How Card Payment Machines Work and What Happens to Your Money
What a card payment machine does
A card payment machine—also called a point-of-sale terminal, card reader, or swipe machine—is the device a merchant uses to process your credit or debit card at checkout. When you insert, swipe, or tap your card, the machine reads your card number, sends it to your bank for approval, and tells the merchant whether the transaction went through. The whole thing usually takes 10 to 30 seconds.
The machine itself does not hold your money or decide whether you have enough funds. It is a messenger between the merchant, your bank, and the card network (Visa, Mastercard, American Express, or Discover). Your bank is the one that actually approves or declines the charge based on your account balance, credit limit, or fraud detection rules.
Key Takeaways
- A card payment machine sends your card information to your bank for approval; it does not store your card number or hold your money.
- The machine communicates with three parties: the merchant's bank, your bank, and the card network, and each one takes a small fee from the transaction.
- Chip readers and contactless (tap) payments are more secure than magnetic stripe swiping because they encrypt your data and cannot be copied as easily.
- If a transaction is declined, the machine will show a code; common reasons include insufficient funds, incorrect PIN, or fraud alerts from your bank.
- Merchants are responsible for keeping the machine secure and following payment industry rules, but you are not liable for fraudulent charges on your card.
How your card information moves through the system
When you hand over your card or tap it on a machine, the device reads your card number, expiration date, and sometimes your name. That information is encrypted—scrambled so only the right parties can read it—and sent over a secure connection to the merchant's bank. The merchant's bank then contacts your bank (the issuer) and asks: "Does this person have the money or credit to cover this charge?"
Your bank checks your account in real time. If you have enough funds or available credit, it sends back an approval code. If you do not, or if the charge looks suspicious, it sends back a decline. The merchant's machine receives that answer and either prints a receipt or displays an error message. The whole conversation happens in seconds, even though three separate banks and a card network are involved.
After approval, the money does not move immediately. Your bank puts a temporary hold on the funds (called an authorization hold) to make sure the money is there. The merchant's bank then settles the transaction—actually moving the money from your account to the merchant's account—usually within one to three business days. That is why you sometimes see a charge pending on your statement before it becomes final.
Why different card readers work differently
Older machines read the magnetic stripe on the back of your card—the black band with your card data encoded on it. Magnetic stripe data is easy to copy, which is why card skimming (stealing card numbers from ATMs or gas pumps) became common. A criminal could record your stripe data and use it to make fraudulent charges.
Chip readers (also called EMV readers, after the standard they follow) are more secure. When you insert a chip card, the machine creates a unique code for that single transaction. Even if a criminal steals that code, they cannot use it again because it only works once. Chip cards are much harder to counterfeit than stripe cards.
Contactless payments—tapping your card or phone on a reader—use the same chip technology and encryption. They are just as secure as inserting a chip card, and they are faster. Some machines require you to enter a PIN or sign for large contactless purchases, but many do not, which is why contactless payments are convenient for small transactions.
What happens when a transaction is declined
When a card payment machine rejects your card, it displays a code on the screen. The merchant usually sees this code, but you might not. Common decline codes include: insufficient funds (you do not have enough money or credit available), incorrect PIN (you entered the wrong number), card expired (your card's expiration date has passed), or fraud alert (your bank flagged the charge as suspicious and blocked it).
If your bank declines a charge because it looks fraudulent, that is actually protecting you. Your bank has rules about what kinds of charges are normal for your account. If you suddenly try to buy something in a different country, or if the amount is much larger than usual, your bank might block it. You can call your bank to confirm the charge is legitimate, and they will approve it.
If the machine says insufficient funds, it means your available balance is too low. This can happen even if your account shows a higher balance, because pending charges and authorization holds reduce your available balance. If you think this is a mistake, contact your bank to ask what is currently on hold.
Fees that come out of every card transaction
Every time you swipe or tap a card, the merchant pays a fee to process it. This fee is split among three parties: the card network (Visa, Mastercard, etc.), the merchant's bank, and your bank. The merchant's bank keeps the largest share, called the interchange fee. These fees are why some merchants offer discounts for paying with cash or check—they want to avoid the processing cost.
You do not pay these fees directly as a customer. The merchant builds them into the price of goods and services. However, some merchants pass the cost on by charging a surcharge for credit card payments, or by offering a lower price for cash. This is legal in most places, though a few states and cities have restrictions on surcharges.
How to protect yourself when using a card machine
Cover the keypad with your hand when you enter your PIN so no one can see it, even if you are in a private checkout line. If you are using a machine at an ATM, gas pump, or unfamiliar location, wiggle the card reader slot before you insert your card—if it moves or feels loose, it might be a skimming device placed over the real reader. Do not use a card machine that looks damaged or has loose parts.
Check your card statement regularly, at least once a week. If you see a charge you do not recognize, contact your bank right away. Federal law limits your liability for fraudulent charges: if you report the fraud within 60 days of the statement date, you are not responsible for the charge. If you wait longer, you might be liable for up to $500 of fraudulent charges.
Use chip or contactless payment when available instead of swiping the magnetic stripe. If a machine only has a stripe reader and you are uncomfortable using it, ask the merchant if they have another option. Many modern machines have multiple readers built in.
What merchants have to do to keep your card safe
Merchants are required to follow a set of security rules called PCI DSS (Payment Card Industry Data Security Standard). These rules say merchants must encrypt card data, keep their machines updated with security patches, and not store sensitive information like your PIN or the three-digit security code on the back of your card. If a merchant violates these rules and your card is compromised, the merchant—not you—is liable for the fraud.
Merchants must also display a notice if they charge a surcharge for credit card payments, and they cannot charge a surcharge for debit cards in most states. If you see a surcharge you were not told about before checkout, you can refuse to complete the transaction.
Frequently Asked Questions
Is it safe to use my card at a machine I have never seen before?
Chip and contactless readers are generally safe because they encrypt your data and create a unique code for each transaction. Magnetic stripe readers are riskier because the data can be copied. If you must use a stripe reader, check the machine for loose parts or signs of tampering first. Gas pumps and ATMs are common targets for skimming devices, so inspect those carefully.
Why does my bank sometimes decline a charge even though I have money in my account?
Your bank may block a charge if it looks unusual for your account—a purchase in a foreign country, an amount much larger than normal, or a merchant type you do not usually buy from. This is fraud protection. Call your bank to confirm the charge is legitimate, and they will approve it. You can also set up alerts in your bank's app so you know about large charges before they are processed.
What should I do if a card machine keeps declining my card?
First, make sure you are entering the correct PIN and that your card has not expired. If the machine says insufficient funds, check your available balance (not just your account balance, because holds reduce what is available). If you believe the decline is an error, contact your bank directly. Do not keep trying the same card repeatedly, because multiple failed attempts can trigger a fraud lock.
Can a merchant see my full card number when I use their machine?
No. Modern machines are designed so the merchant never sees your full card number. They see only the last four digits on the receipt. Your bank and the card network see the full number, but it is encrypted so it cannot be intercepted. This is why it is safe to hand your card to a cashier—they cannot steal your number from the machine.
Do I have to pay a surcharge if a merchant charges one for credit cards?
You do not have to, but the merchant can refuse the sale if you do not. Surcharges are legal in most places, though some states cap how much a merchant can charge. If you disagree with a surcharge, you can pay with cash, debit, or a different card. Some merchants offer discounts for cash instead of charging surcharges for credit.