You are on page 1of 19

Annual Report

2022

1
Contents
Message from the Chair 3

EMVCo At-a-Glance 5
• The History of EMVCo
• EMVCo Today: Enabling Seamless and Secure Payments Worldwide
• 2022 by the Numbers

EMV® Technologies 6
• 2022 Milestones
• Advancing EMV in 2023

Resource Spotlight
Industry Engagement and Collaboration 12
• Current EMVCo Participants Click this icon throughout
• Industry Partners and Liaisons the report to access EMVCo
resources and content.
Approvals and Evaluations 16

EMVCo Marks 17

All information in this report is as of 31 December 2022.

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

2
Message from the Chair
Advancing EMV® The total number of EMV® Chip cards in circulation Supporting these technical advancements, EMVCo
neared 12 billion this year, with over 91% of all card- also upgraded its website to improve useability and
as the foundation present transactions using EMV Chip technology. search functionality and communicate the value
for seamless and These figures highlight the continued importance of of EMV. The site will continually evolve to support
robust transaction security and consistent payments the needs of the EMVCo community and external
secure payments to global commerce, and the foundational role of stakeholders to become the hub of all EMVCo
the EMV infrastructure. communications.

With EMV Chip as the bedrock technology, EMVCo Once again, we experienced the immense value of
In 2022, the EMVCo
continued to advance EMV Specifications to support industry engagement in helping to advance these
community continued
seamless and secure transactions across efforts and evolve EMV Specifications to support
to advance EMV as the
in-person, e-commerce and remote channels. the future of payments. This was underscored by
foundation for seamless
the return to in-person meetings for the first time
and secure payments Key initiatives included: since 2019, with Associate attendance totalling 284
worldwide.  ublication of the first EMV Contactless Kernel
P at meetings across the globe in 2022, while virtual
Specification to simplify global acceptance for Associate attendance totalled 765 during the year.
merchants, solution providers and payment
systems; As we look to 2023, we are excited to have Arman
Aygen on board as EMVCo’s new Director of
 chieving the 100th Software-Based Mobile
A
Technology, who joined in the latter half of 2022,
Payment (SBMP) security evaluation;
and to welcome Oliver Manahan as the new
 ur work to enhance the EMV 3-D Secure
O Director of Engagement and Operations. We wish
Specifications (EMV 3DS) to help issuers and Bastien Latge and Brian Byrne the best in their
merchants combat growing card-not-present (CNP) next endeavours and thank them for their efforts over
fraud risks;
 dvancements to EMV Secure Remote Commerce
A
and dedication to EMVCo’s work over the past
several years.
91%
(EMV SRC) to support more flexibility, choice and
control for merchants and consumers making and Thank you to everyone who contributed in
accepting online payments; 2022 to EMVCo’s work to advance seamless
and secure payments. We look forward to
 ctive industry collaboration with the World Wide
A
continued collaboration in 2023.
Web Consortium (W3C) and the FIDO Alliance
through the Web Payment Security Interest
Jonathan Main, Group (WPSIG) initiative to promote consumer
Chair of the EMVCo privacy while ensuring convenient and seamless
Board of Managers e-commerce checkout experiences. of all card-present transactions
use EMV Chip technology.
EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

3
EMVCo enables card-based payments to
work seamlessly and securely worldwide.

Specifications Approval and EMVCo Marks Industry


Evaluation Engagement and
Mission:
Collaboration
To facilitate the
worldwide interoperability
of secure payment
transactions by developing
and publishing the
EMV® Specifications and
their related testing
processes
Create, evolve Facilitate approval Manage marks that Engage and
and promote and evaluation of denote implementation collaborate with
EMV Specifications products for compliance of the EMV Specifications the payments industry
with EMV Specifications

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

4
2000
Our History

2004

2006

2008

2009
2002

2003

2005

2020
2007

2022
2001

2010
1990

2014

2016

2018

2019
1994

1996

1998

1999

2012

2013

2015

2021
1992

1993

1995

2017
1997

2011
1991
1990s 1999 2000 2004 2007 2009

Card businesses in different EMVCo was created by EMV Level 1 Test Plan was JCB joined as a member. Its EMVCo announced it would evolve American Express joined EMVCo
countries globally looked to Mastercard1 and Visa designed. This represented status as a global payment its focus to include contactless as a member, broadening
combat rising card payment to administer the new the start of a comprehensive organisation, coupled with payments. The aim was to industry involvement within
fraud by using microchips, which specification, enhance payment evaluation and approval its presence in the Japanese ensure that two devices could EMVCo and providing further
are difficult to counterfeit. The security and support seamless programme enabling EMVCo to and Asian markets deploying communicate effectively and experience and technical
technology was designed to meet payments. confirm products and solutions EMV-compliant infrastructure, efficiently. expertise that could be
domestic payment requirements will perform in accordance with aligned with EMVCo’s leveraged in support of EMVCo
The global technical body also EMVCo’s work in the area later
which created cross-border the EMV Specifications when goal to deliver worldwide activities.
included a Board of Advisors, expanded to include the licensing
interoperability challenges for deployed. interoperability through the
comprised of issuers and of the globally recognised EMV
businesses and consumers. EMV Specifications.
acquiring banks, to provide Today this includes accrediting contactless symbol and indicator.
EMV® ’96 Integrated Circuit Card strategic input on EMVCo’s laboratories globally, qualifying
Application Specification for activities and specifications. test tools, and listing approved
Payment Systems was published and evaluated EMV products and The increased deployment of
to offer a global approach to solutions on the EMVCo website contactless payment infrastructure,
reducing fraud at retail store for use worldwide. combined with a growing interest
locations. in adding contactless capability
to mobile devices, led EMVCo to
include mobile payments in its
scope.

Europay, now part of Mastercard, was also an original EMVCo member. The term EMV originally came from Europay, Mastercard and Visa, the three companies that
1

collaborated to develop the original specifications and form EMVCo. Today EMV is a registered wordmark.

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

5
2000
Our History

2004

2006

2008

2009
2002

2003

2005

2020
2007

2022
2001

2010
1990

2014

2016

2018

2019
1994

1996

1998

1999

2012

2013

2015

2021
1992

1993

1995

2017
1997

2011
1991
2010 2013 2014 2016 2017 2019 2022

EMVCo launched its UnionPay and Discover With EMV cards and terminals EMVCo published EMVCo published the To provide a common EMVCo published the
Associates Programme. became members of enhancing payment security the EMV® 3-D Secure EMV® QR Code Payment baseline for the development EMV® Contactless Kernel
The participation EMVCo. The addition in-store, EMVCo recognised Specification to Specifications to provide of payment solutions that Specification to address
framework allowed all of these new members that fraudulent card activity enable consumer clarity on using QR Codes simplify the e-commerce industry demand for a
interested payment represented further global was moving towards card-not- authentication for to facilitate mobile checkout process to make it single EMV contactless
industry stakeholders industry involvement and present environments. e-commerce and payments at point-of-sale. consistent, convenient and kernel that can be used by
to play an active role in added vital expertise at remote purchases, secure, EMVCo published all stakeholders globally
EMVCo expanded its scope The work enabled
guiding EMVCo’s strategic a time when payment without adding the EMV® Secure Remote for seamless and secure
to lead payment tokenisation merchants to accept QR
and technical direction. technology innovations unnecessary friction to Commerce Specification. contactless acceptance.
activity. The work improved Code based payments in a
were rapidly evolving. the checkout process. Consumer-facing solutions
The framework continues payment security by removing standardised manner and This means that EMVCo’s
and programmes based on
to advance to align with the most valuable data to a The work is supported consumers to benefit from contactless offering is now as
this specification are known
market requirements fraudster within a transaction, by an extensive testing a more uniform experience. comprehensive as the EMV
as Click to Pay.
and create unique the primary account number programme. Contact Chip Specification.
Today EMVCo also delivers
opportunities for all (PAN), and replacing it with a This was supported by the
a self-testing framework
interested and relevant unique alternative value, the launch of the Click to Pay
for EMV QR Codes and
organisations to comment EMV Payment Token. Icon to ensure consumer
manages licensing of the
and provide input directly familiarity, which EMVCo
Today an extensive Use EMVCo QR Marks.
on EMV® Specifications. licenses for industry use.
Case Guide and Registration
Programme further support the
core token activity.

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

6
2022 in Numbers

Adoption Participation Approvals and Evaluations

11.98bn 9480
11
EMVCo approved
EMV® Chip payment
cards in global
and evaluated
circulation – Interactive meetings products
in 2021 held in 2022 globally

601
68.2% 91.9%
Associates and Subscribers 184
qualified
81
accredited

20
test tools testing laboratories

Working Groups and Task Forces


Resource Spotlight

751 Queries answered by


of cards issued of all card-present EMV Insights: EMV® Chip Growth
are EMV transactions conducted
compliant globally used
EMVCo in 2022 Continues Globally
EMV Chip technology
(as of June ‘22)

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

7
EMV® Technologies – 2022 Milestones

EMV® EMV® EMV®


Contactless Contact 3-D Secure
Chip Chip

 MV® Contactless Kernel Specification to


E EMV Contact Chip Specification v4.4 EMV 3DS v2.3.1 Helps Combat Card-Not-
Simplify and Advance Global Contactless Present Fraud
Payment Acceptance EMVCo published a new version of the
EMV Contact Chip Specification. The EMVCo published an update to the EMV 3-D
EMVCo published the first EMV® Contactless new version (v4.4) includes all existing Secure (3DS) Specifications to help issuers
Kernel Specification to support the evolution specification bulletins in the current and merchants combat growing card-not-
of contactless and mobile payments and version 4.3 of EMV book 1/2/3/4. present (CNP) fraud risks. EMV 3DS v2.3.1
simplify global acceptance for merchants, builds on earlier versions of the specifications
solution providers and payment systems. The with new data elements and flows that
specification addresses industry demand for an streamline consumer authentication.
EMV Contactless Kernel that can be used by all
stakeholders globally for seamless and secure Resource Spotlight
contactless acceptance.
eBook: EMV® Chip EMV 3DS Bridging Messaging Extension
At-a-Glance eBook
EMVCo published an EMV 3DS Bridging
Message Extension with new data elements
from 3DS v2.3.1 that enable existing 3DS v2.1
and v2.2 products to support the latest 3DS
payment use cases.
Resource Spotlight Resource Spotlight
Talking Payments with EMVCo: Talking Payments with EMVCo:
A Closer Look at the EMV® EMV® Chip Evolution, Security
Contactless Kernel Specification & Approvals Resource Spotlight

EMV Insights: How is the User Experience


Enhanced in EMV® 3-D Secure v2.3?

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

8
EMV® Technologies – 2022 Milestones

EMV® Secure EMV® EMV®


Remote Payment Mobile
Commerce Tokenisation

EMV SRC v1.3 Supports More Flexible Online Checkout New EMV Payment Tokenisation Use Cases EMVCo Issues Milestone 100th Security
Evaluation Certificate for Software-Based
EMVCo published an update to the EMV® Secure Remote EMVCo published EMV Payment Tokenisation Mobile Payment Solutions
Commerce (SRC) Specifications to bring increased – A Guide to Use Cases v2.2 to describe
flexibility, choice and control to online checkout use case examples that demonstrate the EMVCo issued its 100th Security Evaluation
experiences for both consumers and merchants. extent and flexibility of the EMV Payment Certificate for Software-Based Mobile
Tokenisation Technical Framework. Version 2.2 Payments (SBMP) solutions. This milestone
New EMV SRC Use Cases adds use cases that show the combination of reflects significant industry uptake from
EMV Payment Tokenisation with EMV SRC and leading device manufacturers and product
EMVCo published EMV Secure Remote Commerce (SRC)
EMV 3DS technologies. vendors to demonstrate the security of their
Use Cases v1.0 to provide insights on ways merchants
solutions through a globally recognised
can use EMV SRC Specifications to provide secure and
programme, promoting trust and confidence
convenient checkout options. The document covers
across the payments ecosystem and
a number of payment scenarios, including Merchant
simplifying the deployment of safe and
Orchestrated Checkout, Merchant Digital Card on File
secure mobile wallet solutions.
Checkout, and Merchant Presented QR Code Checkout.

Resource Spotlight Resource Spotlight

EMV Insights: Exploring the EMV® Video: The What, Why and How
Secure Remote Commerce Use Cases of EMV® Payment Tokenisation

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

9
Advancing EMV® in 2023

Evolving EMV® Chip

The EMV® Chip Specifications provide Contactless Kernel Specification was a


a blueprint for chip technology to strategic decision to enable EMV Chip
work consistently anywhere in the to keep pace with classical attacks
world to deliver the same result – without impacting performance.
secure, seamless and reliable in-store The publication of updated EMV
payments. Chip Security Guidelines in 2023
will address the use of ECC across
Following the publication of the EMV the specifications. In addition,
Contactless Kernel Specification in EMV Contactless Specifications for
2022, work is now progressing on Payments Systems: Book E – Security
a supporting testing programme. and Key Management is anticipated
While timing is still to be finalised, to be published for Associate review
it is anticipated that test tools will in Q1 2023. This document defines
be available for development and the approaches and cryptographic
debugging in the first half of 2023, methods (including ECC) to ensure
with the full testing suite to follow in adequate security functionality.
2024.
Looking further ahead, each passing
EMVCo also remains committed to year brings the payments industry
evolving the EMV Chip Specifications closer to a truly post-quantum
to incorporate advanced security and world. While the impact of quantum
technology features to help protect computing on current cryptography is
against future threats and support the constantly evolving, EMVCo continues
next generation of payments. to explore and evaluate potential
risks. This includes collaboration with
For example, the introduction of
PCI SSC to examine key issues relating
Elliptic Curve Cryptography (ECC)
to security and cryptography.
in Version 4.4 of the EMV Contact
Chip Specification and the EMV

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

10
Advancing EMV® in 2023

Supporting Changing Payments Preferences

An ongoing priority for EMVCo is EMVCo’s ongoing evaluation of the role


supporting the delivery of secure, wireless technologies, such as Wi-Fi,
quick and convenient checkout Ultra Wideband (UWB), Bluetooth Low
experiences, no matter how consumers Energy (BLE) and mobile data, can
choose to pay. play in supporting in-store payment
SCAN TO PAY
experiences also continues to progress
The industry has already seen the with the planned publication of a
widespread digitalisation of payment white paper exploring the data and
cards to enable consumers to pay with security considerations across multiple
their smartphones, wearables and use-cases.
other mobile devices, and EMVCo is
continuing to evolve its Level 1 testing More broadly, EMVCo recognises the
requirements to support the use of need to respond to the challenge
different form factors at the point-of- of supporting secure, seamless and
sale. This includes ongoing liaisons with unified payment experiences across
ISO and NFC Forum. multiple channels. As the importance
of ‘omnichannel’ grows, EMVCo will
The same trend for digitalisation is now continue to investigate opportunities
apparent for payment acceptance to enhance the EMV® Specifications
technology, with smartphones and in line with evolving expectations and
tablets increasingly used in place of industry feedback from our Advisors.
traditional point-of-sale terminals.
Following the conclusion of the
TapToMobile Early Adopter Programme
in 2022, EMVCo is now assessing the
data gathered and exploring the
definition of ‘Acceptance Criteria’ to
ensure a good user experience.

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

11
Advancing EMV® in 2023

Promoting Seamless and Secure


E-Commerce Payments

EMV® Specifications support Similarly, EMVCo is focused on


a growing number of evolving evolving use cases for EMV SRC
technologies that are shaping the and EMV Payment Tokenisation
future of digital payments and to demonstrate how these
e-commerce. specifications are promoting
payments innovation.
Following the publication of EMV
3DS v2.3.1 in September 2022, the It is also important to recognise
supporting testing framework is how changing browser privacy
expected to be available from requirements are impacting the
January 2023. EMVCo is actively use of consumer data throughout
consulting and seeking input on the transaction process. EMVCo’s
key features to be included in continued work with the FIDO
version 2.4 of the specification. Alliance and W3C through the Web
Payments Security Interest Group
In addition, EMVCo plans to publish is ensuring that the organisations’
a white paper that provides respective technologies can continue
payments stakeholders with to provide a seamless and secure
examples and use-cases to illustrate online payment process, while
key 3DS features and support promoting consumer privacy.
implementation. The first release
of the white paper is scheduled for
Q2 2023, with a follow-up paper
anticipated in Q4.

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

12
Industry Engagement and Collaboration

Did You Know?


Payments industry stakeholders can contribute to
EMVCo’s work through participation in:
EMVCo’s Board of Advisors to propose new initiatives
and vote to approve publication of a final draft of a
specification.
Regular EMVCo advisory and technical meetings to
develop, enhance and evolve EMV Specifications.
Review and comment periods for draft EMV® Specifications.

As EMVCo Associates, As a multi-stakeholder As an EMVCo Advisor, As an EMVCo Advisor, Our primary motivation for As an EMVCo Associate, Our collaboration
we immediately organisation supporting and the European Payment Ingenico welcomed the joining the EMVCo Board of we saw clear opportunities with EMVCo has
saw the benefit of promoting standardisation Council welcomed the opportunity to support Advisors is that we believe it’s to contribute to the significantly assisted
extending EMV 3DS requirements for a market- publication of the EMV the evolution of the EMV hugely important for the MRC development of global with PASA’s stakeholder
authentication request driven implementation, Contactless Specification. contactless ecosystem. This to bring the collective merchant specifications that promote engagement efforts.
messages with airline ECSG is glad to benefit from Its creation addresses a evolution will keep fostering voice to the table. To discuss, seamless and secure
information. longstanding and active key need for a common contactless payment review, and implement standards payments worldwide.
participation of EMVCo in its contactless kernel and adoption, providing better that help consumers and We look forward to
Payments Association of
work, enabling a consistent will be of great benefit to user experience and merchants enjoy safe and secure continued and productive
South Africa (PASA)
customer experience when payments in Europe. future-proof security to card payment transactions. collaboration with EMVCo.
Amadeus
making or accepting card consumers. We’re looking forward to
payments in Europe. collaborating with the other
Advisors and to working closely
European Payments Microsoft
with our partners at EMVCo to
Council Ingenico
achieve this important goal.
European Cards
Stakeholders Group

Merchant
Risk Council

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

13
Current EMVCo Participants*

*Participants as of 31 December 2022 14


Industry Partners and Liaisons

EMVCo works closely


with regional and global
technical bodies and
industry associations. This
collaboration supports the
development of specifications
and initiatives that improve
security and payment
experiences around
the world.

For more than 20 years APSCA This [Use of FIDO Data in 3DS Messages] paper, The U.S. Payments Forum has When W3C began to focus on streamlining e-commerce
has collaborated with EMVCo as well as FIDO Alliance’s complementary worked closely with EMVCo over the checkout, EMVCo and W3C recognised the value of
to educate stakeholders across technical note, provides essential information years in our efforts to support the developing an industry partnership. With the FIDO Alliance
Asia-Pacific on the benefits of on how FIDO can be used alongside EMV 3DS introduction and implementation we then established a dedicated Web Payment Security
using EMV® Specifications as to provide higher levels of security, enhanced of EMV Chip and other new and Interest Group. All three organisations now work more
a foundation for seamless and user experiences, and better overall approval emerging technologies that protect closely to improve online payment security and to enhance
secure payments. These efforts rates for e-commerce merchants. These papers the security of, and enhance interoperability among our respective technologies. Through
have been key to driving EMV are part of our longstanding relationship with opportunities for, payment this collaboration we anticipate that merchants, payment
Chip migration in the region, and EMVCo and our shared focus on providing transactions within the U.S. service providers, and other industry stakeholders will benefit
supporting the continued growth answers to the questions we often receive on from more secure and streamlined online payments.
of contactless, mobile NFC, QR how our FIDO Alliance standards and EMVCo
Codes and digital payments. specifications can work together. U.S. Payments Forum
W3C Resource Spotlight
EMVCo, FIDO & W3C Roundtable:
APSCA FIDO Alliance
How do EMV® 3-D Secure and Secure
Payment Confirmation Work Together?

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

15
Event Engagement

tles
s World C
ETA
Transac Authentica art Payme
ac
on t
DO te Sm nt
nt
gr FI X T D
E

Co

es

ay
M
s
EMVCo connected
with the global payments MPE Berlin MRC
Vegas
sor
tiu m Mem F Payments S
community by speaking at n be SP um
Co
r /U
12 leading payments industry

A
M
S

ST

m
ee
TO

it
conferences in 2022,

tin
MUL

g
educating on topics including
contactless payments,
secure online commerce
and industry
collaboration.

Commun ica Com ummer Mee e Fintech For


rop
e
ity m er mu FS olf
Eu M thA ni SP
ti n
g W
um
r U
C

ty
ee
SS

CN

Me
tin
PCI

PCI SS

et
g

ing
16
Approvals and Evaluations

EMVCo brings confidence


to the global payments

9480 184 81
ecosystem through the
approval and evaluation of
payment products that meet
EMV® Specifications for
performance, compatibility
and security.

EMVCo Approved
Accredited Testing
and Evaluated Products Qualified Test Tools
Laboratories
Globally

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

17
EMVCo Marks

EMVCo manages and licenses trademarks (EMVCo Marks) that indicate payment
technology which uses and is aligned to the EMV Specifications. This promotes
EMVCo Marks at a Glance
confidence and trust in payment technology both in-store and for e-commerce
transactions. Marks promote payment trust,
familiarity and consistency.
• EMVCo Marks encourage a payment landscape
that can be trusted by all parties and promotes
confidence across the payment industry.

EMVCo Marks demonstrate


implementation of the EMV Specifications.
• Businesses use EMVCo Marks on their products
EMV® Chip Contactless Contactless and solutions to show that they have met
Terminal icon Indicator Symbol EMVCo expectations for functional performance,
compatibility and security.

Recognisable visual marks inspire


consumer confidence.
• Easy-to-recognise symbols at point-of-payment
provide consistency and familiarity to the
payment experience and inspire consumer
confidence during the checkout process.

Click to Pay Icon QR Scan Icon QR Payment Mark

Visit the Trademark Center

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC.

18
New for 2023  EMVCo Knowledge Hub Thank you

Visit the Connect with EMVCo


EMVCo Knowledge Hub
for access to all EMVCo Join us on LinkedIn:
educational resources on linkedin.com/company/emvco
EMV® topics, including
EMV Insights and the
Talking Payments with EMVCo Follow us on Twitter:
podcast. twitter.com/emvco

Watch more on YouTube:


Search EMVCo
Subscribe
directly to receive
notifications on
the latest
updates. CLICK HERE

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC. Copyright © 2023 EMVCo
19

You might also like