A card-present transaction is a payment made when the customer’s payment card is physically at the point of sale, such as a checkout terminal, chip reader, or contactless reader. Because the card and buyer are both present, merchants can verify the card with chip, PIN, signature, or tap-to-pay controls.
In cyber security, card-present payments matter because they face different fraud patterns than online payments. Physical transactions reduce some forms of card-not-present fraud, but they still can be attacked through skimming devices, compromised POS terminals, stolen cards, counterfeit chip cards, or terminal malware that captures payment data. Defenses include EMV chip authentication, encrypted card readers, strong POS hardening, tamper checks, and monitoring for unusual refund or reversal activity. For merchants, the term also matters operationally: fees and risk controls often differ for card-present and card-not-present channels, so understanding which sales fall into each category helps with both fraud prevention and cost analysis.