EMVCo

EMVCo -- Governing Body for Chip Payment Standards

EMVCoEMVCoStandardBody managing EMVEMVApplicationGlobal chip payment card standard.Click to view → payment standards.Click to view → is the global technical body responsible for managing, maintaining, and enhancing the EMV specifications that define chip-based payment card transactions. Founded in 1999, EMVCo is jointly owned by six payment networks: American Express, Discover, JCB, Mastercard, UnionPay, and Visa. Its specifications cover contact and contactless payment interfaces, tokenization, 3-D Secure authentication, and QR code payments.

Specification Portfolio

EMVCo maintains four core books for chip card transactions. Book 1 covers the application-independent ICC-to-terminal interface. Book 2 defines security and key management, including the RSARSACryptographyPublic-key algorithm for smart card signatures and key exchange.Click to view →-based offline data authentication mechanisms (SDA, DDA, CDA). Book 3 specifies the application layer, including the transaction flow, cardholder verification methods, and risk management. Book 4 covers the terminal interface requirements. Beyond these, EMVCo publishes specifications for contactless kernels (C-1 through C-8), EMV 3-D Secure (3DS), and Payment Tokenization.

Type Approval Process

Before a smart card chip, payment terminal, or mobile payment application can be deployed on a major payment network, it must pass EMVCo Type Approval. This certification validates compliance with the relevant EMV specifications through a combination of functional testing, performance benchmarking, and security assessment. Products that pass receive an EMVCo Letter of Approval, which is a prerequisite for network brand certification by Visa, Mastercard, and other members.

Industry Impact

EMVCo specifications have driven the global migration from magnetic stripe to chip technology, reducing card-present fraud by over 80% in markets that have completed the transition. The organization also shapes the evolution of contactless payments, ensuring interoperability across ISO 14443 implementations from different card manufacturers like Thales, IDEMIA, and NXP. Through its associate and subscriber programs, EMVCo engages a broad ecosystem of banks, manufacturers, and technology providers in specification development.