In reply to hobbie1.

If it's an EMV device (card/mobile) being processed via an EMV terminal the merchant will not be liable; only if the merchant is processing an EMV device on a non-EMV terminal will the merchant be liable for any fraudulent transaction, as they always have been liable if they did not observe the agreed protocols for mag-strip card transactions ...