You tap your card on the reader at the coffee shop — beep! — and the screen says "approved." Three seconds, done. But in those three seconds, your money just traveled through six different computers, crossed the internet twice, and got checked by a bank security system that would make a spy jealous.

The card reader wakes up the tiny chip in your card — that gold square on the front. The chip generates a one-time code, like a password that expires after one use. It sends that code, plus your card number, to the reader. The reader has no idea who you are yet. It's just collecting the package to send upstream.

The reader shoots that package to the coffee shop's payment processor — a company that handles card transactions for thousands of businesses. The processor reads the card number like an address label: "This one belongs to Visa" or "This one's a Mastercard." It forwards the package to the right card network.

The card network — let's say Visa — acts like a highway system for money messages. It doesn't move actual dollars; it moves permission. Visa looks at your card number, figures out which bank issued it, and forwards the request there. "Hey, does this person have enough money for a four-dollar coffee?"

Your bank's computer gets the request. It checks your account balance. It checks the one-time code from the chip to make sure the card is really present and not stolen. It checks for fraud patterns — has this card been used in Tokyo and Toronto in the same hour? Everything looks good. The bank says yes.

That "yes" flies back the same route in reverse: bank to Visa, Visa to processor, processor to the card reader. The reader beeps and prints your receipt. Total round trip: about two seconds. But the money hasn't actually moved yet.

At the end of the day, the coffee shop sends a batch of all its approved transactions to the processor. The processor asks all the banks to actually transfer the money now. Your bank subtracts four dollars from your account. The coffee shop's bank adds four dollars to theirs. That's when the money finally moves — hours after you tapped.

And the one-time code from your chip? Already expired. If someone copied it, it's useless now — like a train ticket that only worked once. Next time you tap, the chip makes a brand-new code. That's why tap-to-pay is safer than swiping: every beep is a fresh secret.