Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
It's not one time. The account token stays the same per device.

The main reason a token is useful, is that if the merchant gets hacked, the hackers won't get your real account number.
Good info, the one time code I was referring to is the security code that is one time only per transaction. The token does indeed stay the same and is device related. I should have been more specific.
 
  • Like
Reactions: kdarling
So, I don't have a Kohls card and don't want one but do shop there from time to time. If I have a Yes2You rewards card setup can I add that to ApplePay and pay with my regular card and get the points all in one go or is this only tied to the Kohls card transaction?

I would like to pay at places that offer rewards and get the rewards at the same time without having to use/manage store brand cards. I prefer to just have a debit card and single credit card.
In theory it should work. The way it's supposed to be set up is that you enable "automatic selection" on the rewards card. When you tap the POS terminal, the store's rewards card will be automatically selected first and transfer your loyalty account number, then Apple Pay automatically switches to the default payment card for the actual payment.
 
  • Like
Reactions: American Hero
Given that Android Pay runs on android, and android is by Google, and Google is notorious for being "open" and encouraging "openness".... Who will people trust more?

Given that in most countries Apple sells very few phones compared to Samsung, etc., it's one of two things:
  1. Google is more trustworthy.
  2. "Trust" isn't exactly that high on peoples' list of priorities.
while this is good news, the fact that it's taken so long to get a single retailer to implement this spells doom for the future long-term viability of Apple Pay.

Apple Pay is simply not a high priority for retailers or customers, at best. Even at smaller businesses (which ironically are more likely to have support enabled in the first place), training is basically nonexistent; I shouldn't have to train employees/business owners on how to use their own terminals, hence I consider them not to support it.

Visa & MasterCard have rolled out payment solutions that take less than two seconds on chip read transactions.

Which they're doing because people aren't flocking to contactless/mobile payment like they thought would happen. In fact, there's a threat of a mass exodus back to cash for small purchases because of how badly the chip rollout's going.

We really should implement the PIN system here in the U.S for all cards. I lost my Citi CrapYou Perferred card this morning, but I'm in the middle of switching it to the Double Cash card, so I'm not even worried about anyone using it.

Every time I've product changed a card, the old card still worked until I got the new one in the mail. I'd be at least a bit concerned. Also, our cards stop working the instant they're reported lost/stolen and we're never liable for fraud anyway, so PIN isn't seen as a priority by banks either.

RFID should be built into the chipped cards in the U.S. Faster transactions would occur at that point.

That wouldn't go over well. People are already assuming chip == RFID and freaking out, imagine what would happen if that were actually true. Also, if 50%+ of chip-enabled retailers aren't (ever?) going to support contactless/Apple Pay, it's kind of a waste of money for the banks to include that functionality even if Americans would be okay with the idea.

We frankly should be thankful that Apple managed to get some retailers to enable contactless. I think everyone would have been okay with never bothering otherwise.

It's been 3 years of broadcast already to get 4k to the point it is today and its expected to be 2025 or later before it even hits 50% or more homes with access to the service. Is 4k dead too? Nah, technology while in concept seems easy the process of deployment is always long when you witness it live.

SD->HD was a much easier sell because the improvement in picture quality was more obvious. 1080p->4K isn't nearly as much of an improvement unless you have a gigantic screen or sit really close to the TV (unlikely in most homes).

Apple Pay is kinda like that. We were never liable for fraudulent charges anyway, so the extra security isn't all that important. It's faster than chip, sure, but does it add all that much more value? I'm not sure it does.

Unfortunately retailers aren't as concerned about fast checkouts as they are with collecting your data. If it wasn't for Apple Pay's (thankfully) strict privacy requirements, all major stores would've implemented it by now.

Loyalty card support would help with the data collection part if that's what they want. People simply aren't using or demanding Apple Pay, even at the "official" retailers, so why bother?
 
What's critical is the "one-tap" implementation. Of the few stores where I can use Pay, I'm still faced with a series of prompt and responses on a simple credit card transaction, with the ultimate insult having to sign my name.

Pay was supposed to be a convenient safer alternative. Right now the only advantage it has over the chip card, is that sometimes it processes faster.

Exactly.
 
Every time I've product changed a card, the old card still worked until I got the new one in the mail. I'd be at least a bit concerned. Also, our cards stop working the instant they're reported lost/stolen and we're never liable for fraud anyway, so PIN isn't seen as a priority by banks either.

Who do you think pays for the fraud in the event a card is stolen and used? If the card has a chip (which all of mine do), then the bank is out that money. I'm sure the bank would make a better financial decision to just require a pin instead.
[doublepost=1462382276][/doublepost]
That wouldn't go over well. People are already assuming chip == RFID and freaking out, imagine what would happen if that were actually true.

The rest of the world does it, so banks should put the technology in regardless of what stupid Americans have to say about it. Buy an RFID wallet if the cards make you uncomfortable. Americans need to stop looking like clowns compared to the rest of the world

Let's see... Tap my card, which takes one second, and then put it back in my wallet. Or put the card in the slot and then wait a few seconds for it to complete. You'd think merchants would want to enable NFC for contactless cards, especially fast food, restaurants, and grocery stores.
 
Who do you think pays for the fraud in the event a card is stolen and used? If the card has a chip (which all of mine do), then the bank is out that money. I'm sure the bank would make a better financial decision to just require a pin instead.

That's the point I'm trying to make though--the level of fraud committed in that fashion simply isn't high enough to make it worthwhile. (IIRC, it was something like 5% of all US credit card fraud based on something I read a while back.)

Not to say that there's no reason to implement it at all. I think we should on "travel" focused cards simply because of compatibility issues overseas.

The rest of the world does it, so banks should put the technology in regardless of what stupid Americans have to say about it. Buy an RFID wallet if the cards make you uncomfortable. Americans need to stop looking like clowns compared to the rest of the world

My understanding is that South America really doesn't do it. I've also heard that it's not all that popular in Singapore either. Hardly "rest of the world".

Also, if it causes people to stop using their cards entirely (and thus causing banks to lose out on revenue), why should they implement it?
 
Apple Pay has been fantastic since I got to use it a month ago. It's just contactless, but it's convient not having to get my wallet out . And one time I did forget my wallet and was sweet for drinks that night .
 
I wonder if Apple/Kohls have actually changed anything to allow both the card info and loyalty info to be transferred with one tap, or (as I'm guessing is more likely) if they just linked their loyalty program to their credit card program behind the scenes and with nothing to do specifically with ApplePay so that if you charge with your Kohls card it knows the loyalty points for the transaction should go to you as well. Since this seems to require the Kohls card and they haven't advertised that it works with a MC/Visa/Amex/Discover card, then I'm guessing there is no real magic here.

What I want is for my loyalty info to be automatically transferred when I ApplePay with whatever card I choose. Geolocation should tell my phone I'm in a Walgreens, Kohls, etc and if I have a loyalty card with that business it automatically sends that info along with my credit card token info.
 
That's the point I'm trying to make though--the level of fraud committed in that fashion simply isn't high enough to make it worthwhile. (IIRC, it was something like 5% of all US credit card fraud based on something I read a while back.)

Just a few years ago, total fraud in the United States was $9 billion USD... What is 5% of that?

Also, if it causes people to stop using their cards entirely (and thus causing banks to lose out on revenue), why should they implement it?

Many people don't even know they have it on their cards. I also don't know of any first world countries in South America. We shouldn't play by their rules... We should be like Canada, Australia, the UK, etc.
 
Great growth - now Apple needs to figure out how to monetize it!!!!!!
[doublepost=1462384024][/doublepost]
Just activated my card. Since my iPhone number is different than what is in on the Kohl's file, I couldn't do the SMS code verification. Called to activate - was expecting rep to not know about Apple Pay, but alas 60 seconds later and I was all set!

Hey retailers, do you realize that Apple Pay is faster than the chip readers? Look at Kohl's as an example, you get your loyalty cards + security + fast checkout.
American implementation of the chip is a complete disaster but, makes Apple pay shine!!!!
 
Hopefully once the RedCard gets added it will speed up the checkout process. Chip and Pin takes longer than the swipe.

Yes, this! I can already use Apple Pay at Target because it has the NFC card reader but when I shop at Target I use my Red Card that's attached to my debit card. I don't want to have to continue pulling out the Red Card when I know the functionality already exists to use the watch, it's just frustrating that so many vendors aren't cooperating!
 
I wonder if Apple/Kohls have actually changed anything to allow both the card info and loyalty info to be transferred with one tap, or (as I'm guessing is more likely) if they just linked their loyalty program to their credit card program behind the scenes
No, they can actually transfer both payment and loyalty info in one step on supported POS terminals. Other terminals (like the ones that Walgreens uses) support loyalty cards but require two separate steps.
What I want is for my loyalty info to be automatically transferred when I ApplePay with whatever card I choose. Geolocation should tell my phone I'm in a Walgreens, Kohls, etc and if I have a loyalty card with that business it automatically sends that info along with my credit card token info.
When you enable "automatic selection" on a loyalty card, Apple Pay will automatically select that card in the store (but it's not based on geolocation, but on an identifier sent by the payment terminal AFAIK).
 
If they can get Petco's PAL rewards, Meijer's mperks, and BestBuy's rewards all implemented into ApplePay, that will cover about 90% of the places I shop, and just make ApplePay that much more useful for me.
 
Really? As long as I don't get the blank stare from the cashier, it's been double tap side watch button, hold close, done (or double tap home button on phone, hold close, done). This has included Subway, Office Depot, BP stations, and Wegmans. Which stores do you use it at?

Phone doesn't even require a double tap to activate. Just a fingerprint after the POS NFC wakes the phone up automatically.
 
....and security
[doublepost=1462370308][/doublepost]

Target hates Apple Pay. They're a part of the MCX.

Had to laugh at that. Made me picture Target as a 13 year old girl.

I don't think Target 'hates' Apple Pay. They just want to pursue an solution that helps them track their consumers study habits and mine them to be more profitable. It's not thing personal against apple or nefarious in general. It's just a business decision. While MCX was a poor idea from the jump, I totally understand why Target did it.
 
At least make it an unusual and repeatable 'X', so if you have to, you can prove it was not you who made the transaction.



No anonymity in this Kohl situation, since the loyalty card is apparently tied to your token.

Lack of my pulse and my fingerprint means no one else will have the chance to make an "X". And I don't specifically use a Kohl's card (or any store branded card), I use cards from major banks and credit providers.
[doublepost=1462385230][/doublepost]
Signing my name or drawing an X is not the point. I had to put my phone down to sign my name. Drawing an X would be no different. Pay is supposed to be a secure payment system, so no need to provide ID, sign for the transaction, or acknowledge I really want to spend the money. One touch signifies all of that.

In my case it's waving my watch so nothing for me to put down. It's a minor annoyance to me too but I'm not worked up about it. In due time the retailers will tailor their equipment and workflow too.
 
Given that in most countries Apple sells very few phones compared to Samsung, etc., it's one of two things:
  1. Google is more trustworthy.
  2. "Trust" isn't exactly that high on peoples' list of priorities.


Source?
 
Just a few years ago, total fraud in the United States was $9 billion USD... What is 5% of that?

$500 million. But if they, say, only gain $400 million or something from doing so (due to implementation costs, transactions that end up using cash instead due to forgotten PINs, etc.), that's not going to be nearly the best value for their money compared to going with chip in the first place.

And that doesn't take into account how bad PIN actually is from a security perspective. For instance, the 20 most often used PINs are on something like 25% of all cards. So the real gain from implementing it may be even less.

Many people don't even know they have it on their cards. I also don't know of any first world countries in South America. We shouldn't play by their rules... We should be like Canada, Australia, the UK, etc.

Speaking of that...

Australian merchants don't even ask for PIN under AU$30 with the chip (not sure the exact amount) and AU$100 with contactless. And at least one UK bank that I know of still allows card transactions to go through as chip and signature if one enters the wrong PIN enough times. That tells me that even the "first world" doesn't consider PIN nearly as sacrosanct as you think.


Page 7 of this PDF. tl;dr: iOS is the majority only in in the following:
  • Ukraine
  • France
  • Denmark
  • Australia
  • Canada
  • United Kingdom
  • Japan
  • South Africa
  • Ireland
  • Russia
  • USA
  • Belgium
  • New Zealand
 
$500 million. But if they, say, only gain $400 million or something from doing so (due to implementation costs, transactions that end up using cash instead due to forgotten PINs, etc.), that's not going to be nearly the best value for their money compared to going with chip in the first place.

And that doesn't take into account how bad PIN actually is from a security perspective. For instance, the 20 most often used PINs are on something like 25% of all cards. So the real gain from implementing it may be even less.

The implementation costs were going to be there anyways. The banks are giving out the chip cards, and now all they would have to do is program it to set PIN as the top priority. People can remember a four digit PIN number--we've done it for many years with our debit cards and at the ATM. Heck, even our smartphones used only the pin for a number of years, remember?
 
The implementation costs were going to be there anyways. The banks are giving out the chip cards, and now all they would have to do is program it to set PIN as the top priority.

First, banks would need to support changing PIN on cards in a reliable fashion. Thanks to Visa's Quick Chip this isn't guaranteed to happen at the POS anymore thanks to EMV issuer script processing being skipped altogether, so this will likely have to be done through ATMs. This requires additional software and infrastructure work that they wouldn't have had to do otherwise.

They can skip storing the PIN on the cards themselves to avoid that problem but then there's another problem: merchant support for PIN would need to be guaranteed too. Considering that there are a lot of Square merchants out there, there's a huge merchant base that won't ever support PIN out of the gate. (A random iOS or Android device does not meet PCI requirements for PIN entry/handling, so Square and similar won't be able to ask for it without a new reader or accessory.) Smaller merchants are already having an incredibly hard time justifying EMV upgrades, so it might take the country even longer to migrate as said merchants delay further.

Banks would also need some sort of way to handle lost PINs in a secure manner. (It'll really suck if someone could easily socially engineer the CSR to let them reset one on a stolen card over the phone, for instance. Remember what happened when Apple Pay first came out?) They might end up having to implement it by sending out brand new cards to the address on file every time this happens.

People can remember a four digit PIN number--we've done it for many years with our debit cards and at the ATM. Heck, even our smartphones used only the pin for a number of years, remember?

Never said we had a hard time remembering four digit codes. However, I'd imagine we'd go to mandatory 6+ digit PINs or something in light of the link I posted above, and that plus the average of 3-4 cards per American might make things a bit more of a challenge.

(BTW, if you think of the whole chip thing as something that's only being done because the banking system literally had no choice anymore, a lot of the decisions make sense. I mean, most banks are still running software from 15-20+ years ago because they can't justify upgrading.)
[doublepost=1462388275][/doublepost]
Good, now do Starbucks and Walgreens

I think Starbucks might do it using the prepaid Visa card they announced earlier this year in partnership with Chase. The firmware in the stores that have EMV/Apple Pay is the standard Verifone one from what I can tell and isn't that tightly integrated with their POS, and I'd imagine Starbucks would like to keep it that way.
 
People simply aren't using or demanding Apple Pay, even at the "official" retailers, so why bother?

This is nonsense. First of all I haven't come across an "official" retailer that hasn't accepted Apple Pay. And I've asked about Apple Pay at every store I frequent, multiple times. Some have implemented, some haven't. You can't force retailers to adopt a method of payment, especially if they view it as a negative (in terms of lack of data collection). Many stores haven't even activated their chip readers...is there no demand for that, either?
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.