They could be doing something else funny, like providing their own credit card info to the merchant via the chip and then just billing your credit card in the background, like how Google Wallet works...