The EMV chip credit card transition in the US has been a disaster
qz.com
qz.com
This "disaster" in the US appears more like a case of poor education and training than a problem with chip cards themselves.
I believe the issue is that many vendors here have old card readers that are slow. It's not just a training issue.
1) The user experience is mostly only bad because it's not clear whether terminals accept the chips or not. Once everyone has chip cards this will be a nonissue.
2) Chip and pin cards in Europe have had serious problems with attacks that make it possible to use a small device between the card and terminal to use stolen cards without knowing the pin, making the whole pin system fairly pointless.
Chip cards still provide a lot of security, and chip+signature allows restaurants to continue the system where waiters take the card to terminal away from the table.
Anyway, in my opinion the bigger issue is that chip cards do nothing to secure internet transactions. This is sort of a shame, but it would require much more effort on the part of the credit card processors, merchants, and banks to fix.
I know researchers have demonstrated "stealing" low-value things, like a coffee, in an offline transaction. That's not especially useful for criminals.
> chip+signature allows restaurants to continue the system where waiters take the card to terminal away from the table
In Europe, that was seen as a problem — waiters weren't (aren't?) trusted not to record the card number for future use.
A device like this [1] can sign a transaction, but at least the British banks only use it for online banking (logging in, making a transfer and/or adding a new destination for a transfer).
[1] https://en.wikipedia.org/wiki/Chip_Authentication_Program
There are portable POS terminals you know. Most of the time the portable device is used first for ordering, where the waiter enters the order, kitchen receives it and the billing software makes the receipt ready. When the guest is ready to pay, he uses the card right beside the guest.
Btw, this existed in EU for years now.
I think the solution to online payments is something like Apple Pay coming to all platforms.
Remove it at any time, no. The chip on the card is cryptographically signing the transaction, which includes the total. It can't sign it until the total is known.
In practice, I suspect the equipment is designed not to allow you to insert the card early so that you check the total first.
If the cashier made a mistake, you can say something to the cashier before they confirm. Worst case you can always reverse it.
- it's as fast as swyping and signing;
- there are portable terminals using gsm, so no waiter has to take your card far from you (yes, take a photo of your card from front and back and go shopping online!)
- there is competition among the providers: you can stick to the company that will have a smaller fee providing you the equipment.
When used my card in travels to the USA, found it funny to have to swype: the magnetic strip is easily damaged (and wouldn't work sometimes) and the "signature" on those equipments were laughable, since you sign whatever you want.
In Europe, don't remember to have swiped my card. But the PIN had some problem (and had the same in the USA with chip+pin): cards can have 4 or 6 digits inn Brazil, but there were room for just 4. Sometimes it works if you type just the first 4, some countries you type the last 4.