In reply to Allie's World.

EMV cards remain PAN-based. They're embossed and printed. They also currently continue to include a mag stripe. All points of vulnerability.

Additionally, EMV terminals aren't aren't excluded from malware attacks. As not all information pertaining to the Target breach are publicly known, it can't be stated with certainty that EMV would have nullified that breach, or others like it.

Moving to mobile payments and PAN-less instruments, including 2FA, OTP, tokenization, etc. are all superior alternatives to EMV. Instead of varying a decades old process by using a by now ancient "solution" that's been proved to simply shift fraud rather than eradicating it, why not adopt a new, better, and possibly more cost effective solution?