What a contactless payment is
A contactless payment is a transaction where you hold your card, phone, or watch near a reader instead of inserting it or swiping it. The reader picks up a radio signal from your device—usually from a distance of a few centimetres—and the payment goes through without you entering a PIN or signing anything. The whole thing takes a second or two.
The technology behind this is called NFC, which stands for near-field communication. It's the same radio frequency that lets your phone unlock a door or share a photo with another phone. When you tap, your card or device sends encrypted payment information to the merchant's reader. The reader doesn't see your full card number—it sees a one-time code that's only good for that single transaction.
Contactless payments are not the same as online payments or mobile wallets, though they often work together. A mobile wallet like Apple Pay or Google Pay stores your card information on your phone and uses NFC to send it to a reader. A contactless card is a physical card with an embedded chip that does the same thing without needing a phone.
Key Takeaways
- Contactless payments use radio signals to send payment information from your card or phone to a reader, with no physical contact or PIN required for most transactions.
- The technology is called NFC (near-field communication), and it sends a one-time encrypted code rather than your actual card number.
- Most contactless transactions under a certain amount—usually $100 to $200 depending on your bank and card—do not require a PIN or signature.
- Contactless cards have a small radio chip embedded in the card itself, while mobile wallets use NFC on your phone or watch to send the same kind of signal.
- The merchant's reader must support NFC for contactless to work; not all payment terminals have this capability yet, though adoption is widespread in retail and restaurants.
How the signal travels from your card to the reader
When you hold your card or phone near a contactless reader, your device broadcasts a radio signal on a frequency of 13.56 megahertz. This frequency is part of the NFC standard, which is the same one used in transit cards, hotel key cards, and other tap-to-use systems. The reader picks up this signal from a distance of about 4 centimetres, though some readers can detect it from slightly farther away.
Your card or phone doesn't send your actual card number or expiration date over this signal. Instead, it sends a tokenized version of your payment information—a one-time code that's unique to that transaction and that merchant. Your bank and the payment network (Visa, Mastercard, or American Express) have already agreed on how to create and verify this code, so the merchant's reader can confirm it's legitimate without ever seeing your real card details.
The entire exchange—signal sent, code verified, payment approved—usually takes less than a second. If the transaction is approved, the reader displays a checkmark or beeps, and you're done. If something goes wrong (the reader can't reach your bank, the code doesn't verify, or the amount is too high), the transaction is declined and you'll be asked to use a different payment method.
Why most small contactless payments don't need a PIN
Many banks and card networks allow contactless transactions under a certain limit—often $100 to $200—to go through without a PIN or signature. This is called a contactless limit or tap limit, and it varies by card issuer and country. The idea is that for small purchases, the speed and convenience of contactless outweigh the security risk.
The security argument works because of how tokenization works. Since the merchant never sees your real card number, and the code is one-time only, a stolen card or phone can't be used repeatedly without additional verification. Also, if someone taps your card without permission, you can dispute the charge with your bank just as you would with any other unauthorized transaction. Your bank will investigate and reverse the charge if it wasn't you.
If a transaction exceeds your contactless limit, the reader will ask for a PIN or signature, or it will decline the transaction and ask you to insert or swipe your card instead. Some merchants can override this and ask for a PIN anyway, even on small purchases—this is the merchant's choice, not your bank's.
Contactless cards versus mobile wallets
A contactless card is a physical card with a small radio chip embedded near the surface. The chip is powered by the reader's signal, so it doesn't need a battery. When you tap the card, the chip sends your tokenized payment information to the reader. Most new credit and debit cards issued in the United States now come with this chip built in, though older cards may not have it.
A mobile wallet like Apple Pay, Google Pay, or Samsung Pay stores your card information on your phone or smartwatch and uses NFC to send it to a reader the same way a contactless card does. The difference is that your phone has a battery and can do more—it can verify your identity using your fingerprint or face, it can show a receipt on screen, and it can work with apps that track your spending. But at the moment of payment, the technology is the same: NFC sends a one-time code to the reader.
Some people use both. You might tap your contactless card at a grocery store and use your phone at a coffee shop. Both methods hit the same reader and work the same way from the merchant's perspective. The choice is usually just about what's in your pocket.
Which merchants accept contactless payments
A merchant can accept contactless payments only if their payment terminal has an NFC reader. Adoption has been widespread in the United States since around 2020, but it's not universal. Most large retailers, grocery stores, gas stations, and restaurants now have contactless-capable readers. Many small businesses and older establishments do not.
If a reader doesn't have NFC, you'll see no contactless symbol on it, and tapping won't work. You'll need to insert your card, swipe it, or use a different payment method. Some terminals have NFC but it's turned off by the merchant, usually for security reasons or because they haven't configured it yet. In that case, tapping won't work either.
You can usually tell if a reader supports contactless by looking for a small symbol that looks like a WiFi icon turned sideways (four curved lines). This symbol appears on the reader itself or on a sticker near the payment terminal. If you're not sure, you can always ask the cashier or just try tapping—if it doesn't work, you'll find out when ready and can use another method.
Security and fraud protection with contactless
Contactless payments are generally considered as find as or more find than swiping or inserting a card, because the merchant never receives your full card number. The tokenized code sent over NFC is encrypted and one-time only, so even if someone intercepts the signal, they can't use that code again or for a different merchant.
The main risk with contactless is that someone could tap your card or phone without your knowledge if you're in a crowded place. However, the contactless limit (usually $100 to $200) caps how much damage they can do in a single transaction. If you notice unauthorized contactless charges on your statement, you can dispute them with your bank the same way you would any other fraudulent charge. Your bank will reverse the transaction and issue you a new card if needed.
To reduce this risk, some people keep their contactless card in an RFID-blocking wallet or sleeve, which prevents the signal from reaching the card. These are inexpensive and widely available. You can also monitor your bank statements regularly and set up transaction alerts through your bank's app so you're notified of any charges right away.
Contactless limits and when you'll need a PIN
Your contactless limit depends on your bank and card type. Most major banks in the United States set limits between $100 and $200 for a single contactless transaction. Some banks have higher limits for their premium cards. A few banks have no contactless limit at all and require a PIN for every transaction, regardless of amount.
When you exceed your limit, the reader will typically decline the contactless transaction and ask you to insert your card and enter your PIN instead. Some readers will ask for a PIN even on small purchases if the merchant has configured it that way. You can also choose to insert your card or swipe instead of tapping, even on small purchases—the choice is yours.
Your contactless limit resets after each transaction. So if you tap for $50, your next contactless purchase can also be up to your limit (say, $150), not just $100 more. The limit is per transaction, not cumulative.
Frequently Asked Questions
Can someone steal my card information by tapping my card without permission?
Someone could theoretically tap your card to initiate a payment, but they would be limited by your contactless limit—usually $100 to $200 per transaction. You can dispute any unauthorized charge with your bank, and they will reverse it. To reduce the risk, keep your card in an RFID-blocking wallet or monitor your statements regularly for suspicious activity.
Do I need a special card to use contactless payments?
Most new credit and debit cards issued in the last few years come with contactless capability built in. If your card has a small radio chip or a WiFi-like symbol on it, it supports contactless. If you're not sure, ask your bank or look at your card—contactless cards usually have a small label or symbol indicating the feature.
What happens if the contactless reader doesn't work?
If tapping doesn't work, the transaction will be declined and you'll be asked to use a different payment method. This could mean the reader doesn't support NFC, the reader is broken, or your card or phone isn't compatible. You can insert your card, swipe it, or use cash instead.
Can I use contactless payments on my smartwatch?
Yes, if your smartwatch has NFC and is paired with a mobile wallet like Apple Pay or Google Pay. You tap your watch to the reader the same way you would a phone. Not all smartwatches have NFC, so check your device's specifications before assuming it will work.
Is contactless faster than inserting my card?
Yes, contactless is usually faster. A tap takes about one second, while inserting a card and waiting for the reader to process it can take five to ten seconds. The difference is small for a single transaction, but it adds up if you make many purchases throughout the day.