Contactless payment

What is contactless payment?

Contactless payment is a card payment completed by tapping a card or an NFC-enabled device against a

terminal, with no card insertion or swipe. The card and the terminal exchange data over a few centimetres of radio contact, and the transaction is then authorized through the same card rails as a chip transaction.

Each tap produces a one-time cryptogram generated by the chip, so the terminal never receives card data that can be reused on another purchase. Because the

cardholder

and the card are both physically at the terminal,

issuers

treat contactless as a card-present transaction, which shapes how fraud liability is allocated under scheme rules. Small-value purchases account for much of the volume, since a tap clears faster than a PIN entry.

Key facts

Also known as: tap to pay, tap and go
Underlying technology:
near-field communication
(NFC), a short-range radio standard that works over a few centimetres
Form factors: contactless cards, phones and smartwatches carrying a
digital wallet
credential, and payment wearables
Transaction type: card-present, routed through the standard
authorization
flow
Verification: taps above an issuer-set limit prompt PIN entry or biometric verification. Limits differ by market and scheme.

How it works

Tap. The cardholder holds the card or device inside the terminal's radio field. The field powers the chip and the terminal requests payment credentials.
Cryptogram generation. The chip signs the transaction with a key it never transmits, producing a cryptogram valid only for that amount and terminal.
Authorization request. The terminal sends the credential and cryptogram to the
acquirer
, which routes the message to the issuer over the card scheme.
Issuer decision. The issuer verifies the cryptogram, checks the account and the running contactless limit, and decides whether to approve, decline, or require cardholder verification.
Response. The approval or decline returns to the terminal in about a second. Funds move later, when the acquirer settles the batch.

Why it matters

Intercepted tap data can't be replayed, because the cryptogram is bound to one amount and one terminal. A copied contactless credential fails at the issuer's verification step.
Wallet-based taps add
tokenization
on top: the device presents a token tied to that specific device, so the real card number is never exposed to the merchant or the terminal.
Card-present classification changes dispute handling. A tap carries terminal-level evidence that the card was present, which an issuer weighs differently from an online transaction where only the card number was entered.
Throughput improves where queue time is the constraint. Transit gates and quick-service counters clear a tap without waiting for PIN entry or card handling.

Common issues

Verification prompt after several taps. Issuers track cumulative contactless spend since the last verified transaction and force a PIN or biometric check once it's exceeded.
Card clash. Two contactless cards in the same wallet enter the field together, and the terminal rejects the read rather than choosing one.
Failed read. The card leaves the field before the exchange finishes, so the terminal reports no card detected.
Unprovisioned wallet credential. A card added to a digital wallet only taps once the issuer has provisioned a device token for it.