EMVCo

Introduction

EMVCo is a technical standards body that develops and manages specifications for secure card and digital payment technologies. Founded in 1999 and headquartered in the United States through a consortium governance structure, it serves global payment networks, issuers, acquirers, processors, device makers, and payment technology vendors. EMVCo maintains the EMV chip specifications that underpin most modern card-present and many digital payment transactions worldwide.

What is EMVCo and what does it do

EMVCo, short for Europay, Mastercard, and Visa, is a global payment standards organisation that manages technical specifications for interoperable and secure payment acceptance. Its standards cover chip cards, contactless payments, payment tokenisation, QR code frameworks, 3-D Secure authentication, and related testing and approval processes. EMVCo’s specifications are implemented by card schemes, payment processors, terminal manufacturers, mobile wallet providers, and financial institutions globally.

Mission and remit

EMVCo develops common technical standards intended to improve interoperability and security across card-based and digital payment ecosystems. Its remit includes maintaining EMV chip specifications, defining certification and testing processes, coordinating industry working groups, and publishing implementation guidance for payment stakeholders. EMVCo does not regulate payment providers or supervise financial institutions; it operates as an industry standards body rather than a regulator.

Core work domains

• EMV chip card specifications — Technical standards for integrated circuit payment cards used in card-present transactions.
• Contactless payment standards — Specifications supporting NFC-based tap-to-pay acceptance across cards, devices, and wallets.
• 3-D Secure protocols — Authentication frameworks used in ecommerce and remote card payment flows.
• Payment tokenisation — Standards for replacing card credentials with tokens in digital payment environments.
• Testing and approval programmes — Certification and interoperability processes for terminals, cards, kernels, and payment software.

Geographic scope and cross-border reach

EMVCo operates globally and its specifications are implemented across most major card-payment markets. Its standards are used by international card schemes, banks, acquirers, PSPs, payment gateways, terminal vendors, and mobile wallet providers across North America, Europe, Asia-Pacific, Latin America, Africa, and MENA markets. The organisation supports cross-border interoperability by maintaining common technical specifications adopted by multiple payment ecosystems and national implementations.

Why EMVCo matters for payments operators

EMVCo’s standards reach payment operators primarily through downstream implementation requirements imposed by card schemes, acquirers, processors, terminal vendors, and payment partners. PSPs and acquirers rarely interact with EMVCo in the same way they interact with trade associations, but their infrastructure, acceptance environment, and authentication flows are heavily shaped by EMV specifications.

For payment operators, EMVCo standards commonly affect payment acceptance, device certification, ecommerce authentication, tokenisation, wallet integration, and compliance processes. Product teams encounter EMV specifications when integrating contactless acceptance, softPOS solutions, QR acceptance, network tokenisation, or 3-D Secure authentication flows. Compliance and operational teams encounter EMVCo requirements through scheme mandates, terminal certifications, and downstream processor or acquiring requirements.

Acquirers, gateway providers, and orchestration platforms also encounter EMVCo frameworks through ecommerce authentication standards such as EMV 3-D Secure and through tokenisation specifications used by digital wallets and network token providers. Terminal vendors, device manufacturers, and embedded payment providers are among the most direct implementers of EMVCo technical requirements.

Who runs EMVCo and how is it organised

EMVCo is governed by its owner-member payment networks: American Express, Discover, JCB, Mastercard, UnionPay, and Visa. The organisation operates through an executive management structure supported by technical working groups and associate participation programmes. Its secretariat and operational functions coordinate specification development, testing programmes, and industry engagement activities across multiple payment domains.

Membership composition

EMVCo does not operate as a traditional open-membership trade association. Governance authority is concentrated among its owner-member global payment networks, while broader industry participation occurs through technical engagement and associate programmes.

Working groups and decision rights

Technical work within EMVCo is organised through domain-specific working groups and specification committees. These groups develop and maintain standards covering chip technologies, authentication, QR frameworks, tokenisation, and acceptance infrastructure. Final governance authority and specification approval remain with the owner-member payment networks. Industry participants may contribute technical feedback, implementation input, and consultation responses through associate engagement channels and working sessions.

What standards does EMVCo publish and how do they get used

EMVCo publishes technical specifications that underpin global card acceptance, secure authentication, and interoperable payment infrastructure. These standards are implemented by card schemes and incorporated into downstream scheme rules, terminal certifications, processor requirements, and payment application frameworks.

Adoption and downstream regulation

EMVCo standards are typically adopted through card-scheme mandates and network operating rules rather than direct regulation. Major card networks require compliance with EMV-related specifications for acceptance infrastructure, terminal certification, authentication flows, and tokenisation frameworks. Regulators and central banks in multiple jurisdictions also reference EMV standards indirectly when establishing payment-security expectations or national migration programmes for chip and contactless acceptance.

EMV 3-D Secure standards are widely embedded into ecommerce authentication frameworks and are commonly used to support regulatory compliance with strong customer authentication and fraud-management requirements in card-not-present environments.

Events and convenings

EMVCo convenes long-running technical and industry engagement events, including user meetings, technical sessions, and implementation forums focused on payment security, authentication, acceptance technologies, and interoperability. These events primarily target payment networks, issuers, acquirers, vendors, processors, and technical implementation stakeholders rather than general fintech networking audiences.

How to engage with EMVCo

Industry participants can engage with EMVCo through associate programmes, technical working groups, consultation processes, implementation feedback channels, testing and approval programmes, and industry events. Participation is generally relevant for payment networks, processors, PSPs, terminal vendors, wallet providers, device manufacturers, and payment technology firms involved in implementing EMV standards. Governance rights remain with the owner-member payment networks, and participation costs and programme structures vary depending on engagement level and certification activity.

FAQ

Is EMVCo a regulator?

No. EMVCo is an industry standards organisation, not a financial regulator or supervisory authority. Its specifications become operationally important because card schemes, processors, acquirers, and certification programmes adopt them through downstream implementation rules and technical requirements.

Who founded EMVCo?

EMVCo was established in 1999 by Europay, Mastercard, and Visa to manage interoperable EMV chip-payment specifications during the migration from magnetic-stripe cards to chip-based payment acceptance. Its ownership structure later expanded to include American Express, Discover, JCB, and UnionPay.

What standards does EMVCo maintain?

EMVCo maintains technical standards for EMV chip cards, contactless acceptance, 3-D Secure authentication, payment tokenisation, QR code payments, terminal testing, and interoperability certification. These standards are used by card schemes, issuers, acquirers, PSPs, processors, terminal vendors, and digital wallet providers.

Can my company join EMVCo?

Companies cannot join EMVCo as governing members unless they are owner-member payment networks. However, banks, PSPs, processors, vendors, fintech firms, laboratories, and payment technology providers can participate through associate programmes, technical engagement channels, working groups, consultations, and testing or approval programmes.

How does EMVCo enforce its standards?

EMVCo does not directly enforce standards as a regulator. Compliance usually happens downstream through card-scheme operating rules, certification requirements, acquirer mandates, processor integration requirements, testing laboratories, and acceptance infrastructure obligations.

Is EMVCo the same as PCI SSC?

No. EMVCo and the PCI Security Standards Council are separate payment standards bodies. EMVCo focuses on transaction interoperability, chip, contactless, tokenisation, QR, and authentication standards, while PCI SSC focuses on payment data security standards such as PCI DSS.