What is card-not-present, and why does it cost more?

What presence actually proved

When a chip card is inserted or tapped, the chip performs a cryptographic operation that a copied card cannot reproduce. That is genuine evidence that the physical card existed at that moment in that place.

Take that away and all the merchant has is a number, an expiry and a few digits on the back, all of which can be stolen together and used anywhere. The transaction is identical in value and completely different in confidence.

Pricing follows confidence. Card-not-present interchange and scheme fees are higher across essentially every market, and the gap is not arbitrary: it reflects measured fraud rates and the historical cost of resolving disputes.

Who carries the loss

This is the part most people get wrong.

In a card-present chip transaction, if fraud occurs, the loss generally sits with the issuer, because the merchant did everything the rules asked. In card-not-present, the default is reversed. The merchant carries it, and a fraudulent transaction becomes a chargeback the merchant usually cannot win, because they cannot produce the evidence that would settle it.

Strong authentication changes this. When a transaction is authenticated through 3D Secure, liability generally shifts back to the issuer, because the issuer approved the customer rather than merely the card. This is why authentication is not simply a compliance chore. It is the mechanism that decides who pays when things go wrong, and it is why merchants who complain about the friction should first check what that friction is buying them.

Handing over cash in a shop and posting it in an envelope both settle the bill. One of them has a witness. The postal service charges more for the one that does not, and if the envelope goes missing, the argument about whose fault that was takes considerably longer.

What actually reduces the cost

Not negotiation. Data.

A card-not-present transaction with a full address, a matching billing postcode, authentication data and a clean capture sequence is priced better and disputed less than the same transaction without them. Much of what is sold as fee optimisation is really the discipline of sending complete data every time.

The second lever is knowing which exemptions you can defend. Low-value transactions, recurring payments of a fixed amount and transaction risk analysis all allow authentication to be skipped in markets that mandate it, and every skipped step is a conversion gain. Every skipped step is also a liability decision, and the two should be made by the same person.

Where you meet it

Every online checkout. Every card you read out over the phone. Every small business that charges a little more for card than for a bank transfer and cannot fully explain why.