Contactless Transaction Limit

A contactless transaction limit is the highest amount for which a card payment made by tapping a card on a terminal can be approved without the cardholder entering a PIN or providing another form of verification. Above the limit, the terminal asks for a PIN, or the payment must be made by inserting the card. The limits exist to balance the speed of contactless payments against the risk that a lost or stolen card is used by someone else.

Limits come from several sources. In Europe, regulation sets an upper bound through the rules on strong customer authentication. Card networks set "cardholder verification method" limits for each country, and issuers can choose lower limits or require a PIN more often. Payments made with a phone or watch wallet usually follow different rules, because the cardholder authenticates on the device.

Think of a coat check at a theatre that hands back cheap umbrellas to anyone holding a ticket, but asks to see ID before returning a fur coat. The small items are quick to return and the loss would be modest if a ticket were stolen; the valuable ones need extra checks.

A contactless limit works the same way. Small payments go through with a quick tap. Larger ones, or a long run of small ones, require the cardholder to prove it is really them by entering a PIN.

• Single-transaction limit. The maximum value of one tap without verification, set by country.
• Cumulative limits. A cap on the total value or number of contactless payments since the cardholder last entered a PIN, tracked by counters on the card's EMV chip or by the issuer.
• Terminal configuration. Terminals are set with the national limit and prompt for a PIN above it, according to the cardholder verification method rules.
• Issuer choice. Issuers can decline contactless payments or ask for a PIN at any time, for example after unusual activity.

Under the regulatory technical standards on strong customer authentication made under the Second Payment Services Directive, which apply from September 2019, a contactless payment at the point of sale can be exempt from strong authentication if it does not exceed 50 euros and either the cumulative amount of contactless payments since the last strong authentication does not exceed 150 euros or there have been no more than five such payments in a row. Once a cumulative limit is reached, the next payment requires a PIN. Many EU countries use the 50-euro level, sometimes with lower local limits in non-euro currencies.

The UK raised its contactless limit to 100 pounds in October 2021, with a cumulative limit of 300 pounds, after earlier increases from 20 to 30 and then 45 pounds. In 2025 the Financial Conduct Authority changed its rules to let payment firms set their own contactless limits and decide whether to apply cumulative caps, subject to managing fraud, so limits can now differ between issuers. In the United States there is no regulatory contactless limit; networks and issuers decide when verification is needed, and PIN entry is less common for credit cards. Other countries, such as Canada and Australia, rely on network and issuer limits, which were raised in several markets during the COVID-19 pandemic to reduce contact at checkouts. All figures here are as of November 2026 and may change.

Payments made through a mobile wallet such as a phone or watch are usually not subject to the same limits, because the cardholder authenticates on the device with a fingerprint, face scan or passcode. This is known as consumer device cardholder verification and counts as strong authentication in Europe. Some transport systems allow contactless fares without verification under special arrangements, because fares are small and are often aggregated, and some unattended terminals have their own limits, discussed under unattended payment terminal.

Higher limits increase the potential loss from a stolen card before it is blocked, although cardholders are generally protected from unauthorised payments by law and network rules, and issuers bear much of the loss. Cumulative limits can confuse customers whose card suddenly asks for a PIN after a series of small purchases. Card-present fraud on contactless cards remains a small share of total card fraud compared with card-not-present fraud, which is one reason regulators have been willing to let limits rise.