Hubbry Logo
search
logo
Contactless payment avatar
Contactless payment
Contactless payment
current hub
1695651

Contactless payment

logo
Community Hub0 Subscribers
Read side by side
Contactless payment
View on Wikipedia
from Wikipedia

EMV contactless symbol used on compatible payment terminals. EMV stands for "Europay, Mastercard, and Visa", the three companies that created the standard.

Contactless payment (or tap to pay) systems are credit cards and debit cards, key fobs, smart cards, or other devices, including smartphones and other mobile devices, that use radio-frequency identification (RFID) or near-field communication (NFC) for making secure payments. The embedded integrated circuit chip and antenna enable consumers to wave their card, fob, or handheld device over a reader at the point-of-sale terminal. Contactless payments are made in close physical proximity, unlike other types of mobile payments which use broad-area cellular or Wi-Fi networks and do not involve close physical proximity.

EMV (abbreviation for Europay, Mastercard, and Visa) is a common standard used by major credit card and smartphone companies for use in general commerce. Contactless smart cards that function as stored-value cards are popular for use as transit system farecards, such as the Oyster card (London, UK) or RioCard (Rio de Janeiro, Brazil). These can often store non-currency value (such as monthly passes), in additional to fare value purchased with cash or electronic payment.

Apple Pay on iPhones and Google Pay on Android mobile phones are common forms of contactless payments used. These types of payments use tokenization which encapsulates a card issuer's details within the mobile phone.

Some suppliers claim that transactions can be almost twice as fast as a conventional cash, credit, or debit card purchase. Because no signature or PIN verification is typically required, contactless purchases are usually limited to small value sales. Lack of authentication provides a window during which fraudulent purchases can be made while the card owner is unaware of the card's loss. Major financial institutions and multinational corporations now offer contactless payment systems to customers as contactless credit cards have become widespread in the US, UK, Japan, Germany, Canada, Australia, France, the Netherlands, etc., as consumers are likely to spend more money using their cards due to the ease of small transactions. With contactless cards growing in numbers and percentages of adoption, the number of payments by this method had increased significantly since the spending limit was raised.[when?] Purchases made by card now surpass those made by cash and account for approximately one-third of all card transactions in countries like the UK.[citation needed] Contactless payments specifically have become increasingly popular, accounting for 4 out of 5 point-of-sale credit card purchases in Australia as of 2019.[1] Card issuers indicate that they will increase the availability of contactless cards to consumers. As of October 2021 there are over 142 million contactless-enabled cards[2] and over 147,000 terminals in use in the UK alone.[citation needed] Visa estimated that there would be 300 million contactless cards issued in the US by the end of 2020, up from the predicted 100 million at the end of 2019.[citation needed][needs update]

Image of Contactless Card, opened up

History

[edit]

1990s—2000s

[edit]

Mobil was one of the most notable early adopters of a similar technology, and offered their "Speedpass" contactless payment system for participating Mobil gas stations as early as 1997. Although Mobil has since merged with Exxon, the service is still offered at many of ExxonMobil's stations. Freedompay also had early wins in the contactless space with Bank of America[3] and McDonald's.[4]

In 2002, Philips teamed up with Sony to elaborate the NFC standard.[5][6] Then Philips Semiconductors applied for the six fundamental patents of NFC, invented by the Austrian and French engineers Franz Amtmann and Philippe Maugars who received the European Inventor Award in 2015.[7]

In July 2004, Sony, who had implemented the contactless RFID smart card FeliCa in Japan, introduced the Osaifu-Keitai (おサイフケータイ) system (literal translation: "wallet-phone") developed with the mobile phone operator NTT DoCoMo on multiple FeliCa systems such as Edy and, on 28 January 2006, on Mobile Suica used primarily on the railway networks owned by JR East.[8]

In May 2005, after some experimentation in the Netherlands, the contactless deferred payment at the end of each month, after the registration of the trips aboard with a contactless mobile phone on the client's account, was first experimented in Germany during 6 months on the tramways and bus of Hanau with the Nokia 3220 using the NFC standard of Philips and Sony.[9]

In October 2005, the immediate contactless payment was first experimented in France in Caen during 6 months with a Samsung NFC smartphone by Orange in collaboration with Philips Semiconductors in the Cofinoga shops (Galeries Lafayette, Monoprix) and Vinci parkings. For the first time, thanks to "Fly Tag", the system allowed to receive as well audiovisual informations, like bus timetables or cinema trailers from the concerned services.[8][6] In June 2007, the payment with a contactless bank card was tested at the FNAC of La Défense in Paris and from 19 November 2007 to 2009 in some shops of Caen and Strasbourg, this time with smartphones NFC, provided by four operators (Orange, Bouygues Telecom, SFR and NRJ Mobile).[6] On 5 November 2007, Orange and the transport societies SNCF and Keolis associated themselves for a 2 months experimentation with smartphones in Rennes in the metro, bus and TER trains.[10][6]

The first contactless cards in the UK were issued by Barclaycard in September 2007.[11] PayPass trialed the world's first NFC-enabled phone, the Nokia 6131 NFC, in New York in 2007.[12]

In March 2008, Eat became the first restaurant chain to adopt contactless.[13]

On 19 January 2009, NFC is used in transports for the first time in the world by China Unicom and Yucheng Transportation Card with Changhong DG28 and F4 mobile phones in the tramways and bus of Chongqing in China.[14]

2010s

[edit]

In January 2010, Barclaycard partnered with mobile phone firm Orange, to launch a contactless credit card in the UK.[15] Orange and Barclaycard also announced in 2009 that they would be launching a mobile phone with contactless technology.[16]

After a test conducted from October 2005 to November 2006 with 27 users,[17] on 21 May 2010, the transport authority of Nice Régie Lignes d'Azur was the first public transport provider in Europe to add definitely to its own offer a contactless payment on its tramways and bus network either with a NFC bank card or smartphone application notably on Samsung Player One (with the same mobile phone operators than in Caen and Strasbourg in 2007), as well as the validation aboard with them of the transport titles and the loading of these titles onto the smartphone, in addition to the season tickets contactless card.[18] This service was as well experimented then respectively implemented for NFC smartphones on 18 and 25 June 2013 in the tramways and bus of Caen[19][20] and Strasbourg,[21][22] after the contactless payment on the 765 pay and display parking machines of Strasbourg was made available in October 2011. In the Paris transport network, after a 4 months testing from November 2006 with Bouygues Telecom and 43 persons[17] and finally with 8,000 users from July 2018, the contactless mobile payment and direct validation on the turnstile readers with a smartphone was adopted on 25 September 2019[23][24][25] in collaboration with the societies Orange, Samsung, Wizway Solutions, Worldline and Conduent.

NFC is used in Seoul[26] after its introduction in South Korea by the discount retailer Homeplus in March 2010[27] and in Tokyo it is tested then adopted or added to the existing systems, like the mobile wallet Osaifu-Keitai, from May 2010 to end of 2012.[28][29] The NFC standard is implemented for the first time in a metro network, by China Unicom in Beijing on 31 December 2010.[30]

In October 2011, the first mobile phones with Mastercard PayPass and/or Visa payWave certification appeared. A PayPass or payWave account can be assigned to the embedded secure element and/or SIM card within the phones.

In October 2013, Citi Enterprise Payments and 3 Hong Kong, the mobile operation of Hutchison Telecommunications Hong Kong Holdings Limited (SEHK: 215), jointly announced the launch of '3 Citi Wallet.' Using Near Field Communication (NFC) technology, the '3 Citi Wallet' was a multi-purpose mobile wallet service that included mobile payment, transaction history, a location-based special offer service and a search function that directed customers to the best deals within their vicinity. The 3Citi wallet was compatible with a wide range of designated smartphones, from Samsung, Sony, HTC, LG and iPhone. Over 9,000 Visa payWave readers across Hong Kong were able to accept contactless payments on Day 1.[31]

In February 2014, Mastercard announced that it would partner with Weve, which is a joint venture between EE, O2, and Vodafone UK, to focus on mobile payments. The partnership will promote the development of "contactless mobile payment systems" by creating a universal platform in Europe for it.[32]

On 9 September 2014, Apple Inc. announced Apple Pay, a proprietary form of contactless payment integrated with its smartphones, with the release of the iPhone 6.[33]

In September 2014, Transport for London's Tube began accepting contactless payment. The number of completed contactless journeys has now exceeded 300m. On Friday 18 December, the busiest single day in 2015, a record 1.24m journeys were completed by over 500k unique contactless cards.[34]

In 2016 Erste Group launched an NFC-only debit card implemented as a sticker in Austria. It can be used at any NFC supporting terminal for transactions of unlimited amount however for transactions over the floor limit of €25 a PIN is required to confirm the transaction.[35]

In 2016, contactless payments start to become even broader with wearable technology devices also offering this payment feature.

2020s

[edit]
A Transport for London bus stop advertisement recommending contactless payment as safe during the COVID-19 pandemic.

During the COVID-19 pandemic,[36] several banks raised their contactless payment limits.[37][38] In the United Kingdom, the limit was increased from £30 to £45 in March 2020.[39] Contactless payments were recommended as a safer payment method compared to Chip and PIN card payments and cash transactions.[40] It was later raised to £100.[41]

In 2022, Apple Inc. announced Tap to Pay, a feature which allows merchants to use iPhone devices as payment terminals for contactless cards.[42][43]

Adoption and usage

[edit]
Debit cards with EMV Contactless, one is Visa payWave and the other is Mastercard Contactless

Google Pay is an application for devices running Google's Android OS, which allows users to make purchases using NFC, which initially required a physical secure element but this was replaced by host card emulation which was introduced in Android 4.4 (KitKat). Softcard (formerly known as Isis mobile wallet), Cityzi and Quick Tap wallets for example, use a secure SIM card to store encrypted personal information. Contactless payments with enabled mobile phones still occur on a small scale, but every month an increasing number of mobile phones are certified.[44]

In 2012, Mastercard Advisors wrote that consumers are likely to spend more money using their cards due to the ease of small transactions.[45] Mastercard Canada says it has seen "about 25 percent" higher spending by users of its Mastercard Contactless-brand RFID credit cards.[46]

As of December 2014, there were approximately 58 million contactless-enabled cards in use in the UK, and over 147,000 terminals in use.[47][48] By June 2017 purchases made by card surpassed those made by cash. This was reported to have been driven by the rise in contactless payments, which accounted for approximately one third of all card transactions in the UK. The number of payments by this method had increased significantly since the spending limit was raised from £20 to £30.[49] In 2018, contactless payments made up around 19% of transactions in the UK.[50]

In 2018, the Westpac Banking Corporation in Australia revealed contactless payment statistics from 2017 and claimed in the report that contactless payments approached saturation point by being used in over 90% of purchases. The Australian St.George Bank reported 94.6% usage for the same period.[51]

Recent statements by Visa and other US card issuers indicate that they will increase the availability of contactless cards to US consumers. Visa estimates there will be 300 million contactless cards issued in the US by the end of 2020, up from the predicted 100 million at the end of 2019 as announced on its 2018 Q4 earnings call.[52]

Telecom operators are starting to get involved in contactless payments via the use of NFC-enabled phones. Belgacom's Pingping, for example, has a stored value account and via a partnership with Alcatel-Lucent's Touchatag provides contactless payment functionalities.

Major financial entities now offering contactless payment systems include Mastercard, China UnionPay, Citibank, JPMorgan Chase, American Express, KeyBank, Barclays, Barclaycard, HSBC, Lloyds Banking Group, FreedomPay, RuPay, The Co-operative Bank, Nationwide Building Society and NatWest Group. Visa payWave, Mastercard Contactless, and American Express Expresspay are examples of contactless credit cards which have become widespread in the US and UK.

Technology

[edit]

There are three main standard usages for contactless payments adopted throughout payment terminals with the EMV standard.

EMV Chip

On issued bank cards a smart chip or cryptographic chip is placed on the card known as a smart card which allows wireless payments to be made from the EMV chip in range of a payment terminal using RFID technology following the EMVCo standard. When the smart card is tapped against a payment terminal that authenticates the card issuer's details through a series of PIN interactions the payment for the interaction will succeed.

Tokenization

A newer approach to smart card technology is achieved by linking a smart card to a hardware device, such as through the Apple Pay application on an iPhone mobile phone, thereby allowing mobile devices the ability to make payments using RFID technology against a payment terminal on behalf of a smart card using a token generated by the card issuer, a process known as tokenization. A Device Account Number (DAN) similar to a Private Account Number (PAN) in traditional payment stripe and chip cards, is generated along with a private key and sent to the card issuer during initial setup of the smart card on the hardware device. When payments are made via the respective approved application on the hardware device the DAN and relevant details such as expiry date and CVV are sent to the card issuer via a payment terminal for cryptography where the associated private key is then used to authorise the transaction.

NFC

The near field communication (NFC, compliant with ISO/IEC 14443[53] standard) technology in contactless cards uses a 13.56Mhz radio frequency technology that only transmits digital data within a concise range.

Typically the optimum distance is 4 centimetres or less - beyond, the signal is rapidly decreasing and can never exceed 10 centimetres.

Security

[edit]

In 2006 security researchers found that the cardholder's name, credit card number, and expiration date may be transmitted by contactless payment cards without encryption. They were able to use information leaked from a contactless credit card to make a purchase online, without opening the envelope in which the card was sent.[54]

Depending on the economic space, there may be a payment limit on single transactions without the need to input the PIN, and some contactless cards can only be used a certain number of times before customers are asked for their PIN.[55] Contactless debit and credit transactions use the same chip and PIN network as older cards and are protected by the same fraud guarantees. Where PIN is supported, the contactless part of the card may remain non-functional until a standard chip and PIN transaction has been executed.[56] This provides some verification that the card was delivered to the actual cardholder.

Under fraud guarantee standards, U.S. banks are liable for any fraudulent transactions charged to the contactless cards.

CVM limit

[edit]

Because no signature or PIN verification is typically required, contactless purchases are often limited to a maximum amount per transaction, known as a Cardholder Verification Limit (CVM limit). Limits vary between banks. For transactions over the defined CVM limit a verification is usually required (e.g. PIN, signature, or biometric authentication).

Transactions under the floor limit, in addition to not requiring consumer authentication, are also accepted without sending the transaction online for verification by the acquiring host.

Note that these limits typically do not apply when CDCVM verification (such as in Apple Pay) is used.

Economic space CVM limit Comment
Argentina ARS 80000 Transactions above ARS 8000 may require PIN verification.[57]
Australia A$200 For transactions over A$200 a PIN or biometric authentication is required.[58][59]
Austria €25 For transactions exceeding €25 a PIN is required. Additionally for cards produced before 2017 only five transactions can be made without a PIN.[60] Cards issued after December 2016 need a PIN code for transactions over €25 or a contactless total of €125.
Azerbaijan ₼100 For transactions of ₼100 and above using a physical card a PIN is required. There's no mandatory PIN requirement when CDCVM (Apply Pay, Garmin Pay, or Google Pay) is used.
Bahrain 20 BHD
Bangladesh BDT5000.00 For transactions over BDT 5000.00 a PIN is required.
Belgium €50 Since the COVID crisis, transaction limits in Belgium were increased. For transactions over €50 a PIN is required. When several contactless payments in a row reach the amount of €125, the PIN is required.
Brazil R$200 For transactions over R$200,00 a PIN is required.[61]
Bulgaria 100 BGN[62] For transactions over 100 BGN (~€50) a PIN is required. 50 BGN (~€25) until March 25, 2020.[62] 25 BGN (~€12) until April 12, 2019.
Bosnia and Herzegovina 60 KM For transactions exceeding 60 KM a PIN is required.[63][64]
Canada C$250 Limits are completely at the discretion of the merchant's acquiring bank and the consumer's bank. There is no law limiting the amounts. However, in practice, financial institutions limit contactless payments to C$100. Some merchants may accept higher amounts subject to signature verification. Due to the COVID-19 pandemic, MasterCard, Visa, and American Express increased their limits to $250.[65][66]
Chile $12.000 CLP
China CN¥1000[67] UnionPay QuickPass. PIN required unless disabled with bank.
Colombia COP 100.000 For transactions over COP 100.000 PIN is required.
Costa Rica ₡30000 For transactions over ₡30000 signature is required.[68] Beginning July 1, 2022, PIN will be required instead.[69]
Croatia[70] €40 For transactions over €40 PIN is required.
Curaçao ANG 45 For transactions over ANG 45 a PIN is required. When several contactless payments in a row reach the amount of ANG 100, the PIN is required.
Czech Republic 500 CZK For transactions over 500 CZK PIN is needed. After 5 consecutive contactless transactions below 500 CZK and/or after reaching the cumulative limit in CZK equal to €150, PIN is required.[71]
Denmark[72] 350 DKK For transactions over 350 DKK PIN is needed. Sometimes PIN is needed anyway to ensure the card is used by its owner.
Dominican Republic No limit
Egypt EGP 600 Transactions above EGP 600 requires a PIN.[73]
Estonia[74] €50
Finland €50 €25 up until April 12, 2019. After that it will be €50.
France €50 Can be used up to three times a day.
Germany €25/€50 For each transaction over €25 or €50 (some Visa cards) a PIN or CDCVM verification is required.
Greece €50 For transactions over €50 a PIN is required
Hong Kong No limit Initially banks, not government, set it for $500 or under, then (for some banks) under $1000 (HKD), until the limits were removed.
Hungary 15000 HUF For transactions over 5000 HUF PIN is needed. For every 10 consecutive contactless transactions or if you reach 10.000 HUF PIN is needed. Due the COVID-19 pandemic, the 5000 HUF limit is increased to 15 000 HUF. No limit for Apple Pay or similar contactless purchases.
Iceland ISK 5.000 Íslandsbanki has a lower limit of ISK 4.200. For each transaction over the limit, Chip and PIN are required. Also, a cumulative limit of ISK 10.000 between Chip and PIN uses.
India ₹5000(US$61.04) For transactions above ₹5000(US$61.04), a PIN is required.
Indonesia Rp1.000.000 Transactions above Rp1.000.000, must require 6-digits PIN authorization.
Ireland €50 Increased from €30 to €50 on 1 April 2020.[75] There is no transaction limit when using contactless with two-factor authentication (e.g. Apple Pay), although some merchants still apply a €50 transaction limit[76]
Israel 300 ILS For transactions over 300 ILS PIN is needed
Italy €50 For transactions over €50 PIN is needed
Japan JP¥20000 JCB QUICPay and QUICPay+[77] Under Visa brand rules, the CVM limit for all card transactions is 15,000 yen

Under Mastercard brand rules, the CVM limit for contactless IC card transactions is 15,000 yen[78]

Latvia[79] €50
Lithuania[80] €25
North Macedonia 750 MKD
Malaysia RM250 Cumulative limits (total amount and/or consecutive transactions) differ between card issuers.[81]

By default, for each transaction above RM250 PIN is required. But the limit is customizable.[82]

Netherlands[83] €25 For card payments of more than €25 at once or €50 in a row a PIN is required. Some older cards only allow five transactions in a row without a PIN. Most if not all retailers have, by now, terminals that support CDCVM as verification (i.e. Apple Pay). Most banks have had Android NFC/Tap&Pay through their mobile banking apps for a few years now. While Apple Pay was launched (unofficially) by bunq on March 20, 2018, through a workaround,[84] and to be joined officially by ING on June 11, 2019,[85] followed by the official launch for bunq on Sept. 3rd and the announcement that banks ABN AMRO and Rabobank will also start to offer Apple Pay in The Netherlands sometime in 2019.[86] Also note that broad acceptance of credit cards isn't commonplace yet, so that's up to the individual merchant. Maestro by Mastercard is the dominant card type and accepted everywhere.
New Zealand NZ$200 For each transaction over NZ$200 a PIN is required. In response to the COVID-19 pandemic, this amount was temporarily raised from NZ$80 to NZ$200, in an effort to further reduce unnecessary contact.[87]
Norway[88] 500 NOK For each transactions over 500 NOK a PIN is required.[89] Sometimes PIN is needed anyway to ensure the card is used by its owner.
Pakistan Rs 3000 Transactions above Rs 3000 require pin verification.
Philippines ₱5000 Increased from ₱2000 to ₱5000 in 2020.[90]
Poland 100 PLN For transactions over or equal to 100 PLN PIN is required.
Portugal €50 For more than €50 PIN verification is mandatory[91]
Romania 100 lei For transactions over or equal to 100 lei PIN is required.
Russia ₽1000-₽5000 CVM limit ranges from ₽1000 to ₽5000 depending on the acquirer and card payment system (in some cases, the issuer). In the terminals of the largest russian bank, Sberbank, the CVM limit is ₽3000 for all payment systems, this same limit is the most common in Russia. In some terminals of other banks (for example, VTB, Promsvyazbank, Russian Standard Bank), the CVM limit for Mastercard is ₽5000.

In NSPC (operator of the national payment system Mir), the CVM limit is ₽3000.

Saudi Arabia 300 SAR For transactions over 300 SAR, PIN is required.
Serbia 4000 RSD For transactions over 4000 RSD, PIN verification is required.
Singapore S$200 Transaction limit for NETS contactless payments in Singapore was initially set at S$100, although some banks offer higher.[92] For mobile contactless payments, there are no transaction limits.[93] Most banks and payment processors set a S$200 limit.[94][95][96]
Slovakia €50 PIN For transactions over €50 PIN is needed (limit raised from €20 in 2020). After reaching the cumulative limit of €150, PIN is required.[97]
Slovenia €25 PIN For transactions over €25 PIN is needed.
South Africa 200/500 ZAR Increased to R500 in May 2017 (except for ABSA Bank which remained at R200)[98]
Spain €50 PIN For more than €50 PIN verification is mandatory except using mobile payments sometimes. It was increased from €20 to €50 to avoid contact because of the COVID-19 pandemic.
Sri Lanka LKR 5000 For more than LKR 5000 PIN/signature verification is required
Sweden 200 SEK For each transaction over 200 SEK a PIN is required.
Switzerland 80 CHF For transactions over 80 CHF a PIN is required.
Taiwan No limit Signatures may be required for large purchases.
Thailand ฿1500
Turkey ₺750 For transactions over ₺750 PIN is required.
Ukraine ₴1,500 For transactions over ₴1,500 a PIN is required
United Kingdom £100 Previous limits:

There is no transaction limit when using contactless with two-factor authentication (e.g. Apple Pay), although some merchants who have not updated their card terminals' software apply a £250 limit as if there was no authentication; this is gradually improving.

United States No limit A signature may be required for large purchases. Banks may set their own limits or require a PIN.

See also

[edit]

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia

Contactless payment

View on Grokipedia
from Grokipedia
Contactless payment is a secure, touch-free method of conducting financial transactions by tapping a credit or debit card, smartphone, wearable device, or other NFC-enabled gadget onto a compatible payment terminal, enabling quick data exchange without inserting or swiping the payment instrument.[1] This technology primarily relies on near-field communication (NFC), a short-range wireless standard that transmits encrypted payment details over distances of up to a few centimeters, typically adhering to international proximity card specifications like ISO/IEC 14443.[2][3] The foundation of contactless payments lies in the EMV (Europay, Mastercard, and Visa) standards, managed by EMVCo, which specify secure chip-based interfaces for both contact and contactless operations to ensure global interoperability and reduce fraud.[4] NFC, standardized by the NFC Forum in 2004, builds on radio-frequency identification (RFID) principles to facilitate bidirectional communication between devices, with payment applications often using tokenization—replacing sensitive card data with unique, one-time codes—to enhance security during transactions.[2][3] Key security features include dynamic authentication via the EMV chip, which generates transaction-specific cryptograms, and compliance with payment network protocols like Visa's payWave or Mastercard's PayPass, limiting transaction values (often under $100 without PIN) to mitigate risks.[4][5] Contactless payments trace their origins to the mid-1990s, with the world's first implementation in 1995 via South Korea's UPass, a prepaid transit card using RFID for fare collection by the Seoul Bus Transport Association.[6] The EMV chip standard emerged in 1996 to combat magnetic stripe fraud, but contactless capabilities gained traction in the early 2000s alongside NFC's development, with Mastercard, Visa, and American Express introducing contactless credit cards in 2008.[6][4] Mobile integration accelerated adoption, starting with Google's Wallet in 2011 and Apple's Pay in 2014. Apple Pay requires double-clicking the side button, authenticating with Face ID (or passcode), then holding the iPhone near the terminal via NFC. Google Wallet on Android uses biometric (face/fingerprint) or PIN authentication similarly before tapping. No additional external hardware is required beyond the smartphone itself. These smartphone-based contactless payment methods are widely available and standard as of March 2026.[7][8] They leveraged smartphone NFC chips for digital wallet transactions. In the United States, the 2015 EMV liability shift incentivized merchants to upgrade to NFC-compatible terminals, marking a significant transition from traditional swipe-based systems.[6] By 2025, contactless payments have achieved widespread global adoption, with U.S. transaction values for NFC-enabled digital wallets projected to reach $451 billion annually by 2028, up from $179 billion in 2023 (as projected in 2023), driven by convenience and post-pandemic hygiene preferences.[2] In the U.S., solutions like Visa's Tap to Phone have seen 200% year-over-year growth as of March 2025, enabling merchants to accept taps via smartphones without dedicated hardware.[9] Comparable merchant acceptance solutions for Android devices are provided by third-party payment processors such as Square, Stripe, and SumUp, which enable merchants to accept contactless payments—including from Google Pay, Apple Pay, and NFC cards—directly on compatible NFC-enabled Android phones without additional hardware. However, Google Pay (and Google Wallet) is designed solely for consumers to make contactless payments and does not natively enable Android phones to function as merchant terminals for accepting tap-to-pay transactions.[10][11][12] Recent advances include EMVCo's ongoing updates to contactless kernel specifications for enhanced interoperability. Benefits include faster checkout times—often under two seconds per transaction—lower fraud rates due to chip encryption, and versatility across retail, transit, and peer-to-peer uses, though challenges like transaction limits and infrastructure costs persist in some regions.[5][13][14]

History

Early Developments (1990s–2000s)

The origins of contactless payment systems trace back to the mid-1990s, when early radio-frequency identification (RFID) technologies began enabling proximity-based transactions for specific use cases. In 1995, South Korea introduced the world's first contactless payment system through the UPass prepaid travel card, developed by the Seoul Bus Transport Association for fare payments on public transit buses in Seoul.[15][16] This system utilized RFID to allow users to tap the card near a reader, facilitating quick and efficient boarding without physical contact, and marked the initial commercial application of contactless technology in transportation.[17] In 1997, Hong Kong launched the Octopus card, a contactless smart card system for transit fares and small retail purchases, which quickly became one of the most widely used and influential early implementations worldwide.[18] Building on this foundation, the late 1990s saw the first widespread commercial deployment outside transit. In 1997, Mobil Oil Corporation launched Speedpass in the United States, an RFID-based key fob system that enabled users to pay for fuel and convenience items at Exxon and Mobil gas stations by waving the device near a reader.[19][20] This innovation, which linked payments to a user's credit card, reduced transaction times to under 10 seconds and was adopted at thousands of stations, representing the earliest large-scale use of contactless payments in retail settings.[21] The early 2000s advanced the underlying technology and expanded applications to financial cards. In 2002, Philips Semiconductors (now NXP) and Sony jointly developed Near Field Communication (NFC), a short-range wireless standard operating at 13.56 MHz and supporting data exchange over distances up to 10 cm, which laid the groundwork for secure, bidirectional contactless interactions between devices.[22] By 2004, contactless credit cards emerged in the US, with American Express introducing the Blue card featuring ExpressPay for tap-to-pay transactions and Visa piloting its contactless payment system (Visa Wave, later rebranded as payWave) for similar low-value purchases at merchants like McDonald's.[23][6] European pilots further diversified implementations during this period. In 2005, the Netherlands conducted early experiments with contactless deferred payment systems, including trials for public transit via the OV-chipkaart, which allowed monthly billing based on registered trips, and initial tests at unattended locations such as parking meters.[24] By 2007, the UK advanced hybrid solutions with Barclaycard's launch of the OnePulse card, which integrated contactless payment capabilities with Transport for London's Oyster transit functionality, enabling seamless use for both fares and small retail purchases up to £10 without a PIN.[25][26] The decade closed with broader international rollouts of branded contactless platforms. In 2008, Visa expanded payWave to multiple countries including Australia and parts of Europe, Mastercard introduced PayPass in the US and Canada for EMV-compliant tap payments, and American Express extended ExpressPay acceptance to over 20,000 US merchants, solidifying these as key standards for credit card-based contactless transactions.[23][6] These developments shifted contactless from niche pilots to foundational elements of payment infrastructure, paving the way for integration with mobile devices in subsequent years.

Widespread Adoption (2010s)

In the early 2010s, contactless payments transitioned from limited pilots to broader retail expansion, particularly through initiatives like Mastercard's PayPass. Global pilots in 2011 targeted retail environments, with notable rollouts in Canada and Australia where acceptance points grew significantly as part of efforts to integrate contactless into everyday commerce.[27] A pivotal shift occurred in 2014 with the launch of Apple Pay, which popularized NFC-based mobile payments by incorporating tokenization to enhance security, allowing iPhone users to complete transactions without exposing actual card details. This was followed by Android Pay in 2015, which extended similar NFC capabilities to a wider range of Android devices, and Samsung Pay later that year, which innovated by combining NFC with Magnetic Secure Transmission (MST) to enable payments even at non-NFC terminals. These mobile wallets accelerated consumer familiarity with contactless technology, driving merchant adoption and setting the stage for mainstream use.[28][29][30] In Europe, regulatory adjustments further propelled growth; the UK raised its contactless transaction limit from £20 to £30 in 2015, resulting in contactless accounting for 42% of all card payments by 2017. Meanwhile, the US saw a surge tied to the EMV chip migration starting in 2015–2016, as issuers like Visa and Mastercard distributed hundreds of millions of EMV-enabled cards, many incorporating contactless features to comply with new standards and reduce fraud. In Asia, platforms such as China's Alipay and WeChat Pay blended QR codes with emerging NFC options, processing 60.5 billion mobile payment transactions in 2018 alone.[31][32][33] By 2019, worldwide contactless card issuance exceeded hundreds of millions, with EMVCo reporting over 8 billion EMV chip cards in circulation globally, a substantial portion supporting contactless interfaces. Transit systems exemplified this scale, as London's Oyster card network fully integrated contactless bank cards and mobiles, handling over a billion such journeys that year and comprising 60% of pay-as-you-go rail and Tube trips.[34][35]

Recent Advances (2020s–Present)

The COVID-19 pandemic significantly accelerated the adoption of contactless payments worldwide starting in 2020, with global transaction volumes surging by 40% in the first quarter alone due to heightened hygiene concerns.[36] In the United Kingdom, this momentum led to contactless methods accounting for a record 93.4% of in-store card transactions up to £100 by 2023.[37] Building on the mobile wallet foundations established in the 2010s, these developments marked a shift toward seamless, touch-free interactions at points of sale. In 2021, Visa expanded its Tap to Phone solution, enabling merchants to accept contactless payments directly via NFC-enabled smartphones without additional hardware, with pilots launching in the United States and other markets.[38] By 2025, this technology had achieved 200% year-over-year growth globally, supporting millions of small sellers in regions including the US, UK, and Brazil.[9] Concurrently, wearable payment options saw notable expansion in 2022, as platforms like Fitbit Pay and Garmin Pay integrated with more devices, contributing to the addition of millions of users amid a broader market growth in NFC-enabled wearables.[39] Swatch launched its NFC-based SwatchPAY! feature in 2019, embedding contactless chips in stylish watches to appeal to fashion-forward consumers.[40] In recent years, smartphone-based contactless payment acceptance has advanced with the introduction of Tap to Pay features by major platforms, building on earlier solutions like Visa's Tap to Phone. Apple's Tap to Pay on iPhone, launched in 2022, enables merchants using an iPhone XS or later model running iOS 16 or higher to accept in-person contactless payments directly on their device. It leverages the iPhone's built-in NFC to read contactless cards, Apple Pay, Google Pay, Samsung Pay, and other digital wallets. Merchants activate the feature in a compatible payment app (e.g., Square POS), enter the transaction amount, and have the customer tap their payment method on the iPhone.[41][42] Tap to Pay on Android offers similar functionality on NFC-enabled Android devices running Android 9 or higher with NFC enabled. The process is analogous, supported by apps such as Square, Stripe Terminal, and PayPal Zettle, where the customer taps on the back of the device.[43][44] Popular supporting providers include Square (particularly favored by small businesses), Stripe Terminal, PayPal Zettle, Worldpay, and others. Transaction fees generally range around 2.6% + $0.15 per tap, though they vary by provider, region, and volume. Setup is straightforward: download the supporting app, create or link a merchant account, enable Tap to Pay, and confirm device compatibility. This innovation greatly benefits mobile businesses, pop-up shops, markets, and small merchants by eliminating the need for dedicated payment terminals or card readers, reducing upfront costs and setup complexity. Security is maintained through EMV tokenization, encrypted transmission, and device authentication methods like Face ID or fingerprint recognition. As of 2026, Tap to Pay features are widely available in the United States, United Kingdom, Australia, and other markets, with continued global expansion underway. Regulatory advancements further propelled adoption in 2023, with the European Union maintaining a standardized €50 limit for contactless transactions without PIN entry across member states, facilitating widespread POS terminal compatibility and boosting acceptance rates to over 68% of card payments.[45] In the United States, EMV chip technology achieved near-complete phase-in, with adoption reaching approximately 85% of card-present transactions, enhancing security for contactless integrations.[46] From 2024 to 2025, contactless payments began integrating with central bank digital currencies (CBDCs) in ongoing pilots, notably China's e-CNY, which leverages NFC for offline and mobile transactions within its large-scale trials involving platforms like Alipay and WeChat Pay.[47] This period also saw the global digital wallet user base exceed 4.4 billion, underpinning contactless ecosystems.[48] By 2025, 86% of consumers worldwide utilized contactless methods, driving the market value to $69.7 billion.[49] In 2025, contactless payments accounted for more than 75% of transactions on Mastercard's network, reflecting continued momentum and habit formation post-pandemic. Mastercard advanced the "tap" concept with Tap to More capabilities, enabling users to provision cards, verify transactions, and send or receive money with a single tap. This simplifies digital commerce and extends functionality. Related features include Tap to Confirm for authentication, Tap to Provision for easy wallet onboarding, and Tap to Send/Receive for peer-to-peer transfers. Innovations also reached ATMs, where collaborations (e.g., Mastercard with NCR Atleos) allowed cash withdrawals using only a mobile wallet tap, without a physical card or PIN. Apple introduced Digital ID in 2025, permitting U.S. travelers to present passports at TSA checkpoints via a tap of their iPhone or Apple Watch, blending payments technology with secure identity verification. Samsung Wallet launched Tap to Transfer, allowing instant peer-to-peer money sends by tapping phones or wearables, compatible across Samsung, Apple, and Google wallets. These developments illustrate the tap evolving into a universal gesture for payments, identity, and transfers, with projections for further growth in IoT, wearables, and frictionless experiences through 2026 and beyond.

Applications in Smart Cities

Contactless payments are integral to smart city ecosystems, enabling seamless, efficient interactions between citizens and urban infrastructure. Public Transit Integration
Major cities have implemented open-loop contactless systems for public transportation, allowing riders to use bank cards, smartphones, or wearables directly:
  • New York's OMNY system, rolled out progressively since 2019, permits tapping contactless payment methods at MTA subway turnstiles and buses, phasing out the legacy MetroCard and improving fare collection efficiency.
  • Dubai's nol card, managed by the Roads and Transport Authority (RTA), supports contactless payments across metro, buses, trams, water taxis, and parking facilities, with digital versions available via the nol Pay app for NFC-enabled smartphones.
  • In Singapore, contactless bank cards and mobile wallets (via SimplyGo) are accepted for MRT and bus fares, while the SGQR unified QR code facilitates broader digital payments in urban retail and services, enhancing interoperability.
IoT-Enabled Automatic Payments
Integration with Internet of Things (IoT) devices enables frictionless, automatic transactions for urban services:
  • Smart parking systems use sensors to detect occupancy and process payments via contactless taps or linked accounts.
  • Electronic toll roads allow drive-through payments without stopping, reducing congestion.
  • EV charging stations support tap-to-charge functionality, simplifying access and billing.
These IoT integrations minimize manual intervention, optimize resource use, and support real-time data collection for urban planning. Benefits
Applications in smart cities deliver:
  • Efficiency: Faster transactions reduce queues and congestion, improving traffic flow and operational throughput.
  • Safety and Hygiene: Touch-free interactions limit physical contact, while reduced cash handling lowers theft and contamination risks.
  • Sustainability: By facilitating easier public transit and shared mobility use, contactless systems encourage lower-emission transport options and reduce reliance on single-use tickets or cash.
Enabling Platforms
Platforms like PayPal support urban merchant ecosystems through Tap to Pay on smartphones (allowing merchants to accept contactless payments directly on their devices) and QR code generation for quick, touch-free customer scans. These tools lower entry barriers for small businesses, street vendors, and pop-up operations in dense urban environments, promoting inclusive digital payment adoption.

Technology

Core Technologies

Contactless payments fundamentally rely on Radio-Frequency Identification (RFID) technology, which employs electromagnetic fields generated by a reader to wirelessly interact with passive tags embedded in payment devices, enabling identification and data transfer without physical contact. This interaction occurs through inductive coupling, where the reader's antenna creates a magnetic field that powers and communicates with the tag's antenna when they are within close proximity, with a practical range of up to 4 cm (though the standard allows up to 10 cm).[50][51][52] The core protocol powering modern contactless payments is Near Field Communication (NFC), an evolution of high-frequency RFID standardized for short-range applications at 13.56 MHz, supporting data rates of 106, 212, or 424 kbit/s to facilitate quick transactions. NFC operates in three primary modes: peer-to-peer for bidirectional communication between two active devices, reader/writer for a device to read from or write to passive tags, and card emulation where a device simulates a contactless smart card to interact with payment terminals. In June 2025, the NFC Forum released version 15 of its technical specifications, extending the certified range for compliant contactless connections to up to 2 cm from 0.5 cm.[52][53][54][55] Key hardware components include compact antennas integrated into both the payment instrument and the reader terminal, which enable the inductive coupling necessary for energy transfer and data exchange via modulated magnetic fields. Sensitive payment credentials, such as tokenized card details, are stored and processed within secure elements—tamper-resistant chips either embedded directly in the device or housed in removable modules like SIM cards—to protect against unauthorized access during transactions.[56][57] A typical transaction begins when the payment device enters the reader's electromagnetic field, prompting the reader to issue a polling signal that detects and activates the NFC interface. This triggers an authentication sequence involving the dynamic exchange of one-time data between the device and terminal to verify legitimacy, culminating in approval or decline within under 300 milliseconds to ensure seamless user experience.[58] Contactless payments support diverse form factors, including plastic cards with embedded NFC chips and antennas for direct terminal interaction, smartphones leveraging Host Card Emulation (HCE) to software-emulate card behavior using the device's NFC controller and cloud-stored credentials, and wearables such as smartwatches equipped with dedicated NFC chips for on-the-go transactions.[59][58][60]

Standards and Protocols

Contactless payments rely on standardized protocols to ensure secure and interoperable transactions between devices, such as proximity cards and readers. The ISO/IEC 14443 standard, developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), defines the physical characteristics, radio frequency power, and signal interface for contactless proximity integrated circuit cards (PICC) operating at 13.56 MHz with a practical range of up to 4 cm (though the standard allows up to 10 cm).[61][52] It includes provisions for Type A and Type B signaling, where Type A employs amplitude shift keying (ASK) modulation for forward transmission and load modulation for backward, while Type B uses binary phase shift keying (BPSK) with Manchester coding.[62] The standard also specifies initialization and anti-collision protocols in Part 3 to manage multiple cards in the reader's field, preventing data conflicts through probabilistic slot-based selection and collision detection mechanisms.[63] Building on ISO/IEC 14443, the EMV Contactless specifications, managed by EMVCo, provide a framework for payment applications using contactless interfaces. These specifications are structured into three levels: Level 1 addresses physical and transport layer compliance, including RF interface testing; Level 2 covers the protocol layer for command/response exchanges and data formatting; and Level 3 focuses on application-level integration and certification for end-to-end functionality.[64] They enable interoperability across payment schemes, supporting implementations like Visa's payWave, Mastercard's PayPass, and American Express's ExpressPay, which adhere to common kernel specifications for transaction processing at point-of-sale terminals.[65] Compliance with the Payment Card Industry Data Security Standard (PCI DSS), overseen by the PCI Security Standards Council, is mandatory for contactless payment environments to protect cardholder data. Requirement 4 mandates strong cryptography, such as TLS 1.2 or higher, to encrypt sensitive authentication data during transmission over open networks, while Requirements 3.5 and 3.6 require documented key management processes, including generation, distribution, rotation, and destruction of cryptographic keys to prevent unauthorized access. These measures apply specifically to contactless transactions by ensuring that dynamic data elements, like cryptograms, are handled securely within the EMV protocol stack.[66] Regional variations adapt these global standards to local infrastructures. In Europe, the Single Euro Payments Area (SEPA) framework, coordinated by the European Payments Council, incorporates contactless card payments through harmonized schemes that support mobile contactless interoperability, enabling seamless euro-denominated transactions across member states using EMV-compliant interfaces.[67] In the United States, following the 2015 liability shift, EMV card-present adoption reached 92% as of Q4 2024, with major card networks mandating contactless capabilities in new terminals to align with global standards and boost adoption.[68] To facilitate device-level interoperability, GlobalPlatform standards govern secure element (SE) management in contactless-enabled devices like smartphones. The GlobalPlatform Card Specification and its amendments, such as Contactless Services Amendment C, define protocols for provisioning, personalization, and lifecycle management of applications within the SE, ensuring secure storage of payment credentials and over-the-air updates while maintaining isolation between multiple service providers.[69] This enables trusted execution environments for NFC-based contactless payments across diverse ecosystems.[70]

Adoption and Usage

Global Overview

Contactless payments have achieved widespread global penetration by 2025, with the market valued at $69.7 billion and an 86% consumer adoption rate among global users.[49] This growth reflects a seamless shift toward tap-and-go transactions facilitated by near-field communication (NFC) technology in cards, smartphones, and wearables. The ecosystem supports over 4.4 billion digital wallet users worldwide, underscoring the scale of integration into everyday commerce.[71] Projections indicate substantial expansion, driven by increasing daily usage patterns.[72] Key drivers fueling this adoption include heightened emphasis on hygiene following the COVID-19 pandemic, which accelerated the preference for touch-free interactions.[73] Additionally, the speed of transactions—typically 5 to 15 seconds per checkout—enhances efficiency at points of sale, reducing wait times compared to traditional methods.[5] Integration with e-commerce platforms further extends accessibility, allowing seamless transitions between in-store taps and online purchases via digital wallets.[74] Merchant acceptance has reached high levels, with approximately 90% of global point-of-sale (POS) terminals now supporting contactless payments, enabling broad availability.[49] Leading payment networks, such as Visa and Mastercard, collectively process about 70% of the overall contactless transaction volume, dominating the infrastructure for secure and rapid processing.[75] User demographics highlight a skew toward higher-income groups, with 46.5% of contactless payment users earning over $75,000 annually, reflecting greater access to compatible devices and services.[76] Millennials and Generation Z demonstrate particularly strong uptake, with adoption rates around 70% in these cohorts, prioritizing convenience and digital-native experiences.[77] This global momentum builds on foundational growth from the 2010s, when initial pilots evolved into scalable systems.[78]

Regional Variations

In Europe, contactless payment adoption reaches approximately 85% among consumers in the United Kingdom and Scandinavian countries as of 2025, supported by widespread NFC-enabled infrastructure and regulatory encouragement for cashless transactions.[79] The United Kingdom maintains a contactless transaction limit of £100, one of the highest in the region, facilitating seamless everyday purchases without PIN entry.[80] In Spain, contactless payments without PIN are limited to €50 per transaction, with cumulative limits typically up to €150 total or 5 transactions before a PIN is required. These limits apply equally to physical cards (e.g., from BBVA and Banco Sabadell) and mobile wallets like Google Wallet, per EU regulations with no bank-specific differences.[45][81][82] Transit integration is particularly advanced, as exemplified by France's SNCF railway network, which enables passengers to tap contactless cards or mobile wallets for ticketless entry and fare payment across high-speed and regional lines.[83] In the Asia-Pacific region, mobile digital payments achieve around 90% adoption in China, primarily through Alipay and WeChat Pay, where QR code scanning dominates but NFC options are increasingly available for in-store and peer-to-peer transfers.[84] These platforms process billions of transactions annually, integrating contactless features into e-commerce, ride-hailing, and retail ecosystems. NFC-specific adoption in China is estimated at around 60% as of 2025.[85] In India, the Unified Payments Interface (UPI) has propelled mobile contactless usage to about 80% among urban users, emphasizing low-cost, instant QR-based and NFC-enabled payments to bridge digital divides in densely populated areas.[86] North America shows varied adoption, with the United States seeing over 60% of in-store transactions as contactless in 2025, a significant rise from 20% in 2020, fueled by digital wallets like Apple Pay, which boasts over 64 million active users domestically.[87][88] This growth reflects expanded merchant acceptance and consumer preference for tap-to-pay amid post-pandemic shifts, including 200% year-over-year growth in Visa's Tap to Phone solution.[89] While Visa provides a merchant-facing Tap to Phone solution, Google Pay and Google Wallet are designed exclusively for consumers to make contactless payments and do not natively enable Android devices to function as merchant terminals for accepting payments. Merchants can utilize third-party payment processor solutions (e.g., Square, Stripe, SumUp) that offer "Tap to Pay on Android" capabilities, allowing acceptance of contactless payments—including from Google Pay, Apple Pay, and NFC cards—directly on compatible Android smartphones using NFC without additional hardware.[12][10][44][90] In Canada, adoption stands at 85%, bolstered by Interac Flash, a contactless debit system that allows quick transactions at over 1 million terminals nationwide.[91] In Latin America, Brazil's Pix instant payment system incorporates contactless NFC options, achieving 70% adoption by enabling real-time transfers and proximity payments via mobile apps and cards.[92] This integration has transformed remittances and retail, with Pix handling hundreds of millions of daily transactions. Mexico emphasizes NFC for cross-border remittances, where contactless features in wallets like those from BBVA facilitate secure, low-fee transfers for migrant workers.[93] The Middle East and Africa exhibit emerging strengths, with the United Arab Emirates at 75% adoption following Apple Pay's expansion in 2024, supported by government-backed digital economy initiatives and high smartphone penetration.[94] In South Africa, Capitec Bank leads mobile contactless at 65%, offering affordable NFC-enabled debit cards and app-based payments to underserved populations through its extensive branch network.[95] Recent regulatory efforts in Africa, such as South Africa's push for NFC interoperability, are accelerating adoption in underserved areas as of 2025.[78] Regional barriers persist, including infrastructure gaps in rural areas that limit NFC terminal availability and reliable internet for mobile wallets, hindering equitable access.[96] Transaction limits also vary significantly, such as varying by issuer (often $100 or no limit) in the United States compared to $200 in Australia, influencing consumer behavior and merchant configurations.[80][97]

Security and Privacy

Security Features

Contactless payment systems incorporate tokenization to enhance security by replacing the primary account number (PAN) with a unique, device- or transaction-specific token that cannot be used outside the authorized context. This process, managed by services like Visa Token Service, ensures that even if intercepted, the token reveals no sensitive card details, significantly reducing the risk of data breaches in NFC-based transactions.[98][99] Data transmitted during contactless interactions is protected through strong encryption protocols, typically employing Advanced Encryption Standard (AES) at 128 bits or higher to secure information in transit between the device and the payment terminal. Additionally, EMV cryptograms—unique, one-time codes—are generated for each transaction, providing dynamic authentication that prevents replay attacks and ensures transaction integrity under EMV specifications.[100][101] Cardholder Verification Methods (CVM) are applied based on transaction thresholds to balance security and convenience, with no PIN required for low-value payments—typically under $50 in the United States or £100 in the United Kingdom—to enable quick taps. For higher-value transactions or mobile wallets, stronger methods like biometrics (e.g., fingerprint or facial recognition) or PIN/passcode are enforced. For example, Apple Pay on iPhone requires authentication with Face ID or passcode (by double-clicking the side button and holding the device near the terminal via NFC), while Google Wallet on Android devices uses biometric authentication (face or fingerprint) or PIN in a similar process. These device-level authentications require no external hardware beyond the smartphone itself and are standard as of March 2026, enhancing security by keeping verification local to the trusted device. This is supported by EMV standards that allow issuers to configure CVM lists dynamically for contactless scenarios. Recent EMVCo updates, including enhancements to the Contactless Kernel Specifications as of 2025, introduce Consumer Device Cardholder Verification Methods (CDCVM) for improved biometric integration and limits on cumulative low-value transactions to mitigate risks.[102][103][101][104][105] Secure elements, tamper-resistant hardware chips embedded in cards and mobile devices, provide isolated environments for storing sensitive keys and performing cryptographic operations, making data extraction extremely difficult even under physical attack. These elements generate EMV cryptograms—unique, one-time codes—for each transaction, enabling mutual authentication between the device, terminal, and issuer to confirm legitimacy without exposing underlying credentials.[106][100] Issuers employ real-time artificial intelligence and machine learning for fraud detection, analyzing transaction patterns such as velocity and location to flag anomalies during contactless processing. To mitigate risks from lost or stolen devices, systems often impose limits on consecutive taps without additional verification, such as no more than five in regions adhering to Strong Customer Authentication rules, after which a PIN or biometric prompt is required.[107][108]

Risks and Vulnerabilities

Contactless payments are susceptible to skimming and relay attacks, where attackers use devices to amplify NFC signals and intercept transaction data from distances of up to 1-2 meters, far beyond the standard range of a few centimeters.[109] According to the ESET Threat Report for the first half of 2025, NFC-related attacks surged more than 35-fold compared to the second half of 2024, driven by advanced malware variants and relay scams targeting Android devices.[110] A 2025 study led by the University of Surrey highlighted how convenience features built into contactless payment systems undermine security, demonstrating ways to bypass safeguards and enable fraudulent transactions without user awareness.[111] Man-in-the-middle attacks pose another threat, where malware installed on point-of-sale terminals or user phones intercepts and steals payment tokens during transmission. This risk has escalated with the proliferation of Tap to Phone solutions, which allow merchants to accept payments using their smartphones; Visa reported a 200% global year-over-year growth in Tap to Phone adoption in 2025.[9] Low-value fraud exploits contactless limits that bypass PIN requirements for small transactions, typically under $50 or equivalent, leading to repeated unauthorized taps before detection. Globally, such fraud contributes to significant annual losses. Privacy concerns arise from persistent tokens in contactless systems, which can enable user tracking across multiple transactions if not properly rotated or anonymized. Data breaches in digital wallet apps exacerbate this, as seen in the 2025 incident where over 184 million credentials for services including Google were exposed in a massive leak.[112] Mitigation gaps persist in legacy contactless systems lacking tokenization, leaving card data vulnerable to interception without the protective substitution of dynamic tokens for sensitive information. Regional variances in enforcement further compound these issues, with inconsistent adoption of standards like EMVCo protocols in developing markets allowing outdated infrastructure to remain exploitable.[113]

Benefits and Challenges

Advantages

Contactless payments offer significant speed and convenience advantages over traditional methods, enabling transactions to complete in under 2 seconds on average, compared to 10-15 seconds for chip-and-PIN processes.[97][114] This efficiency stems from the near-field communication (NFC) technology that allows users to simply tap their card or device on a reader without inserting or swiping, streamlining checkout experiences in retail and transit settings.[115] As a result, merchants report reduced queue times, with contactless adoption cutting wait periods by up to one-third in high-volume environments like stores and public transport.[116] The touch-free nature of contactless payments also enhances hygiene, particularly in the post-COVID era, by minimizing physical contact with shared surfaces and reducing the risk of germ transmission during transactions.[117] Studies and health guidelines from the period emphasized this benefit, noting that avoiding handling cash or PIN pads lowers exposure to pathogens, aligning with broader public health recommendations for contactless interactions to curb virus spread.[118] In terms of security, contactless payments built on EMV chip standards provide enhanced protection over magnetic stripe methods, with implementations leading to a 76-80% reduction in card-present counterfeit fraud.[119][120] The dynamic data generated by EMV chips for each transaction prevents replay attacks common with static magstripe data. Additionally, tokenization further minimizes data exposure by replacing sensitive card details with unique, non-reusable tokens during payment processing, thereby limiting the impact of potential breaches.[121] Accessibility is another key benefit, as contactless systems integrate with voice-assisted mobile devices and apps, enabling users with visual or motor impairments to complete payments independently without physical manipulation of cards or terminals.[122] In transit applications, this inclusivity eliminates the need to insert cards or handle tickets, supporting equitable access for disabled individuals and reducing barriers in public mobility.[123] Economically, these features boost small merchants' sales by 15-20% through higher transaction values and faster service, allowing more customers to be served in less time.[124] Broader adoption of contactless and digital payments contributes to global economic growth, with studies estimating that increased digital transaction volumes enhance GDP by 6-8% through efficiency gains.[125] Environmentally, contactless payments reduce wear on physical cards by limiting insertions and swipes, extending card lifespan and decreasing plastic production needs over time.[126] The shift to digital receipts further cuts paper usage, with global estimates indicating that eliminating thermal paper slips saves millions of trees annually and lowers associated chemical waste from coatings like BPA.[127] Overall, these practices support sustainability by minimizing resource consumption in payment ecosystems.[128]

Benefits for small and medium-sized enterprises (SMEs)

Contactless payments significantly benefit small and medium-sized enterprises (SMEs) in their daily operations by streamlining transactions and addressing common pain points.

Faster Transactions and Operational Efficiency

Contactless payments, often processed in seconds, are up to twice as fast as chip-and-PIN or cash transactions. This reduces checkout times, shortens queues, and allows SMEs—such as cafés, retail shops, food trucks, and service providers—to serve more customers during peak periods without additional staffing. Staff can redirect time from payment handling to customer service or other tasks, boosting overall productivity.

Enhanced Customer Experience

By decreasing reliance on cash, SMEs lower costs and risks associated with cash management (counting, storage, transport, theft). Portable solutions like Tap to Pay on smartphones turn merchants' devices into contactless payment terminals, eliminating the need for additional hardware and minimizing expenses. Some methods offer competitive fees, improving cash flow through faster settlements. The convenience of tapping a card, smartphone (e.g., via Apple Pay or Google Pay), or wearable improves satisfaction, reduces abandoned purchases, and encourages impulse buys. SMEs offering contactless options align with modern consumer preferences, potentially increasing loyalty and repeat business.

Stronger Security and Fraud Reduction

Features like tokenization, encryption, and EMV standards make contactless transactions more secure than magnetic stripe or cash, reducing fraud risks, chargebacks, and disputes. The limited range of NFC minimizes skimming attempts.

Reduced Cash Handling and Costs

By decreasing reliance on cash, SMEs lower costs and risks associated with cash management (counting, storage, transport, theft). Portable solutions like tap-to-phone turn smartphones into terminals, minimizing hardware expenses. Some methods offer competitive fees, improving cash flow through faster settlements.

Hygiene and Safety

Touch-free transactions reduce physical contact, appealing post-pandemic and in high-touch environments, providing peace of mind for customers and staff.

Growth Opportunities

Faster checkouts can increase transaction volume and average order values. Adoption positions SMEs competitively in a digital payments landscape, with many viewing contactless as essential for efficiency and growth.

Costs and Fees

Contactless payments do not impose additional fees on consumers compared to traditional card methods such as swiping a magnetic stripe or inserting a chip for PIN verification. This lack of additional fees enhances accessibility and encourages wider adoption without any financial penalty. Major card issuers (including Wells Fargo, Capital One, and others) and payment networks like Visa and Mastercard explicitly state that there is no extra cost or charge for customers using contactless tap-to-pay over other in-person payment methods. This applies to both physical contactless cards and digital wallets such as Apple Pay and Google Pay. For merchants, contactless transactions are classified as card-present payments and generally incur the same processing fees as chip-and-PIN or swipe transactions. These include interchange fees paid to the card-issuing bank and assessment fees to the network. Some sources indicate that contactless payments may occasionally carry marginally higher interchange rates due to the lack of PIN entry for small transactions (increasing perceived fraud risk), but in practice, most payment processors (e.g., Square, Stripe) apply identical rates for all card-present methods, including tap-to-pay. Merchants may choose to add a surcharge for all credit/debit card transactions to offset their costs, but such fees are not specific to contactless and must comply with local regulations. Specific digital wallet implementations vary slightly: Apple Pay involves Apple charging card issuers a small fee (0.15% on credit transactions and $0.005 on debit), but this is not passed to consumers or merchants directly. Google Pay typically does not charge issuers similar fees. Overall, the convenience of contactless payments comes without added direct costs to everyday users.

Limitations and Concerns

Contactless payments exacerbate the digital divide by requiring access to compatible smartphones or cards, which excludes significant portions of the population. Approximately 29% of the global population—over 2.4 billion people—lacked mobile phone access as of early 2025, particularly affecting elderly individuals and those in rural areas where infrastructure is limited, with smartphone penetration varying but lower in such regions.[129] In the United States, about 4.2% of households, or roughly 5.6 million, remain unbanked as of 2023, creating barriers for low-income and minority communities who cannot easily adopt digital payment methods without traditional banking ties.[130] Adoption by merchants is hindered by substantial infrastructure costs, especially for small businesses, posing a heavy burden on operations in developing regions where economic constraints delay widespread implementation.[131] Transaction limits introduce friction in the payment process, often requiring users to revert to slower chip-and-PIN methods for higher amounts. In the United States, major networks like Visa and Mastercard commonly cap contactless transactions at $100 without additional verification, compelling fallback to traditional insertion for purchases exceeding this threshold and disrupting the seamless experience.[132] Privacy concerns arise from the aggregation of spending data in contactless systems, which can enable pervasive surveillance by payment processors and third parties. Transaction records, when combined with location and behavioral data, allow for detailed profiling of consumer habits, raising risks of unauthorized monitoring without adequate consent mechanisms.[133] Regulatory frameworks like the GDPR face enforcement gaps, with inconsistent application across member states leading to underreported violations in payment data handling, as evidenced by a 2024 surge in fines totaling €1.2 billion yet highlighting ongoing challenges in cross-border oversight.[134] Environmental impacts include contributions to e-waste through frequent device upgrades needed for NFC compatibility and the energy demands of mobile usage. The proliferation of smartphones and terminals accelerates electronic waste generation, with global e-waste reaching 62 million metric tons in 2022 and projected to grow, as obsolete devices are discarded to support updated payment features.[135] Additionally, NFC transactions, while brief, contribute to battery drain on mobile devices during repeated use, increasing overall energy consumption in data centers processing billions of taps annually.[136] Economic dependency on centralized networks heightens vulnerability to outages, disrupting contactless transactions on a massive scale. The July 19, 2024, global IT outage triggered by a CrowdStrike software update affected payment systems worldwide, halting millions of transactions and causing estimated losses in the billions for retailers reliant on digital infrastructure like Visa's network.[137]

References

  1. Q: What are contactless payments?
  2. Big Tech's Role in Contactless Payments: Analysis of Mobile Device ...
  3. [PDF] Contactless Marks Acceptable Use Case Guidelines | EMVCo
  4. [PDF] EMV® Chip At-a-Glance - EMVCo
  5. Tap to Pay - Learn About Contactless Payments - Visa
  6. The History of Contactless Payments
  7. Make purchases using Apple Pay - Apple Support
  8. Verify it’s you to make a purchase - Google Wallet Help
  9. Visa Tap to Phone Adoption Soars: 200% Year-over-Year Growth ...
  10. Tap to Pay on Android Contactless Payments - Square
  11. Stripe launches Tap to Pay on Android
  12. Tap to pay with your phone - Google Wallet Help
  13. Contactless 101: What you need to know about tap and go
  14. https://www.emvco.com
  15. The Rise Of Contactless Payments: How It's Disrupting The Way ...
  16. Contactless Payment Defined: Everything You Need to Know
  17. History of contactless payments - A timeline | Thames Technology
  18. https://www.octopuscards.com/en/aboutus/getting-started/history/index.html
  19. Our History - Memories and Milestones | Exxon and Mobil
  20. Tap and Go with SpeedPass - Credit Card Payment Processing ...
  21. Credit on your key ring - NBC News
  22. PHILIPS AND SONY ANNOUNCE STRATEGIC COOPERATION TO ...
  23. [PDF] Contactless Payment Cards: Trends and Barriers to Consumer ...
  24. How the Dutch became the frontrunners in payment transformation
  25. 3-in-1 Card brings Oyster convenience to Barclaycard customers - TfL
  26. Ten years of contactless | Barclays
  27. Form 10-K - SEC.gov
  28. Apple Announces Apple Pay
  29. Google's Android Pay is launching today - The Verge
  30. Samsung Pay Launches with NFC and MST - Nilson Report
  31. UK Raises Contactless Spending Limit to £30 - PYMNTS.com
  32. Britons used contactless for 42% of card payments in 2017
  33. Mobile Payment in China: Practice and Its Effects - MIT Press Direct
  34. [PDF] 2019: A Year in Review - EMVCo
  35. Cracking open the story and future of London's Oyster Card
  36. Mastercard sees 40% jump in contactless payments due to ... - CNBC
  37. 80 per cent of 85–95-year-olds now pay with contactless - Barclays
  38. Visa Launches its First U.S. Tap to Phone Pilot in Washington D.C. ...
  39. Wearable Payments Devices Market Size, Share Report 2030
  40. swatchpay | Swatch® Online Store
  41. https://www.apple.com/business/tap-to-pay-on-iphone/
  42. https://squareup.com/help/us/en/article/7786-get-started-with-tap-to-pay-on-iphone
  43. https://squareup.com/help/us/en/article/7960-get-started-with-tap-to-pay-on-android
  44. Tap to Pay | Stripe Terminal
  45. Everything you need to know about contactless payment limits
  46. Still Not Accepting EMV Chip Cards? Why You Need to Switch
  47. A 2025 Overview Of The E-CNY, China's Digital Yuan - Forbes
  48. Digital Wallet Users to Surpass Three Quarters of Global Population ...
  49. https://coinlaw.io/contactless-payment-statistics/
  50. OMNY
  51. What is near-field communication (NFC)? - TechTarget
  52. https://www.mouser.com/datasheet/2/737/Introduction_to_NFC_v1_0_en-2489399.pdf
  53. NFC Technology
  54. https://www.lenovo.com/us/en/glossary/nfc/
  55. The Beginner's Guide to NFCs (Near Field Communication)
  56. https://nfc-forum.org/news/2025-06-nfc-forum-announces-nfc-release-15/
  57. NFC and How it Works - RFID4U
  58. Near Field Communication System
  59. Host-based card emulation overview - Android Developers
  60. ACR1252U - USB NFC Reader III (NFC Forum Certified) | ACS
  61. Wearables in Banking & Payments - M2P Fintech
  62. ISO/IEC 14443-1:2018 - Contactless proximity objects
  63. What is the ISO/IEC 14443 Standard? - everything RF
  64. [PDF] MIFARE ISO/IEC 14443 PICC selection - NXP Semiconductors
  65. EMV® Contactless Chip | EMVCo
  66. What are EMV® Level 1 and Level 2 Testing? - EMVCo
  67. EMV & PCI DSS Compliance: Cryptography Requirements
  68. Mobile Contactless SEPA Card Payments Interoperability ...
  69. https://www.emvco.com/about-us/worldwide-emv-deployment-statistics/
  70. Contactless Services – Amendment C v1.3 - GlobalPlatform
  71. An Introduction to GlobalPlatform's End-to-End Framework for NFC ...
  72. Digital Wallets Market Report: Growth, Trends 2025-2030
  73. Contactless Payment Value to Double by 2030, Reaching $18.1 ...
  74. Covid-19 accelerated the digitalisation of payments
  75. Contactless payments: A tap into the future - Mastercard
  76. Global Payment Network Statistics 2025 - CoinLaw
  77. Contactless Payments Statistics By 2025: Quick Secure Technology
  78. The Contactless Payments Market Overview in USA for 2024
  79. Contactless Payment Market Data Report 2025-30 - Juniper Research
  80. 50 payment and merchant statistics shaping Europe in 2025 - GR4VY
  81. Contactless Card Limits in Every Country in 2025 - Merchant Machine
  82. Contactless transactions - SCA
  83. El límite de los pagos sin contacto: ¿Cuándo se necesita el PIN?
  84. Europe Digital Payments Overview 2025: Turkey Leads Eastern ...
  85. Sample Report: Asia-Pacific Digital Payments 2025 - yStats
  86. https://www.statista.com/topics/8725/mobile-payments-in-china/
  87. Asia-Pacific Digital Payments 2025: Payment Methods, Trends ...
  88. US Contactless Payments 2025: Trends & Challenges - Cheqly
  89. https://www.chargeflow.io/blog/apple-pay-vs-google-pay-statistics-adoption-rates-market-share
  90. https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.21271.html
  91. Tap to Pay | SumUp
  92. [PDF] Canadian Payment Methods and Trends Report 2025
  93. Pix: Brazil's Instant Payment Revolution - Segpay
  94. https://www.statista.com/topics/8136/digital-payments-in-latin-america/
  95. 5 Key Payment Trends to Watch in 2025 - Amazon Payment Services
  96. Middle East Contactless Payment Industry Report 2025
  97. Addressing transport disadvantages in regional and rural areas ...
  98. https://squareup.com/us/en/the-bottom-line/starting-your-business/what-is-a-contactless-payment
  99. Tokenization offers more seamless and secure payments | Visa
  100. [PDF] Visa Token Service - VTS Product Fact Sheet
  101. [PDF] Technologies for Payment Fraud Prevention: EMV, Encryption and ...
  102. 4 Key Features of the New EMV® Contactless Kernel Specification
  103. [PDF] Contactless Limits and EMV Transaction Processing
  104. CDCVM: Promoting Security, Reliability and Convenience - EMVCo
  105. Apple Pay security and privacy overview
  106. How Google Wallet protects your payments
  107. EMV® Contact Chip | EMVCo
  108. [PDF] 2023 Corporate Responsibility & Sustainability Report | Visa
  109. [PDF] How contactless is reinventing the way people pay - Visa
  110. [PDF] SoK: Security of EMV Contactless Payment Systems - arXiv
  111. [PDF] ESET Threat Report H1 2025
  112. Exposing security loopholes in modern contactless payments
  113. Data breach exposes logins, passwords for 184M Apple, Facebook ...
  114. [PDF] 2024 REPORT ON PAYMENT FRAUD - European Banking Authority
  115. https://fortune.com/2017/05/15/mastercard-chip-pin-verifione/
  116. Contactless payments: Everything you need to know - Adyen
  117. contactless card machines speed up queue times retail payment ...
  118. Contact or Contactless Payment: Impact of COVID-19 Pandemic on ...
  119. Guest Post: The Rise of Contactless Payments in a Coronavirus World
  120. EMV cards are resulting in a 76 percent drop in card-present fraud
  121. Why EMV chip cards are replacing magnetic stripes - Worldpay
  122. Essential Guide to Payment Tokenization: Benefits and Best Practices
  123. Making payments accessible, one tap at a time | Visa
  124. Designing Inclusive Solutions for Contactless Fare Payment
  125. https://www.paycron.com/blog/u-s-merchants-see-surge-in-contactless-payments/
  126. Digital payments and GDP growth: A behavioural quantitative analysis
  127. The Environment-Friendly Aspects of Contactless Payment
  128. Eco-Friendly Payment Solutions: Save Money & the Planet
  129. Contactless Payments for Global Health & Sustainability - NMI
  130. Digital 2025: Global Overview Report - DataReportal
  131. FDIC Survey Finds 96 Percent of U.S. Households Were Banked in ...
  132. Contactless Limits and EMV Transaction Processing
  133. Why Do Contactless Payment Limits Matter? - ReliaBills
  134. CFPB Seeks Input on Digital Payment Privacy and Consumer ...
  135. [PDF] GDPR Enforcement Tracker Report 2024 | CMS Law
  136. Contactless Payment Environmental Impact
  137. Green vs. Grey: The Environmental Impact of Digital Payments
  138. July 19, 2024, global tech outage news | CNN Business
User Avatar
No comments yet.