How Tap-To-Pay Works
You tap, you beep, you leave. Behind that half-second is a handshake, a cryptography trick, and a one-time-use number.
Tap-to-pay takes about 300–500 milliseconds. Inside that blink, your card and the terminal do a full cryptographic dance — without ever revealing your real card number.
Step 1 — Wake (0 ms)
When you bring the card within ~4 cm of the terminal, the terminal's electromagnetic field powers the card's tiny chip. The card wakes up — no battery needed. This is NFC (Near Field Communication), a descendant of RFID.
Step 2 — Hello (10–50 ms)
Card and terminal exchange identifiers: "What kind of card are you? Which bank? Which network (Visa, Mastercard, etc.)?" The terminal picks the protocol they both speak.
Step 3 — The crypto handshake (50–200 ms)
The card and terminal mutually authenticate. The card generates a one-time-use cryptogram — a signed number that proves "I'm the real card, and this transaction is happening right now, at this terminal, for this amount."
The trick: the cryptogram is computed using a secret key that never leaves the card. Even if a thief intercepts the signal, the number is useless for any future transaction. It's a one-time passcode baked into the moment.
Step 4 — Off to the bank (200–300 ms)
The terminal sends the cryptogram (plus the amount) through the payment network to your bank. The bank re-derives the expected cryptogram using its copy of your key. If they match, the bank approves. This is tokenization: your real card number isn't transmitted, only the ephemeral proof.
Step 5 — Beep (300–500 ms)
The terminal gets the "approved" message, beeps, and you walk away. The whole thing was contactless, mostly offline (only the approval needed the network), and didn't expose your actual card number to the merchant.
Why it's safe
- The chip's key is never transmitted — only the proof it generates.
- Each transaction's cryptogram is unique and unreplayable.
- The card must be physically present (within 4 cm), which is why you can't skim a tap card from across the room.
A tap-to-pay is a half-second negotiation in which your card says: "I'm me, this is now, this is how much — and I can prove it without telling you the secret."
Written with 💖 by Waela · Back to The Side Quest
Built with 💖 by Waela
Keep going down the rabbit hole
How QR Codes Work
A QR code looks like a glitchy chessboard, but it's an engineered grid that can survive coffee stains, sun glare, and a 30-degree tilt.
How Noise-Canceling Headphones Work
They don't block sound — they fight it. Inside each earcup, a microphone listens and broadcasts the exact opposite of what it hears.
How Elevators Decide Where To Go
In a busy building, the elevator you're waiting for isn't the one closest to you — it's the one a computer thinks should come.
How A Microwave Heats Food
A microwave doesn't cook from the outside in. It shakes water molecules directly — which is why a hot dog steams in 30 seconds and your bowl stays cold.