Ambimat GroupAmbimatAmbiSecureSIMAuthAmbiAutomationEngineering BlogAhmedabad · India · Est. 1982
ASAmbiSecureHardware-rooted security
Contact

EMV data is encoded as BER-TLV — each field is a Tag, a Length, and a Value. The tag identifies the data element (for example 0x5A is the Application PAN, 0x9F26 is the Application Cryptogram, 0x82 is the Application Interchange Profile), and tags may be primitive (a value) or constructed (nesting more TLV objects). This reference lists the common EMV tags seen in contact and contactless transaction flows across the EMV Books and the contactless kernels.

EMV

EMV tag reference database

Searchable EMV tag reference. Books 3, 4, and Contactless. Filter by category to narrow down to the tags you need.

What this reference covers

Spec

EMV Books 3 and 4; EMV Contactless C-2 / C-3.

Companion tool

EMV tag dictionary tool · TLV tree visualizer

Reading

APDU from first principles

Usage notes

A tag's first byte tells you its shape: bit 6 (0x20) set means the object is constructed and its value is itself TLV; a low nibble of 0x1F in the first byte means the tag continues into further bytes (two-byte tags like 0x9F02). Parse length first, then read exactly that many value bytes before moving to the next tag.

  • Templates such as 0x70 (READ RECORD) and 0x77 (response message template) are constructed — decode their contents recursively.
  • Proprietary tags in the 0x9Fxx and 0xDFxx space are kernel- and issuer-specific; confirm meaning against the relevant EMV kernel specification.
  • Use the TLV parser to expand a full record and the EMV tag dictionary tool for quick lookups.

Frequently asked questions

What is an EMV tag?

A BER-TLV identifier for a data object defined in EMV Books 3 and 4 and the contactless specifications — 5A is the application PAN, 9F02 the authorised amount.

Why are many EMV tags two bytes?

Because the single-byte space ran out. A first byte with its low five bits set signals continuation, which is how the 9Fxx family exists.

What is a DOL?

A Data Object List such as PDOL or CDOL1 — the card lists tags and lengths, and the terminal returns the values concatenated in that exact order with no tags and no lengths.

What is the difference between contact and contactless tag sets?

Contactless adds its own tags and profiles on top of the Book 3 set, which is why a tag present in a contactless flow may be absent from a contact transaction.

Which tags must never be logged?

Anything carrying cardholder or cryptographic data — full PAN, track equivalents and key material. Logging findings are a common cause of certification failure.