Who actually makes Europe's payment cards
The card scheme on the front is American — Visa or Mastercard. But the physical card, its chip and the bureau that personalises it are overwhelmingly European. Card manufacturing is the rare layer of the payments stack where Europe doesn't just compete — it leads.
By Mikolaj Slezak · Published
The scheme is American; the card is European
Fintechnologica is blunt about the "elephant in the room": the card networks (Visa, Mastercard) are US schemes, and almost every fintech BIN sponsor issues on them. But that is the logical rail. The physical object — the card body, the embedded secure-element chip, the contactless antenna, and the personalisation (your name, the EMV keys, the PIN mailer) — is a different supply chain, and it is dominated by European companies.
So a "European card" is rarely European on the scheme, but it is very often European in the only place the data physically lives: the chip and the personalisation bureau. That distinction is exactly the kind of thing a buyer should see — and almost no catalogue surfaces it.
The European "big three" — and who else makes the cards
The global leaders in smart-card manufacturing and personalisation are European by origin and operation:
- IDEMIA (France) — formed from Oberthur + Safran Morpho; a top-two player in payment cards and the metal-card market.
- Giesecke+Devrient (Germany) — Munich-based, family-rooted; cards, secure elements and digital security across Europe.
- Thales (France) — absorbed Gemalto in 2019; a market leader in metal payment cards and secure elements.
- Austriacard (Austria, listed in Vienna and Athens) — designs, produces and personalises payment, ID and transport cards; owns Tag Systems (manufacturing in Europe since 1999).
- Paragon ID (France, Euronext-listed) — manufactures and personalises payment cards via Thames Technology, and is Europe's largest RFID provider.
For contrast, Fintechnologica also lists the one big non-European name: CompoSecure (US, Nasdaq) — the market leader in premium metal cards. Useful to know it exists; useful to know it's the exception, not the rule.
Why it matters when you launch a card programme
- Where the card is physically made and personalised. Personalisation handles cardholder data and cryptographic keys; an EEA bureau keeps that under GDPR rather than a third-country regime.
- Security accreditation. Card production runs under Visa/Mastercard security programmes (e.g. CQM-SEC) and the secure element is Common Criteria-evaluated — a real, checkable bar, not a marketing claim.
- Form factor. Virtual-first, physical, or premium metal — each is a different manufacturer capability. Fintechnologica tags this as a filter.
- Sustainability. Recycled PVC, ocean-bound plastic and wood/PLA card bodies are an area where European bureaus moved early — a genuine differentiator for consumer brands.
The nuance Fintechnologica always surfaces
"European-made" is not the same as "European-owned." Several manufacturers sit under private-equity or foreign ownership, and the scheme is still American unless the card is co-badged with a domestic scheme (Cartes Bancaires, girocard, Dankort…), which is rare in the fintech BIN channel. As everywhere on Fintechnologica, origin, ownership and the real rail are shown as separate flags — so you can see the full picture and decide for yourself.
Sources
- Company disclosures and investor materials of IDEMIA, Giesecke+Devrient, Thales, Austriacard and Paragon ID — each verified at source in the catalogue.
- ABI Research, metal payment-card market rankings (CompoSecure as US contrast).
- Fintechnologica: European card manufacturers & personalisation — the verified category behind this analysis.
More insights
Source-verified coverage of 21 IBAN country codes - the UK leads with 17, Lithuania 9; Poland, Austria and Portugal have zero dedicated issuers. Only 15 verified IBAN sponsors document SEPA Direct Debit, where IBAN discrimination actually bites.
Register data from EBA, ESMA and the FCA: 998 PIs, 422 EMIs, 279 MiCA CASPs, 129 AISPs and 735 UK firms. Lithuania is the e-money capital, 39% of licences never passport, and Google, Amazon, Meta and Stripe all hold EU licences - licence is not sovereignty.
Regulated euro stablecoins under MiCA (EURCV, EUROe, EURe, EURQ, EURR, EUROP, EURI) as a European, EEA-supervised alternative to US-controlled USDC and USDT. Verified at source.