What C-Store Retailers Need To Know About EMV
Operators face a large liability shift if they do not install EMV readers by 2015
There are some technological advances that retailers really look forward to. A new gadget that will make their jobs easier, or a new technology that helps boost sales, perhaps. Conversely, there are things retailers do not request, but are forced to accept.
Europay, MasterCard and Visa (EMV) chip technology is one of the latter, according to Dan Hopping, president and CEO of Next Retail Group LLC, a Cary, N.C.-based consulting company that helps retailers deal with new technologies.
EMV is a global standard for the interoperation of integrated circuit cards â also referred to as IC cards or chip cards â and IC card-capable point-of-sale (POS) terminals, as well as the authentication of credit and debit card transactions. It is a joint effort between Europay, MasterCard and Visa to ensure security and global interoperability so that Visa and MasterCard cards can continue to be accepted everywhere.
There is still plenty of uncertainty regarding EMV, however. "It has a deadline [for when it must be implemented]," Hopping said. "But nobody is being clear about what the penalty is if you miss the deadline."
The first stated deadline was Oct. 15, but Hopping noted that few retailers have implemented EMV systems yet. Plus, it's not an easy process to do so. "For many retailers, this might be as big a deal as Y2K [compliance]," he said. "You may have to change your payment software, hardware and processes and help retrain your customers to deal with chip and PIN."
Hopping added that he's not even sure who put forth the deadlines for retailers to follow. "There are so many stakeholders involved, so it's hard to know," he said.
Despite the deadlines, Randy Vanderhoof, executive director of the Smart Card Alliance and acting director of its EMV Migration Forum, told Convenience Store News that retailers are not required to implement EMV at this time. Instead, they receive financial incentives for enacting EMV and could face penalties in the future if they do not implement the technology.
One benefit of implementing EMV, according to Vanderhoof, is that retailers who have already done so and who process more than 75 percent of their payment transactions through devices that are capable of supporting EMV "will no longer submit their annual PCI (payment card industry) audit reports to the payment brands. That could be a huge annual cost that merchants have to pay to keep their PCI compliance up to date."
IMPLEMENTATION CHALLENGES
Hopping of Next Retail Group noted that EMV can be accomplished somewhat simply in regards to in-store purchases. However, customers who prefer to make mobile payments or Internet payments present a daunting challenge for EMV compliance.
"The problem regarding mobile wallets for retailers is knowing which [mobile wallet] technology will win," he said. "Will it be PayPal, Google, Visa, MasterCard, Isis or Merchant Customer Exchange?"
He believes many merchants will not be able to successfully implement EMV until they have a mobile wallet payment system in place. "The payments channel through the retail infrastructure is the same pathway," he explained. "So you can't do one and ignore the other."
If retailers do not implement EMV, their fraud responsibility will become tremendous. "Some people are saying the liability [with EMV] could be very big and even wipe out a company," said Hopping.
Vanderhoof of the Smart Card Alliance relayed a similar concern. "If retailers do nothing, there will be a liability shift in 2015," he said. "The least secure party in the transaction will bear the cost of any fraud associated with that transaction."
For instance, Vanderhoof stated that if a retailer does not upgrade to EMV and a customer walks into a store with an EMV-capable card, the store owner will bear the responsibility â beginning Oct. 1, 2015 â if fraud occurs from processing the transaction on a magnetic stripe reader. Prior to 2015, the credit card issuer will absorb the liability.
UNCERTAINTY AWAITS
Although some aspects of EMV are easily understood, uncertainty abounds when it comes to a multitude of other aspects. Acknowledging this problem, the International Retail Users Group (IRUG) is attempting to navigate these murky waters. Hopping said IRUG is an effective group because it is totally retailer run and operated; vendors have no say except for marketing persuasion.
"It's probably the last of the true user groups," said Hopping, who is a member of IRUG's board.
The group is led by President Ron Ferri of supermarket and convenience store operator Giant Eagle.
"U.S. retailers face a tremendous challenge in preparing their hardware and software environments to accept and process EMV chip technology for credit and payments and the advancement of mobile retailing," Ferri stated.
While plenty of EMV roadmaps exist on the Internet, all of them have been formulated to help financial companies, not retailers. That's why IRUG has formulated a retailer roadmap. The organization has also created a white paper containing examples of "lessons learned" from retailers that have already implemented EMV.
FINANCIAL BURDEN
Another challenge that awaits convenience store retailers planning to implement EMV is the financial aspect, particularly for smaller retailers.
Hopping admitted that smaller retailers do not have the resources to properly investigate EMV. "Everybody who talks to you is trying to sell [small retailers] something," he warned. "And some of them are trying to scare you. So what do you do?"
Erv Jones, IRUG's director of marketing and marketing logistics, told CSNews that one thing retailers shouldn't do is wait to implement EMV at their stores. "[Retailers] should be taking action now with the [current] information they have," said Jones, noting that IRUG continues to make enhancements to its roadmap.
Getting retailers together and creating a roadmap that tells retailers what to do and when to do it is the only answer, according to Hopping. Subsequently, retailers must talk to their vendors and decide which technologies to upgrade.
Hopping said retailers are in "trouble" if they don't take steps toward EMV implementation by this April because the deadline will no longer "slide" in regards to moving the liability from the bank to the retailer.
Like IRUG, the Princeton Junction, N.J.-based EMV Migration Forum, created by the Smart Card Alliance in July, is also trying to clear the confusion. The Forum is comprised of manufacturers, processors and retailers.
"We plan to meet once a quarter to have face-to-face conversations and updates about EMV migration in the U.S.," said Vanderhoof. "The EMV Migration Forum has set up four separate working committees that meet on a regular basis via conference call to define the requirements for EMV migration for all stakeholders and to get input from the different participants."
The Forum has reached out to several trade organizations, including NACS, the Association for Convenience & Fuel Retailing.
"Some people are saying the liability [with EMV] could be very big and even wipe out a company."
â Dan Hopping, Next Retail Group LLC
FOR MORE ON EMV
EMV Migration Forum
International Retail Users Group