The chip and PIN debate became a significant issue during the U.S. EMV migration as policymakers, financial institutions, card networks, and merchants considered how best to improve payment card security. Although EMV chip technology makes counterfeit card fraud more difficult, the method used to verify a cardholder at checkout remained another important component of transaction security. While many U.S. credit card issuers adopted chip-and-signature authentication, some policymakers argued that requiring a PIN would provide an additional layer of protection.
The call from several state attorneys general illustrates the continuing debate over how EMV cards should authenticate consumers. Their proposal did not seek an immediate legislative mandate, but instead encouraged banks and card companies to voluntarily adopt PIN verification for credit card transactions.
Over a month and a half after the liability shift date for EMV payment transactions and long after most issuers and merchants have committed to an EMV migration strategy, several attorneys general decided it was time that they expressed their support for a chip and PIN approach for EMV cards rather than chip and signature. As reported by Consumer Affairs:
Attorneys general of eight states and the District of Columbia have signed a letter to the nation’s top credit card companies and banks, calling for the use of personal identification numbers rather than signatures to approve purchases made with new chip-based credit cards.
The Connecticut Attorney General says that the intent for their comments is to encourage the use of PINs for credit cards, not to mandate them. At least not at this time:
In their letter, the attorneys general downplayed claims that using a PIN would be a hassle for consumers, noting that consumers already use PINs with debit cards. The attorneys general made clear they were not seeking legislation requiring PINs, but rather calling on card companies and banks to make the change “as good corporate citizens.”
The debate over chip and PIN highlights an important distinction between protecting the physical card from counterfeiting and verifying that the person using it is the legitimate cardholder. EMV chip technology addresses one significant source of payment card fraud by making card data more difficult to duplicate, but the chip itself does not necessarily establish the identity of the person presenting the card.
Supporters of PIN verification argue that combining the EMV chip with a PIN could provide stronger authentication than relying on a signature. Consumers are already accustomed to entering PINs for many debit transactions, which could make the transition less disruptive than opponents might suggest. However, implementing chip and PIN for credit cards would require issuers, merchants, and consumers to adjust to a different checkout experience.
The timing of the attorneys general’s request is also notable. By the time they raised the issue, much of the payments industry had already invested heavily in EMV migration and established strategies around chip-and-signature cards. Changing cardholder verification methods after those decisions had been made could introduce additional complexity and expense for participants throughout the payments ecosystem.
Ultimately, the chip and PIN debate demonstrates that EMV migration was only one component of the broader effort to strengthen payment security. Financial institutions and merchants must consider not only how card credentials are protected but also how consumers are authenticated during transactions. Whether PINs become more widely adopted for U.S. credit cards or other authentication technologies emerge, balancing stronger security with convenience and implementation costs will remain a central consideration for the card industry.
Overview by Sarah Grotta, Director, Debit Advisory Service at Mercator Advisory Group
Read the full story here
