Ahhhh, maybe that was my problem today at Shopper's Drug Mart when I tried to use Apple Pay - my iPhone asked for a 4 digit PIN and I figured it wanted my device unlock number (which didn't work). It hadn't occurred to me that perhaps because it was the first time I was using my iPhone to pay that it wanted the number from the front of my Amex card.
Not the numbers from your physical card. Remember, Apple Pay uses a token (the "Device Account Number" or DAN) instead of your actual account number.
You can find the necessary DAN digits if you open Passbook, tap your AMEX card, and then tap the Info icon.
The per-device token (DAN) is why you must use the same iOS purchase device to get refunds. If you paid with your Apple Watch, you cannot use your iPhone's DAN. They're different, or should be.
Haven't Visa and MC already signed agreements with Apple, or is that something they have to do on a country by country basis?
Visa/MC don't have to pay anything.
It's each issuing bank, that has to make a deal to pay Apple (and send them transaction info).
The banks ALSO have to pay Visa/MC for tokenization.
Apple is a hardware company and makes their profit on hardware, they can't go on offering FREE services to developers, banks and customers and still make money.
Sure, Apple should get a fee for registration setup, since that action does use their servers.
However, Apple's servers are not involved in contactless transactions. Apple's per-transaction fee is simply blatant blackmail in order for banks to get their cards on board.
It's as if a plastic card maker demanded a transaction fee every time one of their cards got used in a store.
Apple's cut comes from the card companies--not the retailer, not the customer. The fee they charge (0.15% in the U.S., lower in the U.K) is acceptable to the car issuer because it removes an entire class of credit card fraud, meaning the issuer pays less overall.
Contactless fraud is tiny. Like 0.007%. So not worth the fee for that.
The other kind of fraud that Apple Pay helps with is when store databases get hacked. However, that's simply tokenization which is handled by the card networks' app in the Secure Element, and in their backends. No need to pay Apple for that during transactions, since the only part of it Apple is involved in, is the token registration.