use Apple Pay (and even then, at least one won't do that either). Hopefully this starts happening more often at McDonald's in general.
BTW, this one didn't seem to have the new mount that was previously reported to be rolling out.
BTW, this one didn't seem to have the new mount that was previously reported to be rolling out.
Now for swipe cards I guess those can still go through the window.
#8766
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
I think a low cost solution to mount outside the window to support NFC should do the trick for these fast food places. Something like the little Square reader that does NFC and EMV. Similar to but smaller than what Jack in the Box had 15 years ago...
Now for swipe cards I guess those can still go through the window.
Now for swipe cards I guess those can still go through the window.
#8767
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
Google Pay failed at In-N-Out last night too, this time with a different card. I was going to re-add the previously failing card but decided to try rebooting my phone instead, which seemed to fix the issue when I tried at 85C today. Kinda weird, honestly, and if this was anywhere near common I'd see why people might prefer tapping cards instead of devices.
Also, the 7-Eleven here with MX915s is apparently closing next month for a remodel. I suspect the MX915s will stick around after they reopen, but who knows, they might switch to Ingenico and actually have working contactless (inside, at least) for once.
Also, the 7-Eleven here with MX915s is apparently closing next month for a remodel. I suspect the MX915s will stick around after they reopen, but who knows, they might switch to Ingenico and actually have working contactless (inside, at least) for once.
#8768
Join Date: Jan 2014
Posts: 451
Question regarding online pin and offline pin. In Poland, most of the transactions apparently are done in ONLINE mode. But does that necessarily imply that PIN is also verified Online? According to CVM database, my TD Debit Card should be using the online PIN before going to signature, but inserted it always asked for a signature. Same with contactless over their limit. So I wonder if that means the transaction is done online but PIN is verified offline, or if the CVM database is just wrong/out of date?
#8769
Join Date: Nov 2014
Location: NYC
Posts: 556
Question regarding online pin and offline pin. In Poland, most of the transactions apparently are done in ONLINE mode. But does that necessarily imply that PIN is also verified Online? According to CVM database, my TD Debit Card should be using the online PIN before going to signature, but inserted it always asked for a signature. Same with contactless over their limit. So I wonder if that means the transaction is done online but PIN is verified offline, or if the CVM database is just wrong/out of date?
Last edited by NYCFlyer10001; Sep 17, 2020 at 1:14 pm Reason: clarity
#8770
Join Date: Jan 2014
Posts: 451
I think you may be looking at the wrong cards; when you click here: https://www.spotterswiki.com/emv/car...%5B%5D=prepaid the TD Debit card shows the following:
1: Enciphered PIN verified online
2: Signature (paper)
3: No CVM required
Unless of course you are looking at a different database and it is updated.
1: Enciphered PIN verified online
2: Signature (paper)
3: No CVM required
Unless of course you are looking at a different database and it is updated.
#8771
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
Question regarding online pin and offline pin. In Poland, most of the transactions apparently are done in ONLINE mode. But does that necessarily imply that PIN is also verified Online? According to CVM database, my TD Debit Card should be using the online PIN before going to signature, but inserted it always asked for a signature. Same with contactless over their limit. So I wonder if that means the transaction is done online but PIN is verified offline, or if the CVM database is just wrong/out of date?
The terminal can choose to not support Online PIN (many don't) so it would skip that CVM and go to signature. However, looking at the EMV database for TD Debit, I see the CVM list of Online PIN and then No CVM. Many terminals (incorrectly) still prompt for signatures on No CVM transactions, which may explain some of the behavior you saw.
#8772
Join Date: Jan 2014
Posts: 451
Unfortunately, TD Debit is no longer a no-FTF card so extensive experiments are not likely any more, but when I tried it in Poland last year it was always asking for a signature, despite the terminal connecting to the internet to authorize the transaction. So my assumption would be that they were just using offline PIN.
I'm very curious to see how our cards will behave with the new limits in EU. But obviously it might be a while until I can report on that...
Thanks for clearing that up.
I'm very curious to see how our cards will behave with the new limits in EU. But obviously it might be a while until I can report on that...
Thanks for clearing that up.
#8773
Join Date: May 2005
Location: SEA
Programs: AS; Hyatt Globalist; Hilton Gold; NEXUS
Posts: 977
Really, the best long-term solution would be to go away from terminals like the MX915 for the drive-thru in order to make it harder to justify not handing them out the window for non-mobile wallet users. While they were probably a good idea when signature was still required, there's not really much of a need for large form factor terminals if that's the only reason why a restaurant is considering them.
The 915s are almost always heavily customized and are often a crapshoot as to whether they work with contactless.
#8774
Join Date: Mar 2011
Location: Window Seat
Programs: National Executive, HHonors Gold, IHG Platinum, Hyatt Visitor
Posts: 2,495
I agree with you - I wish retailers would dump the MX915s. There are a few chains that like the larger screens and use it for marketing but it is otherwise a beast that provides little benefit over simpler readers. My favorite reader (it feels kind of odd to have a 'favorite' reader, but whatever) is the Square chip/contactless reader. It just works, every single time, without any finnicky behavior. The vx8XX series is also good - again, these tend to be hooked up to simple POS systems that just work.
The 915s are almost always heavily customized and are often a crapshoot as to whether they work with contactless.
The 915s are almost always heavily customized and are often a crapshoot as to whether they work with contactless.
The moment signature got eliminated, was the moment the MX915 became too much of a machine. In machine replacements, many retailers should move to a smaller pinpad.
#8775
FlyerTalk Evangelist
Join Date: Jan 2014
Location: San Diego, CA
Programs: GE, Marriott Platinum
Posts: 15,507
I agree with you - I wish retailers would dump the MX915s. There are a few chains that like the larger screens and use it for marketing but it is otherwise a beast that provides little benefit over simpler readers. My favorite reader (it feels kind of odd to have a 'favorite' reader, but whatever) is the Square chip/contactless reader. It just works, every single time, without any finnicky behavior. The vx8XX series is also good - again, these tend to be hooked up to simple POS systems that just work.
The 915s are almost always heavily customized and are often a crapshoot as to whether they work with contactless.
The 915s are almost always heavily customized and are often a crapshoot as to whether they work with contactless.
Its larger screen could make it easier to comply with the ADA in that fonts and UI elements can be set bigger than they otherwise would have. However, if all it's really going to show is "insert/tap/swipe card" and "remove card" (e.g. McDonald's seemingly not supporting any CVMs other than "no CVM"), there might not be much value in that either.