When the headlines said on 19 March 2026 that the £100 contactless limit had been scrapped, my first reading was the lazy one. A shop could now let a customer tap for £140 and the machine would simply take it. I had assumed that at first, then went looking for the 2025 consultation behind the headline and found I was wrong in three separate places.
The contactless limit rules uk shops actually work under were never one number. The number never belonged to the shop. And the change in March moved a regulation without moving a single terminal, which I find slightly annoying, because almost none of the coverage said so. What follows is the corrected version, section by section.
The rule was three numbers, and the shop owned none of them
The limit lived in Article 11 of the technical standards on strong customer authentication. That is the regulator's phrase for making the payer prove it is really them, which at a till means a PIN. Article 11 let the card issuer skip the PIN for a contactless tap, but only inside three limits that all applied at the same time: £100 for any single payment, £300 in total contactless spending since the card last went through a proper check, and no more than 5 contactless payments in a row since that check.
I had only ever thought about the first. The other two explain a thing every shop has seen and hardly anyone explains to the customer standing at the counter, which is a twelve pound coffee that suddenly asks for a PIN. That customer has not reached £100. They have hit their fifth tap in a row, or their running total, on their own bank's counter, and your terminal is only passing the bank's request along.
The second thing I had wrong is ownership, and of the three it matters most. These limits bound the payment firm that issued the card. Your acquirer and your terminal sit on the other side of the payment. You never had a £100 limit to raise. What you had was a terminal configured to respect the same ceiling, which is a different object, and it turns out to be the one that decides what happens at your till.
What the regulator actually changed, in the order it happened
While I had the September 2025 consultation paper open I read chapter 9 in full rather than the press coverage. Every article I found in March squeezed 18 months of rule-making into one sentence. I think the dates change how you read the result, and I say that as someone who got the result wrong.
In March 2025 the FCA published an engagement paper asking whether to raise the limit or remove it altogether. It said 85% of people in the UK make a contactless card payment every month, and it quoted UK Finance putting fraudulent contactless spending at £41.5m in 2023, up 19% on the year before. Nearly thirteen hundred responses came back. I was surprised by that, since I would have guessed a few dozen trade bodies and a handful of worried pensioners.
In September 2025 the FCA published the wording it wanted and gave everyone until 15 October to object. The proposal threw out the three fixed limits and put a risk-based exemption in their place, so the bank may skip the PIN wherever it has judged a contactless payment to be low risk, and a firm that still wants a single limit, a running total or a count of taps in a row is free to keep all three. Short and permissive. Some industry respondents had suggested a cumulative limit somewhere between £450 and £600. The regulator chose to write no figure at all. I suspect that was deliberate, since a printed £500 would have become the new default overnight.
In December 2025 it confirmed the change would take effect in March 2026. In the same release it said it understood that most banks and payment service providers were "likely to maintain their existing contactless limits" for the foreseeable future. I read that line from 19 December twice. In one release the regulator was announcing the removal of a limit while telling everyone it expected nobody to use the freedom.
On 19 March 2026 the fixed limit came out of the rules. In my reading what disappeared is a regulatory ceiling, and what replaced it is a choice each bank now makes for its own cards, on its own timetable, with no obligation to tell a single shop when it does.
What happened at the till: nothing, and there is a reason
On the day, the Guardian reported that the biggest high street and challenger banks had kept £100. Monzo said it would not change its limit. Starling and Revolut said they had not decided yet. Lloyds and Santander already let their customers set a personal limit in £5 steps up to £100.
UK Finance gave a reason, and it is the part a shop owner should underline, because it says banks were holding off partly for lack of widespread demand and partly because the card terminals already sitting in shops up and down the country would need to be altered before they could accept larger contactless payments at all.
That is the third thing I got wrong. Even if a customer's bank lifted its limit tomorrow, the payment still goes through your terminal, and your terminal carries its own contactless ceiling, set by whoever configured it. A regulation changed in March, while a setting inside the small device on your counter did not, and nobody is obliged to tell you it exists.
A short aside about ticket barriers. It has nothing to do with shops. There is a separate exemption, Article 12, for unattended terminals taking transport fares and parking fees. The consultation left it alone, on the grounds that people understand it well and there is no mechanism for typing a PIN into a ticket gate or a car park barrier, which is why the transport network never came up in any of the March coverage. Anyway, back to the counter.
What to actually do about it
This is the half of the piece that took me longest, because the useful actions are not written in any of the documents. They follow from where the limits live.
### Find out what your terminal is set to
Ask your card provider, in writing, one question: what is the contactless ceiling configured on my terminal, and who can change it? If the answer is £100, you now know the March change does nothing for your shop until they change the setting. If they cannot answer the question at all, that tells you something about how closely anyone is managing your device.
I would ask two follow-ups while you have them on the line. Does changing it cost anything, and does it happen remotely or does the machine have to go back? I have not found a documented answer to either for any provider, which is exactly why I think they are worth asking before a customer is standing there with a £140 basket.
### Tell your staff why a small tap asks for a PIN
The PIN prompt on a small coffee is the consecutive or cumulative counter on the customer's card, not your machine playing up. One line on a card by the till saves a surprising number of awkward minutes: your bank is asking for a PIN, please insert your card.
That line stays true after 19 March 2026. For some customers I suspect it becomes more true. The FCA did not remove the idea of the bank asking for proof. It removed the fixed thresholds that used to decide when. A bank running its own risk model might prompt certain customers more often than the old counters did, not less.
### Do not advertise a limit you do not control
A sign saying contactless over £100 is now accepted is a promise made on behalf of every customer's bank and of your own terminal settings, and neither is yours to give. If your provider does raise your terminal ceiling, the honest wording is that your machine accepts higher contactless payments where the customer's bank allows them. It is clumsier. It also has the considerable advantage of being true, which in my experience matters more on a shop wall than anywhere else, because the customer reads it at exactly the moment they are about to test it with a card in their hand and a queue behind them.
### Keep chip and PIN easy to reach
For payments above whatever limit applies, the old route has not changed at all. The card goes in, the customer types a PIN. Any till set up so that inserting a card is awkward, a phone-sized reader on a stand that only ever gets tapped, is where a larger sale is most likely to stall.
The arithmetic that should sit next to the headline
Contactless is mostly small money, which I had also underestimated. UK Finance puts the average contactless payment at just under £18. So the old £100 limit sat at more than five times the typical tap, and almost nobody pressed against it. By the same count, 67% of credit card transactions and 76% of debit card transactions are already tapped.
The fraud numbers are small too. Contactless fraud runs at about 1.3p for every £100 spent, against 6p per £100 for all unauthorised card fraud. On ten thousand pounds of contactless takings that is £1.30 of fraud. And the duty to reimburse the customer for an unauthorised payment falls on their bank rather than on your shop, which is the one piece of this whole business I found reassuringly simple once I had read the regulator saying it in plain words.
Put those two sets of numbers side by side and the March change looks less like a revolution at the till and more like a door the banks were handed in December 2025 and, as of the March reports, had declined to walk through. My guess is that for a typical high street shop taking an average tap of £18 the payments above £100 are a handful a week. That is a guess from the £18 average. A furniture shop sees something else entirely.
A comparison I have not seen anywhere else
Every piece of coverage I read compared the old £100 with some possible new number. That is the wrong pair of numbers. For a shop the useful comparison is between two ceilings that since 19 March 2026 can move independently of each other, the one on the customer's card and the one on your terminal.
Until March the regulation held both at £100. Nobody needed to think about the second one. Now the card side can move on its own, and the terminal side moves only when your provider moves it, on whatever timetable its contract allows. Picture a customer whose bank has raised their limit to £200 tapping for £140 at a shop whose terminal still stops at £100, and the payment is declined. From behind the counter that looks exactly like a bank refusal. I have no way of knowing how many shops will ever find out which of the 2 ceilings they hit, and I would bet it is few.
What I could not establish
I have not found any UK bank that has raised its contactless limit above £100 since 19 March 2026, not a single one. The latest reports I could read date from that week. I cannot tell you whether the £100 has stayed frozen since or quietly moved.
There are two other gaps in this page. I went looking for how card providers configure contactless ceilings on terminals, and the SumUp, Zettle and Square pages I read on 16 September 2026 for the terminal note mention none. And I could not find whether scheme rules move any fraud cost on a contactless payment above £100 towards the merchant. Both belong in your provider's contract.
The small detail I keep thinking about is the £5 dial, the setting Lloyds and Santander give their customers to choose a personal contactless limit in £5 steps up to £100, which the reporting in March described exactly as it stood on the day the regulation changed and which nobody I read has described since. Whether the top of it has moved since, I still do not know.