The debit and credit cards in our wallets are an indispensable part of daily life. We use them to withdraw cash at ATMs, shop at the supermarket and make contactless payments.
So how is a bank card, with our name on it and our own payment data inside it, actually produced?
The process involves much more than printing a name and card number onto a blank piece of plastic.
Before a bank card is ready to use, many stages have to be completed: preparing customer data, generating EMV data, managing cryptographic keys, personalizing the chip, physical printing and quality control.
Together, these steps are called card personalization.
In this post, we'll walk through the card production process from start to finish.
1. What is card personalization?
Card personalization is the process of configuring a pre-manufactured card with data belonging to a specific user and to the institution that issues the card.
A chip card coming out of the card factory may be physically ready, but that doesn't mean it can be used for banking transactions.
The card has to be made specific to a customer.
During this process, data such as:
- The card number (PAN),
- The expiry date,
- The cardholder's name,
- EMV application data,
- Cryptographic keys or related security data,
- Parameters that define the card's transaction behavior
is loaded onto the card or physically applied to it, depending on the card type and the payment application used.
This turns a general-purpose card into a payment instrument tied to a specific customer's bank account or credit card product.
2. How does it start? The issuer and the card request
Card personalization usually starts with a card creation request from the bank that issues the card, the issuer.
Say a customer requests a new debit card from their bank.
The bank creates a card record linked to the customer in its Card Management System (CMS).
This record defines things like which product the card belongs to, which account it is linked to and which features it needs to support.
The data needed to produce the card is transferred securely to authorized production and personalization systems.
At this point, the data preparation stage of card personalization begins.
3. What is data preparation?
Data preparation is the process of generating the data to be written to the card's chip according to the requirements of the relevant payment application, and converting it into a format the personalization equipment can use.
It is one of the most important stages of card personalization.
That's because you can't just write arbitrary data to the chip. The content has to match the data structure expected by the EMV application on the card, the product configuration and the security rules.
In data preparation, the data can broadly be grouped into three categories.
A. Customer- and card-specific data
This is data that varies from card to card.
For example:
- PAN (Primary Account Number)
- Expiry date
- Cardholder name
- Application- or product-level parameters of the card
B. Card profile and EMV parameters
This is the technical data that defines how the card behaves.
For example:
- AID (Application Identifier)
- AIP (Application Interchange Profile)
- AFL (Application File Locator)
- CVM List (Cardholder Verification Method List)
Not all of this data has to be present in the same way on every card. It can differ depending on the EMV application and the payment scheme.
For example, the AID identifies the payment application on the card, while the CVM List contains data defining which methods can be used to verify the cardholder.
C. Cryptographic data
Cryptography is one of the key components securing the card in EMV payment transactions.
During card personalization, the secret keys, public key certificates and related verification data the application needs may be prepared.
Because of security requirements, this data is prepared and transferred using special methods.
What does data preparation output?
When data preparation is complete, it produces personalization data.
Depending on the system architecture, this output may be a secure file, a sequence of records or a controlled data stream.
It may contain the application data the personalization equipment needs, along with cryptographic data that must be transported securely.
The data preparation system's job is to prepare this data. Writing it to the physical chip happens in the next stage.
4. HSMs and cryptographic key management
An HSM (Hardware Security Module) is often used to keep the card personalization process secure.
An HSM is a device that performs cryptographic operations inside a secure hardware environment.
So why does it matter?
If a payment card's security data falls into unauthorized hands, the security of the card or of the payment system can be compromised.
That's why storing critical cryptographic keys in ordinary application files or plaintext database fields is not a safe approach.
HSMs can be used for key generation, secure key management, encryption and specific cryptographic computations.
In EMV personalization, some keys are managed according to a key hierarchy defined by the issuer. Keys and data that differ per card can be generated through secure processes.
For example, preparing cryptographic material unique to each card helps keep the security of each card isolated from the others.
The HSM's role here is not to write data onto the card directly. The HSM performs cryptographic operations securely, while the data preparation system builds the personalization data.
Working together, these two systems contribute to secure card personalization.
5. Chip personalization: writing data to the chip
Once data preparation is done, the prepared data needs to be transferred to the physical card.
This stage is called chip personalization.
In card production facilities, it is done by special personalization machines that can communicate with chip cards.
The machine talks to the card's chip and sends the appropriate personalization commands.
A concept that comes up often in this communication is the APDU.
What is an APDU?
An APDU (Application Protocol Data Unit) is the structure of the command and response messages exchanged between a smart card and a terminal or card reader.
A simplified exchange looks like this:
- The personalization system selects the relevant card application.
- The card returns a response to the command.
- The system sends commands following the personalization procedure the application supports.
- The card processes the data and commands it receives.
- The system checks the result and any required verification data.
Throughout these operations, the EMV application's data structures, the card's security state and manufacturer-specific requirements are taken into account.
After chip personalization, the card is ready to use the EMV application and security data loaded onto it.
However, this doesn't mean the card is automatically active in the bank's systems. Card activation and usage permissions can be managed separately.
6. Physical personalization: preparing the card's surface
Personalizing the chip is only part of card production.
The card's physical surface also needs to be prepared.
Depending on the card design and the bank's product, various operations can be performed at this stage.
Embossing
Embossing is the process of stamping raised characters onto the card.
On traditional bank cards, the card number, expiry date and cardholder name were often embossed.
Today, flat cards without embossing are also widely used.
Thermal printing
Thermal printing systems can be used to print the name, number and other text onto the card surface.
Laser engraving
Laser engraving can be used to create permanent characters and graphic elements on the card surface.
Magnetic stripe encoding
For cards with a magnetic stripe, the required payment data can also be encoded onto the stripe.
This is different from chip personalization.
The data structure and security mechanisms of the magnetic stripe differ from the dynamic cryptographic methods used in EMV chip transactions.
Physical personalization steps don't have to be the same for every card. Some cards are produced with only certain printing methods, while others combine several techniques.
7. Quality control and verification
Once personalization is complete, the card isn't sent straight to the customer.
First, the production process has to be confirmed as successful.
Several checks can be applied at this stage.
Chip verification: Checks that the application on the card and the personalization result work as expected.
Data consistency: Verifies that the data on the physical card matches the related production records.
Print inspection: Assesses whether the text is correctly positioned, legible and true to the design.
Production record review: Tracks cards that succeeded, failed or need to be reprocessed.
The purpose of these checks isn't only to stop faulty cards from reaching customers.
It's also to ensure traceability of the production process and data security.
For failed personalizations, whether a card can be reused depends on its security state and the relevant production procedures.
8. Fulfillment: enveloping and shipping the card
Once the chip and the physical surface are ready and quality checks are complete, the final stage begins.
This stage is called fulfillment.
Fulfillment covers the preparation and distribution processes that get the produced card to the customer securely.
In card production facilities, it can include the following steps:
- Matching the card to the corresponding customer mailing.
- Attaching the card to the card carrier.
- Preparing the required information documents.
- Placing the card in an envelope or a suitable secure package.
- Creating shipping records.
- Handing the card over to the distribution channel.
Matching the card to the right customer is especially critical.
A bank card sent to the wrong person can have serious operational and security consequences.
That's why automation, traceability and secure delivery mechanisms play an important role in fulfillment.
When the card reaches the customer, activation may be required through mobile banking, an ATM or other secure channels, depending on the bank's procedures.
With that, the card has completed physical production and is ready for the customer to use.
9. Which software systems are involved?
Card personalization isn't just something production machines do. Several software components work together behind the scenes.
| System | Responsibility |
|---|---|
| Card Management System (CMS) | Managing the card and its link to the customer |
| Data Preparation System | Preparing EMV and personalization data |
| HSM | Performing cryptographic operations securely |
| Personalization Management System | Managing production jobs and integration with machines |
| Quality Control System | Verifying personalization results and quality |
| Fulfillment System | Managing card packaging and shipping |
In large-scale production environments these components may be deployed as separate systems, while in some solutions several functions live within the same application.
From a software architecture perspective, secure data transfer, production job tracking, error handling, audit logging and system-to-system integration are all crucial.
For example, in an environment producing thousands of cards, you need to track which card is at which stage and which operations completed successfully.
That's why card personalization platforms are enterprise software solutions with high security requirements that work closely integrated with hardware systems.
10. Security standards in card personalization
Because card personalization systems handle sensitive financial data, they are subject to strict security rules.
Some of the key references in this area are:
EMV Specifications: Define the technical requirements for chip payment applications and the related personalization operations.
PCI Card Production and Provisioning – Logical Security Requirements: Contains requirements for card data preparation, personalization, PIN handling and related logical security processes.
PCI Card Production and Provisioning – Physical Security Requirements: Focuses on the security of physical processes such as card production facilities, card materials, storage, packaging and distribution.
These standards are essential for protecting card data from unauthorized access and for operating card production processes securely.
Wrapping up
Producing a bank card is a far more comprehensive process than printing a name and number onto plastic.
To make the card specific to the customer, the data has to be prepared, the EMV application personalized, cryptographic operations carried out securely, and physical printing, quality control and distribution completed.
In this process, data preparation is responsible for preparing the data, chip personalization for transferring it securely to the chip, physical personalization for preparing the card's visible surface, and fulfillment for getting the card to the customer.
When all of these components come together, a physical product that started as a blank chip card becomes a payment instrument unique to its owner.
Card personalization is one of the most important processes where banking infrastructure brings together physical production, software engineering and cryptographic security.