BankThink

Target Goes from Security Chumps to Champs

Target, by all accounts, the corporate face of retail data breach, is driving full force to use its complete embrace of EMV to bolster its tarnished image and put it in the vanguard of card fraud protection and data security. And it is targeting one of the biggest sticking points to EMV: user adoption.

While it has long been recognized that true EMV compliance means chip and PIN, most U.S. companies are struggling to get onboard with just the chip card piece, let alone a chip card that requires a PIN. Americans are fickle and slow to change. The success of true EMV migration depends upon our ability to change both the way we scan our card and the way we authenticate with a PIN instead of a signature.

Companies fight an uphill battle to get consumers to "dip the chip" instead of "swipe the stripe" when at the register. Most cards are still enabled with both options. Some businesses have POS hardware that will prompt a chip instead of a stripe if available, when paying at the register. Most of us, myself included, find themselves swiping the stripe mindlessly. We shop on autopilot.

Some businesses have their cashiers educate consumers. Still others have the chip reader installed but have not enabled it yet. It seems we are all holding our breath, waiting for the other shoe to drop. Once fully enabled, will this create bottlenecks and panic at the register? How long will it take for consumers to digest this new way of paying? And, how long until companies can introduce the PIN piece to EMV? They must get consumers to first Dip...and then remember their PIN. As more and more EMV enabled cards drip into my mailbox, I find that most businesses I frequent don't have the readers enabled yet.

Kudos to Target: it has held up its EMV flag and is holding it high. A few days ago, I received my new EMV enabled Target REDCard (after getting an email warning me it was coming).

Looking at my new REDcard, I see Target has tackled three birds with one stone:

First, the new REDcard has two little arrows next to the chip telling users how and where to insert it (I had to chuckle at that). Next, it has made our "should I swipe or dip?" decision for us by completely removing the magstripe. Finally, it has included the PIN piece and all card use requires inputting your PIN, which you set up.

So Target is way ahead of the curve here. They have completely leapfrogged over the rest by going straight to Chip and PIN: Complete compliance. It has also included an insert to further educate REDcard holders on how to use their new card and to absolutely memorize their PIN.

They have followed up this effort with a nice section on their website covering all the changes, called "Chip Cards at Target: 5 Things to Know Before you Check Out" - https://corporate.target.com/article/2015/08/emv-migration 

So what's in it for Target? Is there anything but a headache at the end of this EMV rainbow for merchants and businesses? If this cloud has a silver lining, it may be that once we get card users entering their PINs, there will be less fraud and less liability to the merchant if trouble does arise.

And as a consumer, who doesn’t like to receive both a new card and new technology in a single package?

Julie Lambert is the marketing, social media and administrative manager for MoneyTech Search Group.

For reprint and licensing requests for this article, click here.
Retailers Data security Analytics
MORE FROM AMERICAN BANKER