... at the self-checkout of a major grocery store?
> Outside the US tap+pin/dip+pin is even common
As far as I can tell "dip + pin" is exactly what I do with a debit card. This is literally the first time I've ever heard the term "EMV", so I looked it up:
> EMV cards are smart cards, also called chip cards, integrated circuit cards (ICC), or IC cards, which store their data on integrated circuit chips, in addition to magnetic stripes for backward compatibility. These include cards that must be physically inserted or "dipped" into a reader
As far as I can tell, that exactly describes my debit card.
> but banks for some reason really are averse to requiring Americans to add a pin to credit cards.
Well, yes, the entire selling point of tapping the card is that you don't spend those precious seconds on entering a pin. And my point here is to reject that culture of hurrying up (at the potential expense of carelessness).
Tap (NFC, radio), dip (EMV, chip), or swipe (magnetic stripe).
The fake terminal concern that vlovich mentions above is real. Look up "credit card skimmers" (the same threat applies to debit cards and ATMs -- anything with a magstripe and keypad).
This is a big deal. It's happened to me three times in the last few years, twice within a week of each other (and likely from the same location).
There are some EMV skimmers in the wild too. They're called "shimmers" because the mechanism is very thin and inserted into the EMV dip slot. These need a separate mechanism to capture PIN input via keypad, so they remain a better choice (but keep reading).
NFC is the safest, and fastest. The cryptography between the card and reader is intact and not replayable etc. Apple Pay is equally good from a safety perspective, and better from many others. I don't know about Google Pay.
Other problems with using your debit card: credit card contracts offer better protections against fraud; and of course there is no immediate debit to your account, so you are never stuck fighting to recover already-stolen funds.
The entire point of EMV and NFC is increased card security. It's nice that they're also quicker, but that's quite secondary.
So, do as thou wilt, obviously. But your mudstickery may be putting you at additional risk. I don't estimate the time difference as meaningful for you or other customers.
You have still not explained why. You have only expanded the claim. What is different about how "the cryptography" etc. is implemented? Why would other physical interactions between the card and the reader not enable the same security? If it's possible, why doesn't it happen?
... at the self-checkout of a major grocery store?
> Outside the US tap+pin/dip+pin is even common
As far as I can tell "dip + pin" is exactly what I do with a debit card. This is literally the first time I've ever heard the term "EMV", so I looked it up:
> EMV cards are smart cards, also called chip cards, integrated circuit cards (ICC), or IC cards, which store their data on integrated circuit chips, in addition to magnetic stripes for backward compatibility. These include cards that must be physically inserted or "dipped" into a reader
As far as I can tell, that exactly describes my debit card.
> but banks for some reason really are averse to requiring Americans to add a pin to credit cards.
Well, yes, the entire selling point of tapping the card is that you don't spend those precious seconds on entering a pin. And my point here is to reject that culture of hurrying up (at the potential expense of carelessness).